$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: Na5D7nBeQYX8usKPT3iLorc6jOS4SQoOyJzbEXAEWCw= Subject key identifier: 60:56:CB:42:5C:54:6B:D4:2E:BE:31:BD:62:4C:63:7A:06:5D:E8:0C Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 6784408601EA9E0B4E499E76F385D74B0CB64910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 01FF Signing time: Sat 23 Aug 2025 03:41:15 +0000 Manifest this update: Sat 23 Aug 2025 03:36:15 +0000 Manifest next update: Tue 26 Aug 2025 09:13:15 +0000 Files and hashes: 1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 2: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: 9ObJPEu+S4U4MWJTJeojsqNtV1vyAKKs7fquwlBfnRI=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:84:40:86:01:ea:9e:0b:4e:49:9e:76:f3:85:d7:4b:0c:b6:49:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Aug 23 03:36:15 2025 GMT Not After : Aug 26 09:13:15 2025 GMT Subject: CN=6056CB425C546BD42EBE31BD624C637A065DE80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:e3:12:d9:42:e8:43:4c:9c:e2:5d:46:45: eb:c6:3e:46:48:7f:f1:3f:33:f5:b7:36:c3:a7:3a: ec:33:6b:ea:ae:c3:ff:22:21:fd:3d:45:77:42:c7: 2a:18:4c:22:dd:53:31:21:2d:eb:40:61:ad:c8:c1: 02:5f:b9:10:52:da:00:6b:9a:6b:18:7d:35:0c:2d: 71:9a:98:60:c2:54:90:57:b8:d4:98:39:ea:3a:d9: 74:aa:eb:84:bc:e5:a3:ea:30:47:ba:b9:4b:9c:d9: 63:8a:31:f2:22:bf:ba:e8:c9:e3:d7:e8:4d:ab:37: 69:e3:7c:3b:ea:93:09:ee:4b:3b:b0:10:55:51:de: c8:fd:75:59:1d:5a:df:9f:f1:c1:9c:05:f7:51:91: 27:80:65:e3:24:59:8e:58:e9:6b:3c:8d:0c:d6:4c: 0c:c7:85:16:39:42:64:bb:d9:c6:32:98:ff:0f:91: 64:08:c3:f3:0e:5c:4c:b9:c6:06:df:a7:40:6c:c3: b4:40:9b:44:fd:a2:82:1a:2f:f4:8f:d4:0d:ca:63: 09:c5:75:a8:d9:4c:58:3e:d4:2d:94:4a:58:c0:3c: 0a:49:ec:8e:cb:a5:28:96:ac:10:a5:ad:df:9d:29: a5:5f:88:79:b9:d9:c8:29:7a:a8:08:a6:42:ea:54: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:CB:42:5C:54:6B:D4:2E:BE:31:BD:62:4C:63:7A:06:5D:E8:0C X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e4:07:af:49:3c:cf:8e:54:f7:f7:2f:9d:99:3b:e0:fd:99: bf:39:80:4b:a5:7f:56:f8:5e:37:b5:9c:b8:65:20:21:6a:3b: ac:0c:d7:32:03:fd:4a:27:1b:52:e3:7b:73:87:96:a2:9a:c7: 3f:54:03:72:f1:e2:73:66:d8:12:7a:96:43:01:9c:d0:61:37: bd:1b:89:ac:58:ab:bb:f7:bd:2f:59:ad:8a:fd:1e:b6:c4:3e: 10:e9:f8:da:c3:64:11:81:1e:7d:2d:9a:0c:38:6b:eb:a8:c2: c4:1d:dd:04:d2:2b:e1:df:e6:9b:46:97:77:b3:c5:65:92:e8: d3:dc:ab:13:07:6c:d9:ea:f3:51:a5:57:9c:fe:11:08:48:27: d0:31:1b:fb:1d:1d:4e:0f:28:af:01:78:7b:ad:03:d8:82:40: be:77:5f:74:df:3a:ce:5d:c8:6c:5e:5d:86:a1:67:f6:24:94: b0:94:1d:06:41:0e:23:2f:ac:36:98:2a:3a:bf:98:4f:74:ed: 8c:f8:ab:27:76:ce:6a:07:d0:12:18:ba:fa:fe:bc:a6:e7:b5: b6:27:31:2c:41:f7:4f:c1:39:01:c2:12:c0:25:f0:dd:13:6e: ae:27:90:8f:da:0d:94:66:e0:f2:9e:ad:0a:d8:99:f9:ee:29: 76:04:fe:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4RAhgHqngtOSZ5284XXSwy2SRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA4MjMwMzM2MTVaFw0yNTA4MjYwOTEzMTVaMDMxMTAvBgNV BAMTKDYwNTZDQjQyNUM1NDZCRDQyRUJFMzFCRDYyNEM2MzdBMDY1REU4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEs+MS2ULoQ0yc4l1GRevGPkZI f/E/M/W3NsOnOuwza+quw/8iIf09RXdCxyoYTCLdUzEhLetAYa3IwQJfuRBS2gBr mmsYfTUMLXGamGDCVJBXuNSYOeo62XSq64S85aPqMEe6uUuc2WOKMfIiv7royePX 6E2rN2njfDvqkwnuSzuwEFVR3sj9dVkdWt+f8cGcBfdRkSeAZeMkWY5Y6Ws8jQzW TAzHhRY5QmS72cYymP8PkWQIw/MOXEy5xgbfp0Bsw7RAm0T9ooIaL/SP1A3KYwnF dajZTFg+1C2USljAPApJ7I7LpSiWrBClrd+dKaVfiHm52cgpeqgIpkLqVGL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYFbLQlxUa9QuvjG9YkxjegZd6AwwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPkB69JPM+OVPf3L52ZO+D9mb85gEulf1b4 Xje1nLhlICFqO6wM1zID/UonG1Lje3OHlqKaxz9UA3Lx4nNm2BJ6lkMBnNBhN70b iaxYq7v3vS9ZrYr9HrbEPhDp+NrDZBGBHn0tmgw4a+uowsQd3QTSK+Hf5ptGl3ez xWWS6NPcqxMHbNnq81GlV5z+EQhIJ9AxG/sdHU4PKK8BeHutA9iCQL53X3TfOs5d yGxeXYahZ/YklLCUHQZBDiMvrDaYKjq/mE907Yz4qyd2zmoH0BIYuvr+vKbntbYn MSxB90/BOQHCEsAl8N0Tbq4nkI/aDZRm4PKerQrYmfnuKXYE/h8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:03 2025 by rpki-client