$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft File: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft (raw, json) Hash identifier: 0nIg2huTwq5R+b07wpunX13aOKzbf5hSK7U9fjk8xLw= Subject key identifier: BF:A8:F2:F6:4F:1E:71:6B:1A:39:5C:66:E1:68:4D:5C:80:5B:AB:5E Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF Certificate issuer: /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Certificate serial: 652711A058614D3B6B2F74769523D433D4501102 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft Manifest number: 0206 Signing time: Sun 07 Sep 2025 07:41:14 +0000 Manifest this update: Sun 07 Sep 2025 07:36:14 +0000 Manifest next update: Wed 10 Sep 2025 14:11:14 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: xAai3p26XX1xxTYFo4/mvtaGpTmWTezOa6RZ9bvp864=) 2: 68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl (hash: QIovW3oJVwH4fmLU1caSlciQA6te4X2s/1NPIn8cmmE=) 3: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: vbbBs8uTgIHRSL2AHGhA2HuBp098ICBPDqBGcViwl94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:27:11:a0:58:61:4d:3b:6b:2f:74:76:95:23:d4:33:d4:50:11:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF Validity Not Before: Sep 7 07:36:14 2025 GMT Not After : Sep 10 14:11:14 2025 GMT Subject: CN=BFA8F2F64F1E716B1A395C66E1684D5C805BAB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:fd:3f:10:b3:5f:b4:80:25:8e:7b:b8:b8: 85:e0:87:bf:7d:da:e3:a5:7e:3c:a9:f3:cd:64:5e: b8:cf:57:54:2f:c5:cf:17:72:e6:c8:7b:fa:37:c7: dd:e2:0b:c3:93:39:ab:74:53:ae:e9:12:ea:77:b4: c2:c9:1b:f7:4a:c0:18:a3:0f:6e:7b:e4:1f:34:e4: c3:a6:e5:af:24:cb:be:ad:82:79:27:4d:6b:b7:49: ec:25:2a:8c:ff:68:79:39:7d:43:7a:05:bb:0d:2b: 1e:43:af:5e:24:19:0b:47:06:3a:95:c3:3a:83:37: f7:1f:9e:12:9b:17:b2:81:cb:67:35:9f:1f:6c:c9: c6:41:ae:65:5d:df:63:ee:fc:d1:7c:74:7a:33:34: c1:b2:f1:02:fa:e9:a4:74:3f:64:68:6b:ef:0c:e9: 62:fe:f4:83:1d:8f:20:b0:9c:c2:3f:e1:0b:79:d5: 22:fa:f2:7e:4f:ce:5d:43:a4:bf:1f:d0:ed:ab:81: 00:be:f8:d2:09:71:6d:71:07:0e:c6:a5:96:de:b5: 39:6b:bc:77:77:97:33:1b:34:26:e1:3e:a1:05:3e: 18:ff:9d:70:52:08:8d:1d:68:ab:d2:11:a4:ff:be: 8f:26:f8:a0:5e:69:5e:e9:96:d8:4f:ab:9d:0a:3b: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A8:F2:F6:4F:1E:71:6B:1A:39:5C:66:E1:68:4D:5C:80:5B:AB:5E X509v3 Authority Key Identifier: keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4f:4f:f9:f0:23:72:c5:72:c9:a7:95:1b:fd:24:61:aa:77: 42:5b:e6:f2:28:35:a4:6b:ac:fe:9b:db:cf:f5:0c:ed:85:9c: 53:01:3c:8f:77:42:de:59:95:6a:3f:c0:28:66:9e:cf:5a:df: 8e:9a:22:e3:ac:4a:92:d9:33:08:9f:02:54:a3:e0:56:21:a3: 2d:e9:a8:98:cb:08:db:db:43:d4:e7:ae:af:8f:e3:b9:f1:bd: de:36:41:1d:15:8c:5a:5e:2c:11:09:b2:2d:fa:43:80:a5:67: 3f:71:d8:db:80:f9:24:cc:a7:01:88:2d:a2:84:dd:0b:cc:e0: d1:4f:ea:84:95:e5:d1:0e:6d:a4:13:8a:35:33:c0:fa:a7:b0: 92:05:41:52:0b:0e:47:ed:bb:6a:f2:d1:14:c4:52:98:36:25: 00:0f:93:d1:40:e5:0f:56:44:6a:0a:65:d9:ab:4a:1b:29:f0: 57:95:e3:1b:77:6c:32:cf:08:ca:c7:23:9a:53:92:7d:f3:d2: aa:aa:14:7a:31:91:2e:3e:b9:4f:69:f5:67:f9:a0:02:9b:2d: 52:e8:16:cf:8b:ff:46:ee:83:a3:c8:b4:e6:18:54:2a:a4:92: 75:36:10:b1:dd:4b:ad:12:57:fa:8c:c7:c2:1e:49:8b:b4:9a: 81:a1:bf:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZScRoFhhTTtrL3R2lSPUM9RQEQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2 MDAxRUVGRjAeFw0yNTA5MDcwNzM2MTRaFw0yNTA5MTAxNDExMTRaMDMxMTAvBgNV BAMTKEJGQThGMkY2NEYxRTcxNkIxQTM5NUM2NkUxNjg0RDVDODA1QkFCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9/0/ELNftIAljnu4uIXgh799 2uOlfjyp881kXrjPV1Qvxc8XcubIe/o3x93iC8OTOat0U67pEup3tMLJG/dKwBij D2575B805MOm5a8ky76tgnknTWu3SewlKoz/aHk5fUN6BbsNKx5Dr14kGQtHBjqV wzqDN/cfnhKbF7KBy2c1nx9sycZBrmVd32Pu/NF8dHozNMGy8QL66aR0P2Roa+8M 6WL+9IMdjyCwnMI/4Qt51SL68n5Pzl1DpL8f0O2rgQC++NIJcW1xBw7GpZbetTlr vHd3lzMbNCbhPqEFPhj/nXBSCI0daKvSEaT/vo8m+KBeaV7plthPq50KO+OvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6jy9k8ecWsaOVxm4WhNXIBbq14wHwYDVR0j BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx RUVGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURG MEE2MDAxRUVGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJPT/nwI3LFcsmnlRv9JGGqd0Jb5vIoNaRr rP6b28/1DO2FnFMBPI93Qt5ZlWo/wChmns9a346aIuOsSpLZMwifAlSj4FYhoy3p qJjLCNvbQ9Tnrq+P47nxvd42QR0VjFpeLBEJsi36Q4ClZz9x2NuA+STMpwGILaKE 3QvM4NFP6oSV5dEObaQTijUzwPqnsJIFQVILDkftu2ry0RTEUpg2JQAPk9FA5Q9W RGoKZdmrShsp8FeV4xt3bDLPCMrHI5pTkn3z0qqqFHoxkS4+uU9p9Wf5oAKbLVLo Fs+L/0bug6PItOYYVCqkknU2ELHdS60SV/qMx8IeSYu0moGhv/Q= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:45 2025 by rpki-client