$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: KKKcqQK47Nc7svBt1pUw//CtJf/EDDleHpU3dJWuiLg= Subject key identifier: 20:9C:44:ED:C7:76:BE:D9:DD:E9:1F:0A:34:5F:7E:5A:C4:76:24:D0 Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 517F5892A1BD86A189A7F8AD35CBB8C13D671E63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 045E Signing time: Wed 06 Aug 2025 10:01:03 +0000 Manifest this update: Wed 06 Aug 2025 09:56:03 +0000 Manifest next update: Sat 09 Aug 2025 10:54:03 +0000 Files and hashes: 1: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=) 2: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: GEm0aYUUBhHZs/OlrhIKJ7czBOUSTomYv7DHmmkbUhM=) 3: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7f:58:92:a1:bd:86:a1:89:a7:f8:ad:35:cb:b8:c1:3d:67:1e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Aug 6 09:56:03 2025 GMT Not After : Aug 9 10:54:03 2025 GMT Subject: CN=209C44EDC776BED9DDE91F0A345F7E5AC47624D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:92:55:93:bb:e4:0a:0f:d8:72:5c:ec:f0: c1:8e:3f:80:6d:37:3a:b2:e7:60:ef:23:ea:26:27: 38:59:3d:8c:c5:12:3a:34:df:36:f5:8d:8e:75:22: 99:18:e1:0d:ba:83:1c:75:51:15:08:f6:e4:d9:2e: 71:46:b9:76:49:95:ae:0f:08:fd:ca:99:1c:12:8c: 59:42:7f:36:bf:91:8e:e4:b8:1f:c8:84:8d:28:e9: 81:37:0d:16:ae:fd:f4:11:56:3a:47:76:49:dc:6e: 8f:f9:87:34:25:9d:e5:8c:1b:c7:01:0c:8a:c2:87: a2:96:ec:81:b8:27:5a:00:30:ff:a0:98:0a:be:01: f6:7e:58:48:d9:1b:23:e9:f0:6a:14:06:70:27:ce: 2a:b2:10:14:cb:b7:2d:a0:90:90:f3:89:0a:cd:05: 01:48:2b:07:27:e5:e6:9c:dc:27:5f:b4:18:69:66: 32:6f:4a:17:c2:c9:26:67:1b:5c:08:5f:42:6f:16: 8b:bc:27:9f:92:26:df:55:30:b5:71:a0:a9:28:63: 9c:88:0e:b6:9d:22:b2:1a:44:d6:4b:05:56:9b:b5: 80:88:96:34:7c:72:7d:70:98:a7:0d:a4:ed:a1:2b: ed:33:90:30:4b:d5:79:37:36:99:a8:c5:f3:76:5f: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9C:44:ED:C7:76:BE:D9:DD:E9:1F:0A:34:5F:7E:5A:C4:76:24:D0 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:dd:cf:94:0f:b5:8a:9e:40:ce:ac:06:00:b7:b6:88:27:0e: 58:b7:fd:4a:e6:2f:11:76:5b:f5:67:60:eb:0b:85:4a:c8:4d: 40:a8:fb:29:99:9d:9f:a4:42:b0:37:a7:b7:76:0a:5b:66:a9: 03:20:d4:35:4a:9c:86:af:71:32:2a:a3:56:05:b8:3e:a8:f4: 69:5f:db:60:94:40:7c:9d:96:b8:ff:f7:05:93:f9:7d:c3:c5: 3e:1f:26:2e:d5:d8:c8:d9:f6:bf:ba:cf:6e:10:d8:be:a8:a9: 20:97:1c:83:fe:b6:86:aa:ed:58:2e:81:f7:f4:81:fa:30:6e: 08:7b:0a:ad:e3:60:73:73:4d:d9:11:f8:1a:79:db:a7:a9:99: 31:80:c3:d7:1a:76:69:a4:a3:54:4d:9a:e3:1b:c3:90:0d:aa: c5:e7:41:32:03:76:b6:57:89:5d:77:81:16:1b:b8:21:32:b6: 2f:91:8c:7a:93:b8:9c:18:f9:8f:b4:c1:bf:81:7e:67:23:74: c4:ed:76:e9:13:e5:8d:69:6f:86:d7:5f:c3:01:9f:e3:a8:a9: a3:84:b0:b6:43:07:65:d1:85:47:fd:75:e9:32:76:2d:55:fb: 48:e5:58:15:7b:24:e9:f9:78:8e:66:5b:8f:38:b6:fa:7d:6e: 83:51:24:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUX9YkqG9hqGJp/itNcu4wT1nHmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTA4MDYwOTU2MDNaFw0yNTA4MDkxMDU0MDNaMDMxMTAvBgNV BAMTKDIwOUM0NEVEQzc3NkJFRDlEREU5MUYwQTM0NUY3RTVBQzQ3NjI0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcZJVk7vkCg/Yclzs8MGOP4Bt Nzqy52DvI+omJzhZPYzFEjo03zb1jY51IpkY4Q26gxx1URUI9uTZLnFGuXZJla4P CP3KmRwSjFlCfza/kY7kuB/IhI0o6YE3DRau/fQRVjpHdkncbo/5hzQlneWMG8cB DIrCh6KW7IG4J1oAMP+gmAq+AfZ+WEjZGyPp8GoUBnAnziqyEBTLty2gkJDziQrN BQFIKwcn5eac3CdftBhpZjJvShfCySZnG1wIX0JvFou8J5+SJt9VMLVxoKkoY5yI DradIrIaRNZLBVabtYCIljR8cn1wmKcNpO2hK+0zkDBL1Xk3NpmoxfN2X0HBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJxE7cd2vtnd6R8KNF9+WsR2JNAwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/dz5QPtYqeQM6sBgC3tognDli3/UrmLxF2 W/VnYOsLhUrITUCo+ymZnZ+kQrA3p7d2CltmqQMg1DVKnIavcTIqo1YFuD6o9Glf 22CUQHydlrj/9wWT+X3DxT4fJi7V2MjZ9r+6z24Q2L6oqSCXHIP+toaq7Vgugff0 gfowbgh7Cq3jYHNzTdkR+Bp526epmTGAw9cadmmko1RNmuMbw5ANqsXnQTIDdrZX iV13gRYbuCEyti+RjHqTuJwY+Y+0wb+BfmcjdMTtdukT5Y1pb4bXX8MBn+OoqaOE sLZDB2XRhUf9dekydi1V+0jlWBV7JOn5eI5mW484tvp9boNRJP8= -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:03 2025 by rpki-client