$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft File: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft (raw, json) Hash identifier: NJDLs/7klWdkPj3flHA5nfiHUdS7x+CeN3nWBpu/4aQ= Subject key identifier: 83:13:B6:8A:7A:64:73:FF:3C:AD:14:2E:C7:0B:9F:B6:FB:F6:C5:9D Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Certificate serial: 4D6ED02B5A92AED8D21EC0501374822A0B47E85F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft Manifest number: 0227 Signing time: Mon 21 Jul 2025 20:11:23 +0000 Manifest this update: Mon 21 Jul 2025 20:06:23 +0000 Manifest next update: Fri 25 Jul 2025 03:58:23 +0000 Files and hashes: 1: 688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl (hash: CjmfgvxyorHeMcPmL6UnV3ElLgBrrOsFvPVkZfldcuw=) 2: 3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (hash: Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6e:d0:2b:5a:92:ae:d8:d2:1e:c0:50:13:74:82:2a:0b:47:e8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC Validity Not Before: Jul 21 20:06:23 2025 GMT Not After : Jul 25 03:58:23 2025 GMT Subject: CN=8313B68A7A6473FF3CAD142EC70B9FB6FBF6C59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:6f:08:14:3a:1b:24:2e:9a:a5:3f:30:ee: e8:03:d9:8a:53:19:c0:a5:10:62:aa:77:28:eb:0e: 75:fb:1e:c2:65:e9:b5:e6:73:40:e2:e8:cc:62:41: ae:bd:5e:96:09:49:09:15:0a:44:31:81:05:4b:70: b7:d3:09:61:b1:3c:b2:c9:80:0a:7f:c2:c1:1b:09: cd:b4:18:2e:3b:f8:10:58:91:03:89:10:70:25:c8: e7:4c:30:6c:cd:12:1d:84:d8:d8:6f:94:8d:e6:0c: 51:12:a2:81:47:5a:10:af:f5:d7:94:f4:21:25:93: 02:b5:8b:de:2c:4a:9c:e9:ef:d1:a2:6b:4f:8e:fd: a9:7d:cd:ee:51:76:a8:61:1d:cf:e2:18:60:4a:20: 4e:d0:96:a4:df:38:4c:76:72:c6:ec:61:2e:b1:69: e4:56:22:70:8d:08:6d:e5:a7:27:e2:56:a1:67:05: ad:bc:61:31:15:8b:1e:92:f5:b0:3c:db:a7:65:ea: 4d:21:46:b5:a9:a0:7c:e3:a3:4a:d5:5e:68:d5:d2: 4d:f9:57:11:c1:8d:24:ef:fa:f7:5a:6c:d3:20:7f: c2:1b:45:79:1f:27:93:ce:7e:61:17:c4:00:53:7e: 04:4b:65:28:ed:89:f6:05:12:12:01:0c:5d:45:31: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:13:B6:8A:7A:64:73:FF:3C:AD:14:2E:C7:0B:9F:B6:FB:F6:C5:9D X509v3 Authority Key Identifier: keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6d:3a:39:a2:ac:94:c6:cb:bf:f5:7d:77:90:53:a8:c3:4b: 65:f9:d9:22:06:2c:6f:75:fd:bf:55:fc:88:0c:e4:9e:24:c1: 01:ec:5d:16:b3:b3:90:c0:61:4f:f0:71:6e:08:fd:b9:64:61: 98:de:b4:4a:c7:dd:c1:bb:f7:46:c0:8d:ff:c0:6c:53:bd:42: a5:c8:65:53:08:c7:fd:87:a8:c3:ae:50:ee:33:5d:d1:85:2f: b5:fb:2f:1b:56:4c:75:22:47:be:27:3a:77:46:02:4c:f8:d4: 4d:b4:32:f2:6f:ef:79:82:56:a4:5e:be:0f:b9:af:a6:48:62: 16:ed:d6:bf:6c:b2:36:66:89:c5:d6:e5:05:96:64:39:a3:c8: a6:b4:32:ac:4e:50:b6:8a:0c:95:62:dc:c8:51:03:1f:7f:ec: 3d:3a:40:cc:b1:c6:9f:a5:ab:4b:84:5c:9f:3f:cc:02:7b:03: 9a:7f:57:23:0c:ee:b0:06:b5:17:6b:51:70:54:53:e5:41:52: e1:1f:e2:d8:18:96:62:13:df:89:ea:95:18:b8:9c:69:4c:79: 51:b0:58:25:3c:8f:3a:74:03:73:4a:33:0e:a1:46:58:af:8c: 52:b8:d0:e8:e8:e4:88:bf:58:1f:a7:ad:69:1f:af:7b:50:34: d8:a6:9d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTW7QK1qSrtjSHsBQE3SCKgtH6F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB M0Q2MUFFQzAeFw0yNTA3MjEyMDA2MjNaFw0yNTA3MjUwMzU4MjNaMDMxMTAvBgNV BAMTKDgzMTNCNjhBN0E2NDczRkYzQ0FEMTQyRUM3MEI5RkI2RkJGNkM1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pG8IFDobJC6apT8w7ugD2YpT GcClEGKqdyjrDnX7HsJl6bXmc0Di6MxiQa69XpYJSQkVCkQxgQVLcLfTCWGxPLLJ gAp/wsEbCc20GC47+BBYkQOJEHAlyOdMMGzNEh2E2NhvlI3mDFESooFHWhCv9deU 9CElkwK1i94sSpzp79Gia0+O/al9ze5RdqhhHc/iGGBKIE7QlqTfOEx2csbsYS6x aeRWInCNCG3lpyfiVqFnBa28YTEVix6S9bA826dl6k0hRrWpoHzjo0rVXmjV0k35 VxHBjSTv+vdabNMgf8IbRXkfJ5POfmEXxABTfgRLZSjtifYFEhIBDF1FMUUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgxO2inpkc/88rRQuxwuftvv2xZ0wHwYDVR0j BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2 MUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1YzFhZTgtZDk3ZC00MDQ4LTlh N2UtNmI3MWI4NTc3NzQwLzAvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYx RjhBM0Q2MUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5tOjmirJTGy7/1fXeQU6jDS2X52SIGLG91 /b9V/IgM5J4kwQHsXRazs5DAYU/wcW4I/blkYZjetErH3cG790bAjf/AbFO9QqXI ZVMIx/2HqMOuUO4zXdGFL7X7LxtWTHUiR74nOndGAkz41E20MvJv73mCVqRevg+5 r6ZIYhbt1r9ssjZmicXW5QWWZDmjyKa0MqxOULaKDJVi3MhRAx9/7D06QMyxxp+l q0uEXJ8/zAJ7A5p/VyMM7rAGtRdrUXBUU+VBUuEf4tgYlmIT34nqlRi4nGlMeVGw WCU8jzp0A3NKMw6hRlivjFK40Ojo5Ii/WB+nrWkfr3tQNNimnR4= -----END CERTIFICATE-----Generated at Wed Jul 23 08:12:18 2025 by rpki-client