$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: gx4YdFICi62tb04YySaYW/YG7aG14ERmkqlyFQikWEg= Subject key identifier: 3B:B5:02:D3:64:DF:96:56:31:96:95:FE:37:34:89:31:5F:59:F8:4C Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 5E68D50F38C762DDD98B6852E0A91B051EFA652F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01CA Signing time: Sat 23 Aug 2025 02:02:23 +0000 Manifest this update: Sat 23 Aug 2025 01:57:23 +0000 Manifest next update: Tue 26 Aug 2025 08:18:23 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 2: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: zKk1DVO8/Vk+Fnw0P975PdhQLhS73BAYBOOBHBm1x0E=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:68:d5:0f:38:c7:62:dd:d9:8b:68:52:e0:a9:1b:05:1e:fa:65:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Aug 23 01:57:23 2025 GMT Not After : Aug 26 08:18:23 2025 GMT Subject: CN=3BB502D364DF9656319695FE373489315F59F84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:82:02:50:2a:44:c3:e0:49:bd:9e:3d:e8: 8d:47:22:97:32:5d:a7:16:d7:bf:23:83:52:28:ad: 3b:d1:5e:b7:e6:db:a4:74:bb:49:4e:da:4e:06:4b: 59:e0:33:0c:36:cd:11:46:d6:dd:70:22:c5:8a:78: c1:20:59:c7:6f:7f:43:b2:e3:8e:ae:f7:4c:76:1c: 67:32:29:dd:11:0d:db:cd:ce:36:64:f0:3c:cf:df: 5b:0a:70:6e:37:19:db:42:ec:b2:0c:ac:34:5c:ae: dd:44:07:7d:52:90:11:bc:1e:bc:c7:c1:24:82:ef: 9a:8e:33:22:dc:3f:28:cf:0d:1b:41:f8:0a:9c:5e: 8b:92:9c:37:38:f1:86:d9:37:43:a8:a0:f0:d2:35: 70:ac:db:58:b8:3b:b9:4b:18:f2:cc:f0:c4:3b:3b: b3:5e:c0:f9:60:42:90:54:03:e2:a3:57:89:4c:1c: dd:73:b5:08:0a:4b:cb:b8:70:34:f9:bd:6a:39:86: e8:b0:19:79:9e:18:28:86:0e:1c:e8:16:0a:a2:22: ae:4d:a1:6b:11:30:15:11:01:8d:48:52:13:bf:f1: 56:a0:a4:f0:7d:6b:d8:dd:f3:bc:4c:32:50:70:1b: 30:0e:45:23:e8:49:9b:7b:86:f6:c9:62:3a:85:01: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B5:02:D3:64:DF:96:56:31:96:95:FE:37:34:89:31:5F:59:F8:4C X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:20:fc:45:8c:42:bb:2e:8d:9d:1c:9f:0e:a3:f2:a8:92:9e: c6:4b:e4:be:97:4e:48:89:b3:7d:e6:2f:e9:57:90:23:0f:11: f7:16:05:28:9e:2f:0c:50:59:43:18:a0:6f:64:db:3d:6b:37: c4:e6:27:d5:0c:ed:06:a0:99:27:71:a2:b5:62:00:17:91:9d: 16:90:3b:5b:5e:af:64:72:0e:e2:ad:72:6e:ec:9d:ab:fa:7a: 1d:cf:2e:c0:04:0a:a1:57:7f:d9:11:f6:0f:51:f3:b1:5d:15: 03:a6:cb:2e:1f:0c:53:c4:c6:2e:55:35:cc:ec:85:2d:49:23: b8:6c:44:fb:84:bf:4f:df:f3:70:bb:4e:3c:a7:ce:5c:ba:69: a5:3b:4c:6c:ea:6c:29:e3:15:e9:bc:68:1c:f9:70:7e:0f:e4: ac:88:13:7b:14:24:60:a4:f3:92:7e:eb:0e:d9:21:dc:75:1a: 91:0a:5f:77:73:42:a2:6b:0e:c9:a0:e5:db:d1:43:b9:d6:de: ff:3b:4e:68:85:02:ba:97:5f:f1:b3:e0:d1:5d:c3:da:9a:6d: 03:d0:e8:89:ee:ee:0c:83:c5:e9:e8:0b:81:73:c6:6d:91:59: 50:1c:8f:80:e3:b6:61:9d:d8:4e:7b:63:77:35:d2:51:da:ef: 6e:9b:ce:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmjVDzjHYt3Zi2hS4KkbBR76ZS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTA4MjMwMTU3MjNaFw0yNTA4MjYwODE4MjNaMDMxMTAvBgNV BAMTKDNCQjUwMkQzNjRERjk2NTYzMTk2OTVGRTM3MzQ4OTMxNUY1OUY4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZ4ICUCpEw+BJvZ496I1HIpcy XacW178jg1IorTvRXrfm26R0u0lO2k4GS1ngMww2zRFG1t1wIsWKeMEgWcdvf0Oy 446u90x2HGcyKd0RDdvNzjZk8DzP31sKcG43GdtC7LIMrDRcrt1EB31SkBG8HrzH wSSC75qOMyLcPyjPDRtB+AqcXouSnDc48YbZN0OooPDSNXCs21i4O7lLGPLM8MQ7 O7NewPlgQpBUA+KjV4lMHN1ztQgKS8u4cDT5vWo5huiwGXmeGCiGDhzoFgqiIq5N oWsRMBURAY1IUhO/8VagpPB9a9jd87xMMlBwGzAORSPoSZt7hvbJYjqFATKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO7UC02TfllYxlpX+NzSJMV9Z+EwwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQg/EWMQrsujZ0cnw6j8qiSnsZL5L6XTkiJ s33mL+lXkCMPEfcWBSieLwxQWUMYoG9k2z1rN8TmJ9UM7QagmSdxorViABeRnRaQ O1ter2RyDuKtcm7snav6eh3PLsAECqFXf9kR9g9R87FdFQOmyy4fDFPExi5VNczs hS1JI7hsRPuEv0/f83C7Tjynzly6aaU7TGzqbCnjFem8aBz5cH4P5KyIE3sUJGCk 85J+6w7ZIdx1GpEKX3dzQqJrDsmg5dvRQ7nW3v87TmiFArqXX/Gz4NFdw9qabQPQ 6Inu7gyDxenoC4Fzxm2RWVAcj4DjtmGd2E57Y3c10lHa726bzjA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:13 2025 by rpki-client