$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: b+oKAVLoZySB2HJjBZu3Y2A2tzSYp/xPI2X98h+Mooo= Subject key identifier: DD:06:2C:80:56:C8:87:22:7F:01:1F:34:26:F7:BB:AC:D3:7B:8B:47 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 121A4698DDD046BAF81DF7377D749DFB75572E60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0268 Signing time: Sun 19 Oct 2025 14:21:16 +0000 Manifest this update: Sun 19 Oct 2025 14:16:16 +0000 Manifest next update: Wed 22 Oct 2025 22:04:16 +0000 Files and hashes: 1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) 2: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: jIxA0fesCKp1wtNe/DKbtFryUQYlcPAa1E7BK97XEgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1a:46:98:dd:d0:46:ba:f8:1d:f7:37:7d:74:9d:fb:75:57:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Oct 19 14:16:16 2025 GMT Not After : Oct 22 22:04:16 2025 GMT Subject: CN=DD062C8056C887227F011F3426F7BBACD37B8B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:03:43:a3:75:e8:33:ec:7d:53:dc:2f:fc: 17:d4:63:99:13:a0:2f:38:29:95:66:5e:44:c4:66: 01:5a:15:87:65:9f:d7:aa:ad:8d:fd:4a:08:53:07: 8e:50:5d:e3:bb:3f:c9:50:a9:23:ad:24:52:4b:cc: 03:dc:ac:76:d0:66:00:b3:bc:59:71:39:99:4b:fe: b9:4c:a3:c2:65:97:51:b0:b1:8c:f6:81:af:a4:51: da:c1:06:5f:49:78:56:7f:9c:f2:01:fb:66:79:7a: fc:fa:07:f6:f9:0d:22:97:21:72:58:28:f9:9d:e8: 72:2e:7d:dc:23:29:2d:d9:44:b1:88:01:82:f2:5b: 6e:6c:c3:9f:71:2c:10:97:64:ac:b6:4d:5c:11:84: b4:5e:ce:56:48:a3:74:4b:e0:e3:d2:ef:59:90:c5: 04:47:b3:11:3a:a2:7d:38:e5:f2:4a:8b:cc:9c:18: 87:27:08:c6:2b:46:15:83:4a:28:7f:68:65:08:5e: 8b:fa:25:ab:6b:74:e3:6d:bd:b9:be:e6:68:30:a5: b8:cc:33:10:8f:a2:31:a8:9b:bc:1a:9d:d0:72:57: 8c:2f:b9:98:4e:e0:53:40:8f:a1:9a:e8:a0:e2:e4: 7b:74:4f:fe:4b:aa:b2:6d:fb:db:06:3f:8b:6b:a3: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:06:2C:80:56:C8:87:22:7F:01:1F:34:26:F7:BB:AC:D3:7B:8B:47 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6e:e0:d3:64:5b:fc:f9:67:28:04:84:b8:01:dc:29:20:12: 89:f3:01:05:2f:de:dc:7f:37:8b:4d:cd:ee:90:97:08:5f:fa: 68:3e:6c:d0:a2:ac:d1:3f:3c:0d:d0:85:06:13:fa:b2:2a:6c: 69:a8:60:73:2c:2f:e6:76:83:72:32:7b:2c:76:61:7b:8f:d0: 28:15:02:e6:a3:43:fa:c0:79:e9:3d:c3:18:50:3c:0f:a3:6b: cb:c8:db:c6:09:ed:03:d7:53:7c:bd:90:b0:d2:14:bd:e6:1d: 4e:1c:b3:42:39:31:26:56:4d:be:92:37:3e:dc:d9:ae:96:e5: 81:e8:32:f5:b9:c3:8b:92:b1:09:54:e4:50:2e:70:7f:38:dc: f5:7b:fd:02:2b:f0:96:34:2c:47:c5:ee:2b:b6:44:ea:a5:ff: ef:22:8c:30:bf:89:c3:5f:13:45:19:4a:ef:c1:03:0f:5d:2c: 54:4c:c4:44:4f:30:c6:65:9a:b6:e9:cf:74:81:12:f3:ca:a8: 58:aa:86:f8:80:2d:95:44:19:0f:a1:f9:52:0b:ca:55:d1:a5: 0f:c0:ff:08:af:4b:8d:81:f7:98:1a:b4:2f:6d:64:b6:c2:e4: ae:4d:73:93:ff:c8:17:b3:93:26:01:18:0d:4f:83:ee:5e:69: 22:83:23:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhpGmN3QRrr4Hfc3fXSd+3VXLmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTEwMTkxNDE2MTZaFw0yNTEwMjIyMjA0MTZaMDMxMTAvBgNV BAMTKEREMDYyQzgwNTZDODg3MjI3RjAxMUYzNDI2RjdCQkFDRDM3QjhCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiQNDo3XoM+x9U9wv/BfUY5kT oC84KZVmXkTEZgFaFYdln9eqrY39SghTB45QXeO7P8lQqSOtJFJLzAPcrHbQZgCz vFlxOZlL/rlMo8Jll1GwsYz2ga+kUdrBBl9JeFZ/nPIB+2Z5evz6B/b5DSKXIXJY KPmd6HIufdwjKS3ZRLGIAYLyW25sw59xLBCXZKy2TVwRhLRezlZIo3RL4OPS71mQ xQRHsxE6on045fJKi8ycGIcnCMYrRhWDSih/aGUIXov6JatrdONtvbm+5mgwpbjM MxCPojGom7wandByV4wvuZhO4FNAj6Ga6KDi5Ht0T/5LqrJt+9sGP4tro6cpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3QYsgFbIhyJ/AR80Jve7rNN7i0cwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZu4NNkW/z5ZygEhLgB3CkgEonzAQUv3tx/ N4tNze6Qlwhf+mg+bNCirNE/PA3QhQYT+rIqbGmoYHMsL+Z2g3Iyeyx2YXuP0CgV AuajQ/rAeek9wxhQPA+ja8vI28YJ7QPXU3y9kLDSFL3mHU4cs0I5MSZWTb6SNz7c 2a6W5YHoMvW5w4uSsQlU5FAucH843PV7/QIr8JY0LEfF7iu2ROql/+8ijDC/icNf E0UZSu/BAw9dLFRMxERPMMZlmrbpz3SBEvPKqFiqhviALZVEGQ+h+VILylXRpQ/A /wivS42B95gatC9tZLbC5K5Nc5P/yBezkyYBGA1Pg+5eaSKDI2k= -----END CERTIFICATE-----Generated at Mon Oct 20 20:55:14 2025 by rpki-client