$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: NDff1srHthEEUS5bOuFo8H9+pVlY70G38cPWkjnZYFY= Subject key identifier: 5B:C3:2B:3B:84:E7:A9:52:50:0F:A1:B3:08:61:F5:F4:7C:83:6F:22 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 477202CACB4FAC74BBBD2A8095B5998F9011060E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 01CE Signing time: Tue 06 May 2025 10:51:12 +0000 Manifest this update: Tue 06 May 2025 10:46:12 +0000 Manifest next update: Fri 09 May 2025 17:11:12 +0000 Files and hashes: 1: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: WwLuThPSqn95fumpQ2/HR4LlYzuchsM/2j7fczxNf3Q=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: BrAZK6t4rNqxbvw5hbo0N9Bep4jWhJ5dcPoSe1WYzIY=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: AKzYRBKAgaDMXTDjMBdoks0xvDWlgZswunocDWfSChs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:72:02:ca:cb:4f:ac:74:bb:bd:2a:80:95:b5:99:8f:90:11:06:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: May 6 10:46:12 2025 GMT Not After : May 9 17:11:12 2025 GMT Subject: CN=5BC32B3B84E7A952500FA1B30861F5F47C836F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:78:fc:9c:c5:bb:cf:8c:8a:fd:b4:47:0d: df:f8:a3:75:ca:6b:5d:2e:a6:e9:36:db:73:8c:39: e1:54:67:b6:24:f4:07:2b:e3:8c:ac:77:24:6f:06: 72:70:0c:3b:c9:51:01:bf:06:c4:a0:64:5e:ed:ff: d0:39:ec:29:34:65:85:5d:2a:8d:ae:40:e2:55:62: 8d:ab:ac:4c:5c:01:61:21:44:90:1c:6a:d4:e7:64: c4:8c:14:bf:a5:84:47:e7:85:00:fc:83:de:d0:8c: d3:00:4f:40:e3:96:8b:7c:70:0f:ce:08:7a:67:0b: c7:3f:68:73:23:23:c1:8e:69:01:b4:fd:54:48:09: fc:0c:e3:5a:b3:a1:c0:a5:e4:b7:72:ad:a8:12:b5: 9f:04:34:05:51:d2:42:c8:c0:0a:98:4b:2d:59:6a: 41:85:04:31:b7:ed:32:18:9c:8d:06:5b:ce:21:5d: 77:a5:20:1c:59:1b:d5:84:4e:fa:8a:94:57:95:42: dc:e7:e5:08:b3:14:30:aa:fb:55:bb:05:80:14:8d: b6:37:f9:e2:46:a3:12:ba:06:c6:b4:65:2a:82:8a: 36:c2:8b:26:af:b8:6d:74:71:38:fa:4e:2b:a8:e0: a8:08:9a:c6:1a:e4:7e:8c:33:24:59:d1:9b:76:5c: 86:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:2B:3B:84:E7:A9:52:50:0F:A1:B3:08:61:F5:F4:7C:83:6F:22 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ce:e9:17:39:ad:a6:6e:24:54:46:fc:25:20:f2:ba:77:cc: 97:a8:db:23:41:31:65:af:3d:0e:69:f9:42:9a:38:63:d0:a5: 77:12:5c:ee:90:54:75:db:b0:08:d4:99:48:78:2e:c5:c9:d3: b2:39:ab:b5:f8:39:fd:66:ed:99:df:08:e6:d4:63:ce:69:03: 2d:d9:dc:64:a1:c6:73:c4:45:17:99:bb:71:04:67:3b:a3:48: 13:7c:a9:dd:ce:a2:94:80:34:52:26:0a:75:99:cc:61:9e:c1: d7:62:8c:31:3b:3b:cc:8a:72:da:79:3c:fc:2c:7b:c5:48:dd: 9c:df:fc:98:9a:45:fd:25:b0:a7:76:a7:ba:d0:19:6f:41:c8: 94:b1:83:57:f4:5b:de:19:62:19:f8:31:fe:61:b5:c1:68:4f: 8a:20:e4:d4:fb:da:0f:1a:54:0d:60:f3:cb:62:6f:10:b1:c4: d1:eb:46:b3:b3:44:f8:6b:f8:d0:eb:f8:cc:62:27:c3:c9:42: 22:e7:d7:9f:6b:66:f1:c0:93:8b:e4:a8:cf:8c:a2:1a:d9:95: ed:03:ef:53:ef:4a:65:f4:a1:32:f3:86:de:d0:70:08:4e:2d: 03:09:b4:f1:02:db:6d:f0:23:05:27:3d:08:5b:74:2a:68:dc: 16:ab:ad:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3ICystPrHS7vSqAlbWZj5ARBg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA1MDYxMDQ2MTJaFw0yNTA1MDkxNzExMTJaMDMxMTAvBgNV BAMTKDVCQzMyQjNCODRFN0E5NTI1MDBGQTFCMzA4NjFGNUY0N0M4MzZGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgznj8nMW7z4yK/bRHDd/4o3XK a10upuk223OMOeFUZ7Yk9Acr44ysdyRvBnJwDDvJUQG/BsSgZF7t/9A57Ck0ZYVd Ko2uQOJVYo2rrExcAWEhRJAcatTnZMSMFL+lhEfnhQD8g97QjNMAT0Djlot8cA/O CHpnC8c/aHMjI8GOaQG0/VRICfwM41qzocCl5LdyragStZ8ENAVR0kLIwAqYSy1Z akGFBDG37TIYnI0GW84hXXelIBxZG9WETvqKlFeVQtzn5QizFDCq+1W7BYAUjbY3 +eJGoxK6Bsa0ZSqCijbCiyavuG10cTj6Tiuo4KgImsYa5H6MMyRZ0Zt2XIatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW8MrO4TnqVJQD6GzCGH19HyDbyIwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPO6Rc5raZuJFRG/CUg8rp3zJeo2yNBMWWv PQ5p+UKaOGPQpXcSXO6QVHXbsAjUmUh4LsXJ07I5q7X4Of1m7ZnfCObUY85pAy3Z 3GShxnPERReZu3EEZzujSBN8qd3OopSANFImCnWZzGGewddijDE7O8yKctp5PPws e8VI3Zzf/JiaRf0lsKd2p7rQGW9ByJSxg1f0W94ZYhn4Mf5htcFoT4og5NT72g8a VA1g88tibxCxxNHrRrOzRPhr+NDr+MxiJ8PJQiLn159rZvHAk4vkqM+MohrZle0D 71PvSmX0oTLzht7QcAhOLQMJtPEC223wIwUnPQhbdCpo3BarrUo= -----END CERTIFICATE-----Generated at Thu May 8 16:52:04 2025 by rpki-client