$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: +rNsxGpo/b2GR9itW7ZYun+8BijHfdtfXGzMhD9hCVU= Subject key identifier: 8C:D6:47:83:47:BC:7B:3B:A8:F3:A1:FE:AB:D4:26:09:97:FC:8B:88 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 0AF5FE2721934F8B0B3EC871537B250DAA7291A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 024E Signing time: Sun 19 Oct 2025 08:31:18 +0000 Manifest this update: Sun 19 Oct 2025 08:26:18 +0000 Manifest next update: Wed 22 Oct 2025 19:08:18 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: GkPsmaBaTUh2xN7l7L9S0VVNu3EaxrkVW7cloKaYsEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f5:fe:27:21:93:4f:8b:0b:3e:c8:71:53:7b:25:0d:aa:72:91:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Oct 19 08:26:18 2025 GMT Not After : Oct 22 19:08:18 2025 GMT Subject: CN=8CD6478347BC7B3BA8F3A1FEABD4260997FC8B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:8f:3e:3d:64:e7:34:38:d2:b7:7c:8e:59: cb:10:e8:6e:ed:af:a6:a3:72:95:8c:50:e8:49:5d: 2f:2b:cb:45:14:c2:6e:5a:e6:a5:70:7f:35:11:07: 52:1d:3d:19:f0:01:28:57:29:d4:1f:e7:64:a4:3d: c7:b5:45:19:14:ec:1a:e3:ee:4a:8d:fb:79:4f:bf: 81:d3:13:4d:8f:e4:62:1e:fc:3e:e3:11:45:05:70: 53:25:b4:f2:24:5a:f6:f6:82:a4:23:c6:6c:74:4f: d6:3a:e1:2f:bb:b6:59:08:78:ee:ae:52:c7:b9:11: 5b:3c:c3:a9:b1:87:b9:4f:b2:fb:e2:59:9f:2f:30: 90:23:a1:f5:2d:fc:b9:85:22:b0:6d:96:5a:8f:da: ec:77:d6:5d:02:ef:f2:77:8c:a5:87:ed:c1:39:00: e6:05:1e:66:82:47:b8:f1:fc:bf:19:d9:68:99:d3: 82:ee:39:c4:14:92:d6:2b:9f:09:5c:2d:e0:e0:4e: b6:09:26:2e:6f:fa:43:1d:ad:4f:2f:65:8c:e1:41: f7:db:72:08:0c:70:22:94:60:e6:53:0b:a8:2d:06: ac:ff:b7:b8:2b:06:f9:04:ff:f5:37:90:1e:84:75: 70:cb:d8:16:ef:ab:3b:6c:67:d8:6b:01:58:75:ac: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D6:47:83:47:BC:7B:3B:A8:F3:A1:FE:AB:D4:26:09:97:FC:8B:88 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3e:19:38:63:ed:e6:10:9d:3d:74:dd:6a:4e:c1:be:8e:00: 76:68:9d:a7:0e:7e:87:9b:83:de:c6:0a:3b:b8:93:6f:11:c6: de:58:77:d8:1b:4f:4a:90:56:9b:be:78:9c:99:ab:fe:28:16: a0:65:4a:7e:90:e9:6b:8f:5c:51:8a:59:1b:f0:50:b6:b4:7a: a4:2c:a3:12:38:a0:dd:4f:4a:c4:92:f4:e1:2a:f0:0a:e3:c4: 73:46:3a:a4:79:8d:83:5e:c8:a0:6c:44:c2:24:b5:c3:04:2a: 2e:f4:da:d5:2b:9a:68:43:0f:54:1d:bf:48:ca:e9:a6:39:2d: c8:8b:ac:d0:70:78:01:e7:c4:e8:8c:2f:77:37:f6:4e:a5:15: 62:29:06:21:58:c8:d8:52:e9:24:7f:a4:a8:d2:ba:be:23:48: 85:3f:66:ac:6f:d3:56:8c:b6:f0:2c:fd:d7:fd:a8:90:3b:7e: 27:c7:52:b5:03:ce:a6:b8:ca:e5:6b:93:d1:a9:5f:42:51:11: bf:96:ab:01:2e:df:ab:20:60:1a:ae:36:96:be:b0:22:32:25: 48:bb:64:17:7b:0f:50:b5:c5:59:1e:ed:fe:ca:29:e1:55:9d: 97:df:7f:23:4b:ca:b4:cd:20:0b:65:a0:52:e3:72:9d:ed:ec: 10:c0:4c:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvX+JyGTT4sLPshxU3slDapykaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTEwMTkwODI2MThaFw0yNTEwMjIxOTA4MThaMDMxMTAvBgNV BAMTKDhDRDY0NzgzNDdCQzdCM0JBOEYzQTFGRUFCRDQyNjA5OTdGQzhCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdU48+PWTnNDjSt3yOWcsQ6G7t r6ajcpWMUOhJXS8ry0UUwm5a5qVwfzURB1IdPRnwAShXKdQf52SkPce1RRkU7Brj 7kqN+3lPv4HTE02P5GIe/D7jEUUFcFMltPIkWvb2gqQjxmx0T9Y64S+7tlkIeO6u Use5EVs8w6mxh7lPsvviWZ8vMJAjofUt/LmFIrBtllqP2ux31l0C7/J3jKWH7cE5 AOYFHmaCR7jx/L8Z2WiZ04LuOcQUktYrnwlcLeDgTrYJJi5v+kMdrU8vZYzhQffb cggMcCKUYOZTC6gtBqz/t7grBvkE//U3kB6EdXDL2BbvqztsZ9hrAVh1rK0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNZHg0e8ezuo86H+q9QmCZf8i4gwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk+GThj7eYQnT103WpOwb6OAHZonacOfoeb g97GCju4k28Rxt5Yd9gbT0qQVpu+eJyZq/4oFqBlSn6Q6WuPXFGKWRvwULa0eqQs oxI4oN1PSsSS9OEq8ArjxHNGOqR5jYNeyKBsRMIktcMEKi702tUrmmhDD1Qdv0jK 6aY5LciLrNBweAHnxOiML3c39k6lFWIpBiFYyNhS6SR/pKjSur4jSIU/Zqxv01aM tvAs/df9qJA7fifHUrUDzqa4yuVrk9GpX0JREb+WqwEu36sgYBquNpa+sCIyJUi7 ZBd7D1C1xVke7f7KKeFVnZfffyNLyrTNIAtloFLjcp3t7BDATDA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:22 2025 by rpki-client