$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: RxfqxadPiVLgeU4Mkh4dI1CVpr0Bn1fhZESYYq+brRU= Subject key identifier: 04:15:03:E7:3F:34:C2:27:68:FB:3D:14:CC:07:D5:FA:7F:4A:5E:71 Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 2F80C3226DB51E8C61A2913FDA706E6B885E6FBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0228 Signing time: Thu 24 Jul 2025 04:01:17 +0000 Manifest this update: Thu 24 Jul 2025 03:56:17 +0000 Manifest next update: Sun 27 Jul 2025 11:11:17 +0000 Files and hashes: 1: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) 2: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: ut/H1c7KLuSlc9KjQHL5//ZBgobblwMaq5MIGRhDuws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 11:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:80:c3:22:6d:b5:1e:8c:61:a2:91:3f:da:70:6e:6b:88:5e:6f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Jul 24 03:56:17 2025 GMT Not After : Jul 27 11:11:17 2025 GMT Subject: CN=041503E73F34C22768FB3D14CC07D5FA7F4A5E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:50:91:19:4b:c6:4b:32:44:e0:f3:6b:67: 97:8a:7f:00:6a:fb:18:5b:3c:4f:22:00:10:e1:0d: 07:dd:2c:e5:c7:de:73:4e:1d:df:84:98:a5:71:85: d1:20:9b:f6:60:3f:dc:25:be:1d:42:19:df:2f:30: 6b:4b:36:61:d9:b4:92:4c:9f:40:bc:99:2a:07:d1: ee:2c:4b:48:70:65:93:df:98:44:0f:17:30:78:27: 25:ca:66:73:53:00:6a:6d:92:69:73:f5:d3:9e:69: 65:ac:93:1c:d2:23:db:db:1a:73:5e:e1:06:5f:ab: 82:af:71:68:76:15:8f:2d:26:85:e5:c4:6d:6a:c9: 6d:28:29:a9:01:6c:3f:db:2e:a5:71:a6:6a:72:60: 2e:71:11:58:2a:79:d9:ee:dd:40:9f:0a:a7:27:2c: 10:94:c4:c6:07:f2:5a:c8:20:3b:51:0a:d2:ff:2f: 0a:f0:98:96:a7:df:74:ea:94:1f:71:2d:7d:5c:be: ac:5f:26:38:22:49:be:4f:ab:fa:9b:c3:f1:ac:3a: ae:8c:50:a7:a1:92:ee:f3:8d:6b:28:f3:ae:1e:4e: 6c:25:5b:6e:8f:03:04:5a:59:40:ff:af:eb:ee:87: 78:67:bc:45:3f:31:c3:22:1b:78:99:4e:45:e3:0e: 08:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:15:03:E7:3F:34:C2:27:68:FB:3D:14:CC:07:D5:FA:7F:4A:5E:71 X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b9:38:6f:f8:c6:3e:f9:76:ba:31:cb:0b:42:2b:6b:01:e7: f8:50:5b:a1:04:61:13:bb:92:7b:d4:27:fa:5c:8c:f2:09:ad: b1:05:11:49:d6:b4:65:25:91:86:e1:ca:d2:4d:cf:f5:08:2d: 4c:88:cb:3d:4c:35:77:83:38:d8:04:ac:fe:ce:9f:ba:62:d0: 32:f6:8c:da:4a:4c:03:b8:19:cf:01:59:8a:99:52:3c:e5:c4: b1:ff:51:a3:39:fb:eb:e8:35:f8:73:13:6c:10:a8:75:4f:cd: 89:63:23:fe:5d:27:6a:22:ea:70:7f:c6:b9:da:08:c6:51:84: a6:88:09:31:79:0a:21:10:9b:4e:39:68:bc:77:f7:74:99:2d: 76:35:ca:65:50:23:cc:cd:18:d8:e2:f4:8e:b6:41:f6:bd:3b: d5:27:cc:81:f2:ab:3a:0d:ac:40:92:32:76:31:a9:4a:5f:ce: 66:ff:8f:e8:03:48:d6:10:e3:a8:72:1c:45:97:92:55:d2:0d: c9:5c:0c:2a:fa:f5:ad:03:0a:ac:c8:fe:9f:0e:be:90:fc:29: be:c9:eb:c1:54:fa:be:eb:f0:7d:da:3e:bb:89:9b:0e:93:05: c3:2f:0f:74:c0:04:9e:2a:93:37:e0:81:b1:b2:75:9b:f0:c7: 19:85:d8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4DDIm21HoxhopE/2nBua4heb70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTA3MjQwMzU2MTdaFw0yNTA3MjcxMTExMTdaMDMxMTAvBgNV BAMTKDA0MTUwM0U3M0YzNEMyMjc2OEZCM0QxNENDMDdENUZBN0Y0QTVFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAFCRGUvGSzJE4PNrZ5eKfwBq +xhbPE8iABDhDQfdLOXH3nNOHd+EmKVxhdEgm/ZgP9wlvh1CGd8vMGtLNmHZtJJM n0C8mSoH0e4sS0hwZZPfmEQPFzB4JyXKZnNTAGptkmlz9dOeaWWskxzSI9vbGnNe 4QZfq4KvcWh2FY8tJoXlxG1qyW0oKakBbD/bLqVxpmpyYC5xEVgqednu3UCfCqcn LBCUxMYH8lrIIDtRCtL/LwrwmJan33TqlB9xLX1cvqxfJjgiSb5Pq/qbw/GsOq6M UKehku7zjWso864eTmwlW26PAwRaWUD/r+vuh3hnvEU/McMiG3iZTkXjDggVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBBUD5z80wido+z0UzAfV+n9KXnEwHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE25OG/4xj75droxywtCK2sB5/hQW6EEYRO7 knvUJ/pcjPIJrbEFEUnWtGUlkYbhytJNz/UILUyIyz1MNXeDONgErP7On7pi0DL2 jNpKTAO4Gc8BWYqZUjzlxLH/UaM5++voNfhzE2wQqHVPzYljI/5dJ2oi6nB/xrna CMZRhKaICTF5CiEQm045aLx393SZLXY1ymVQI8zNGNji9I62Qfa9O9UnzIHyqzoN rECSMnYxqUpfzmb/j+gDSNYQ46hyHEWXklXSDclcDCr69a0DCqzI/p8OvpD8Kb7J 68FU+r7r8H3aPruJmw6TBcMvD3TABJ4qkzfggbGydZvwxxmF2N4= -----END CERTIFICATE-----Generated at Fri Jul 25 06:27:40 2025 by rpki-client