$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: BfmY7Vxgupwno78RvRQUec/SJXMlr+l51e3nei1eZ3s= Subject key identifier: 66:92:F1:EE:17:ED:65:85:A5:3F:78:F0:E9:DF:16:DF:05:92:4F:8F Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 25AB53AC5DF3E0234B273A054B97F63EFABE7A18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 039F Signing time: Tue 04 Nov 2025 04:41:32 +0000 Manifest this update: Tue 04 Nov 2025 04:36:32 +0000 Manifest next update: Fri 07 Nov 2025 15:17:32 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: f/H6FMnzOI8iP9JGmDjDuZW7zuVzwuuinWu9+CZotoI=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ab:53:ac:5d:f3:e0:23:4b:27:3a:05:4b:97:f6:3e:fa:be:7a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Nov 4 04:36:32 2025 GMT Not After : Nov 7 15:17:32 2025 GMT Subject: CN=6692F1EE17ED6585A53F78F0E9DF16DF05924F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:46:e4:a0:25:35:31:53:1c:73:e5:16:f2: ee:70:2b:fd:0e:d9:e4:9e:b8:f0:bc:0f:8f:5a:9d: 87:8e:a1:59:4f:4f:62:1b:15:ed:51:19:d3:64:fa: 0f:c0:84:b3:56:6c:70:a2:26:94:cc:ae:3d:56:fa: 09:4b:ab:2a:ba:d1:05:a8:5e:e7:e1:b6:86:93:6e: c2:7e:3b:df:24:92:e7:bf:89:7b:86:46:bc:e8:f6: d2:ee:62:61:0d:b4:13:55:61:29:3f:ab:1e:13:21: 43:18:cc:0e:e7:b9:16:6a:f2:f5:62:6c:57:4e:37: 25:e4:82:7c:1f:59:02:23:dd:23:16:ab:8c:38:87: b7:99:51:75:18:34:52:8d:aa:05:0a:98:67:8e:ad: c1:55:77:4d:9d:af:20:0a:94:fd:b4:d5:4e:0b:41: a4:1c:e8:7e:3b:3a:2b:03:18:58:24:45:e5:29:5e: 2a:74:17:81:54:34:b1:59:88:0d:d6:c5:59:07:38: e4:d4:84:fa:62:ed:53:dc:ed:ad:4b:06:2d:eb:98: b9:2c:0a:7c:b5:c5:7a:8e:83:95:f2:a1:db:78:54: ff:08:61:07:2a:91:76:84:ec:35:56:9e:7c:0a:0c: cf:49:2c:b7:52:58:96:55:47:9c:7f:f2:bb:11:8c: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:92:F1:EE:17:ED:65:85:A5:3F:78:F0:E9:DF:16:DF:05:92:4F:8F X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:bb:a4:ab:f7:81:db:6c:43:4b:93:cb:75:0e:31:34:42: 9e:80:5a:87:09:19:dc:fa:28:26:c7:53:7f:8a:0f:de:26:82: 01:fd:37:79:c5:88:68:dd:37:b2:61:33:60:35:3b:85:a5:db: 0c:9e:41:c5:4e:d5:ed:67:0e:1f:75:9d:ee:f9:41:a1:b8:6d: 68:02:9b:ba:2a:08:2e:7b:ef:7d:3b:27:dd:d0:5c:0f:39:87: 83:9d:c4:10:9d:03:a3:99:ef:55:7f:bb:41:9b:d1:4e:06:11: 51:e0:53:0d:39:c9:dd:e7:ba:75:55:78:b4:82:18:9d:27:2d: da:ef:49:da:3e:97:71:47:43:02:71:86:a9:a8:be:65:33:85: 1e:f2:16:f8:b7:ae:20:8f:9e:ec:0b:25:da:8a:6b:89:3f:54: 00:e0:dc:a9:ef:f5:ae:74:cc:ae:cc:9b:c1:12:ff:e8:43:ac: 01:8f:68:84:5a:29:e8:42:1a:cd:2c:30:42:c2:43:7f:7d:a3: 79:b4:d7:4c:e8:2b:d9:38:b3:76:36:b7:75:f5:4d:24:fb:b1: 53:0f:38:db:28:58:0e:54:26:f5:fd:74:14:e7:bc:11:9c:b2: 60:0f:ed:f8:a5:ff:ad:c1:e9:ad:4a:d5:92:05:fa:d4:86:6c: a3:a3:c7:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJatTrF3z4CNLJzoFS5f2Pvq+ehgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTExMDQwNDM2MzJaFw0yNTExMDcxNTE3MzJaMDMxMTAvBgNV BAMTKDY2OTJGMUVFMTdFRDY1ODVBNTNGNzhGMEU5REYxNkRGMDU5MjRGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSkbkoCU1MVMcc+UW8u5wK/0O 2eSeuPC8D49anYeOoVlPT2IbFe1RGdNk+g/AhLNWbHCiJpTMrj1W+glLqyq60QWo XufhtoaTbsJ+O98kkue/iXuGRrzo9tLuYmENtBNVYSk/qx4TIUMYzA7nuRZq8vVi bFdONyXkgnwfWQIj3SMWq4w4h7eZUXUYNFKNqgUKmGeOrcFVd02dryAKlP201U4L QaQc6H47OisDGFgkReUpXip0F4FUNLFZiA3WxVkHOOTUhPpi7VPc7a1LBi3rmLks Cny1xXqOg5Xyodt4VP8IYQcqkXaE7DVWnnwKDM9JLLdSWJZVR5x/8rsRjH8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpLx7hftZYWlP3jw6d8W3wWST48wHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGohu6Sr94HbbENLk8t1DjE0Qp6AWocJGdz6 KCbHU3+KD94mggH9N3nFiGjdN7JhM2A1O4Wl2wyeQcVO1e1nDh91ne75QaG4bWgC m7oqCC577307J93QXA85h4OdxBCdA6OZ71V/u0Gb0U4GEVHgUw05yd3nunVVeLSC GJ0nLdrvSdo+l3FHQwJxhqmovmUzhR7yFvi3riCPnuwLJdqKa4k/VADg3Knv9a50 zK7Mm8ES/+hDrAGPaIRaKehCGs0sMELCQ399o3m010zoK9k4s3Y2t3X1TST7sVMP ONsoWA5UJvX9dBTnvBGcsmAP7fil/63B6a1K1ZIF+tSGbKOjx+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:16 2025 by rpki-client