$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft File: 569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft (raw, json) Hash identifier: sBmaJLIbNCnwsPiQ9OmTV65AJw2sPJaVIRkoZasw1fM= Subject key identifier: F8:C4:45:0A:11:E5:FB:EE:3B:E0:23:F0:52:AC:DD:B1:16:73:DC:B7 Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6 Certificate issuer: /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6 Certificate serial: 2CC365E7B3C6F3E948899209311130E099A2B345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft Manifest number: 0241 Signing time: Thu 21 Aug 2025 08:32:29 +0000 Manifest this update: Thu 21 Aug 2025 08:27:29 +0000 Manifest next update: Sun 24 Aug 2025 15:01:29 +0000 Files and hashes: 1: 3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (hash: /1qlOOJUeIQJuNJP2rwLlmsOg5XjE3wMrr8H+gToMuU=) 2: 3130332e3138302e3132362e302f32342d3234203d3e20313439333734.roa (hash: wrzqaNynx40P6I+2V5LgTBezdoEL6ZnvzSzRxIRtLZk=) 3: 569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl (hash: G3aPzLIgdejpGnIkQS6oHxy2RcIYcw2sJCCM1O59CTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c3:65:e7:b3:c6:f3:e9:48:89:92:09:31:11:30:e0:99:a2:b3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6 Validity Not Before: Aug 21 08:27:29 2025 GMT Not After : Aug 24 15:01:29 2025 GMT Subject: CN=F8C4450A11E5FBEE3BE023F052ACDDB11673DCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:28:12:18:34:4a:bf:8f:41:ba:cd:ff:e8: ba:c1:bd:d7:54:36:65:09:69:c5:82:44:5d:3f:78: 11:29:a9:27:89:3c:0a:03:d4:b0:70:ba:2f:52:0d: 2e:58:03:2e:b1:01:33:d4:9f:38:db:7e:dd:16:ca: a0:b8:31:50:49:91:2b:10:00:66:5e:fd:25:05:a2: 4f:9d:6e:5a:b3:c7:81:16:4f:7b:57:d8:00:87:20: b2:56:94:2a:30:c7:f4:bf:3b:0b:7b:ff:3f:f8:12: ec:b3:4f:ac:80:0d:6a:7d:7e:d5:d2:c2:1c:1f:6a: 01:56:60:bb:cd:f0:93:db:82:29:8d:a5:ea:dc:d4: 3f:4f:6a:fc:6b:05:93:d1:ec:b5:e4:d0:1f:0b:50: 71:bd:4e:2a:c0:1c:77:37:dc:87:a4:85:91:0e:95: 18:87:15:be:8f:11:e0:57:06:3b:2e:7c:0a:3c:d2: 2a:7d:44:23:72:0a:76:d6:75:25:f2:1e:bd:cd:2e: 1d:50:90:e6:83:8a:58:fc:56:f9:9b:61:5c:82:a8: 31:7d:ae:16:cf:2c:af:0c:52:0c:a8:e6:64:9f:11: d1:66:42:56:0b:be:0d:92:f2:ca:27:05:a0:99:b4: 97:36:5b:69:cb:9b:ad:a1:1b:76:68:1c:ea:bb:51: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C4:45:0A:11:E5:FB:EE:3B:E0:23:F0:52:AC:DD:B1:16:73:DC:B7 X509v3 Authority Key Identifier: keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:14:00:aa:f3:e7:f8:81:c6:f4:11:12:82:88:ec:56:ad:10: d5:e1:d2:a6:4a:f9:66:6e:37:d8:f1:ef:99:42:39:f4:3b:63: a6:b1:2a:6e:16:37:d4:13:1a:a3:e5:97:2a:92:09:d7:76:89: f8:b3:c7:00:0b:80:1f:75:67:c7:3b:c7:21:f9:86:dc:81:6b: 84:b4:6a:1a:5a:31:64:a0:fa:e5:fb:8b:99:b1:32:ae:03:be: 5d:ac:cb:95:aa:62:6a:9f:05:38:c1:52:85:f0:b4:84:21:17: aa:e0:3f:43:87:6a:d0:3e:da:cc:dd:d6:f3:24:de:3d:44:f5: 2f:2f:43:5b:ef:3f:a9:51:3e:35:37:5d:f5:2a:35:7a:e9:89: 03:da:76:b3:cf:ed:bc:8f:8e:14:31:2c:38:95:b6:dd:76:dd: d5:ba:d0:af:30:be:45:0e:b2:9f:88:08:d2:6d:7c:0e:74:62: f7:cf:85:03:c3:33:0a:d9:3d:39:2b:6a:ca:d4:75:46:8d:b3: e7:53:54:0b:06:cb:f8:f9:0c:d8:70:47:71:a6:69:c2:65:f1: 2c:c8:bc:0e:94:19:3b:a6:72:bc:18:70:99:a2:b4:58:1f:8a: 2c:01:b1:d1:dd:25:c1:a2:1d:d4:aa:c0:08:96:b0:ef:2b:f2: d2:05:78:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMNl57PG8+lIiZIJMREw4Jmis0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY5RTAwQkU3MEZBNzFERTU1MTBCN0Q4MTcwMEMyRUI5 OERBRDhDNjAeFw0yNTA4MjEwODI3MjlaFw0yNTA4MjQxNTAxMjlaMDMxMTAvBgNV BAMTKEY4QzQ0NTBBMTFFNUZCRUUzQkUwMjNGMDUyQUNEREIxMTY3M0RDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKSgSGDRKv49Bus3/6LrBvddU NmUJacWCRF0/eBEpqSeJPAoD1LBwui9SDS5YAy6xATPUnzjbft0WyqC4MVBJkSsQ AGZe/SUFok+dblqzx4EWT3tX2ACHILJWlCowx/S/Owt7/z/4EuyzT6yADWp9ftXS whwfagFWYLvN8JPbgimNperc1D9PavxrBZPR7LXk0B8LUHG9TirAHHc33IekhZEO lRiHFb6PEeBXBjsufAo80ip9RCNyCnbWdSXyHr3NLh1QkOaDilj8VvmbYVyCqDF9 rhbPLK8MUgyo5mSfEdFmQlYLvg2S8sonBaCZtJc2W2nLm62hG3ZoHOq7UXLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+MRFChHl++474CPwUqzdsRZz3LcwHwYDVR0j BBgwFoAUVp4AvnD6cd5VELfYFwDC65ja2MYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmJjYmZkOS01N2RmLTQ5MGMtODhmYy0wMGQzNjAwNzA2NTEvMC81NjlFMDBCRTcw RkE3MURFNTUxMEI3RDgxNzAwQzJFQjk4REFEOEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY5RTAwQkU3MEZBNzFERTU1MTBCN0Q4MTcwMEMyRUI5OERB RDhDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJiY2JmZDktNTdkZi00OTBjLTg4 ZmMtMDBkMzYwMDcwNjUxLzAvNTY5RTAwQkU3MEZBNzFERTU1MTBCN0Q4MTcwMEMy RUI5OERBRDhDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwUAKrz5/iBxvQREoKI7FatENXh0qZK+WZu N9jx75lCOfQ7Y6axKm4WN9QTGqPllyqSCdd2ifizxwALgB91Z8c7xyH5htyBa4S0 ahpaMWSg+uX7i5mxMq4Dvl2sy5WqYmqfBTjBUoXwtIQhF6rgP0OHatA+2szd1vMk 3j1E9S8vQ1vvP6lRPjU3XfUqNXrpiQPadrPP7byPjhQxLDiVtt123dW60K8wvkUO sp+ICNJtfA50YvfPhQPDMwrZPTkrasrUdUaNs+dTVAsGy/j5DNhwR3GmacJl8SzI vA6UGTumcrwYcJmitFgfiiwBsdHdJcGiHdSqwAiWsO8r8tIFeLs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:33 2025 by rpki-client