$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: v1+a1JUMRyxAipNM9rS3q+Pws/XFsAwKaCj6eFkQXyg= Subject key identifier: FA:64:20:3B:5C:66:3A:72:F3:E8:F5:36:3E:26:9A:94:60:AE:3F:0B Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 61F0E12C23C274DB856CB0C8384D7A3F71023E6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 044C Signing time: Fri 22 Aug 2025 22:40:50 +0000 Manifest this update: Fri 22 Aug 2025 22:35:50 +0000 Manifest next update: Tue 26 Aug 2025 03:41:50 +0000 Files and hashes: 1: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 0q8NrmjjcxoNrx7WtkZa7JKjlra7drxIR2Rkv2uH0qU=) 2: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: UEVe8hqitm8XEj977S/7RI8P96CMh8PA1XogugXmQC0=) 3: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: Si3tPvzTYMJNo6ziKI0r83ugddQoVhs+qZtKjviywZY=) 4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: s/yj35IxEbWgMmRyngcwwQ2XYvpHuhez/PCo0jx4Hk4=) 5: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: /5ZnjDo2uinC9TTjfx0reoiz9f4sCWczTxGAg/U2xq4=) 6: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: bzqLwXgqRc5lqIH8QIxSqfc9LTb/899srIuuHKEc/bE=) 7: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=) 8: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=) 9: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: UMpjLuebG+yMQNJv43xd3u8qZ1cqsp7h54oRFs+fJIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f0:e1:2c:23:c2:74:db:85:6c:b0:c8:38:4d:7a:3f:71:02:3e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Aug 22 22:35:50 2025 GMT Not After : Aug 26 03:41:50 2025 GMT Subject: CN=FA64203B5C663A72F3E8F5363E269A9460AE3F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:78:25:1f:cc:74:78:75:fd:da:3c:10:44: 6a:e5:cf:69:4c:ac:6b:9c:34:e5:b5:b1:49:f8:02: 13:1b:26:55:d1:1f:e0:74:6c:c1:b6:97:b4:48:25: 20:b0:62:7a:f3:01:02:ec:e2:e6:15:00:37:68:0a: b3:63:f4:4e:7a:95:b1:20:0c:75:05:d9:44:86:83: 6b:5a:7e:94:2e:64:d0:41:2e:a0:9d:6c:43:39:b8: 65:39:3c:09:87:7d:54:cc:15:8c:ca:df:03:3f:49: da:a1:50:b2:ea:a3:ab:7b:18:cd:04:72:7d:a1:ef: de:f4:29:07:98:8c:dd:3a:ba:97:8a:0c:81:f4:41: d4:1d:42:bc:75:84:63:c3:32:65:bf:b2:a1:75:33: 67:9a:39:22:19:ee:82:41:7b:3b:85:69:aa:a4:00: 15:2a:71:22:ed:b3:76:0e:e0:13:08:ff:25:c9:00: 4d:b9:08:2e:11:21:32:3b:c9:95:27:16:3a:2d:29: 40:05:a5:c3:df:af:ca:60:3c:1b:0b:b4:bc:38:13: 9e:a1:c0:57:b2:52:5d:8a:84:7b:ef:fa:15:ab:97: d4:41:27:a1:ad:4e:61:9d:78:0b:3a:22:6b:79:db: bd:05:2d:40:06:bf:42:de:54:1a:3c:09:d5:af:5d: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:20:3B:5C:66:3A:72:F3:E8:F5:36:3E:26:9A:94:60:AE:3F:0B X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b5:f2:c7:a0:c3:48:a2:7c:13:b3:50:d9:9c:ec:44:9d:12: 79:7f:36:98:34:dd:c6:ab:ab:45:37:8c:2a:08:cd:52:4c:6d: fc:40:a9:ef:be:55:a2:e0:8a:76:47:74:6f:77:4b:2c:81:04: ed:dd:1a:e4:df:07:5c:17:81:10:1e:91:19:30:ab:31:47:08: 39:ab:66:4d:de:7b:43:a2:c7:37:fe:be:81:d0:9f:7b:23:e5: 5d:f7:b3:4a:82:ae:97:f3:33:79:e4:e6:7c:76:45:6f:6d:8c: 39:d2:98:f9:43:35:1f:c0:d8:59:e6:d6:1d:0c:54:6d:22:89: 4b:ad:dc:c5:fe:fb:58:13:67:f3:18:92:fb:f7:ad:49:3e:4f: 58:b1:f2:10:13:13:f8:ad:72:f1:ee:b8:89:ac:cc:61:16:19: 3f:31:ef:93:06:27:62:bd:fd:e3:71:a8:33:e3:76:8f:24:e1: 63:01:28:09:8c:51:55:29:7c:cb:86:9c:d5:d2:35:d7:aa:b5: 71:01:5b:0c:b5:04:ba:67:95:4a:83:e6:b0:94:00:7c:fe:0d: 7d:c6:06:09:48:0a:81:f9:d2:ad:c4:28:a9:4e:2e:36:db:00: 5e:00:ed:ea:ea:e6:0e:f7:b0:fb:a8:a6:9c:48:8c:f7:b5:bb: 4b:1d:3b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfDhLCPCdNuFbLDIOE16P3ECPm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTA4MjIyMjM1NTBaFw0yNTA4MjYwMzQxNTBaMDMxMTAvBgNV BAMTKEZBNjQyMDNCNUM2NjNBNzJGM0U4RjUzNjNFMjY5QTk0NjBBRTNGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRS3glH8x0eHX92jwQRGrlz2lM rGucNOW1sUn4AhMbJlXRH+B0bMG2l7RIJSCwYnrzAQLs4uYVADdoCrNj9E56lbEg DHUF2USGg2tafpQuZNBBLqCdbEM5uGU5PAmHfVTMFYzK3wM/SdqhULLqo6t7GM0E cn2h7970KQeYjN06upeKDIH0QdQdQrx1hGPDMmW/sqF1M2eaOSIZ7oJBezuFaaqk ABUqcSLts3YO4BMI/yXJAE25CC4RITI7yZUnFjotKUAFpcPfr8pgPBsLtLw4E56h wFeyUl2KhHvv+hWrl9RBJ6GtTmGdeAs6Imt5270FLUAGv0LeVBo8CdWvXWidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mQgO1xmOnLz6PU2PiaalGCuPwswHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJS18segw0iifBOzUNmc7ESdEnl/Npg03car q0U3jCoIzVJMbfxAqe++VaLginZHdG93SyyBBO3dGuTfB1wXgRAekRkwqzFHCDmr Zk3ee0Oixzf+voHQn3sj5V33s0qCrpfzM3nk5nx2RW9tjDnSmPlDNR/A2Fnm1h0M VG0iiUut3MX++1gTZ/MYkvv3rUk+T1ix8hATE/itcvHuuImszGEWGT8x75MGJ2K9 /eNxqDPjdo8k4WMBKAmMUVUpfMuGnNXSNdeqtXEBWwy1BLpnlUqD5rCUAHz+DX3G BglICoH50q3EKKlOLjbbAF4A7erq5g73sPuoppxIjPe1u0sdO5k= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:06 2025 by rpki-client