$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: SmtDghrWROSQYzQLD2MplR5nfotgDRrnnYDsm1wNNa8= Subject key identifier: 1B:A7:CA:83:8D:84:73:49:DA:F7:25:28:18:93:E2:46:82:62:CC:BF Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 637447CD002D7F9BE57A07DF12BE00A2BEAFF6CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 024E Signing time: Fri 22 Aug 2025 06:11:16 +0000 Manifest this update: Fri 22 Aug 2025 06:06:16 +0000 Manifest next update: Mon 25 Aug 2025 12:55:16 +0000 Files and hashes: 1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) 2: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: Grf0zSTGdKqw0VcEIM13z+/zQwjpFPedkBCOSw5n3IY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:74:47:cd:00:2d:7f:9b:e5:7a:07:df:12:be:00:a2:be:af:f6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Aug 22 06:06:16 2025 GMT Not After : Aug 25 12:55:16 2025 GMT Subject: CN=1BA7CA838D847349DAF725281893E2468262CCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:3c:2e:dd:62:c3:6e:87:13:72:07:17:58: 58:31:67:84:24:c5:8e:eb:ab:f5:31:e0:c3:60:b5: 00:60:35:5a:f0:17:d7:af:ad:fe:6b:e3:a6:cb:bf: 95:2a:93:58:d1:c0:9f:5d:53:7d:e9:15:3c:df:8d: 1b:ed:07:6c:09:1e:3b:08:bf:08:44:c6:34:02:60: d2:39:34:27:1d:c2:3e:01:02:d5:7f:b7:26:d7:37: 45:f7:87:b7:9d:9c:ab:0d:88:77:df:80:b2:7b:85: 77:2f:cf:47:f8:9b:6c:a5:7b:df:85:92:68:b6:4a: 19:d1:52:e5:64:ac:d1:0f:9b:fa:a5:81:d1:bd:8f: 7e:d0:f9:56:30:2d:2d:f4:e5:73:f0:cb:5c:28:a2: 03:70:9c:68:06:df:b8:52:e9:ad:d0:1e:f0:34:bd: 6b:b2:2c:f6:69:03:fe:7f:14:29:53:60:f4:8d:2e: 41:f4:d1:1e:68:7f:29:0c:52:fc:43:cd:0a:62:94: 51:a8:ac:a9:c3:a3:5d:af:a4:eb:ad:d2:56:91:bb: 34:95:16:8f:69:13:72:d3:f8:2e:8b:03:a9:b4:12: ce:ce:ca:e5:a8:cc:05:82:76:fc:ab:8e:bc:63:b3: f1:d8:27:d4:0f:9b:02:e0:a0:fa:c8:7d:16:34:39: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A7:CA:83:8D:84:73:49:DA:F7:25:28:18:93:E2:46:82:62:CC:BF X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:9f:c1:08:45:e6:94:c4:d6:b0:7d:7c:8a:ef:d8:a5:75: 91:96:5d:09:24:f9:50:10:e0:a9:ad:8f:64:2d:7c:80:db:a8: f2:a4:96:02:2d:cd:53:d6:9e:74:44:e4:c9:fa:e8:94:f1:ab: 9e:f8:69:3c:1d:7e:98:11:1d:0e:4b:88:2f:73:ae:97:67:02: 21:ee:27:4e:73:5f:e5:56:9c:60:6e:2d:00:af:d0:1e:88:58: ed:cd:9b:28:d8:aa:14:05:07:f6:bf:17:0a:14:a8:d8:4a:d7: 1b:fc:00:21:79:0e:d9:57:03:36:99:6d:2e:58:11:aa:d0:64: ba:56:a8:b8:03:1e:9f:9b:e9:44:90:48:46:6c:2d:65:61:d0: b1:90:c1:3e:2d:c9:0b:80:df:51:45:ee:43:bb:7f:fd:9f:aa: 63:03:97:b4:cd:6b:59:25:af:70:28:d8:a6:5f:84:18:ae:98: 58:c2:d2:c0:78:72:4e:93:50:a0:13:c8:fe:31:fa:d6:b5:d0: c8:07:34:07:e7:49:47:ff:37:80:da:c4:6b:98:bb:93:8c:51: 17:98:a7:bf:12:bb:25:e8:2e:1f:91:63:12:6e:df:8a:9e:70: c4:29:c8:48:31:8d:b1:46:58:55:64:6a:2e:db:98:dd:e7:28: 90:71:98:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3RHzQAtf5vlegffEr4Aor6v9sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTA4MjIwNjA2MTZaFw0yNTA4MjUxMjU1MTZaMDMxMTAvBgNV BAMTKDFCQTdDQTgzOEQ4NDczNDlEQUY3MjUyODE4OTNFMjQ2ODI2MkNDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgDwu3WLDbocTcgcXWFgxZ4Qk xY7rq/Ux4MNgtQBgNVrwF9evrf5r46bLv5Uqk1jRwJ9dU33pFTzfjRvtB2wJHjsI vwhExjQCYNI5NCcdwj4BAtV/tybXN0X3h7ednKsNiHffgLJ7hXcvz0f4m2yle9+F kmi2ShnRUuVkrNEPm/qlgdG9j37Q+VYwLS305XPwy1woogNwnGgG37hS6a3QHvA0 vWuyLPZpA/5/FClTYPSNLkH00R5ofykMUvxDzQpilFGorKnDo12vpOut0laRuzSV Fo9pE3LT+C6LA6m0Es7OyuWozAWCdvyrjrxjs/HYJ9QPmwLgoPrIfRY0OTsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6fKg42Ec0na9yUoGJPiRoJizL8wHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr3n8EIReaUxNawfXyK79ildZGWXQkk+VAQ 4Kmtj2QtfIDbqPKklgItzVPWnnRE5Mn66JTxq574aTwdfpgRHQ5LiC9zrpdnAiHu J05zX+VWnGBuLQCv0B6IWO3NmyjYqhQFB/a/FwoUqNhK1xv8ACF5DtlXAzaZbS5Y EarQZLpWqLgDHp+b6USQSEZsLWVh0LGQwT4tyQuA31FF7kO7f/2fqmMDl7TNa1kl r3Ao2KZfhBiumFjC0sB4ck6TUKATyP4x+ta10MgHNAfnSUf/N4DaxGuYu5OMUReY p78SuyXoLh+RYxJu34qecMQpyEgxjbFGWFVkai7bmN3nKJBxmDs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:01 2025 by rpki-client