$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: eJMlTbCnXKSkLCk6GHGmCtpEjuwIQDkOBd115XO3jQU= Subject key identifier: EA:3E:E5:E7:A4:45:CE:35:C7:A6:EC:35:C1:69:73:93:D0:60:19:D7 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 69ED8E7FF4E7BD1823249D357F8519147A131469 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 0433 Signing time: Fri 27 Jun 2025 18:40:49 +0000 Manifest this update: Fri 27 Jun 2025 18:35:49 +0000 Manifest next update: Tue 01 Jul 2025 06:26:49 +0000 Files and hashes: 1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 3: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 4: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 5: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 6: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 7: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: 01cnHd2JaIIb7qnuyJ18tDBgg1jNiUSPD0CHJx4m84g=) 8: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) 9: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ed:8e:7f:f4:e7:bd:18:23:24:9d:35:7f:85:19:14:7a:13:14:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Jun 27 18:35:49 2025 GMT Not After : Jul 1 06:26:49 2025 GMT Subject: CN=EA3EE5E7A445CE35C7A6EC35C1697393D06019D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:ad:6d:94:db:36:d4:98:88:35:73:a6:c3: 40:c1:e0:d5:04:de:a6:24:3c:0c:b4:e3:cc:99:7a: 3a:41:4f:5b:6a:d1:c0:c4:80:33:fd:ba:92:1f:b5: d9:5d:78:f3:ca:65:78:b4:eb:ab:83:08:0a:64:17: bc:12:f1:a2:07:87:0a:18:dd:2b:a9:b5:e1:45:d4: 3e:b8:7a:2b:29:6f:0a:b0:2a:8b:ac:7f:6e:b3:84: 2f:96:f9:2d:7c:5e:f9:ea:47:57:93:0f:40:e9:1e: 4d:ea:d3:06:44:06:ef:24:ae:91:ce:bb:49:9f:9a: f6:96:a1:c6:01:dd:07:88:d7:18:55:16:7c:9d:b4: c4:70:2a:6e:b9:8e:e4:3d:f1:cd:86:4d:72:f3:5c: f2:c7:8a:90:ec:f9:46:41:03:fa:1e:3a:a4:05:fd: 94:20:67:d7:f6:e9:48:3a:cc:f1:1f:29:e9:ee:f4: e2:bc:33:68:8d:f2:5d:75:80:7e:a3:84:78:ab:aa: 3c:14:1b:c7:2b:08:1d:8f:8a:e9:ac:ce:78:5d:d0: f2:1e:a1:6d:a6:7f:78:89:20:a9:17:56:87:ab:bd: 53:a8:8c:ad:10:b2:ca:10:5e:e9:36:25:28:d8:72: 40:49:c3:1b:ee:bb:38:7a:22:4f:16:66:da:fd:06: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3E:E5:E7:A4:45:CE:35:C7:A6:EC:35:C1:69:73:93:D0:60:19:D7 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8d:18:f8:68:28:6e:95:3c:28:06:d8:8a:ef:dd:6a:6c:d9: 29:81:f4:f8:c4:33:d4:a8:3c:6b:e4:ad:ab:b7:6f:b1:c0:a1: bf:62:b0:1a:c3:ce:53:c0:80:78:09:f5:2b:6b:53:c1:a5:7b: be:22:2c:a4:60:d4:5f:3b:5d:46:83:96:41:1a:ca:9c:06:0c: 28:08:de:79:c1:bb:00:6a:3e:bd:37:fd:f8:0c:01:31:c3:83: 44:e6:f6:5b:bc:34:b5:25:c5:c1:73:69:ea:42:db:06:d1:cc: 97:95:25:18:22:cf:89:c3:66:59:e5:ff:bc:ab:98:cc:19:bb: 93:9d:1d:46:c8:4e:e9:28:33:e9:82:89:2c:ec:2f:c5:39:31: 38:ad:e9:74:50:0b:e4:26:00:8c:45:45:85:a3:48:bb:59:d4: 3f:25:ae:99:5a:90:e4:4c:91:ea:c5:ab:6d:71:24:2f:22:c2: bd:91:b0:75:4e:46:d5:87:de:16:84:3f:f6:73:9d:4f:34:51: 34:94:70:17:78:2a:d6:27:bf:4b:26:ca:58:bc:92:08:a3:c7: 82:1b:3e:af:9d:d3:7e:3d:0c:c2:25:30:58:1c:d3:a7:0d:24: 55:02:38:bd:cd:72:5c:17:1a:b4:8b:1b:ab:d9:c8:f3:f0:59: 15:bb:ac:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUae2Of/TnvRgjJJ01f4UZFHoTFGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA2MjcxODM1NDlaFw0yNTA3MDEwNjI2NDlaMDMxMTAvBgNV BAMTKEVBM0VFNUU3QTQ0NUNFMzVDN0E2RUMzNUMxNjk3MzkzRDA2MDE5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Sq1tlNs21JiINXOmw0DB4NUE 3qYkPAy048yZejpBT1tq0cDEgDP9upIftdldePPKZXi066uDCApkF7wS8aIHhwoY 3SupteFF1D64eispbwqwKousf26zhC+W+S18XvnqR1eTD0DpHk3q0wZEBu8krpHO u0mfmvaWocYB3QeI1xhVFnydtMRwKm65juQ98c2GTXLzXPLHipDs+UZBA/oeOqQF /ZQgZ9f26Ug6zPEfKenu9OK8M2iN8l11gH6jhHirqjwUG8crCB2Piumsznhd0PIe oW2mf3iJIKkXVoervVOojK0QssoQXuk2JSjYckBJwxvuuzh6Ik8WZtr9Bhn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6j7l56RFzjXHpuw1wWlzk9BgGdcwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWNGPhoKG6VPCgG2Irv3Wps2SmB9PjEM9So PGvkrau3b7HAob9isBrDzlPAgHgJ9StrU8Gle74iLKRg1F87XUaDlkEaypwGDCgI 3nnBuwBqPr03/fgMATHDg0Tm9lu8NLUlxcFzaepC2wbRzJeVJRgiz4nDZlnl/7yr mMwZu5OdHUbITukoM+mCiSzsL8U5MTit6XRQC+QmAIxFRYWjSLtZ1D8lrplakORM kerFq21xJC8iwr2RsHVORtWH3haEP/ZznU80UTSUcBd4KtYnv0smyli8kgijx4Ib Pq+d0349DMIlMFgc06cNJFUCOL3NclwXGrSLG6vZyPPwWRW7rPI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:33:09 2025 by rpki-client