$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: sbtOKCY7Bl4YgVxIgJIZ5JtatqWRnilML/EHurObSMM= Subject key identifier: CE:61:7A:06:AD:D3:F5:D9:EA:21:B1:C6:E8:A6:A5:89:02:08:F0:EE Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 219F8737044672CEEB17A1F39AAA3E4D16BAD3F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 024E Signing time: Sun 14 Sep 2025 06:20:51 +0000 Manifest this update: Sun 14 Sep 2025 06:15:51 +0000 Manifest next update: Wed 17 Sep 2025 07:43:51 +0000 Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) 2: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac=) 3: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: xpJYN2koDz6242yH404bncg8zalibRwq73KpJsJcVB8=) 4: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: iaSoqCQGScwRebCgGdD410w9QKyQu8VxMoQUVqs6L+Q=) 5: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 6: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 8: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: gV2Q8xF8XiWikE1+w9yu7jENKeKHaDELW9P6oOlSzDE=) 9: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: vuTTJNURLP5vgJImsWTQOQLshtByIl8yIWAQC+TExAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 07:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9f:87:37:04:46:72:ce:eb:17:a1:f3:9a:aa:3e:4d:16:ba:d3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Sep 14 06:15:51 2025 GMT Not After : Sep 17 07:43:51 2025 GMT Subject: CN=CE617A06ADD3F5D9EA21B1C6E8A6A5890208F0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:dc:a9:bc:c1:99:e9:70:6f:d9:aa:88:68: 61:75:58:f1:7f:53:71:61:b3:10:fc:f0:95:06:34: 78:45:7e:bc:41:fc:41:38:bf:78:83:72:f8:a2:5a: 20:66:f3:9e:c1:73:a2:a1:ac:34:f4:9d:48:fd:e9: 0d:5b:4d:ad:12:e4:68:ac:44:9b:c2:76:42:45:16: 95:50:d1:a7:65:81:01:f5:08:97:d5:ff:7e:1e:79: 04:c6:72:1b:f3:f2:a9:f0:0c:6d:10:c1:fc:6e:e6: 78:7e:e2:11:ff:1e:7a:ee:f6:77:eb:3f:54:4c:60: 05:0b:7e:e1:0e:b5:9d:97:3c:c4:6f:74:c1:e2:8f: a3:58:5b:c6:f4:48:95:76:35:4a:42:c6:e3:0e:3e: 06:81:da:20:82:71:9e:f2:9e:4b:81:75:66:bc:7f: 90:aa:1b:03:c6:49:74:d7:30:3e:31:58:23:d3:1f: 96:01:63:e7:7c:e4:fa:11:e2:88:06:d6:7e:1b:cd: 25:77:7f:54:9a:e7:29:36:b0:9b:82:be:1c:c6:55: 1a:ad:f5:09:82:a6:1c:c9:59:4a:4f:9a:c3:35:d9: 3a:73:4e:4d:f6:45:74:00:86:91:45:aa:ca:45:65: 16:1f:e9:07:24:79:2e:fe:22:b8:0a:22:76:e7:92: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:7A:06:AD:D3:F5:D9:EA:21:B1:C6:E8:A6:A5:89:02:08:F0:EE X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8a:aa:6a:77:1d:78:69:63:af:23:9c:5a:7c:c8:31:60:71: 31:8d:60:07:19:9b:82:15:c2:da:d5:ab:63:e8:8e:2a:f1:dc: c6:1f:92:a0:db:f9:6c:a2:78:d7:c2:0e:1a:76:cf:8b:52:04: 3a:a6:80:64:fb:14:cb:ac:d4:5f:9e:67:22:fb:ac:dd:f6:70: ff:84:27:c0:c9:db:75:50:96:05:fb:80:af:1e:42:de:97:33: 7c:5a:07:dd:46:2e:17:11:54:10:53:c3:69:ae:56:7c:b1:49: 1b:61:8e:9d:53:88:d1:36:3b:34:93:20:3e:d7:36:6b:c9:4b: 89:2d:a4:bd:b5:2d:9b:1c:be:8e:0b:4e:90:3a:e1:42:a5:e5: e5:85:5f:ad:45:fe:47:d6:4f:36:6c:05:bf:ad:98:d9:27:79: be:89:b5:b8:ab:07:4b:56:c2:12:54:0a:02:e8:f5:99:3c:c0: e7:2c:f9:2a:36:f9:75:ad:6d:bb:ea:e4:43:86:97:5b:48:2a: 4e:9e:a2:ed:66:f7:ad:ea:71:cd:68:69:9e:8d:2e:69:6c:4f: ac:61:3f:88:ab:9e:6d:5e:78:ab:12:c1:e1:ee:0e:31:13:f7: 69:39:d9:42:84:42:87:92:b2:68:b5:44:5f:f2:af:c9:66:9a: 56:4d:2f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZ+HNwRGcs7rF6Hzmqo+TRa60/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA5MTQwNjE1NTFaFw0yNTA5MTcwNzQzNTFaMDMxMTAvBgNV BAMTKENFNjE3QTA2QUREM0Y1RDlFQTIxQjFDNkU4QTZBNTg5MDIwOEYwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooNypvMGZ6XBv2aqIaGF1WPF/ U3FhsxD88JUGNHhFfrxB/EE4v3iDcviiWiBm857Bc6KhrDT0nUj96Q1bTa0S5Gis RJvCdkJFFpVQ0adlgQH1CJfV/34eeQTGchvz8qnwDG0Qwfxu5nh+4hH/Hnru9nfr P1RMYAULfuEOtZ2XPMRvdMHij6NYW8b0SJV2NUpCxuMOPgaB2iCCcZ7ynkuBdWa8 f5CqGwPGSXTXMD4xWCPTH5YBY+d85PoR4ogG1n4bzSV3f1Sa5yk2sJuCvhzGVRqt 9QmCphzJWUpPmsM12TpzTk32RXQAhpFFqspFZRYf6QckeS7+IrgKInbnksxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzmF6Bq3T9dnqIbHG6KaliQII8O4wHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACKqmp3HXhpY68jnFp8yDFgcTGNYAcZm4IV wtrVq2Pojirx3MYfkqDb+WyieNfCDhp2z4tSBDqmgGT7FMus1F+eZyL7rN32cP+E J8DJ23VQlgX7gK8eQt6XM3xaB91GLhcRVBBTw2muVnyxSRthjp1TiNE2OzSTID7X NmvJS4ktpL21LZscvo4LTpA64UKl5eWFX61F/kfWTzZsBb+tmNkneb6JtbirB0tW whJUCgLo9Zk8wOcs+So2+XWtbbvq5EOGl1tIKk6eou1m963qcc1oaZ6NLmlsT6xh P4irnm1eeKsSweHuDjET92k52UKEQoeSsmi1RF/yr8lmmlZNL48= -----END CERTIFICATE-----Generated at Mon Sep 15 06:50:19 2025 by rpki-client