$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: 9Uhu7Ys3XbGW9Yt03h4vsVFYKDlKMiCIuzJuDkQ8MEY= Subject key identifier: BD:BF:61:23:D9:76:8D:82:85:97:8E:E5:D6:EF:5C:DA:1A:6C:47:07 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 28325DF92DC49C007679DF2D8B7C66840BCF15A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01BB Signing time: Mon 21 Jul 2025 21:22:20 +0000 Manifest this update: Mon 21 Jul 2025 21:17:20 +0000 Manifest next update: Fri 25 Jul 2025 05:52:20 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: l8A0dkUzSxH4N0BqHgL6AzXZfIz+kSzGW/8HoGSl7ao=) 3: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: 0XZneJz7tbut1TL7LEsPAmi5+1mDLDzs9L3u0o/floY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 05:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:32:5d:f9:2d:c4:9c:00:76:79:df:2d:8b:7c:66:84:0b:cf:15:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Jul 21 21:17:20 2025 GMT Not After : Jul 25 05:52:20 2025 GMT Subject: CN=BDBF6123D9768D8285978EE5D6EF5CDA1A6C4707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:39:ab:21:46:99:33:0b:72:eb:00:41:d3: b4:af:e7:69:e1:b0:47:0f:b0:31:8d:7f:8e:76:72: 2b:28:ff:02:cc:85:69:c1:be:f6:12:61:1e:30:3c: 14:44:ee:4f:76:29:da:31:41:ca:14:30:69:d5:54: 09:c3:d4:b1:e9:5d:b2:4c:e6:35:20:c5:8b:80:a8: e3:67:ad:d6:0b:9a:4c:5c:bb:1f:b8:ca:14:98:54: 6f:ad:0e:03:63:f1:75:08:c8:f4:4f:40:46:ac:48: 87:ad:dd:7e:81:74:2a:dc:84:81:36:e4:fb:9c:33: 31:a7:2d:f9:b1:b2:88:ca:a5:54:5a:4b:e8:7d:71: f6:70:5f:5c:2e:1f:f7:d7:07:57:67:9d:b6:14:c3: e6:c4:f5:cb:54:c8:44:05:6f:4d:fd:d6:91:c7:5c: 88:59:7f:8a:39:5b:50:ea:06:2a:7d:cf:35:e2:98: 67:2e:a8:ca:b9:c5:44:e4:72:49:77:90:7c:78:58: e5:62:6e:28:39:fc:10:a2:a9:4d:3c:c7:b1:ed:21: 9b:bd:57:e0:a5:74:ab:f6:3c:66:6c:fe:d0:76:2b: 4a:5f:ea:05:fc:79:04:54:a9:37:55:e6:0c:0c:cd: 0c:0d:7d:5e:af:fe:4f:be:54:3d:97:3a:8b:b8:7b: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BF:61:23:D9:76:8D:82:85:97:8E:E5:D6:EF:5C:DA:1A:6C:47:07 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4c:a9:34:ed:45:40:24:45:e9:4a:33:9e:b0:53:46:98:4e: 28:65:9e:15:73:48:c0:b9:d0:38:46:69:77:08:4f:ea:27:37: f1:1c:a1:b1:03:a0:72:88:53:f3:c8:6f:00:ce:7a:78:f7:64: 94:fb:2b:55:dc:45:18:e5:c4:00:32:63:29:8d:09:ba:f7:29: 76:63:82:26:a2:d8:21:35:8b:d1:5d:53:b8:e2:06:ec:50:2d: 1c:13:51:12:7c:05:56:c3:92:aa:22:97:4e:b1:49:b0:6c:35: 94:15:35:e7:86:6d:e6:76:d5:46:91:18:61:f8:31:b9:b4:21: ac:4c:bc:cd:17:8e:98:d6:13:08:ff:17:e4:13:73:35:d4:b4: 49:75:68:ba:57:30:45:be:30:da:ce:43:71:13:68:ac:c0:ca: 98:b6:fe:13:bd:5c:1e:ae:99:71:a9:0e:2d:8c:04:39:f5:f3: c6:4f:f5:c4:ea:b2:91:85:2b:95:f6:68:35:e2:9a:84:3b:4b: ba:f0:2d:d1:e8:e5:c4:92:0d:4f:51:ba:ea:11:fa:a6:90:63: 46:16:56:20:cb:28:af:8d:61:8a:7e:19:90:a8:69:58:67:bd: 29:07:60:07:b4:52:7c:6d:42:ef:07:c2:37:0b:1c:0d:58:cf: c2:59:d0:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDJd+S3EnAB2ed8ti3xmhAvPFaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTA3MjEyMTE3MjBaFw0yNTA3MjUwNTUyMjBaMDMxMTAvBgNV BAMTKEJEQkY2MTIzRDk3NjhEODI4NTk3OEVFNUQ2RUY1Q0RBMUE2QzQ3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1zmrIUaZMwty6wBB07Sv52nh sEcPsDGNf452ciso/wLMhWnBvvYSYR4wPBRE7k92KdoxQcoUMGnVVAnD1LHpXbJM 5jUgxYuAqONnrdYLmkxcux+4yhSYVG+tDgNj8XUIyPRPQEasSIet3X6BdCrchIE2 5PucMzGnLfmxsojKpVRaS+h9cfZwX1wuH/fXB1dnnbYUw+bE9ctUyEQFb0391pHH XIhZf4o5W1DqBip9zzXimGcuqMq5xUTkckl3kHx4WOVibig5/BCiqU08x7HtIZu9 V+CldKv2PGZs/tB2K0pf6gX8eQRUqTdV5gwMzQwNfV6v/k++VD2XOou4e73XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvb9hI9l2jYKFl47l1u9c2hpsRwcwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNMqTTtRUAkRelKM56wU0aYTihlnhVzSMC5 0DhGaXcIT+onN/EcobEDoHKIU/PIbwDOenj3ZJT7K1XcRRjlxAAyYymNCbr3KXZj giai2CE1i9FdU7jiBuxQLRwTURJ8BVbDkqoil06xSbBsNZQVNeeGbeZ21UaRGGH4 Mbm0IaxMvM0XjpjWEwj/F+QTczXUtEl1aLpXMEW+MNrOQ3ETaKzAypi2/hO9XB6u mXGpDi2MBDn188ZP9cTqspGFK5X2aDXimoQ7S7rwLdHo5cSSDU9RuuoR+qaQY0YW ViDLKK+NYYp+GZCoaVhnvSkHYAe0UnxtQu8HwjcLHA1Yz8JZ0B0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:53 2025 by rpki-client