$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: NT4znQgziAR53ByvEtkgdNb7u7R/9iZcio0nRlvh8X0= Subject key identifier: B7:15:DE:54:2D:EC:E2:BD:1F:AE:F9:A5:09:54:00:7C:50:38:F1:70 Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 6D8CF226D117D62B8B983C4E2D5BC263D09B9FD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 01C0 Signing time: Sat 05 Apr 2025 16:21:12 +0000 Manifest this update: Sat 05 Apr 2025 16:16:12 +0000 Manifest next update: Tue 08 Apr 2025 18:58:12 +0000 Files and hashes: 1: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: e9TdmCWp4FKETeJVETkwg/we/5pgv8i2hIz0rGQhmyw=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: BrAZK6t4rNqxbvw5hbo0N9Bep4jWhJ5dcPoSe1WYzIY=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: AKzYRBKAgaDMXTDjMBdoks0xvDWlgZswunocDWfSChs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8c:f2:26:d1:17:d6:2b:8b:98:3c:4e:2d:5b:c2:63:d0:9b:9f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Apr 5 16:16:12 2025 GMT Not After : Apr 8 18:58:12 2025 GMT Subject: CN=B715DE542DECE2BD1FAEF9A50954007C5038F170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:fa:d3:0e:1e:b2:98:b5:4c:ed:6a:2c:88: 5c:9a:e3:63:49:38:3d:de:df:f2:96:5a:a1:d1:c2: 78:48:52:79:83:86:9e:6d:7d:9b:0a:08:49:7e:56: 68:d8:e7:cf:9c:0f:ad:86:9e:81:7f:e2:c6:e9:c9: 12:46:5d:6b:60:6c:7a:8b:6d:d3:16:ab:6e:67:c0: ac:53:09:d2:92:46:e4:1f:94:96:30:62:89:35:44: bf:3b:07:bc:17:7a:e8:70:a1:bb:fc:22:3f:ab:98: 18:76:1f:18:5b:62:92:27:e6:6d:4d:22:1e:dd:d6: 2b:4a:7b:ae:8b:4a:d6:91:b2:4d:44:31:40:64:0b: 88:ab:ef:2a:c6:54:77:a2:3e:8f:92:ee:27:81:65: a5:9c:ce:a2:27:06:ea:f8:cb:78:fd:3c:e6:f8:d5: d7:1c:a0:80:18:49:be:25:68:13:b3:b2:f3:be:f6: 72:56:80:45:14:43:83:c8:0d:f1:84:5d:2d:b5:f0: 9b:dc:27:b4:04:25:42:04:89:9d:38:48:4f:23:8c: 41:ad:e9:cc:0a:6d:92:87:5d:ec:5a:8c:bf:34:0d: c0:a6:23:1e:58:4b:a2:a8:41:3b:d5:41:3e:de:86: 19:c6:1b:d1:2a:c6:4c:21:7e:12:a2:d4:4c:9f:96: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:DE:54:2D:EC:E2:BD:1F:AE:F9:A5:09:54:00:7C:50:38:F1:70 X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f1:ce:5b:3f:71:1f:17:2d:54:a5:bc:0a:97:a4:d4:70:fc: 89:73:2c:33:f7:55:04:0d:b9:f5:2f:e6:aa:d9:b4:1a:22:83: 22:c1:d2:5a:6e:21:61:30:6f:c7:55:86:e0:31:3b:82:7d:62: 50:81:1f:c1:04:a7:42:a7:2a:a0:ab:c1:62:5a:1f:8c:a7:01: 0d:3d:80:e0:5e:38:9d:f0:8d:55:be:df:20:94:5d:11:e1:d4: 3d:40:56:e6:ca:0f:8d:8e:77:e3:1b:38:12:75:63:e1:39:bb: ec:2a:31:1b:ce:ee:11:c2:93:e3:7f:55:7a:07:99:0b:81:7c: b6:da:a0:e5:6c:0f:08:0f:f8:b4:86:49:64:c2:fb:e2:a4:6b: 0c:75:57:ef:58:fa:fa:fd:bb:87:45:5c:99:5f:be:0f:4c:2d: 0d:78:67:da:9c:d6:73:4e:5c:b7:00:d2:eb:1a:24:26:83:35: aa:41:f3:6d:6f:09:5c:63:11:96:18:6e:61:ba:f3:77:87:bf: c6:b0:a2:83:a8:b8:d1:e3:a4:cd:17:5d:6e:a2:47:51:28:20: f7:05:c3:db:53:f2:81:72:5a:27:43:4f:fa:4b:05:fa:54:df: 41:b3:59:7a:b6:19:05:62:67:d7:55:04:36:4c:70:9b:3e:ae: 80:56:c1:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYzyJtEX1iuLmDxOLVvCY9Cbn9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA0MDUxNjE2MTJaFw0yNTA0MDgxODU4MTJaMDMxMTAvBgNV BAMTKEI3MTVERTU0MkRFQ0UyQkQxRkFFRjlBNTA5NTQwMDdDNTAzOEYxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKLfrTDh6ymLVM7WosiFya42NJ OD3e3/KWWqHRwnhIUnmDhp5tfZsKCEl+VmjY58+cD62GnoF/4sbpyRJGXWtgbHqL bdMWq25nwKxTCdKSRuQflJYwYok1RL87B7wXeuhwobv8Ij+rmBh2HxhbYpIn5m1N Ih7d1itKe66LStaRsk1EMUBkC4ir7yrGVHeiPo+S7ieBZaWczqInBur4y3j9POb4 1dccoIAYSb4laBOzsvO+9nJWgEUUQ4PIDfGEXS218JvcJ7QEJUIEiZ04SE8jjEGt 6cwKbZKHXexajL80DcCmIx5YS6KoQTvVQT7ehhnGG9EqxkwhfhKi1EyfltAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtxXeVC3s4r0frvmlCVQAfFA48XAwHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzxzls/cR8XLVSlvAqXpNRw/IlzLDP3VQQN ufUv5qrZtBoigyLB0lpuIWEwb8dVhuAxO4J9YlCBH8EEp0KnKqCrwWJaH4ynAQ09 gOBeOJ3wjVW+3yCUXRHh1D1AVubKD42Od+MbOBJ1Y+E5u+wqMRvO7hHCk+N/VXoH mQuBfLbaoOVsDwgP+LSGSWTC++Kkawx1V+9Y+vr9u4dFXJlfvg9MLQ14Z9qc1nNO XLcA0usaJCaDNapB821vCVxjEZYYbmG683eHv8awooOouNHjpM0XXW6iR1EoIPcF w9tT8oFyWidDT/pLBfpU30GzWXq2GQViZ9dVBDZMcJs+roBWwWw= -----END CERTIFICATE-----Generated at Sat Apr 5 19:11:16 2025 by rpki-client