$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: YYiiaz2cq+Yw7RjHZawIiDvQ5JvdYGJ4Bi+LbVoTP04= Subject key identifier: A9:43:2E:63:37:10:38:B5:E1:FE:5F:A6:F3:BF:B1:B8:3C:AA:88:34 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 7C445C920EEA6B3E29C4AEFEE25C98F14558B051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0247 Signing time: Wed 06 Aug 2025 07:21:15 +0000 Manifest this update: Wed 06 Aug 2025 07:16:15 +0000 Manifest next update: Sat 09 Aug 2025 12:32:15 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: 3LdL89jW++v8s3uCoIoOf8P2K66W/w/KUSmvDbnXozg=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:44:5c:92:0e:ea:6b:3e:29:c4:ae:fe:e2:5c:98:f1:45:58:b0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Aug 6 07:16:15 2025 GMT Not After : Aug 9 12:32:15 2025 GMT Subject: CN=A9432E63371038B5E1FE5FA6F3BFB1B83CAA8834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:5e:c7:c0:2f:f1:b6:4f:9c:74:d6:60:1e: 42:66:77:cf:f2:56:04:52:aa:cd:70:c4:be:aa:3a: f8:3f:8b:31:a6:0f:b6:83:d7:19:e7:66:96:4a:07: 61:bf:fb:4c:e7:fd:9e:dc:5e:e4:17:c9:88:2e:c5: 7c:c3:f2:e2:db:75:4d:55:f8:4e:84:2d:39:a0:f2: 74:b5:8b:21:23:f9:0e:66:4d:57:ec:fe:41:16:23: 86:8c:5c:b8:37:2c:c3:b9:f9:e5:4c:6d:b7:f4:4a: 57:62:6b:0d:97:90:6a:d4:11:68:98:3c:62:fb:2d: d7:88:1c:69:53:ef:74:c9:a4:02:50:d7:73:30:c5: d2:18:65:0c:18:35:e5:36:e8:ab:53:55:7a:36:28: 9d:1c:75:7c:8a:98:66:05:c9:59:69:a2:a5:2b:4e: 80:9d:8d:81:9c:13:61:42:fa:f6:80:07:60:39:f8: 01:cb:23:fa:0d:01:91:1c:12:64:92:b9:4d:25:7f: 5a:7f:fb:e5:d5:c5:2a:14:64:6b:25:b8:11:19:3f: c4:8a:14:72:44:18:00:11:6b:4e:37:71:8c:27:ac: 0b:a8:d4:e1:51:30:f6:b3:4b:26:c2:01:d0:6f:7c: 74:c4:07:ac:43:c6:9b:c4:27:db:29:02:ba:fb:7e: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:43:2E:63:37:10:38:B5:E1:FE:5F:A6:F3:BF:B1:B8:3C:AA:88:34 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6e:96:2c:69:f1:d7:5a:b3:81:de:f5:3d:62:14:36:74:45: 16:8e:8f:71:ba:91:32:10:3c:52:7b:26:22:19:83:37:59:67: 52:00:3b:c4:06:b2:b4:59:1b:c0:d0:f3:e6:d4:67:cb:26:d5: 28:2d:3a:94:dc:e4:82:fb:04:0e:0b:c4:94:6d:7f:ba:95:3d: bb:17:fa:53:8e:15:bd:29:ff:0e:e3:06:cc:5f:78:a8:b5:a9: a0:a7:00:ca:5e:ef:fa:66:a7:cd:55:66:0e:4a:06:52:6d:d9: c5:59:be:9b:83:64:fc:ba:dd:9b:46:ac:45:5f:8d:04:13:10: 07:8c:df:2f:8f:19:3b:2b:b2:75:59:2d:fc:61:d2:c1:42:47: c8:00:40:5c:52:11:3f:02:91:22:cf:33:10:7e:af:88:66:05: 9d:1d:f5:8b:b7:fc:95:13:ac:cd:4b:95:72:27:9c:e3:8b:0f: f8:f3:33:a6:98:3b:e7:78:14:64:80:57:26:5a:24:47:57:53: a2:3c:17:fa:dd:88:c4:af:6b:62:4f:d8:8b:ea:02:5b:a1:65: d5:75:0f:98:00:c5:69:60:9b:34:17:e4:91:46:b9:6a:b2:c9: 3b:2e:a9:83:ac:77:aa:97:3e:91:00:3d:a7:6f:17:f8:0f:08: 5f:f1:5f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfERckg7qaz4pxK7+4lyY8UVYsFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTA4MDYwNzE2MTVaFw0yNTA4MDkxMjMyMTVaMDMxMTAvBgNV BAMTKEE5NDMyRTYzMzcxMDM4QjVFMUZFNUZBNkYzQkZCMUI4M0NBQTg4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggl7HwC/xtk+cdNZgHkJmd8/y VgRSqs1wxL6qOvg/izGmD7aD1xnnZpZKB2G/+0zn/Z7cXuQXyYguxXzD8uLbdU1V +E6ELTmg8nS1iyEj+Q5mTVfs/kEWI4aMXLg3LMO5+eVMbbf0Sldiaw2XkGrUEWiY PGL7LdeIHGlT73TJpAJQ13MwxdIYZQwYNeU26KtTVXo2KJ0cdXyKmGYFyVlpoqUr ToCdjYGcE2FC+vaAB2A5+AHLI/oNAZEcEmSSuU0lf1p/++XVxSoUZGsluBEZP8SK FHJEGAARa043cYwnrAuo1OFRMPazSybCAdBvfHTEB6xDxpvEJ9spArr7fqKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqUMuYzcQOLXh/l+m87+xuDyqiDQwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJulixp8ddas4He9T1iFDZ0RRaOj3G6kTIQ PFJ7JiIZgzdZZ1IAO8QGsrRZG8DQ8+bUZ8sm1SgtOpTc5IL7BA4LxJRtf7qVPbsX +lOOFb0p/w7jBsxfeKi1qaCnAMpe7/pmp81VZg5KBlJt2cVZvpuDZPy63ZtGrEVf jQQTEAeM3y+PGTsrsnVZLfxh0sFCR8gAQFxSET8CkSLPMxB+r4hmBZ0d9Yu3/JUT rM1LlXInnOOLD/jzM6aYO+d4FGSAVyZaJEdXU6I8F/rdiMSva2JP2IvqAluhZdV1 D5gAxWlgmzQX5JFGuWqyyTsuqYOsd6qXPpEAPadvF/gPCF/xX+w= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:27 2025 by rpki-client