$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: OArj35XlPCNRsmGcLTNt5/HEcbjx3aMFXuhcLyOIrzk= Subject key identifier: 0C:83:DB:3E:43:80:39:D5:90:11:35:19:66:C7:CC:E3:02:48:1F:36 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 3056F966370D648863A48CF049D8B0835B08855A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01E3 Signing time: Sat 18 Oct 2025 16:52:21 +0000 Manifest this update: Sat 18 Oct 2025 16:47:21 +0000 Manifest next update: Tue 21 Oct 2025 18:52:21 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: QUzkBnbK7BBogCXCY9I/tzIujkTESChLebzgUswp99A=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:56:f9:66:37:0d:64:88:63:a4:8c:f0:49:d8:b0:83:5b:08:85:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Oct 18 16:47:21 2025 GMT Not After : Oct 21 18:52:21 2025 GMT Subject: CN=0C83DB3E438039D59011351966C7CCE302481F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:2e:5a:bb:d6:5f:91:5e:95:23:86:f2:ad: ea:37:b1:99:98:a2:2b:2b:e8:8a:b9:c7:67:2d:89: bf:e1:80:69:be:54:41:d2:50:d8:ed:a5:4c:cf:29: 62:dd:35:d5:86:19:b5:37:22:e6:e9:d0:6d:83:48: 7d:33:4e:49:f3:43:b1:f3:ca:f3:44:cb:f7:41:3d: d1:67:e8:d3:d7:b1:57:0c:17:65:47:09:ce:c5:98: 75:0d:ac:0f:81:27:c1:f6:22:3f:da:5c:bd:16:b2: f4:44:aa:8e:a5:9d:f1:58:f0:39:99:8f:61:99:76: 23:d3:81:6d:23:c5:82:67:f1:cf:8b:86:72:d1:ee: e3:f1:9e:c9:32:6b:f2:c5:ef:0f:f9:3b:de:05:bd: 61:56:4a:58:c0:18:20:e9:42:47:81:eb:f4:cf:7e: 7a:bc:22:d2:d5:8a:24:9e:90:22:bf:cf:8c:dc:4b: 6a:26:fe:dc:83:66:94:e8:e2:62:d8:34:99:66:f5: 56:d2:e9:f7:78:73:a5:de:38:70:fe:f9:9f:03:3b: d2:5f:17:ed:e5:80:e7:cb:bb:db:bd:32:d1:e7:19: 9b:25:8e:74:af:1a:89:0c:a6:a5:6e:2c:bd:44:00: 2d:83:91:da:a7:ab:6f:f5:ac:cd:3a:62:b5:da:d6: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:83:DB:3E:43:80:39:D5:90:11:35:19:66:C7:CC:E3:02:48:1F:36 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:60:8d:82:b4:26:2f:5c:5c:aa:a1:a3:f7:6c:d5:e9:5c:66: dd:82:31:36:bd:be:d8:dc:35:2b:dc:07:e7:d6:aa:bb:94:79: ba:97:4c:e5:f4:0a:b4:60:25:8f:f5:ab:d5:06:0f:27:fd:ee: d8:1a:67:65:4b:6b:b2:6e:06:65:d2:d5:8b:c8:84:6e:bf:52: ed:1f:20:d4:2f:f6:76:9b:61:de:5a:67:69:da:5b:51:b8:23: 86:90:53:a7:ce:b2:f1:44:52:ba:be:d7:1d:cf:e2:6c:bc:be: f7:c1:e8:98:7b:13:ec:b0:86:fd:7a:02:02:ee:9b:34:d8:1b: 3a:8e:29:49:93:04:4b:a3:30:cb:2a:03:f8:54:6f:73:89:f2: 00:b8:23:29:b7:7c:69:a6:cd:90:14:b7:8d:c0:ce:90:33:1b: 0a:29:78:2c:81:a0:03:61:b1:4e:84:dd:f9:1b:55:12:eb:c9: 4b:b3:92:2c:22:c9:96:03:54:d2:07:f2:81:28:48:3f:e0:6b: 14:a0:95:5a:50:21:2a:59:63:a7:ec:d5:be:78:9f:11:2b:91: 2f:ae:0b:80:64:49:23:55:33:76:80:a6:e6:8e:84:c0:cf:a6: d4:15:23:ba:59:0b:17:03:ae:bb:7d:34:87:d9:e5:c2:85:53: 58:1f:f5:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFb5ZjcNZIhjpIzwSdiwg1sIhVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTEwMTgxNjQ3MjFaFw0yNTEwMjExODUyMjFaMDMxMTAvBgNV BAMTKDBDODNEQjNFNDM4MDM5RDU5MDExMzUxOTY2QzdDQ0UzMDI0ODFGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGi5au9ZfkV6VI4byreo3sZmY oisr6Iq5x2ctib/hgGm+VEHSUNjtpUzPKWLdNdWGGbU3Iubp0G2DSH0zTknzQ7Hz yvNEy/dBPdFn6NPXsVcMF2VHCc7FmHUNrA+BJ8H2Ij/aXL0WsvREqo6lnfFY8DmZ j2GZdiPTgW0jxYJn8c+LhnLR7uPxnskya/LF7w/5O94FvWFWSljAGCDpQkeB6/TP fnq8ItLViiSekCK/z4zcS2om/tyDZpTo4mLYNJlm9VbS6fd4c6XeOHD++Z8DO9Jf F+3lgOfLu9u9MtHnGZsljnSvGokMpqVuLL1EAC2Dkdqnq2/1rM06YrXa1nl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIPbPkOAOdWQETUZZsfM4wJIHzYwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBgjYK0Ji9cXKqho/ds1elcZt2CMTa9vtjc NSvcB+fWqruUebqXTOX0CrRgJY/1q9UGDyf97tgaZ2VLa7JuBmXS1YvIhG6/Uu0f INQv9nabYd5aZ2naW1G4I4aQU6fOsvFEUrq+1x3P4my8vvfB6Jh7E+ywhv16AgLu mzTYGzqOKUmTBEujMMsqA/hUb3OJ8gC4Iym3fGmmzZAUt43AzpAzGwopeCyBoANh sU6E3fkbVRLryUuzkiwiyZYDVNIH8oEoSD/gaxSglVpQISpZY6fs1b54nxErkS+u C4BkSSNVM3aApuaOhMDPptQVI7pZCxcDrrt9NIfZ5cKFU1gf9eg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:23:00 2025 by rpki-client