$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: Rjt7te+WfkYI3nQ3FKEWHYOUnjwrqQKHBWsY5S5GG8s= Subject key identifier: B9:08:67:4A:C3:5A:C8:F5:C1:A9:14:83:29:92:8D:F8:D1:5A:C0:0E Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 167FEE9B10B29338CDEC33FF2E5957325426C20D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 0447 Signing time: Sun 15 Jun 2025 07:00:58 +0000 Manifest this update: Sun 15 Jun 2025 06:55:58 +0000 Manifest next update: Wed 18 Jun 2025 13:22:58 +0000 Files and hashes: 1: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=) 2: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: S6xUiHPY4DiOCYQmGnE614mW+GooysHYE4ePeBWbA3Y=) 3: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7f:ee:9b:10:b2:93:38:cd:ec:33:ff:2e:59:57:32:54:26:c2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Jun 15 06:55:58 2025 GMT Not After : Jun 18 13:22:58 2025 GMT Subject: CN=B908674AC35AC8F5C1A9148329928DF8D15AC00E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:fa:22:4b:3f:7a:20:d6:68:09:17:4a:37: 2e:71:f2:9f:b7:16:3a:92:15:58:68:e5:fb:16:8b: be:39:2c:5a:d3:d5:6b:09:c2:93:1f:93:dd:26:15: a9:c4:b0:58:f4:31:07:c9:6e:b9:6c:2e:42:40:32: 30:a5:83:fd:ae:1f:37:d9:04:16:0a:7a:2e:40:86: 8c:67:6d:3f:6f:ce:29:0d:81:6c:e1:a5:90:95:57: 51:a3:8f:c8:61:18:f9:54:68:9b:04:f9:73:c9:b9: 08:a7:f0:8e:4f:99:70:e2:cb:b4:9f:1a:d0:30:a8: 97:74:f9:60:6d:d7:1d:34:ae:97:e7:b0:bd:44:f2: 97:17:b0:6a:6d:43:ff:bf:5d:39:cd:b6:00:5f:dc: d4:9c:eb:0d:85:9f:df:ab:f0:9c:1d:5a:52:4b:26: 2a:c5:9e:37:bd:db:a1:0b:39:2f:68:88:63:83:c8: ea:07:61:94:f8:92:9f:da:ad:e6:4f:b7:a1:40:a9: 6c:8d:bc:83:1b:88:67:be:f9:32:48:dd:81:74:c1: 28:43:19:fa:71:60:f3:84:fe:0a:f5:7f:bd:fe:01: 78:cb:de:8d:1b:e7:a6:bb:85:4b:12:cc:1d:7c:c0: 85:5b:65:4c:06:f3:22:c6:02:0c:56:c2:f0:96:a2: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:67:4A:C3:5A:C8:F5:C1:A9:14:83:29:92:8D:F8:D1:5A:C0:0E X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9a:b2:70:ea:82:ea:74:16:8d:1d:8e:ff:21:44:f6:dc:b4: 9c:4b:7a:26:cf:36:71:ac:94:cf:2a:3f:de:f9:6a:82:f3:8e: 51:41:be:81:cb:e8:8b:57:77:da:7c:01:61:5a:49:27:87:1d: f8:fd:eb:53:c9:0e:42:7b:31:7a:ab:3a:ff:71:e1:9a:0f:24: c5:af:da:bb:3d:08:b2:62:86:c9:f7:ab:a4:03:ef:f2:b8:2d: c2:46:c5:82:06:97:86:b0:0e:72:46:b7:1e:3e:ef:74:3e:5d: a0:11:2e:74:cf:18:3a:2c:ec:7b:43:cf:84:df:55:a2:d0:6d: f9:f2:47:3d:96:bb:1c:56:a6:14:51:31:09:ec:3c:c4:6f:68: 6f:bd:c0:51:38:a6:82:f1:b1:a4:4c:f8:48:78:f6:5d:83:fe: f6:db:88:4d:62:a3:c9:3c:ee:34:64:33:fc:df:63:b6:c3:33: 78:3b:57:ad:49:d8:ef:d8:18:0a:d5:1f:4d:9f:8f:01:7b:e6: 27:cb:a5:cf:2e:ab:98:1c:cc:22:28:ae:12:e5:16:d0:19:33: 33:1a:df:77:ba:f6:a8:97:53:91:6f:e8:50:0b:48:68:69:9b: 3b:de:5d:29:07:15:83:5a:ce:2b:69:92:3a:13:0c:28:34:d1: b0:3b:07:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFn/umxCykzjN7DP/LllXMlQmwg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTA2MTUwNjU1NThaFw0yNTA2MTgxMzIyNThaMDMxMTAvBgNV BAMTKEI5MDg2NzRBQzM1QUM4RjVDMUE5MTQ4MzI5OTI4REY4RDE1QUMwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXPoiSz96INZoCRdKNy5x8p+3 FjqSFVho5fsWi745LFrT1WsJwpMfk90mFanEsFj0MQfJbrlsLkJAMjClg/2uHzfZ BBYKei5AhoxnbT9vzikNgWzhpZCVV1Gjj8hhGPlUaJsE+XPJuQin8I5PmXDiy7Sf GtAwqJd0+WBt1x00rpfnsL1E8pcXsGptQ/+/XTnNtgBf3NSc6w2Fn9+r8JwdWlJL JirFnje926ELOS9oiGODyOoHYZT4kp/areZPt6FAqWyNvIMbiGe++TJI3YF0wShD GfpxYPOE/gr1f73+AXjL3o0b56a7hUsSzB18wIVbZUwG8yLGAgxWwvCWomgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQhnSsNayPXBqRSDKZKN+NFawA4wHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSasnDqgup0Fo0djv8hRPbctJxLeibPNnGs lM8qP975aoLzjlFBvoHL6ItXd9p8AWFaSSeHHfj961PJDkJ7MXqrOv9x4ZoPJMWv 2rs9CLJihsn3q6QD7/K4LcJGxYIGl4awDnJGtx4+73Q+XaARLnTPGDos7HtDz4Tf VaLQbfnyRz2WuxxWphRRMQnsPMRvaG+9wFE4poLxsaRM+Eh49l2D/vbbiE1io8k8 7jRkM/zfY7bDM3g7V61J2O/YGArVH02fjwF75ifLpc8uq5gczCIorhLlFtAZMzMa 33e69qiXU5Fv6FALSGhpmzveXSkHFYNazitpkjoTDCg00bA7B5I= -----END CERTIFICATE-----Generated at Sun Jun 15 15:46:04 2025 by rpki-client