$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: azFMaeNu8+hJCGxARhRLWKmksbfBj5LI0WPHv00M8W0= Subject key identifier: 79:4A:23:F4:6C:F2:C1:92:6F:1B:45:16:59:39:80:47:C2:C9:62:AE Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 4A77E466317732BC5C953A6641A13C71F1612AFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 01F7 Signing time: Tue 05 Aug 2025 08:21:16 +0000 Manifest this update: Tue 05 Aug 2025 08:16:16 +0000 Manifest next update: Fri 08 Aug 2025 14:02:16 +0000 Files and hashes: 1: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: MwH16qyqUoexwTujvwUVKcjRMYKAA/9Tqqzxp5Xj6rg=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:77:e4:66:31:77:32:bc:5c:95:3a:66:41:a1:3c:71:f1:61:2a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Aug 5 08:16:16 2025 GMT Not After : Aug 8 14:02:16 2025 GMT Subject: CN=794A23F46CF2C1926F1B451659398047C2C962AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:20:0d:4f:40:08:3b:7f:a8:d3:61:83:91: 04:f7:a4:5a:0e:6f:b0:ea:7f:f0:9f:fc:36:6e:32: 77:27:f9:17:27:07:c5:4e:e4:80:44:a0:1d:2f:23: 94:8a:f6:c9:54:7b:92:a7:c6:87:5e:85:e1:c8:03: 46:35:bc:7e:70:f2:81:bd:12:28:2e:22:2b:1a:37: e1:3f:e5:95:d5:63:29:22:a4:a7:2c:b5:1f:30:85: aa:b8:6e:68:54:46:6e:50:c7:ae:a9:87:98:06:b6: d0:a9:fe:b9:4f:73:09:80:c0:26:79:26:f3:4c:6c: 22:6b:43:45:69:3e:cf:00:01:27:fb:ab:f0:18:97: 45:a7:56:4b:2c:f7:ef:81:54:30:d6:d0:98:29:c0: d0:0f:11:c9:74:b0:c8:86:a6:9e:a9:d5:ea:84:54: c8:b4:ae:e1:b2:54:61:be:a6:b0:58:e0:6e:57:68: 84:f1:08:a3:29:44:b9:a3:b5:a5:8f:94:01:af:5e: 18:51:c6:60:21:10:94:ab:91:07:e8:73:ed:1b:64: 31:0e:b2:64:dd:8d:e8:f3:1f:70:e5:d5:17:29:e8: fa:97:af:8d:11:b2:97:6f:2e:df:75:44:4c:40:73: 67:c4:8b:27:e1:a7:ec:fe:83:46:cd:c5:18:22:9e: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4A:23:F4:6C:F2:C1:92:6F:1B:45:16:59:39:80:47:C2:C9:62:AE X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:7d:0c:cf:a6:73:45:35:53:43:82:c3:27:86:51:79:f1: 0b:8d:84:4f:e8:65:f1:dc:9b:d5:a1:86:95:f7:f0:1d:1e:71: 30:3a:71:0b:2e:e8:bf:13:83:97:c8:71:63:07:f0:30:60:07: 82:3c:6b:f1:54:c2:3d:4d:ec:8d:90:42:0b:7f:84:fa:cb:62: db:3e:8d:75:e3:27:06:fe:38:24:e0:f6:12:a6:89:a3:7f:55: e3:ed:65:d6:b9:67:37:a2:ff:f5:23:c9:b2:e9:1e:cb:1d:4d: 7d:b8:0f:83:c6:1f:59:3f:f9:12:13:70:7f:48:dc:5f:84:f2: 66:1e:48:a2:68:15:50:6b:de:70:bc:40:7a:b8:6a:d0:ba:b7: da:73:42:01:82:93:f6:ca:c9:fa:4d:af:40:03:44:6e:2c:91: bf:23:f0:80:3e:13:f3:39:64:08:56:d9:e1:58:b4:75:4e:ac: 38:3d:0a:67:53:e1:ae:1b:56:22:6e:1c:17:84:bf:7a:4f:e6: c9:26:18:0a:92:4a:8c:91:91:b3:1d:5b:12:d1:65:d8:b5:42: 88:07:9f:40:40:d2:ad:71:92:a6:74:46:4d:db:19:56:a3:18: be:41:71:b5:b4:60:6b:a1:4d:f7:f4:d8:f5:ed:89:20:24:96: a7:14:fa:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnfkZjF3MrxclTpmQaE8cfFhKv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA4MDUwODE2MTZaFw0yNTA4MDgxNDAyMTZaMDMxMTAvBgNV BAMTKDc5NEEyM0Y0NkNGMkMxOTI2RjFCNDUxNjU5Mzk4MDQ3QzJDOTYyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiIyANT0AIO3+o02GDkQT3pFoO b7Dqf/Cf/DZuMncn+RcnB8VO5IBEoB0vI5SK9slUe5KnxodeheHIA0Y1vH5w8oG9 EiguIisaN+E/5ZXVYykipKcstR8whaq4bmhURm5Qx66ph5gGttCp/rlPcwmAwCZ5 JvNMbCJrQ0VpPs8AASf7q/AYl0WnVkss9++BVDDW0JgpwNAPEcl0sMiGpp6p1eqE VMi0ruGyVGG+prBY4G5XaITxCKMpRLmjtaWPlAGvXhhRxmAhEJSrkQfoc+0bZDEO smTdjejzH3Dl1Rcp6PqXr40RspdvLt91RExAc2fEiyfhp+z+g0bNxRginqjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUoj9GzywZJvG0UWWTmAR8LJYq4wHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWufQzPpnNFNVNDgsMnhlF58QuNhE/oZfHc m9WhhpX38B0ecTA6cQsu6L8Tg5fIcWMH8DBgB4I8a/FUwj1N7I2QQgt/hPrLYts+ jXXjJwb+OCTg9hKmiaN/VePtZda5Zzei//UjybLpHssdTX24D4PGH1k/+RITcH9I 3F+E8mYeSKJoFVBr3nC8QHq4atC6t9pzQgGCk/bKyfpNr0ADRG4skb8j8IA+E/M5 ZAhW2eFYtHVOrDg9CmdT4a4bViJuHBeEv3pP5skmGAqSSoyRkbMdWxLRZdi1QogH n0BA0q1xkqZ0Rk3bGVajGL5BcbW0YGuhTff02PXtiSAklqcU+iU= -----END CERTIFICATE-----Generated at Thu Aug 7 03:22:01 2025 by rpki-client