$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: bPCh+amByGKYqLcLEU6m/2U13GCkjv4DGXTizHvXG4k= Subject key identifier: C8:1F:5C:82:DB:6B:20:02:23:DE:C8:F9:AA:58:24:D5:D6:D3:A7:F8 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 15C9A989DF9BCBF19982053859B1D5313AB1E77C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 021E Signing time: Tue 01 Jul 2025 12:01:16 +0000 Manifest this update: Tue 01 Jul 2025 11:56:16 +0000 Manifest next update: Fri 04 Jul 2025 13:54:16 +0000 Files and hashes: 1: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: mGIiVoPQs+NoLeUYD3uFhOlI07Tu3lBet2tjETV0Fwk=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c9:a9:89:df:9b:cb:f1:99:82:05:38:59:b1:d5:31:3a:b1:e7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Jul 1 11:56:16 2025 GMT Not After : Jul 4 13:54:16 2025 GMT Subject: CN=C81F5C82DB6B200223DEC8F9AA5824D5D6D3A7F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0e:8e:bd:10:c5:15:91:19:31:4a:ee:8f:48: 76:c2:15:8d:48:d7:b1:2e:da:6a:80:a4:f4:29:68: 89:b2:23:c1:fa:21:cc:d1:e4:d3:53:75:77:2e:51: 2c:39:c6:39:86:71:11:9e:c7:9b:03:28:84:91:0c: 3f:c8:ca:fe:29:9c:d3:d5:3b:6e:bb:7e:93:8d:68: 71:f2:e4:91:64:f6:f7:e9:e3:d4:5f:88:53:3b:0a: 85:5b:a2:ac:f2:bd:1f:ce:dd:36:eb:4b:87:f2:6f: 3f:5a:e8:83:2c:41:46:61:76:d5:08:09:a7:b0:8e: 1b:b6:6a:7f:cc:8a:cc:ab:34:71:9c:94:66:fa:87: 65:1b:51:b7:10:50:5e:5d:0d:ef:0d:8e:1e:bc:fe: 25:5d:cf:9c:28:93:4a:12:e8:ea:c0:ca:4b:a1:b5: 11:3a:d1:4c:40:6a:61:6b:f7:20:e0:52:b7:6a:dd: 09:68:ce:1c:88:39:47:32:4f:e6:de:ad:d7:21:86: 9f:b8:aa:3d:4f:49:c6:2c:e5:3f:59:30:d7:69:9b: 61:71:58:71:7b:dd:af:18:56:9d:3e:c0:f5:43:b9: a8:c4:02:ba:83:e5:f1:15:97:cd:72:46:dc:80:74: ed:2a:88:6d:6b:aa:19:ff:7f:a4:a8:e1:de:07:df: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1F:5C:82:DB:6B:20:02:23:DE:C8:F9:AA:58:24:D5:D6:D3:A7:F8 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:47:c1:99:c9:d9:a6:fa:66:79:25:1d:bd:27:46:2b:86:aa: 18:f0:6f:ca:b0:fe:a9:f8:bc:d7:04:7e:36:cc:ee:60:aa:d6: b1:7c:c1:85:87:e8:0d:af:5f:a8:fb:33:f5:a2:b3:2c:20:58: 39:5b:ff:54:0c:7c:6c:43:63:5e:8a:25:18:af:88:a9:e8:dc: 31:7e:cb:00:dc:c5:fd:fe:66:03:d3:37:23:ed:62:89:54:5e: f7:37:c2:58:89:26:b2:ec:50:b2:0c:c0:4e:16:ce:35:f7:aa: e6:6a:8d:8c:f1:b4:3e:06:b6:97:5a:f2:2e:55:ee:38:fb:0f: 30:6f:7b:27:78:25:93:8e:ec:5c:f1:ca:a7:de:5e:ba:94:0f: d8:0a:8c:93:7b:4a:ee:6b:ce:f5:b4:21:65:2a:2b:52:65:cc: ec:a3:44:7e:90:97:ee:f8:87:44:56:42:61:7f:f0:ff:91:b2: 0a:f6:69:b2:20:36:90:8e:31:34:88:e8:d5:f0:1a:76:99:f4: 9c:4b:71:d2:86:73:fe:03:44:f3:52:bd:fb:c1:ae:c7:c7:54: 7a:23:2c:c6:05:8a:c9:87:66:3f:68:e9:24:4d:c0:a7:56:46: 06:95:94:16:c5:ad:24:09:4d:9a:fe:4b:47:e3:de:54:5d:0c: 9e:fb:84:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcmpid+by/GZggU4WbHVMTqx53wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTA3MDExMTU2MTZaFw0yNTA3MDQxMzU0MTZaMDMxMTAvBgNV BAMTKEM4MUY1QzgyREI2QjIwMDIyM0RFQzhGOUFBNTgyNEQ1RDZEM0E3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtDo69EMUVkRkxSu6PSHbCFY1I 17Eu2mqApPQpaImyI8H6IczR5NNTdXcuUSw5xjmGcRGex5sDKISRDD/Iyv4pnNPV O267fpONaHHy5JFk9vfp49RfiFM7CoVboqzyvR/O3TbrS4fybz9a6IMsQUZhdtUI Caewjhu2an/MisyrNHGclGb6h2UbUbcQUF5dDe8Njh68/iVdz5wok0oS6OrAykuh tRE60UxAamFr9yDgUrdq3QlozhyIOUcyT+berdchhp+4qj1PScYs5T9ZMNdpm2Fx WHF73a8YVp0+wPVDuajEArqD5fEVl81yRtyAdO0qiG1rqhn/f6So4d4H38i5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyB9cgttrIAIj3sj5qlgk1dbTp/gwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpHwZnJ2ab6ZnklHb0nRiuGqhjwb8qw/qn4 vNcEfjbM7mCq1rF8wYWH6A2vX6j7M/WisywgWDlb/1QMfGxDY16KJRiviKno3DF+ ywDcxf3+ZgPTNyPtYolUXvc3wliJJrLsULIMwE4WzjX3quZqjYzxtD4Gtpda8i5V 7jj7DzBveyd4JZOO7FzxyqfeXrqUD9gKjJN7Su5rzvW0IWUqK1JlzOyjRH6Ql+74 h0RWQmF/8P+Rsgr2abIgNpCOMTSI6NXwGnaZ9JxLcdKGc/4DRPNSvfvBrsfHVHoj LMYFismHZj9o6SRNwKdWRgaVlBbFrSQJTZr+S0fj3lRdDJ77hCg= -----END CERTIFICATE-----Generated at Tue Jul 1 14:08:43 2025 by rpki-client