$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: ANdlFLURwUeBRZ6OXleyD0oJoinp5KDrDqJ6RMhmWwY= Subject key identifier: EC:55:CF:EF:5B:DA:C9:01:11:97:89:55:6A:79:EE:BA:61:F4:6E:D9 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 6E725ABE35773F4C01DA4E639AFB1B0F4B9AF2E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0235 Signing time: Sat 23 Aug 2025 04:41:20 +0000 Manifest this update: Sat 23 Aug 2025 04:36:20 +0000 Manifest next update: Tue 26 Aug 2025 12:12:20 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: xf/Fq4Y7otxTIu6JIpxldQxn1wgMHcwqviTO2nuQXQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:72:5a:be:35:77:3f:4c:01:da:4e:63:9a:fb:1b:0f:4b:9a:f2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Aug 23 04:36:20 2025 GMT Not After : Aug 26 12:12:20 2025 GMT Subject: CN=EC55CFEF5BDAC901119789556A79EEBA61F46ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:e6:8a:cc:71:12:2f:4c:02:99:c4:05:c3: 2c:15:62:f0:4f:42:59:88:66:1d:d1:01:27:60:74: 9b:ea:34:7b:59:8a:e1:b3:9c:81:a0:b6:1f:11:7c: 2d:f8:6b:02:25:a8:3b:37:6e:cf:c0:47:b5:cf:79: fe:40:d0:e0:0d:82:c2:71:6a:d1:65:6d:d6:07:0b: b9:16:65:4e:17:a4:0b:dc:8c:d2:1d:a4:60:d1:ea: 28:5d:aa:63:f3:f0:b3:53:7d:94:ee:3a:cc:ee:5d: 09:f9:52:87:86:59:9f:64:49:5b:c4:e6:98:7f:51: 9d:85:97:9e:0c:56:ee:f1:34:a1:9c:de:5e:83:3e: dd:4d:c9:87:c1:aa:b2:86:46:0c:5c:12:28:b9:ec: f0:bd:fa:16:0b:c4:2b:a7:a3:d4:35:46:f7:01:5d: 38:96:3f:fa:87:4a:35:ec:b1:b2:69:e6:f1:93:a9: df:b0:22:4e:3e:b5:09:ff:e6:87:8c:c2:ad:14:66: aa:94:8f:40:ba:a5:a9:d6:e0:23:3e:40:bc:46:37: ba:1e:08:e8:44:04:a6:ec:4a:24:ef:ae:bf:0a:94: b5:5d:d3:5a:e4:35:e6:f3:99:a0:56:99:9a:17:66: 17:1f:b3:23:6f:78:97:e4:09:d8:74:ca:2b:1e:85: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:55:CF:EF:5B:DA:C9:01:11:97:89:55:6A:79:EE:BA:61:F4:6E:D9 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c1:6a:d5:ce:f2:ff:8a:0a:40:04:d6:0a:fa:dc:d0:85:f9: 18:ee:fa:46:a7:16:b9:91:97:5d:02:52:db:39:4d:f8:cc:9a: 5f:d7:d1:af:fb:35:85:8f:c9:d1:83:48:32:40:99:4b:06:c6: 12:84:b5:1b:32:a3:f9:f1:84:19:0f:38:46:3f:ca:67:86:ea: 6b:cf:d1:91:20:f0:bc:77:08:ff:30:26:6f:6a:9f:c2:bb:09: 2a:93:7d:7d:e5:1c:78:2e:c4:87:e7:ae:e4:c1:23:ca:bc:b3: dc:f2:3a:1a:b7:c7:9d:69:4a:a1:ee:bb:fa:c4:45:97:a1:3b: 06:eb:40:b4:5f:7e:c0:c0:dd:c1:29:80:78:21:56:4a:dd:db: 82:d9:87:74:54:9b:68:9c:1f:e4:69:7c:00:f3:a0:1a:61:ef: c6:7f:fc:0d:bb:ab:a4:8e:e1:28:8a:cd:08:32:b9:5f:5d:c5: b9:29:20:c7:74:2a:45:36:23:2d:0e:19:54:4d:32:7e:68:ce: a9:da:a5:76:f4:16:13:60:e1:2c:66:f9:63:6c:26:18:7b:e8: 82:67:ef:3f:63:d6:fa:d4:12:17:61:ec:16:1b:d5:88:7c:86: 17:9d:4a:9b:bd:9d:3c:c4:46:6c:9e:8e:5c:f7:25:8d:59:aa: 7d:4e:0d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnJavjV3P0wB2k5jmvsbD0ua8uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTA4MjMwNDM2MjBaFw0yNTA4MjYxMjEyMjBaMDMxMTAvBgNV BAMTKEVDNTVDRkVGNUJEQUM5MDExMTk3ODk1NTZBNzlFRUJBNjFGNDZFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTuaKzHESL0wCmcQFwywVYvBP QlmIZh3RASdgdJvqNHtZiuGznIGgth8RfC34awIlqDs3bs/AR7XPef5A0OANgsJx atFlbdYHC7kWZU4XpAvcjNIdpGDR6ihdqmPz8LNTfZTuOszuXQn5UoeGWZ9kSVvE 5ph/UZ2Fl54MVu7xNKGc3l6DPt1NyYfBqrKGRgxcEii57PC9+hYLxCuno9Q1RvcB XTiWP/qHSjXssbJp5vGTqd+wIk4+tQn/5oeMwq0UZqqUj0C6panW4CM+QLxGN7oe COhEBKbsSiTvrr8KlLVd01rkNebzmaBWmZoXZhcfsyNveJfkCdh0yisehbHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7FXP71vayQERl4lVannuumH0btkwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXBatXO8v+KCkAE1gr63NCF+Rju+kanFrmR l10CUts5TfjMml/X0a/7NYWPydGDSDJAmUsGxhKEtRsyo/nxhBkPOEY/ymeG6mvP 0ZEg8Lx3CP8wJm9qn8K7CSqTfX3lHHguxIfnruTBI8q8s9zyOhq3x51pSqHuu/rE RZehOwbrQLRffsDA3cEpgHghVkrd24LZh3RUm2icH+RpfADzoBph78Z//A27q6SO 4SiKzQgyuV9dxbkpIMd0KkU2Iy0OGVRNMn5ozqnapXb0FhNg4Sxm+WNsJhh76IJn 7z9j1vrUEhdh7BYb1Yh8hhedSpu9nTzERmyejlz3JY1Zqn1ODYU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:22 2025 by rpki-client