$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: 51y4EMFac1d7eqVP5QTrI7LtUQ1xC909NsEPIsH+AJQ= Subject key identifier: 76:A5:F6:87:37:69:42:78:16:D0:6C:87:17:22:F6:EE:65:42:B2:E5 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 405572128242455457C6AAF16EADB71511A6FCEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0240 Signing time: Mon 21 Jul 2025 00:21:15 +0000 Manifest this update: Mon 21 Jul 2025 00:16:15 +0000 Manifest next update: Thu 24 Jul 2025 11:46:15 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: czB2UU4Kgzju/VCsWDZ9K3eTqykd87XuPS3UyYFa1W0=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:55:72:12:82:42:45:54:57:c6:aa:f1:6e:ad:b7:15:11:a6:fc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Jul 21 00:16:15 2025 GMT Not After : Jul 24 11:46:15 2025 GMT Subject: CN=76A5F6873769427816D06C871722F6EE6542B2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:3b:fb:c1:d1:1f:41:03:ed:48:4c:64:36: 6d:4a:52:93:1f:39:03:d9:a7:5c:98:a8:17:b3:5b: c1:50:87:42:c2:39:81:93:59:3e:12:39:cf:2c:5b: 14:d9:af:ac:cf:d5:04:37:6f:29:88:fb:5a:1e:c6: 51:d3:f3:5c:5b:b8:d0:d8:0f:e6:b6:a6:03:67:5a: 5d:df:ac:76:de:50:da:4b:66:a5:fd:d7:86:7b:d9: 24:c9:6d:5d:04:17:d6:6c:de:45:7e:20:f8:23:b3: 77:3e:2a:23:bd:24:bc:9e:85:a4:22:f2:c0:c5:e5: 81:0d:c9:e9:e8:88:de:5d:ae:d8:09:c3:2b:31:41: a5:ce:3a:2c:18:f1:21:86:63:ba:c1:45:74:fe:52: eb:44:6a:a8:22:b1:00:53:8a:00:cc:27:1b:e2:ca: fb:2c:b6:4e:4f:7f:cc:91:1c:cd:97:f1:3f:66:d0: 86:75:de:a1:2b:a7:52:4e:35:3c:4f:42:04:0f:2b: 22:ce:88:c5:3c:21:76:b7:66:37:b4:98:79:66:4d: 6a:17:2c:f8:1f:c4:e0:05:ef:f3:09:0b:50:e7:ad: fe:db:a5:62:44:ae:e4:0f:49:5b:4a:43:dd:ab:ea: 93:be:9f:92:0a:22:e5:f4:72:ab:c6:bd:95:73:5e: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:F6:87:37:69:42:78:16:D0:6C:87:17:22:F6:EE:65:42:B2:E5 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:33:27:66:52:8b:66:5d:68:e2:15:b9:d4:42:54:54:6f:7f: e3:55:97:93:b1:ea:d9:29:be:cb:86:69:c1:58:26:12:df:20: c7:97:00:d5:61:4d:e3:e6:c5:79:44:a0:7d:53:9a:4d:b5:81: b4:ea:2d:89:9f:37:ac:e2:24:02:36:ba:a4:a5:af:f6:79:63: d0:37:b0:e8:67:81:a1:38:bc:f1:ba:4d:a2:90:56:0c:45:a9: e1:ca:3d:18:3b:a1:a0:e9:00:71:0c:7e:a0:1c:06:0a:56:b3: b3:39:05:8a:62:cb:77:27:07:43:61:5a:ed:7d:09:b7:03:35: 57:3b:2b:b6:b4:b6:1d:fe:c7:48:6f:81:18:3d:a7:2d:f3:e9: cd:98:3f:e8:04:9b:19:2c:47:28:8f:b6:4d:fb:52:a3:f1:d3: 01:44:04:35:8c:32:03:1d:9d:17:3f:6e:b4:cb:24:0b:4a:ee: f0:91:43:d9:35:2f:40:2c:4a:ad:11:97:36:25:2a:c5:60:8a: 6d:70:72:ae:97:56:2b:b8:72:f4:2a:d0:a0:33:5e:21:94:59: df:8d:e8:a9:34:d6:67:65:93:08:6d:24:8f:f4:26:6b:33:c0: 11:05:6d:19:33:dc:6a:46:b0:b6:e5:9a:4f:c6:8a:46:67:5c: 6e:23:ea:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFVyEoJCRVRXxqrxbq23FRGm/OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTA3MjEwMDE2MTVaFw0yNTA3MjQxMTQ2MTVaMDMxMTAvBgNV BAMTKDc2QTVGNjg3Mzc2OTQyNzgxNkQwNkM4NzE3MjJGNkVFNjU0MkIyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEzv7wdEfQQPtSExkNm1KUpMf OQPZp1yYqBezW8FQh0LCOYGTWT4SOc8sWxTZr6zP1QQ3bymI+1oexlHT81xbuNDY D+a2pgNnWl3frHbeUNpLZqX914Z72STJbV0EF9Zs3kV+IPgjs3c+KiO9JLyehaQi 8sDF5YENyenoiN5drtgJwysxQaXOOiwY8SGGY7rBRXT+UutEaqgisQBTigDMJxvi yvsstk5Pf8yRHM2X8T9m0IZ13qErp1JONTxPQgQPKyLOiMU8IXa3Zje0mHlmTWoX LPgfxOAF7/MJC1Dnrf7bpWJEruQPSVtKQ92r6pO+n5IKIuX0cqvGvZVzXi57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqX2hzdpQngW0GyHFyL27mVCsuUwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwzJ2ZSi2ZdaOIVudRCVFRvf+NVl5Ox6tkp vsuGacFYJhLfIMeXANVhTePmxXlEoH1Tmk21gbTqLYmfN6ziJAI2uqSlr/Z5Y9A3 sOhngaE4vPG6TaKQVgxFqeHKPRg7oaDpAHEMfqAcBgpWs7M5BYpiy3cnB0NhWu19 CbcDNVc7K7a0th3+x0hvgRg9py3z6c2YP+gEmxksRyiPtk37UqPx0wFEBDWMMgMd nRc/brTLJAtK7vCRQ9k1L0AsSq0RlzYlKsVgim1wcq6XViu4cvQq0KAzXiGUWd+N 6Kk01mdlkwhtJI/0JmszwBEFbRkz3GpGsLblmk/GikZnXG4j6kc= -----END CERTIFICATE-----Generated at Tue Jul 22 06:40:52 2025 by rpki-client