$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: AfvCtQ7ujZyNBAr5hzUyrJGybSmCYOGyWScypcSfGgs= Subject key identifier: F8:DB:91:C0:0E:0B:E8:FF:A7:57:CC:E5:6C:79:08:CC:A3:4F:D3:49 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 78D6BB3BA7CC17E76B558DAD93FBBB0AF93F241E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 0399 Signing time: Wed 22 Oct 2025 06:51:33 +0000 Manifest this update: Wed 22 Oct 2025 06:46:33 +0000 Manifest next update: Sat 25 Oct 2025 07:07:33 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: 7qTOmcDU6ZER6XtXsvVxUL6EOqMH6VWSAhetDjsjrCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:bb:3b:a7:cc:17:e7:6b:55:8d:ad:93:fb:bb:0a:f9:3f:24:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Oct 22 06:46:33 2025 GMT Not After : Oct 25 07:07:33 2025 GMT Subject: CN=F8DB91C00E0BE8FFA757CCE56C7908CCA34FD349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e9:71:f4:96:b8:81:ef:6a:db:32:ee:cc:bd: 67:bc:74:15:f6:85:73:9f:a3:1c:b7:23:07:78:3a: 2e:6d:6f:60:bd:42:a7:9d:53:05:ad:df:6a:40:13: bd:60:8a:a9:47:21:a9:28:a4:b4:82:01:83:23:23: 31:99:44:1c:43:f9:c3:ce:e0:3a:0b:db:d0:68:5f: a3:46:bf:c5:dc:36:7c:a9:a5:4b:86:c6:55:7d:6f: 9d:e5:95:a4:d8:80:ba:2e:3c:b6:16:cc:90:2d:8f: b1:f9:54:a8:99:fe:7a:c1:d3:4d:16:7a:c4:60:b0: b8:11:ff:7b:7c:dd:35:e5:c1:7e:47:0d:fb:e8:25: f4:89:99:79:64:02:81:34:b5:1c:70:ad:62:1a:e1: 08:a3:2d:72:4f:b5:3f:1e:0a:cb:e3:63:50:1f:74: cb:22:91:71:0c:f9:b4:4d:2a:36:3a:db:c8:c4:fe: 86:b4:9a:2c:66:7e:51:df:2f:b9:3a:3a:f2:91:21: f3:38:b5:77:98:29:cd:a6:31:0b:ef:b2:3a:35:6b: 93:b3:ca:35:66:b0:41:e8:52:59:e2:ec:73:53:b4: a3:6b:03:d4:ea:ff:51:f0:b6:b3:ff:47:89:91:50: e6:b7:17:8b:c3:4f:f0:9a:56:3c:6c:7a:c0:eb:9b: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DB:91:C0:0E:0B:E8:FF:A7:57:CC:E5:6C:79:08:CC:A3:4F:D3:49 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:58:b8:b7:dd:ed:1a:ce:b9:68:a7:da:28:f0:b3:93:57:4e: 6f:f7:b5:19:90:ae:0e:db:80:56:db:26:bc:1a:8e:52:f1:a3: 9f:a5:cf:0f:a9:7a:72:43:49:b5:9f:52:97:95:3c:c7:78:c9: a8:a2:f4:4c:54:44:a2:19:6c:5f:37:01:ca:dd:2f:e8:49:a7: 7e:03:35:1c:92:21:26:ac:2c:0a:5b:8c:2a:98:e6:09:30:7c: 42:90:1d:9f:4f:73:0e:4b:d4:f1:23:70:65:0d:86:94:bd:a0: 43:28:e3:a3:92:2f:a1:4e:7b:71:93:39:c6:75:50:99:47:da: cb:8d:a5:53:e2:c0:9c:cc:04:45:d8:fc:25:a3:4f:10:ee:e1: d1:c3:a0:90:e4:a5:08:7a:1d:79:6f:e3:82:59:09:47:b3:a1: 4c:3a:25:fa:be:07:e2:6b:93:0b:72:5b:b5:a2:f0:d2:38:68: 85:12:83:e9:c6:14:55:f1:e7:3e:a0:26:6c:77:b5:9a:17:e6: 68:49:d4:11:0a:ce:4b:e7:19:6d:c2:94:0b:84:a3:dd:2f:f3: 00:fa:3f:b3:95:fa:8f:3e:ba:78:06:2e:f4:45:db:46:f1:dc: 73:ca:3f:07:dc:57:fe:3e:f6:ad:46:d4:a4:c6:8e:38:39:f6: b2:d9:44:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNa7O6fMF+drVY2tk/u7Cvk/JB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTEwMjIwNjQ2MzNaFw0yNTEwMjUwNzA3MzNaMDMxMTAvBgNV BAMTKEY4REI5MUMwMEUwQkU4RkZBNzU3Q0NFNTZDNzkwOENDQTM0RkQzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6XH0lriB72rbMu7MvWe8dBX2 hXOfoxy3Iwd4Oi5tb2C9QqedUwWt32pAE71giqlHIakopLSCAYMjIzGZRBxD+cPO 4DoL29BoX6NGv8XcNnyppUuGxlV9b53llaTYgLouPLYWzJAtj7H5VKiZ/nrB000W esRgsLgR/3t83TXlwX5HDfvoJfSJmXlkAoE0tRxwrWIa4QijLXJPtT8eCsvjY1Af dMsikXEM+bRNKjY628jE/oa0mixmflHfL7k6OvKRIfM4tXeYKc2mMQvvsjo1a5Oz yjVmsEHoUlni7HNTtKNrA9Tq/1HwtrP/R4mRUOa3F4vDT/CaVjxsesDrmxwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NuRwA4L6P+nV8zlbHkIzKNP00kwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdYuLfd7RrOuWin2ijws5NXTm/3tRmQrg7b gFbbJrwajlLxo5+lzw+penJDSbWfUpeVPMd4yaii9ExURKIZbF83AcrdL+hJp34D NRySISasLApbjCqY5gkwfEKQHZ9Pcw5L1PEjcGUNhpS9oEMo46OSL6FOe3GTOcZ1 UJlH2suNpVPiwJzMBEXY/CWjTxDu4dHDoJDkpQh6HXlv44JZCUezoUw6Jfq+B+Jr kwtyW7Wi8NI4aIUSg+nGFFXx5z6gJmx3tZoX5mhJ1BEKzkvnGW3ClAuEo90v8wD6 P7OV+o8+ungGLvRF20bx3HPKPwfcV/4+9q1G1KTGjjg59rLZREQ= -----END CERTIFICATE-----Generated at Thu Oct 23 05:28:14 2025 by rpki-client