$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: oH5V2fzSK5H9PE7TQh7q/wsMxChfFNUsrAmIOicLVHI= Subject key identifier: EA:4C:B2:8C:C7:4B:D1:CF:F6:C4:42:C7:A2:DD:E6:06:56:46:5F:6C Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 7056E10B8844A19156839B035CC6174ED50F1454 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 037E Signing time: Fri 22 Aug 2025 16:41:35 +0000 Manifest this update: Fri 22 Aug 2025 16:36:35 +0000 Manifest next update: Mon 25 Aug 2025 22:35:35 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: zccQjtd6j/8+NqAMrq37GIVhGwD0CeFnXeO/VxSXW5I=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:56:e1:0b:88:44:a1:91:56:83:9b:03:5c:c6:17:4e:d5:0f:14:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Aug 22 16:36:35 2025 GMT Not After : Aug 25 22:35:35 2025 GMT Subject: CN=EA4CB28CC74BD1CFF6C442C7A2DDE60656465F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:2b:89:15:5b:63:4b:d9:c1:fa:30:1e:66: ef:b9:f6:cc:27:90:d6:1d:da:f2:ec:76:ac:e6:c4: 74:cb:36:44:b2:e7:0f:8d:d6:23:c9:71:eb:ed:f5: 51:9a:ee:03:71:ee:cd:4f:a4:23:91:0a:6b:f4:0d: cf:76:c0:83:b7:1d:5a:cb:e2:b7:6a:81:64:f2:93: 18:67:11:cc:6c:06:ef:70:65:5e:a1:6d:40:b2:c2: c8:0c:41:b8:4a:69:f9:02:2a:11:29:a6:91:f1:ce: 06:ec:55:e8:1b:ad:91:e0:5d:12:7a:bc:42:de:8f: 3c:61:12:f7:a8:6d:8a:2a:cf:fc:b0:e9:cf:b2:5d: f5:1c:d2:ec:3e:11:03:68:5d:3a:ab:87:40:21:6d: 0f:cd:8f:73:cc:be:44:60:4d:58:4e:a8:b9:5d:c9: f6:d4:94:ff:6d:4c:3a:33:d0:18:5b:b0:84:a9:e0: eb:b1:04:8d:55:a5:04:69:76:e3:c2:2f:be:b4:b1: 85:c9:7e:ca:5d:af:bb:3e:5c:c4:d2:88:bc:81:d0: 69:55:54:bd:49:82:1b:33:31:23:15:49:1e:7b:af: af:17:c8:17:1a:6f:5e:2d:19:77:d8:cc:94:97:e8: 03:be:8d:b8:ee:f8:66:0f:ec:6d:91:50:a6:53:b4: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:B2:8C:C7:4B:D1:CF:F6:C4:42:C7:A2:DD:E6:06:56:46:5F:6C X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:10:ce:a5:3c:29:5e:4a:ca:70:77:45:1b:b3:72:e0:db:2a: 06:b1:3c:53:93:92:f0:ef:30:0f:75:20:71:bf:47:ef:e8:c1: cf:a9:09:68:a4:78:da:85:f5:5d:fb:f7:0d:0c:41:b3:a7:75: 70:8d:2d:80:27:ab:ce:3a:b5:d4:01:88:af:42:70:62:7d:7c: 31:c6:91:63:86:3a:da:81:64:97:1a:8e:97:ff:c9:36:cb:b3: 7b:9e:50:2d:5a:0c:44:41:b6:f5:5e:ad:f3:c0:d8:a0:64:37: 30:69:40:68:da:ad:76:f4:49:61:63:d3:c6:71:27:be:14:be: 0e:0b:29:5c:d2:83:c9:1d:4a:1a:8f:9c:54:42:73:ff:3a:c6: b3:de:42:0d:82:3a:c4:f7:f8:57:56:b3:50:c5:06:93:33:ae: d8:43:b4:c6:a7:ad:18:f5:0b:1c:42:60:68:91:e5:c1:08:0c: 53:d6:05:f8:17:e4:14:4b:6a:87:77:fd:9a:b0:3f:8d:8b:95: 43:4b:b0:78:da:cb:42:d0:dc:14:5f:e7:29:17:b2:f7:0d:bb: 8e:88:fe:18:62:f8:da:a8:7b:45:78:fb:df:1b:72:1f:8e:38: 3e:14:d7:12:cb:de:4e:51:ba:7c:e4:5f:bb:7d:c0:56:9c:1d: b3:cb:b7:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFbhC4hEoZFWg5sDXMYXTtUPFFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTA4MjIxNjM2MzVaFw0yNTA4MjUyMjM1MzVaMDMxMTAvBgNV BAMTKEVBNENCMjhDQzc0QkQxQ0ZGNkM0NDJDN0EyRERFNjA2NTY0NjVGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLyuJFVtjS9nB+jAeZu+59swn kNYd2vLsdqzmxHTLNkSy5w+N1iPJcevt9VGa7gNx7s1PpCORCmv0Dc92wIO3HVrL 4rdqgWTykxhnEcxsBu9wZV6hbUCywsgMQbhKafkCKhEpppHxzgbsVegbrZHgXRJ6 vELejzxhEveobYoqz/yw6c+yXfUc0uw+EQNoXTqrh0AhbQ/Nj3PMvkRgTVhOqLld yfbUlP9tTDoz0BhbsISp4OuxBI1VpQRpduPCL760sYXJfspdr7s+XMTSiLyB0GlV VL1JghszMSMVSR57r68XyBcab14tGXfYzJSX6AO+jbju+GYP7G2RUKZTtBD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6kyyjMdL0c/2xELHot3mBlZGX2wwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYQzqU8KV5KynB3RRuzcuDbKgaxPFOTkvDv MA91IHG/R+/owc+pCWikeNqF9V379w0MQbOndXCNLYAnq846tdQBiK9CcGJ9fDHG kWOGOtqBZJcajpf/yTbLs3ueUC1aDERBtvVerfPA2KBkNzBpQGjarXb0SWFj08Zx J74Uvg4LKVzSg8kdShqPnFRCc/86xrPeQg2COsT3+FdWs1DFBpMzrthDtManrRj1 CxxCYGiR5cEIDFPWBfgX5BRLaod3/ZqwP42LlUNLsHjay0LQ3BRf5ykXsvcNu46I /hhi+Nqoe0V4+98bch+OOD4U1xLL3k5RunzkX7t9wFacHbPLt+c= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:06 2025 by rpki-client