$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: mruNrZC0qbzxcKUvWozLhbaUKF8rMQbX67QgNPaLGi4= Subject key identifier: C6:93:45:BB:5A:F6:6F:FE:60:19:C3:26:B6:07:A3:37:FF:F5:44:9D Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 013AE4A31BD2396523168CBD5E4B35E4343A5F2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01C1 Signing time: Sun 03 Aug 2025 22:52:22 +0000 Manifest this update: Sun 03 Aug 2025 22:47:22 +0000 Manifest next update: Thu 07 Aug 2025 07:42:22 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: 3kbAx06H67abPXqOgsKljR6oBjf5PuyHYdzuMkQTeJU=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: l8A0dkUzSxH4N0BqHgL6AzXZfIz+kSzGW/8HoGSl7ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 07:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3a:e4:a3:1b:d2:39:65:23:16:8c:bd:5e:4b:35:e4:34:3a:5f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Aug 3 22:47:22 2025 GMT Not After : Aug 7 07:42:22 2025 GMT Subject: CN=C69345BB5AF66FFE6019C326B607A337FFF5449D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:35:1b:06:24:f3:85:dd:1c:9a:49:ec:94: e2:52:8a:ba:cd:d8:2f:df:b2:60:3e:fb:c7:d8:9a: 42:b9:f4:b1:24:fd:1c:6d:ed:2c:82:d5:a3:0c:92: 6e:d2:a3:dc:7b:36:08:ee:0c:f0:b8:05:5a:08:88: 44:ff:30:39:42:c4:0d:d3:68:45:88:d8:8f:2d:cc: bc:be:f0:64:83:dd:e3:16:12:61:da:e1:d7:90:3e: 62:83:07:52:98:0f:79:08:fa:d4:5a:35:a6:05:0a: 95:db:d0:64:21:81:10:fb:a2:d7:82:38:e9:67:fb: 35:f7:c4:8a:f3:f2:48:a8:0d:f3:2e:51:30:41:a3: df:20:a6:73:f2:8b:75:37:01:2f:b2:20:88:47:60: ed:ce:f4:25:fa:99:68:a2:32:fc:f3:b1:3a:81:1f: 28:35:ac:02:14:33:d5:36:40:95:69:49:e5:98:80: 51:d6:c6:01:1a:fc:5c:3e:86:b7:b5:1d:d6:70:21: fb:c9:83:46:d1:ae:a0:da:d3:56:cb:bb:b7:7c:27: 48:55:76:4a:92:43:c0:02:56:77:c2:91:db:45:4e: 1c:15:85:97:6d:ba:9d:11:c5:d3:b3:05:c9:1f:a8: bc:31:a7:62:bb:be:82:97:36:db:a5:28:f6:1b:52: 72:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:93:45:BB:5A:F6:6F:FE:60:19:C3:26:B6:07:A3:37:FF:F5:44:9D X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:80:8b:7c:c4:45:ff:ba:01:92:a1:ea:b4:ab:ff:48:b7:0a: ea:0e:5c:cd:b0:55:76:8e:e0:5e:a9:ac:76:c5:3b:e3:61:2f: 7d:07:25:1b:8d:7d:49:41:f0:79:be:c4:01:28:d3:81:8c:b6: 83:c2:91:53:df:99:7f:b1:69:23:81:f4:8c:bc:b5:5c:90:2a: 87:ac:c9:0c:33:02:15:3b:f6:8b:62:f3:6d:c5:9a:ac:a5:4c: a0:53:b1:5e:5d:92:46:db:4a:f2:68:c7:75:4c:b3:93:04:92: be:df:83:3e:65:fc:6c:de:d7:e4:56:5a:95:66:ac:fb:d1:c7: 19:d4:4c:c7:12:b7:63:76:51:e2:be:3b:df:e8:02:67:43:10: 34:e5:87:6b:f9:8a:04:72:53:82:6b:dd:60:91:f4:09:26:b5: 09:70:84:ad:3b:00:d7:dd:cb:56:61:d2:9d:36:b6:8e:c6:52: 4b:3d:b6:e3:ce:e9:ae:62:57:55:9c:6f:37:6d:8f:1e:3a:8e: cf:8d:3d:92:e2:80:31:f2:81:0c:85:fa:ac:d1:4b:5f:57:51: 30:64:19:2b:74:89:cd:84:7e:ff:ad:6b:64:0d:69:1a:e2:ce: 44:a8:b7:93:51:72:c9:75:9a:69:0b:ac:98:e1:59:b7:28:46: f0:ab:5e:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATrkoxvSOWUjFoy9Xks15DQ6Xy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTA4MDMyMjQ3MjJaFw0yNTA4MDcwNzQyMjJaMDMxMTAvBgNV BAMTKEM2OTM0NUJCNUFGNjZGRkU2MDE5QzMyNkI2MDdBMzM3RkZGNTQ0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hjUbBiTzhd0cmknslOJSirrN 2C/fsmA++8fYmkK59LEk/Rxt7SyC1aMMkm7So9x7NgjuDPC4BVoIiET/MDlCxA3T aEWI2I8tzLy+8GSD3eMWEmHa4deQPmKDB1KYD3kI+tRaNaYFCpXb0GQhgRD7oteC OOln+zX3xIrz8kioDfMuUTBBo98gpnPyi3U3AS+yIIhHYO3O9CX6mWiiMvzzsTqB Hyg1rAIUM9U2QJVpSeWYgFHWxgEa/Fw+hre1HdZwIfvJg0bRrqDa01bLu7d8J0hV dkqSQ8ACVnfCkdtFThwVhZdtup0RxdOzBckfqLwxp2K7voKXNtulKPYbUnIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxpNFu1r2b/5gGcMmtgejN//1RJ0wHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqAi3zERf+6AZKh6rSr/0i3CuoOXM2wVXaO 4F6prHbFO+NhL30HJRuNfUlB8Hm+xAEo04GMtoPCkVPfmX+xaSOB9Iy8tVyQKoes yQwzAhU79oti823FmqylTKBTsV5dkkbbSvJox3VMs5MEkr7fgz5l/Gze1+RWWpVm rPvRxxnUTMcSt2N2UeK+O9/oAmdDEDTlh2v5igRyU4Jr3WCR9AkmtQlwhK07ANfd y1Zh0p02to7GUks9tuPO6a5iV1Wcbzdtjx46js+NPZLigDHygQyF+qzRS19XUTBk GSt0ic2Efv+ta2QNaRrizkSot5NRcsl1mmkLrJjhWbcoRvCrXpQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:02 2025 by rpki-client