$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: AmCZFHMJfgEv/zPpDa9P2yNwuqcXv60y9eNYCP6Qy1Q= Subject key identifier: 8B:AF:94:5E:64:66:F4:D1:3D:6A:C9:19:C4:56:8F:75:8D:68:E9:DA Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 7505590C46A260EF9652F023974B0B2794E0063B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01D1 Signing time: Sun 07 Sep 2025 21:22:21 +0000 Manifest this update: Sun 07 Sep 2025 21:17:21 +0000 Manifest next update: Thu 11 Sep 2025 02:00:21 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: tLoSe0TtaMI+3amk4eOldPzuxRb5RBnIdimpfnc696U=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) 3: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:05:59:0c:46:a2:60:ef:96:52:f0:23:97:4b:0b:27:94:e0:06:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Sep 7 21:17:21 2025 GMT Not After : Sep 11 02:00:21 2025 GMT Subject: CN=8BAF945E6466F4D13D6AC919C4568F758D68E9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f0:4d:49:db:b7:66:2a:5f:24:2c:48:5a:e7: d4:f4:6b:e4:26:a2:eb:89:49:e5:cb:08:bc:3d:19: 21:77:1d:a5:de:d8:f4:d7:3f:e0:10:5f:92:66:d5: 7e:42:69:4d:98:25:87:51:74:66:ed:35:83:06:11: b2:50:ef:ce:25:a7:a9:0d:87:ef:c9:a5:fd:bc:57: 4c:45:d2:b4:de:c3:e0:1b:4a:75:94:0d:ff:ae:e8: b0:c6:d4:f7:db:92:81:42:e6:db:c9:73:19:3f:be: 16:0b:5f:19:7e:1c:ea:08:36:bd:3e:0b:b9:c8:d2: 17:ce:db:50:f9:87:99:8b:f4:78:5c:b0:47:16:16: 86:85:4a:b9:cd:e0:70:60:10:3a:2f:4f:66:4f:8b: a1:b4:9d:5a:84:b8:59:8d:a7:39:0f:b5:79:19:30: 5f:48:cc:40:23:ac:83:cc:7c:5a:03:bc:6f:7e:55: ea:5b:82:23:9e:26:6b:d6:de:e3:fe:f1:17:1f:17: 29:b6:b9:fd:a9:50:67:47:58:ce:7b:83:91:20:94: 28:d6:f4:68:97:14:da:aa:f7:f6:f0:fb:bb:d2:0b: 34:af:a3:16:c0:8c:1b:90:e6:ce:2b:a3:34:bb:79: 82:9d:68:f2:b6:8c:17:27:f8:22:4a:6f:a7:07:5b: d5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AF:94:5E:64:66:F4:D1:3D:6A:C9:19:C4:56:8F:75:8D:68:E9:DA X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:19:3b:f4:dd:6e:b8:0d:bd:ea:63:84:7f:08:2c:52:ff:9f: 4a:e0:b7:35:e5:a1:f5:d4:23:80:8e:30:0d:15:8e:16:75:e5: 75:d9:25:2b:5f:c7:3e:e5:2f:8f:c6:ef:91:74:34:4b:69:21: 81:df:49:ad:bf:82:73:b9:77:b3:e6:66:ca:da:96:83:74:78: 4e:7c:f2:f6:74:f1:5b:68:43:35:11:31:43:56:c3:a3:7e:42: 90:2c:0b:cb:ec:24:f8:eb:73:09:db:1d:fd:80:c5:42:1a:b6: 92:31:57:7d:1d:d6:e4:06:a5:0c:57:07:62:8d:11:58:da:43: 17:dc:64:3c:23:a8:33:b5:00:73:63:f0:5d:7b:cd:c1:ed:09: a2:8e:d8:00:c6:6b:cc:7e:d5:cf:80:af:54:dc:9d:e4:b2:73: 6c:69:44:20:03:e2:45:0d:d7:94:47:9b:12:36:56:be:23:4d: 63:0d:77:0d:05:a9:2a:60:fe:1b:09:44:4d:08:31:57:9e:93: da:2a:a0:24:9b:78:69:9f:0e:ab:9b:a7:b1:3f:48:6e:ef:80: 91:f3:ec:8e:92:1c:c3:67:1a:a5:49:a6:85:4c:55:9c:22:39: 98:6a:95:b8:9b:5b:86:b5:9a:2a:83:76:16:7d:d8:d2:6f:ed: 6a:98:d4:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQVZDEaiYO+WUvAjl0sLJ5TgBjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTA5MDcyMTE3MjFaFw0yNTA5MTEwMjAwMjFaMDMxMTAvBgNV BAMTKDhCQUY5NDVFNjQ2NkY0RDEzRDZBQzkxOUM0NTY4Rjc1OEQ2OEU5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8E1J27dmKl8kLEha59T0a+Qm ouuJSeXLCLw9GSF3HaXe2PTXP+AQX5Jm1X5CaU2YJYdRdGbtNYMGEbJQ784lp6kN h+/Jpf28V0xF0rTew+AbSnWUDf+u6LDG1PfbkoFC5tvJcxk/vhYLXxl+HOoINr0+ C7nI0hfO21D5h5mL9HhcsEcWFoaFSrnN4HBgEDovT2ZPi6G0nVqEuFmNpzkPtXkZ MF9IzEAjrIPMfFoDvG9+VepbgiOeJmvW3uP+8RcfFym2uf2pUGdHWM57g5EglCjW 9GiXFNqq9/bw+7vSCzSvoxbAjBuQ5s4rozS7eYKdaPK2jBcn+CJKb6cHW9UdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi6+UXmRm9NE9askZxFaPdY1o6dowHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkZO/TdbrgNvepjhH8ILFL/n0rgtzXlofXU I4COMA0VjhZ15XXZJStfxz7lL4/G75F0NEtpIYHfSa2/gnO5d7PmZsraloN0eE58 8vZ08VtoQzURMUNWw6N+QpAsC8vsJPjrcwnbHf2AxUIatpIxV30d1uQGpQxXB2KN EVjaQxfcZDwjqDO1AHNj8F17zcHtCaKO2ADGa8x+1c+Ar1TcneSyc2xpRCAD4kUN 15RHmxI2Vr4jTWMNdw0FqSpg/hsJRE0IMVeek9oqoCSbeGmfDqubp7E/SG7vgJHz 7I6SHMNnGqVJpoVMVZwiOZhqlbibW4a1miqDdhZ92NJv7WqY1Lg= -----END CERTIFICATE-----Generated at Mon Sep 8 08:52:03 2025 by rpki-client