$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: NklX1ArRIv3M7z8KdxTpyIpZciOob9dQfkJxio4KeuM= Subject key identifier: 32:8A:B2:7A:48:71:3B:08:61:C7:2B:81:5F:06:4B:DB:51:3B:45:11 Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 4FB02A697607BCA948923B03C428EACD9361E6C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: E6 Signing time: Sat 23 Aug 2025 15:21:52 +0000 Manifest this update: Sat 23 Aug 2025 15:16:52 +0000 Manifest next update: Wed 27 Aug 2025 02:58:52 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: 0HqhAi5fxc+gn/WsZNtJ0W8SsAzp39U0wR4WtpRJU7g=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: WH9oEmWb7QCWvMI7938Ik3XMbgOCFpaDBMXkH3Xj3ws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b0:2a:69:76:07:bc:a9:48:92:3b:03:c4:28:ea:cd:93:61:e6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Aug 23 15:16:52 2025 GMT Not After : Aug 27 02:58:52 2025 GMT Subject: CN=328AB27A48713B0861C72B815F064BDB513B4511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:ba:03:e1:c2:30:58:10:ca:2c:55:56:70: 14:7b:bc:a1:ea:80:fb:25:2e:08:5d:ce:8a:76:85: 26:87:62:26:d9:13:b8:07:cc:86:5a:e8:18:b9:79: 90:4b:1e:95:bb:f5:2b:f0:44:68:af:32:8e:40:7b: 99:eb:ec:6c:b4:fe:33:a0:e6:88:c7:15:99:54:bf: 50:23:66:c1:5d:83:70:12:ed:93:c5:ce:05:8c:e1: c4:ec:9e:43:19:9b:48:a6:ae:c5:bc:53:5d:53:e6: b6:14:5c:05:63:4e:ff:88:2b:3b:db:d9:ca:ff:19: 74:ff:84:a2:04:7f:d6:18:ee:21:00:ec:e7:b4:93: 53:c0:4a:3d:09:d0:aa:b8:1c:c2:96:69:6d:61:ec: f7:c2:d6:7a:13:21:34:c6:de:15:2a:ba:1e:ac:4e: 9c:ea:f2:58:a6:8e:f9:61:1d:e1:31:e0:ed:e3:96: 9d:4b:75:10:2a:e2:53:f9:31:f5:dc:62:30:c4:16: bd:73:74:ba:6c:44:5e:59:a5:97:7d:f9:e4:23:43: 54:43:45:6c:db:9d:d2:7a:e0:4b:b9:14:f1:46:b1: 96:9c:fa:a3:c0:a7:14:ed:37:96:9f:f0:3d:a4:f4: b4:e4:62:f7:04:e8:8d:fc:79:87:88:96:6c:92:32: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8A:B2:7A:48:71:3B:08:61:C7:2B:81:5F:06:4B:DB:51:3B:45:11 X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:19:cf:fb:89:ec:42:6a:2d:a6:41:d5:da:0b:ac:c7:2c:47: 3f:da:86:3c:ba:a0:72:12:51:41:d5:69:cc:23:35:75:d6:8e: 57:21:db:7c:58:e6:08:56:11:27:d9:42:6b:16:4b:08:48:6c: 01:d5:09:bd:40:79:7d:5c:6e:05:98:17:7b:4f:26:10:ec:78: 60:71:d6:99:54:83:06:1c:ef:60:bd:c3:da:e1:4a:01:16:be: 90:d6:46:da:1b:67:8b:e3:19:a8:24:2b:1b:8e:d0:2c:bd:37: 4e:9d:5b:48:85:f4:a9:97:72:61:b5:4f:10:48:b1:0f:c4:2f: ff:5b:68:ab:07:14:9a:5c:c5:b8:3f:c8:95:80:f2:a5:2a:ff: 3b:11:6c:41:2e:98:ae:e6:d2:96:22:9b:f6:09:62:ca:0c:22: a4:e5:38:e5:dd:a9:e3:d4:9d:4b:c6:fb:b0:13:3b:1c:e2:ef: 4e:51:06:0f:f3:a8:5a:dd:bd:05:96:a8:f9:20:b3:55:d7:af: d9:af:fc:70:79:cd:66:fe:04:db:5b:20:be:af:f3:1a:9c:1b: 68:d8:17:d1:7b:3d:e6:2d:a0:53:b9:cb:88:e2:29:d5:61:94: 9d:2d:0e:2e:79:10:d4:f4:2b:a1:6d:f8:b0:b3:dd:1b:af:63: 88:8b:40:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7AqaXYHvKlIkjsDxCjqzZNh5sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNTA4MjMxNTE2NTJaFw0yNTA4MjcwMjU4NTJaMDMxMTAvBgNV BAMTKDMyOEFCMjdBNDg3MTNCMDg2MUM3MkI4MTVGMDY0QkRCNTEzQjQ1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZWLoD4cIwWBDKLFVWcBR7vKHq gPslLghdzop2hSaHYibZE7gHzIZa6Bi5eZBLHpW79SvwRGivMo5Ae5nr7Gy0/jOg 5ojHFZlUv1AjZsFdg3AS7ZPFzgWM4cTsnkMZm0imrsW8U11T5rYUXAVjTv+IKzvb 2cr/GXT/hKIEf9YY7iEA7Oe0k1PASj0J0Kq4HMKWaW1h7PfC1noTITTG3hUquh6s Tpzq8limjvlhHeEx4O3jlp1LdRAq4lP5MfXcYjDEFr1zdLpsRF5ZpZd9+eQjQ1RD RWzbndJ64Eu5FPFGsZac+qPApxTtN5af8D2k9LTkYvcE6I38eYeIlmySMmwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoqyekhxOwhhxyuBXwZL21E7RREwHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0Zz/uJ7EJqLaZB1doLrMcsRz/ahjy6oHIS UUHVacwjNXXWjlch23xY5ghWESfZQmsWSwhIbAHVCb1AeX1cbgWYF3tPJhDseGBx 1plUgwYc72C9w9rhSgEWvpDWRtobZ4vjGagkKxuO0Cy9N06dW0iF9KmXcmG1TxBI sQ/EL/9baKsHFJpcxbg/yJWA8qUq/zsRbEEumK7m0pYim/YJYsoMIqTlOOXdqePU nUvG+7ATOxzi705RBg/zqFrdvQWWqPkgs1XXr9mv/HB5zWb+BNtbIL6v8xqcG2jY F9F7PeYtoFO5y4jiKdVhlJ0tDi55ENT0K6Ft+LCz3RuvY4iLQCQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:43:15 2025 by rpki-client