$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: 4BIZLxcfL6aWVOy8FECcPcUtGZqerdXUV3Y5YGIArz8= Subject key identifier: 1A:A3:63:72:10:22:C5:30:B2:77:16:E2:80:BA:21:73:83:06:EF:21 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 77D49903C566570A46086E1B2E756D2CCBDF907E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 01EF Signing time: Sat 19 Jul 2025 05:21:13 +0000 Manifest this update: Sat 19 Jul 2025 05:16:13 +0000 Manifest next update: Tue 22 Jul 2025 17:00:13 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: AKzYRBKAgaDMXTDjMBdoks0xvDWlgZswunocDWfSChs=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: BrAZK6t4rNqxbvw5hbo0N9Bep4jWhJ5dcPoSe1WYzIY=) 3: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: Z/wcEpF1mPtA6KnJX8nNayy+Ypx8mQS6u8kBypxOCSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d4:99:03:c5:66:57:0a:46:08:6e:1b:2e:75:6d:2c:cb:df:90:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Jul 19 05:16:13 2025 GMT Not After : Jul 22 17:00:13 2025 GMT Subject: CN=1AA363721022C530B27716E280BA21738306EF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:66:31:73:97:99:9a:ba:ab:41:8f:c2:b1: 45:3e:d4:bb:b2:da:d2:cb:f6:f0:03:09:2c:e1:e9: ae:6e:b8:57:f9:bc:64:c7:91:55:b9:1e:2d:74:8d: a6:b6:46:e2:a7:4c:5a:e7:c4:ed:a6:da:15:29:57: a3:5f:91:2a:93:ff:bc:39:9e:ef:8f:da:32:ec:76: ff:6c:37:ae:a9:c1:8f:f3:ee:24:a3:48:bf:aa:d0: 95:b6:78:ca:89:f9:3a:c8:3c:33:aa:4a:45:81:ec: 6a:b1:f4:17:09:61:d9:49:04:97:21:e1:cd:f1:15: 3a:39:25:10:fc:4d:86:88:f2:c3:3d:33:e3:52:ab: 8d:b2:03:13:6e:0d:da:63:bf:70:1e:3d:7e:3f:5d: 47:ee:ea:0d:b1:8a:8f:47:3d:0d:b1:a0:a0:38:a2: f7:3b:28:86:a6:7f:fe:5b:ed:4c:db:3e:13:7d:fb: 0a:53:48:c3:d7:35:f5:41:c8:85:22:d5:25:92:e4: d1:c2:3a:6d:c2:12:66:0d:31:a3:31:05:e3:44:a4: 7d:8f:81:8c:af:b4:5c:0a:58:46:5d:57:fd:1c:16: 9f:32:9a:2f:e3:4c:ef:c3:94:2b:39:47:4a:3a:f7: b0:97:eb:44:89:80:b4:0b:e9:c2:83:49:9b:ec:bb: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A3:63:72:10:22:C5:30:B2:77:16:E2:80:BA:21:73:83:06:EF:21 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fa:f0:ec:4f:f1:71:aa:5a:2a:3b:29:c0:65:02:04:75:61: ac:ca:d3:ee:48:d1:f4:80:40:13:78:d3:b1:92:5f:2a:a1:02: bf:4d:79:64:60:52:b0:7a:47:e4:ac:d1:f2:46:d5:9f:33:eb: 14:f7:98:a3:24:e9:52:99:71:e5:7c:3d:24:01:4c:7a:38:5d: a8:5b:81:43:0e:58:a0:5a:cf:4c:fa:a1:16:c4:aa:9e:b9:f9: ff:9c:d9:92:28:cb:5b:b5:3f:10:ad:1d:dd:14:35:db:83:e5: 12:2b:11:c3:14:5b:96:65:44:b3:a2:fc:1a:c6:7c:d4:a4:9b: 8e:8e:f9:58:10:21:fa:ce:63:9e:43:98:7c:40:98:f1:60:a8: 07:4e:71:7e:68:10:41:ec:60:d3:cf:d5:ee:5c:90:2f:dd:65: b7:6b:db:cc:86:8f:48:cf:a4:9d:16:0f:16:21:b1:23:59:bc: dc:d0:d3:02:99:fc:6d:e9:05:a0:a5:3d:03:5d:ac:df:18:ac: 1a:0c:48:67:c7:62:9b:6d:42:d5:a3:a0:e5:a3:9e:81:ab:a3: 23:74:be:01:1a:8e:bd:14:4f:c1:e9:3d:12:46:f8:31:19:3f: 5c:cc:17:54:86:09:bb:b5:43:7e:55:89:b9:e3:bd:36:62:78: 6d:30:ef:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9SZA8VmVwpGCG4bLnVtLMvfkH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA3MTkwNTE2MTNaFw0yNTA3MjIxNzAwMTNaMDMxMTAvBgNV BAMTKDFBQTM2MzcyMTAyMkM1MzBCMjc3MTZFMjgwQkEyMTczODMwNkVGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/2Yxc5eZmrqrQY/CsUU+1Luy 2tLL9vADCSzh6a5uuFf5vGTHkVW5Hi10jaa2RuKnTFrnxO2m2hUpV6NfkSqT/7w5 nu+P2jLsdv9sN66pwY/z7iSjSL+q0JW2eMqJ+TrIPDOqSkWB7Gqx9BcJYdlJBJch 4c3xFTo5JRD8TYaI8sM9M+NSq42yAxNuDdpjv3AePX4/XUfu6g2xio9HPQ2xoKA4 ovc7KIamf/5b7UzbPhN9+wpTSMPXNfVByIUi1SWS5NHCOm3CEmYNMaMxBeNEpH2P gYyvtFwKWEZdV/0cFp8ymi/jTO/DlCs5R0o697CX60SJgLQL6cKDSZvsu9ThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGqNjchAixTCydxbigLohc4MG7yEwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz68OxP8XGqWio7KcBlAgR1YazK0+5I0fSA QBN407GSXyqhAr9NeWRgUrB6R+Ss0fJG1Z8z6xT3mKMk6VKZceV8PSQBTHo4Xahb gUMOWKBaz0z6oRbEqp65+f+c2ZIoy1u1PxCtHd0UNduD5RIrEcMUW5ZlRLOi/BrG fNSkm46O+VgQIfrOY55DmHxAmPFgqAdOcX5oEEHsYNPP1e5ckC/dZbdr28yGj0jP pJ0WDxYhsSNZvNzQ0wKZ/G3pBaClPQNdrN8YrBoMSGfHYpttQtWjoOWjnoGroyN0 vgEajr0UT8HpPRJG+DEZP1zMF1SGCbu1Q35VibnjvTZieG0w77I= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:24 2025 by rpki-client