$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: RTE36bVhLCTyGoH6tflBf99PTQDalPzUSHhIkdaVTkU= Subject key identifier: 88:A0:14:6F:95:6B:12:E1:72:57:90:17:3B:64:B2:07:69:23:94:5C Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 6E08D0EEE0A7F00ADD069695B2DA470E43163AE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 0398 Signing time: Mon 20 Oct 2025 03:11:34 +0000 Manifest this update: Mon 20 Oct 2025 03:06:34 +0000 Manifest next update: Thu 23 Oct 2025 06:50:34 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: GgZUS8ze4qQTWIcqqY8ERvz6VTVqivdkPQfmN947f38=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:08:d0:ee:e0:a7:f0:0a:dd:06:96:95:b2:da:47:0e:43:16:3a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Oct 20 03:06:34 2025 GMT Not After : Oct 23 06:50:34 2025 GMT Subject: CN=88A0146F956B12E1725790173B64B2076923945C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:73:b0:ef:4b:f7:99:98:25:53:7f:0f:cc: 64:7e:5d:69:20:d4:70:25:60:1f:14:66:da:89:85: e4:bd:53:04:03:91:c2:d3:5c:1c:8d:92:13:ff:1f: 52:dc:b4:76:20:d7:e6:1f:05:fe:08:e6:d8:26:38: ed:2f:60:0f:aa:4c:bf:f7:fa:61:c3:fe:43:de:a5: 67:bb:cc:e8:06:f5:97:a1:dc:53:5e:d8:9d:8a:c0: 21:ec:e6:2b:6e:8d:38:f8:41:5e:00:35:df:ef:b5: 99:0b:8b:2a:e2:5e:f5:c5:ff:bc:53:76:47:53:87: 11:4f:96:01:d3:3f:b6:23:6b:29:f9:4c:29:2c:62: 4a:3c:ae:4e:0b:30:76:97:74:59:65:d8:19:cd:c4: 42:79:0e:01:2b:c5:db:59:ef:39:90:18:dd:14:1f: be:0b:14:5c:39:15:fe:91:7d:ec:52:67:50:87:9b: e0:bd:ee:b0:18:7a:72:56:e4:c6:5d:ef:a1:e6:e6: 5d:ab:6d:81:2f:23:69:97:71:df:34:27:6b:27:1d: 38:bd:26:71:dc:4e:4c:c7:e1:62:6f:83:e3:a1:a3: ae:45:a4:61:97:54:18:d3:31:bd:68:ee:15:f4:22: ac:05:4d:78:2e:76:db:24:d1:59:8c:c1:0d:4c:ac: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A0:14:6F:95:6B:12:E1:72:57:90:17:3B:64:B2:07:69:23:94:5C X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c2:d4:bb:0a:29:5b:1e:ea:62:6f:76:2d:c9:ce:50:52:e3: e2:47:db:25:19:d9:2a:4e:3f:d7:5f:1e:89:e3:08:ac:5b:12: 7b:2c:8e:93:94:45:dd:08:27:b2:d4:c1:c1:55:00:94:82:85: 5c:eb:e5:38:42:64:6a:83:1a:98:02:88:e0:f0:88:65:e8:f6: c2:3e:79:c2:9d:fa:44:ec:e1:95:de:3b:b8:c0:03:72:e7:b4: 09:3a:ee:54:33:28:4a:91:3e:73:90:84:be:52:9d:7c:8f:5a: b5:aa:53:60:d5:6e:69:71:e6:ed:43:e5:da:37:be:01:fb:eb: ac:3a:8a:58:11:6f:5c:fb:84:19:22:7b:a4:61:a5:f7:7c:91: 69:ad:6a:59:1f:65:bf:8d:6d:fd:ec:56:34:00:36:75:82:2e: 1f:e8:39:d3:dd:28:2d:c2:0e:c4:23:63:05:a5:24:82:fe:e6: 94:95:e0:73:3f:cf:db:43:ed:7d:ab:3a:76:2c:46:a3:74:a7: e4:2a:e0:e9:4a:56:89:e9:d2:dc:1e:54:a8:65:fe:4c:50:c9: eb:96:d7:ff:9e:eb:b5:87:31:19:a8:e7:81:7c:9b:60:3d:14: 03:10:53:84:7a:6e:54:c4:ac:43:ad:f4:d2:10:cb:f6:95:c1: af:60:44:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgjQ7uCn8ArdBpaVstpHDkMWOukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTEwMjAwMzA2MzRaFw0yNTEwMjMwNjUwMzRaMDMxMTAvBgNV BAMTKDg4QTAxNDZGOTU2QjEyRTE3MjU3OTAxNzNCNjRCMjA3NjkyMzk0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTHOw70v3mZglU38PzGR+XWkg 1HAlYB8UZtqJheS9UwQDkcLTXByNkhP/H1LctHYg1+YfBf4I5tgmOO0vYA+qTL/3 +mHD/kPepWe7zOgG9Zeh3FNe2J2KwCHs5itujTj4QV4ANd/vtZkLiyriXvXF/7xT dkdThxFPlgHTP7Yjayn5TCksYko8rk4LMHaXdFll2BnNxEJ5DgErxdtZ7zmQGN0U H74LFFw5Ff6RfexSZ1CHm+C97rAYenJW5MZd76Hm5l2rbYEvI2mXcd80J2snHTi9 JnHcTkzH4WJvg+Oho65FpGGXVBjTMb1o7hX0IqwFTXgudtsk0VmMwQ1MrFr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKAUb5VrEuFyV5AXO2SyB2kjlFwwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzC1LsKKVse6mJvdi3JzlBS4+JH2yUZ2SpO P9dfHonjCKxbEnssjpOURd0IJ7LUwcFVAJSChVzr5ThCZGqDGpgCiODwiGXo9sI+ ecKd+kTs4ZXeO7jAA3LntAk67lQzKEqRPnOQhL5SnXyPWrWqU2DVbmlx5u1D5do3 vgH766w6ilgRb1z7hBkie6Rhpfd8kWmtalkfZb+Nbf3sVjQANnWCLh/oOdPdKC3C DsQjYwWlJIL+5pSV4HM/z9tD7X2rOnYsRqN0p+Qq4OlKVonp0tweVKhl/kxQyeuW 1/+e67WHMRmo54F8m2A9FAMQU4R6blTErEOt9NIQy/aVwa9gRPY= -----END CERTIFICATE-----Generated at Tue Oct 21 00:47:58 2025 by rpki-client