$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: v8isOjJMC+F9qq29mTwxPttX+GYmqTSqpi68PH0hgKA= Subject key identifier: 58:AB:AB:9B:D3:48:AA:FB:0E:FB:90:91:0A:8F:05:0B:02:DE:18:C9 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 777F018B25AD78A6A934951533E5C0C74FA81887 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 01E6 Signing time: Sat 28 Jun 2025 23:21:14 +0000 Manifest this update: Sat 28 Jun 2025 23:16:14 +0000 Manifest next update: Wed 02 Jul 2025 09:12:14 +0000 Files and hashes: 1: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: wRv/IOMlRKx47F1sRpHgdFa4vnMNvQGegoUPB7LBgxA=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: BrAZK6t4rNqxbvw5hbo0N9Bep4jWhJ5dcPoSe1WYzIY=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: AKzYRBKAgaDMXTDjMBdoks0xvDWlgZswunocDWfSChs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7f:01:8b:25:ad:78:a6:a9:34:95:15:33:e5:c0:c7:4f:a8:18:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Jun 28 23:16:14 2025 GMT Not After : Jul 2 09:12:14 2025 GMT Subject: CN=58ABAB9BD348AAFB0EFB90910A8F050B02DE18C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:3d:76:74:73:7d:06:f8:c3:52:9e:11:67: d1:0d:d0:4f:ba:84:94:96:9d:25:13:a4:85:ec:4d: 4b:e1:83:06:f1:3e:16:03:f6:c2:ca:80:74:db:aa: f9:7f:7d:5d:fd:bc:55:18:9c:9b:fd:1f:36:ee:c4: d9:46:94:0b:74:36:b3:c1:6c:4f:db:89:85:b5:5e: f8:d9:e9:73:53:0c:dd:34:fb:8f:6e:5c:e6:7b:2c: a9:00:69:54:4e:62:b6:c4:97:ef:41:ec:77:1a:89: d6:44:35:1c:b3:83:67:25:76:73:6f:44:65:99:2b: 0a:94:5e:5e:c4:61:64:08:15:60:d0:95:dc:56:33: a2:c0:f1:5d:20:20:5e:5e:38:36:98:54:9e:ef:43: 28:18:a2:7c:4b:d0:e8:ac:8d:0c:44:3b:b0:99:ab: 31:17:7c:65:4f:36:06:2a:90:d3:5e:b1:a0:f3:55: f5:56:b0:ae:3e:0f:75:21:db:b1:aa:eb:7b:ad:cc: 3b:17:d2:71:42:12:94:cf:31:8c:05:51:6d:b4:da: b0:0d:8f:e9:77:27:dc:3b:f7:d3:a4:37:16:47:2c: bc:e2:6f:1f:61:69:46:e3:b4:d8:77:40:e2:5c:9e: 8e:e8:74:c0:07:a0:37:2e:24:49:5c:83:85:b0:fd: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AB:AB:9B:D3:48:AA:FB:0E:FB:90:91:0A:8F:05:0B:02:DE:18:C9 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9c:75:25:e5:a8:69:16:71:de:d2:a9:4b:40:db:83:b1:38: 48:d7:3a:a7:c4:d3:61:32:ab:b0:4f:b0:a9:dd:98:f5:e9:44: 4a:ed:44:36:90:b2:2d:47:42:c2:a1:e9:4b:e7:3b:5c:c2:b8: be:b3:a7:59:76:84:21:d1:d3:7e:b9:c1:00:b5:d1:69:9d:f3: a3:0c:17:a2:51:8a:9c:8b:e8:be:7d:c5:b0:b6:db:a5:06:3c: af:62:13:90:34:85:33:76:f2:64:c1:54:80:0f:21:32:c0:70: 85:5d:7c:94:c6:90:ed:04:c7:41:40:0a:89:7a:34:10:e8:cb: cd:7d:a6:00:a5:50:fe:44:27:56:68:e7:16:e2:70:45:c3:8b: 9f:3a:04:db:4e:bb:00:a2:ef:65:56:da:0f:d9:ad:74:d1:46: b6:e1:8f:2e:4d:c4:2d:ab:f3:36:80:fd:08:01:87:ae:a0:87: 60:a9:ca:3a:80:24:9f:40:e8:d3:09:29:d0:de:30:5e:03:a3: d6:31:12:8c:99:36:01:82:44:a2:e4:3e:67:ea:b5:68:c6:b6: 64:01:f8:ad:1a:bd:84:3d:d5:f9:75:75:1e:9c:47:7d:51:b3: c1:90:d5:2e:96:72:0f:ac:b0:b5:f3:77:f6:5f:cb:48:c9:96: c0:e0:59:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd38BiyWteKapNJUVM+XAx0+oGIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA2MjgyMzE2MTRaFw0yNTA3MDIwOTEyMTRaMDMxMTAvBgNV BAMTKDU4QUJBQjlCRDM0OEFBRkIwRUZCOTA5MTBBOEYwNTBCMDJERTE4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Oz12dHN9BvjDUp4RZ9EN0E+6 hJSWnSUTpIXsTUvhgwbxPhYD9sLKgHTbqvl/fV39vFUYnJv9HzbuxNlGlAt0NrPB bE/biYW1XvjZ6XNTDN00+49uXOZ7LKkAaVROYrbEl+9B7HcaidZENRyzg2cldnNv RGWZKwqUXl7EYWQIFWDQldxWM6LA8V0gIF5eODaYVJ7vQygYonxL0OisjQxEO7CZ qzEXfGVPNgYqkNNesaDzVfVWsK4+D3Uh27Gq63utzDsX0nFCEpTPMYwFUW202rAN j+l3J9w799OkNxZHLLzibx9haUbjtNh3QOJcno7odMAHoDcuJElcg4Ww/WivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKurm9NIqvsO+5CRCo8FCwLeGMkwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2cdSXlqGkWcd7SqUtA24OxOEjXOqfE02Ey q7BPsKndmPXpRErtRDaQsi1HQsKh6UvnO1zCuL6zp1l2hCHR0365wQC10Wmd86MM F6JRipyL6L59xbC226UGPK9iE5A0hTN28mTBVIAPITLAcIVdfJTGkO0Ex0FACol6 NBDoy819pgClUP5EJ1Zo5xbicEXDi586BNtOuwCi72VW2g/ZrXTRRrbhjy5NxC2r 8zaA/QgBh66gh2CpyjqAJJ9A6NMJKdDeMF4Do9YxEoyZNgGCRKLkPmfqtWjGtmQB +K0avYQ91fl1dR6cR31Rs8GQ1S6Wcg+ssLXzd/Zfy0jJlsDgWXQ= -----END CERTIFICATE-----Generated at Mon Jun 30 00:15:20 2025 by rpki-client