$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: 5qXDOq3XF/Ps/ymcKqUdQbta8AXepYSO9kloa9bQOZg= Subject key identifier: 97:BE:14:93:AD:30:46:25:FE:AA:81:A3:A1:2D:6F:00:BA:12:60:53 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 3D9572B57219E8819CC10AFBF717A1F5472CC457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 0219 Signing time: Sun 19 Oct 2025 23:01:15 +0000 Manifest this update: Sun 19 Oct 2025 22:56:15 +0000 Manifest next update: Thu 23 Oct 2025 03:44:15 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) 3: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: 3lHVIs2OsfToJA0Acs6WjhaKyMSIGAPtoOJbdEy849o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:95:72:b5:72:19:e8:81:9c:c1:0a:fb:f7:17:a1:f5:47:2c:c4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Oct 19 22:56:15 2025 GMT Not After : Oct 23 03:44:15 2025 GMT Subject: CN=97BE1493AD304625FEAA81A3A12D6F00BA126053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:47:e8:9d:e4:12:67:71:43:50:94:5f:40: ba:f3:fc:ab:92:bd:58:32:1e:32:68:9a:99:a0:86: fb:2a:6c:b3:09:ac:bd:15:37:00:85:47:34:e5:73: 44:de:2f:ed:52:07:e2:3b:d8:41:0a:72:56:9e:3d: c2:12:90:35:79:b4:b0:04:79:5d:4c:48:64:12:b7: 95:ea:85:6a:d9:fb:8e:5b:22:93:82:42:2a:65:50: 3d:dc:0c:ee:3e:f2:40:81:bf:60:b2:de:6a:f2:f2: 49:7c:81:a2:e7:03:b6:74:78:d1:ca:5e:94:3f:f3: 77:03:7b:38:3f:27:57:c2:24:59:8d:01:63:df:4d: 49:d3:01:fc:ed:80:be:16:1a:50:2f:54:d1:48:06: 72:f8:75:54:bd:d9:ca:25:28:6a:93:79:c6:6b:e3: 2c:18:cc:5e:75:28:b4:0f:58:a9:eb:77:d4:8b:da: fe:56:ac:44:cc:c8:88:63:e9:ba:2a:cb:5f:8e:79: 19:ab:3c:44:08:74:ef:8c:70:88:58:4f:3e:89:e5: e6:c1:73:a1:b7:a6:4c:2e:ac:c8:17:39:47:89:0e: b6:4a:e5:7a:10:aa:1c:28:37:ba:68:ef:2f:f9:c5: 97:6a:e1:b4:b3:b1:eb:49:ca:51:f1:ef:fa:0b:5c: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BE:14:93:AD:30:46:25:FE:AA:81:A3:A1:2D:6F:00:BA:12:60:53 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6a:60:dd:16:17:42:f6:d4:22:be:d8:64:1e:35:c8:30:b6: 4a:63:84:ee:9f:0b:cd:68:f3:de:a1:e5:f4:79:78:b7:33:1b: 2c:6f:4f:7e:05:0b:88:7d:64:82:0f:b5:38:11:8b:22:bd:a7: b1:e7:29:a8:ad:76:65:6b:c1:38:26:cf:77:05:9f:66:8d:12: 3b:40:75:df:e2:9e:2c:f7:83:de:40:65:0b:8b:ba:51:a8:e9: ff:37:d6:51:dc:ad:b4:33:4d:72:50:e2:a1:4a:32:16:08:d0: 66:5f:6d:10:29:5d:99:a1:da:94:d2:09:65:89:32:1f:80:4d: 32:7b:80:49:93:30:97:34:87:d7:1b:41:ee:25:53:c9:52:58: 8d:d6:34:40:88:7c:a4:ef:09:89:c0:fa:53:67:d0:2e:03:a3: 12:50:06:79:dc:87:aa:de:e5:6e:87:92:69:12:6b:2c:ff:17: 32:f4:b3:fc:98:e4:9d:ab:9a:31:58:ba:22:6c:ab:af:20:85: 1b:fd:69:93:08:88:66:bf:0b:61:64:fe:2e:c9:dc:63:80:be: ff:bf:8e:26:55:96:6c:47:81:9f:75:14:4c:1a:e2:15:30:cd: 30:81:73:b2:cb:41:59:db:84:d2:21:1f:f2:bb:54:d4:45:f7: 8f:9a:af:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZVytXIZ6IGcwQr79xeh9UcsxFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTEwMTkyMjU2MTVaFw0yNTEwMjMwMzQ0MTVaMDMxMTAvBgNV BAMTKDk3QkUxNDkzQUQzMDQ2MjVGRUFBODFBM0ExMkQ2RjAwQkExMjYwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9UfoneQSZ3FDUJRfQLrz/KuS vVgyHjJompmghvsqbLMJrL0VNwCFRzTlc0TeL+1SB+I72EEKclaePcISkDV5tLAE eV1MSGQSt5XqhWrZ+45bIpOCQiplUD3cDO4+8kCBv2Cy3mry8kl8gaLnA7Z0eNHK XpQ/83cDezg/J1fCJFmNAWPfTUnTAfztgL4WGlAvVNFIBnL4dVS92colKGqTecZr 4ywYzF51KLQPWKnrd9SL2v5WrETMyIhj6boqy1+OeRmrPEQIdO+McIhYTz6J5ebB c6G3pkwurMgXOUeJDrZK5XoQqhwoN7po7y/5xZdq4bSzsetJylHx7/oLXG1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl74Uk60wRiX+qoGjoS1vALoSYFMwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhqYN0WF0L21CK+2GQeNcgwtkpjhO6fC81o 896h5fR5eLczGyxvT34FC4h9ZIIPtTgRiyK9p7HnKaitdmVrwTgmz3cFn2aNEjtA dd/iniz3g95AZQuLulGo6f831lHcrbQzTXJQ4qFKMhYI0GZfbRApXZmh2pTSCWWJ Mh+ATTJ7gEmTMJc0h9cbQe4lU8lSWI3WNECIfKTvCYnA+lNn0C4DoxJQBnnch6re 5W6HkmkSayz/FzL0s/yY5J2rmjFYuiJsq68ghRv9aZMIiGa/C2Fk/i7J3GOAvv+/ jiZVlmxHgZ91FEwa4hUwzTCBc7LLQVnbhNIhH/K7VNRF94+aryY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:37 2025 by rpki-client