$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: na9RSpaDSXUEL/OelCOjEYSupjmnRQbHZ9j/2uHvs7s= Subject key identifier: C3:FB:95:92:49:95:F2:99:95:10:42:F0:71:13:4A:56:AD:9A:0E:2D Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 0CDF7853B38D32AE5C22B33B358CB38823309860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 046B Signing time: Thu 04 Sep 2025 12:21:25 +0000 Manifest this update: Thu 04 Sep 2025 12:16:25 +0000 Manifest next update: Sun 07 Sep 2025 12:47:25 +0000 Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=) 2: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=) 3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: jVw50RR4yfW2Q49bIliUXEQbws9Ckc9Nxiv7HyyhjTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:df:78:53:b3:8d:32:ae:5c:22:b3:3b:35:8c:b3:88:23:30:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Sep 4 12:16:25 2025 GMT Not After : Sep 7 12:47:25 2025 GMT Subject: CN=C3FB95924995F299951042F071134A56AD9A0E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c6:3e:d6:3d:6e:fa:06:3a:7f:58:5b:2d:48: 1a:51:b5:26:53:79:ab:5b:6f:41:da:ac:90:e4:8b: a5:8e:b7:e6:b7:bc:d4:5b:12:a7:ee:80:de:90:b5: 4c:1f:83:88:f8:ce:6e:40:90:fa:ab:83:7f:e5:23: 7d:97:b6:ef:11:db:5c:60:3b:27:2f:8d:d4:df:aa: a8:27:21:0a:61:b1:f5:ae:49:ee:35:be:58:b7:30: 31:81:13:2f:d6:a3:e4:3b:52:e0:ee:bd:20:7b:f9: 02:08:72:54:1c:35:9d:c6:0f:d9:3a:87:cd:fc:19: d0:03:4a:1f:20:43:9a:0b:11:38:37:d0:97:a0:e4: f1:77:61:24:bd:12:d0:ec:2f:57:5c:41:0b:a9:23: e1:f8:bd:95:f2:f8:7a:ee:2a:e8:20:a2:0a:e0:39: e9:e6:ab:11:15:b8:bc:96:40:8c:ef:96:31:2c:f6: 90:de:04:4a:39:cd:99:59:82:8a:21:e8:c6:d4:c0: ca:84:21:f8:b3:3f:cd:2f:a9:ec:51:9a:a3:2a:91: 7d:8b:0c:3e:39:d0:e3:cf:92:bb:32:92:4f:26:5d: 3f:9f:ea:95:11:82:88:dd:48:43:04:53:8d:79:b6: 57:5b:98:d6:1c:86:de:05:63:00:a2:e1:32:42:f6: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:95:92:49:95:F2:99:95:10:42:F0:71:13:4A:56:AD:9A:0E:2D X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:30:69:f3:ac:ea:68:05:14:13:ee:40:30:d4:7b:0d:65: 5c:94:f0:5a:f2:38:e5:8d:81:08:7d:56:fa:6f:17:85:e7:18: 85:ec:89:bc:db:c7:d3:bf:19:e7:99:01:2d:b8:2d:cf:44:5f: 7f:91:a2:f9:3e:d4:ef:91:81:dc:86:02:56:46:8d:e8:86:50: d5:19:12:c7:2d:7e:8c:f3:18:19:68:92:91:b5:4b:84:50:be: a3:99:1d:64:6a:ed:c2:b7:ee:7a:90:d1:c5:56:e4:6e:ba:c0: 7e:67:77:20:f0:48:3f:7c:0d:49:f4:f4:7b:b9:f4:ed:f5:2d: bf:09:00:ed:8f:4d:95:5a:70:29:7b:2c:72:3b:26:25:a5:35: 67:5a:b2:dd:4f:d4:06:0e:82:db:4a:9a:49:42:a8:99:e6:33: 19:85:91:ea:95:92:6b:e6:28:2b:1f:03:cf:52:f4:4a:15:b6: 2b:29:bb:9f:9c:e1:54:9e:b7:c3:d5:dd:39:a2:46:fd:18:38: bf:6c:4e:0f:ff:10:d6:ef:7d:f3:ec:5e:23:ec:ee:b8:d8:b5: 9e:07:e4:3e:f0:5e:2b:c7:7c:f1:cc:b8:e4:c4:86:95:09:35: 33:5f:1c:6c:6a:90:6b:64:a5:08:b3:50:43:b9:50:4e:1c:bd: 0f:5b:10:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDN94U7ONMq5cIrM7NYyziCMwmGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTA5MDQxMjE2MjVaFw0yNTA5MDcxMjQ3MjVaMDMxMTAvBgNV BAMTKEMzRkI5NTkyNDk5NUYyOTk5NTEwNDJGMDcxMTM0QTU2QUQ5QTBFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxj7WPW76Bjp/WFstSBpRtSZT eatbb0HarJDki6WOt+a3vNRbEqfugN6QtUwfg4j4zm5AkPqrg3/lI32Xtu8R21xg OycvjdTfqqgnIQphsfWuSe41vli3MDGBEy/Wo+Q7UuDuvSB7+QIIclQcNZ3GD9k6 h838GdADSh8gQ5oLETg30Jeg5PF3YSS9EtDsL1dcQQupI+H4vZXy+HruKuggogrg OenmqxEVuLyWQIzvljEs9pDeBEo5zZlZgooh6MbUwMqEIfizP80vqexRmqMqkX2L DD450OPPkrsykk8mXT+f6pURgojdSEMEU415tldbmNYcht4FYwCi4TJC9go9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/uVkkmV8pmVEELwcRNKVq2aDi0wHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH1MGnzrOpoBRQT7kAw1HsNZVyU8FryOOWN gQh9VvpvF4XnGIXsibzbx9O/GeeZAS24Lc9EX3+Rovk+1O+RgdyGAlZGjeiGUNUZ EsctfozzGBlokpG1S4RQvqOZHWRq7cK37nqQ0cVW5G66wH5ndyDwSD98DUn09Hu5 9O31Lb8JAO2PTZVacCl7LHI7JiWlNWdast1P1AYOgttKmklCqJnmMxmFkeqVkmvm KCsfA89S9EoVtispu5+c4VSet8PV3TmiRv0YOL9sTg//ENbvffPsXiPs7rjYtZ4H 5D7wXivHfPHMuOTEhpUJNTNfHGxqkGtkpQizUEO5UE4cvQ9bEHg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:10 2025 by rpki-client