$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: pMNB9r8pGAyNVjkk27YrVuW6wWZjNqClPf2JSe3GtCY= Subject key identifier: 81:3D:5F:80:0D:2C:4C:EF:E1:46:F1:62:8E:4F:A8:28:71:0B:F0:52 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 4655ED92CAC71E19F888F6A1D3BF148D0490FE14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0236 Signing time: Sat 28 Jun 2025 19:21:22 +0000 Manifest this update: Sat 28 Jun 2025 19:16:22 +0000 Manifest next update: Wed 02 Jul 2025 02:53:22 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: 7sknKCv07b5LyV+u8sETxCyEB6msNT6mXOQ08VPaOgg=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:55:ed:92:ca:c7:1e:19:f8:88:f6:a1:d3:bf:14:8d:04:90:fe:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Jun 28 19:16:22 2025 GMT Not After : Jul 2 02:53:22 2025 GMT Subject: CN=813D5F800D2C4CEFE146F1628E4FA828710BF052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:d3:17:d3:ee:cb:ee:b7:af:c2:3b:54:ea: 0b:de:3c:36:28:d6:31:7c:e2:57:b8:36:bd:77:5a: 98:96:81:e9:6a:9d:2d:29:25:09:3c:b6:f3:41:4b: 0f:21:72:bf:18:52:e1:ff:4a:32:ab:e4:ef:a4:a2: ab:89:20:c8:81:2b:58:94:c1:dc:cd:d1:ab:7d:92: a9:dd:2c:72:c0:d3:08:b8:b8:65:92:ab:29:df:68: 51:bb:d8:38:e4:04:f2:11:5c:ea:1a:be:36:87:89: 28:a9:5f:6f:95:c8:ed:70:b9:6a:70:a6:e0:f8:f2: 52:42:d3:4b:ad:91:ed:c8:94:6a:12:eb:15:cf:24: 54:27:9a:d7:18:31:27:08:12:66:49:03:a0:c8:d0: a8:7e:cf:b1:c5:8a:e4:44:95:2a:d7:b4:24:f2:fc: 3a:8d:ff:fc:12:23:57:95:20:b8:7a:79:bf:84:60: 69:f0:2f:94:42:17:92:9c:ac:56:d0:67:72:a8:2f: fd:8a:22:7d:75:ee:08:ef:f1:53:03:33:40:68:16: 97:8e:07:3e:9a:97:a0:1b:2f:97:ec:5a:0a:71:33: a5:24:cc:d5:70:7e:86:15:b5:f3:be:b6:0f:97:76: 17:6f:dc:d6:24:b3:aa:97:4c:d6:38:3f:a8:b8:98: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:5F:80:0D:2C:4C:EF:E1:46:F1:62:8E:4F:A8:28:71:0B:F0:52 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:46:de:0f:17:d0:a5:bd:2e:43:7f:68:bd:7b:bc:bf:61:e6: 52:6e:29:81:eb:3d:e2:bb:aa:c6:d7:71:c3:e9:c5:af:92:56: 46:35:19:a2:69:0d:70:7c:59:d9:33:32:84:5b:f4:73:46:e6: bb:42:84:8b:91:a4:3e:b9:3f:44:ec:6b:ee:f9:15:6f:97:11: bd:0e:3b:97:53:72:86:29:e6:9a:cc:97:86:0a:fe:6b:ab:42: 15:6c:25:a9:30:49:37:ca:a0:79:6b:fe:4d:c9:b4:bf:07:1b: cf:d6:c2:0c:96:23:56:0d:72:de:8b:9b:6a:6c:56:b0:20:d0: 99:f8:bf:0d:0e:1e:02:6a:27:db:2a:db:f2:2e:0e:72:b1:4a: 1c:0c:59:b4:0a:ef:fe:e8:40:6b:b0:1c:2c:65:33:bc:ff:37: cd:20:49:06:ef:f9:08:26:83:8e:a5:8e:41:4e:17:e4:5d:b6: 37:c3:57:70:f8:44:08:59:55:4e:9f:dd:f6:94:e9:f2:d7:59: 06:44:f5:e1:df:07:98:80:05:a0:2e:79:dc:20:f0:02:a7:9d: 01:87:7e:5c:7d:8b:d6:e1:97:01:44:cf:04:1e:01:c5:9c:ef: 63:0c:99:ba:69:32:a2:05:3c:d6:eb:a3:79:17:7d:d8:ad:64: eb:39:eb:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlXtksrHHhn4iPah078UjQSQ/hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTA2MjgxOTE2MjJaFw0yNTA3MDIwMjUzMjJaMDMxMTAvBgNV BAMTKDgxM0Q1RjgwMEQyQzRDRUZFMTQ2RjE2MjhFNEZBODI4NzEwQkYwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQtMX0+7L7revwjtU6gvePDYo 1jF84le4Nr13WpiWgelqnS0pJQk8tvNBSw8hcr8YUuH/SjKr5O+koquJIMiBK1iU wdzN0at9kqndLHLA0wi4uGWSqynfaFG72DjkBPIRXOoavjaHiSipX2+VyO1wuWpw puD48lJC00utke3IlGoS6xXPJFQnmtcYMScIEmZJA6DI0Kh+z7HFiuRElSrXtCTy /DqN//wSI1eVILh6eb+EYGnwL5RCF5KcrFbQZ3KoL/2KIn117gjv8VMDM0BoFpeO Bz6al6AbL5fsWgpxM6UkzNVwfoYVtfO+tg+Xdhdv3NYks6qXTNY4P6i4mJ9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgT1fgA0sTO/hRvFijk+oKHEL8FIwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxG3g8X0KW9LkN/aL17vL9h5lJuKYHrPeK7 qsbXccPpxa+SVkY1GaJpDXB8WdkzMoRb9HNG5rtChIuRpD65P0Tsa+75FW+XEb0O O5dTcoYp5prMl4YK/murQhVsJakwSTfKoHlr/k3JtL8HG8/WwgyWI1YNct6Lm2ps VrAg0Jn4vw0OHgJqJ9sq2/IuDnKxShwMWbQK7/7oQGuwHCxlM7z/N80gSQbv+Qgm g46ljkFOF+RdtjfDV3D4RAhZVU6f3faU6fLXWQZE9eHfB5iABaAuedwg8AKnnQGH flx9i9bhlwFEzwQeAcWc72MMmbppMqIFPNbro3kXfditZOs566M= -----END CERTIFICATE-----Generated at Mon Jun 30 04:00:44 2025 by rpki-client