$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: Kjs4Uini27S3ggke+RZw2jOsiNIC4dQNcePH/8mkVG0= Subject key identifier: EF:BB:89:D6:E9:8F:08:FB:40:EF:F9:B8:3C:3D:30:3C:18:3F:27:90 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 17B8D98ECD35560D06CAF480D03BC605F000328B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 0383 Signing time: Wed 03 Sep 2025 08:21:31 +0000 Manifest this update: Wed 03 Sep 2025 08:16:31 +0000 Manifest next update: Sat 06 Sep 2025 17:26:31 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: Oy1DprEzZh1i5Zkxi507aQoKj2jUjDhuys45AXrnlWQ=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:b8:d9:8e:cd:35:56:0d:06:ca:f4:80:d0:3b:c6:05:f0:00:32:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Sep 3 08:16:31 2025 GMT Not After : Sep 6 17:26:31 2025 GMT Subject: CN=EFBB89D6E98F08FB40EFF9B83C3D303C183F2790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:d8:70:b6:c3:0e:a6:c4:28:46:f8:2b:ab: 67:a0:d8:d6:97:32:11:f1:b3:79:c6:88:e5:6c:79: e7:e2:c5:f3:53:76:8f:ec:5d:30:84:4c:29:39:39: 79:36:58:14:7b:90:c8:68:19:0a:53:52:74:f4:2d: 42:06:ab:64:49:8f:6c:08:79:b2:cb:78:20:4f:cb: 4c:b6:92:08:a7:d2:50:e3:a9:4d:78:cc:5f:d3:04: b7:41:ce:e6:0c:74:89:ea:a9:93:ac:7d:b5:38:c6: 2f:d5:ff:66:05:f6:3f:a6:81:f8:3b:a5:3a:f3:d8: f9:40:19:e9:59:af:f4:a1:b1:86:19:ab:f6:05:c1: 07:ab:a0:08:ae:62:93:91:0a:1e:57:1d:97:87:97: d7:e5:9f:de:70:e0:4c:cf:40:d4:40:ba:0a:1d:a0: 43:c9:d8:a7:16:af:75:7d:ed:01:06:fb:32:2d:11: f5:7c:4d:dc:97:2c:12:92:a4:35:98:ba:18:81:fb: ce:0d:a7:f3:9a:df:45:b9:19:03:96:a7:b1:7e:4e: 69:4e:b7:4d:4c:6e:d3:56:71:d8:7a:c4:f8:0c:64: 94:34:60:fa:bc:6d:49:96:64:37:8b:e9:fc:06:d8: 1e:dc:29:38:ea:ec:f5:ff:34:24:1c:12:3e:fe:a0: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BB:89:D6:E9:8F:08:FB:40:EF:F9:B8:3C:3D:30:3C:18:3F:27:90 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d2:bd:12:cb:07:08:d1:f1:d8:2b:be:c9:7b:2c:58:7f:0e: 09:ac:dc:5f:37:2b:75:f1:31:07:ee:e1:7a:5a:3c:4e:16:0e: ce:00:ad:7c:b7:65:c8:94:ae:e9:57:65:98:3c:dc:f9:bf:fd: 11:f2:51:2e:ae:12:ca:97:dd:b6:ea:9b:bc:83:52:52:89:87: 62:51:5a:f7:18:a5:91:86:38:19:67:5c:fe:d9:4e:21:ab:13: 10:ba:d3:a5:b3:fd:e3:06:62:6e:fa:46:bb:5d:9e:17:16:7c: da:16:f0:f3:d7:b1:0e:1a:db:e2:25:9d:84:fb:6a:67:6a:23: c5:d1:de:c6:26:fa:49:34:14:04:01:17:90:c9:9a:ca:7a:2c: 8c:99:a3:6a:7e:2f:3a:43:97:c7:3d:f5:e5:b8:d9:40:48:2e: 1a:ab:c3:37:74:d5:54:ce:92:2f:2f:00:d2:8d:6a:aa:bb:32: d0:0b:3c:b0:b3:bd:96:ad:3a:71:37:9e:0b:71:ab:94:fc:ab: 90:1e:b2:65:4d:3c:4a:8f:ef:c6:93:81:bb:16:03:61:90:8e: 57:38:0a:ca:a5:cb:a0:c9:10:f1:5e:9c:a0:48:c9:4e:9b:1b: d9:e2:91:81:5a:26:76:b5:dc:79:67:a4:7f:94:9f:a5:4d:7d: e6:ae:b3:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF7jZjs01Vg0GyvSA0DvGBfAAMoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTA5MDMwODE2MzFaFw0yNTA5MDYxNzI2MzFaMDMxMTAvBgNV BAMTKEVGQkI4OUQ2RTk4RjA4RkI0MEVGRjlCODNDM0QzMDNDMTgzRjI3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdNhwtsMOpsQoRvgrq2eg2NaX MhHxs3nGiOVseefixfNTdo/sXTCETCk5OXk2WBR7kMhoGQpTUnT0LUIGq2RJj2wI ebLLeCBPy0y2kgin0lDjqU14zF/TBLdBzuYMdInqqZOsfbU4xi/V/2YF9j+mgfg7 pTrz2PlAGelZr/ShsYYZq/YFwQeroAiuYpORCh5XHZeHl9fln95w4EzPQNRAugod oEPJ2KcWr3V97QEG+zItEfV8TdyXLBKSpDWYuhiB+84Np/Oa30W5GQOWp7F+TmlO t01MbtNWcdh6xPgMZJQ0YPq8bUmWZDeL6fwG2B7cKTjq7PX/NCQcEj7+oPSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU77uJ1umPCPtA7/m4PD0wPBg/J5AwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3SvRLLBwjR8dgrvsl7LFh/Dgms3F83K3Xx MQfu4XpaPE4WDs4ArXy3ZciUrulXZZg83Pm//RHyUS6uEsqX3bbqm7yDUlKJh2JR WvcYpZGGOBlnXP7ZTiGrExC606Wz/eMGYm76RrtdnhcWfNoW8PPXsQ4a2+IlnYT7 amdqI8XR3sYm+kk0FAQBF5DJmsp6LIyZo2p+LzpDl8c99eW42UBILhqrwzd01VTO ki8vANKNaqq7MtALPLCzvZatOnE3ngtxq5T8q5AesmVNPEqP78aTgbsWA2GQjlc4 Csqly6DJEPFenKBIyU6bG9nikYFaJna13HlnpH+Un6VNfeaus9c= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:30 2025 by rpki-client