$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: dbXVjv1sV5zj1x09iRn4Sq4plF6WZTWOnHj+3V5POUc= Subject key identifier: D1:25:A4:5B:A9:83:5C:2F:B7:74:8C:CF:48:4B:F5:BD:84:48:E0:42 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 29AD81EF3CBC0E397E95D3329A68DD2817D5BF21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0351 Signing time: Mon 21 Jul 2025 09:10:04 +0000 Manifest this update: Mon 21 Jul 2025 09:05:04 +0000 Manifest next update: Thu 24 Jul 2025 19:33:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: hML+SFkcDtuLr6/jYOCf+wnZHi06JSV8UeO7exjIvxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 19:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ad:81:ef:3c:bc:0e:39:7e:95:d3:32:9a:68:dd:28:17:d5:bf:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Jul 21 09:05:04 2025 GMT Not After : Jul 24 19:33:04 2025 GMT Subject: CN=D125A45BA9835C2FB7748CCF484BF5BD8448E042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:64:8e:25:01:8a:67:aa:bc:d4:98:fb:7c: bc:a0:81:1d:97:ee:06:67:f5:51:76:67:e0:55:37: 84:77:a2:c1:1a:92:6b:15:33:70:99:9b:41:8a:65: 11:42:ce:75:a5:0c:f4:1d:c4:1e:15:6e:b0:c0:3e: cf:49:eb:5f:6d:b8:e6:5c:08:e7:20:26:86:6b:09: ba:18:67:d7:32:65:22:68:90:50:e2:f1:ad:f7:64: 25:c1:fa:e1:23:a0:11:ec:81:f4:87:21:9d:ae:7c: e4:a2:e2:d6:d5:af:a0:e4:64:2e:fc:eb:f9:e3:3e: f7:26:20:cb:50:e3:87:3b:fc:78:83:6a:af:3a:f1: 29:4c:90:27:23:01:ce:e1:5e:0f:1d:3d:0a:d6:1a: 98:f8:54:13:26:3b:8d:77:40:d3:eb:a3:3c:73:62: 5e:c8:12:30:c7:bb:15:1c:5d:a9:e2:3b:6b:39:a4: 24:ed:e2:da:6e:0b:f0:5d:57:0c:5e:e2:73:82:3c: 19:94:31:af:38:7c:6f:c6:66:89:a1:aa:9f:8a:de: 1f:97:77:50:f6:7e:60:b7:c9:6d:a7:33:74:2d:c2: 02:8a:e2:d4:f6:dc:c2:00:eb:45:53:1f:02:f2:e3: 2e:5f:5b:d9:8d:ec:2b:cb:7f:72:6a:b8:04:7a:56: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:25:A4:5B:A9:83:5C:2F:B7:74:8C:CF:48:4B:F5:BD:84:48:E0:42 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:36:d2:f5:95:1b:2b:f9:a0:28:64:ca:59:b9:9f:fe:d3:96: ed:34:51:9c:f5:25:59:16:8d:4c:2e:d3:1b:46:5f:ad:9f:ab: df:9f:4a:95:e1:44:a2:46:64:7f:d7:26:50:2b:7b:a2:62:5d: be:58:e9:72:09:a7:0b:e9:36:ec:85:d8:11:38:b9:51:16:d0: be:e2:9d:a6:95:2c:10:55:ee:60:37:bd:e8:4d:80:d8:0b:e3: f4:10:ef:48:84:f4:ee:20:f5:18:2d:fe:4a:18:30:9b:a4:97: 79:ea:0c:07:e7:c5:71:32:da:42:ba:16:48:08:63:b0:30:4c: 98:92:a6:a9:c5:8b:93:21:2c:19:fa:46:18:2c:2a:53:cf:53: a3:9c:0b:5f:80:1c:ad:b4:d5:4d:42:4e:5c:48:9b:00:6b:dc: b8:d1:d0:8a:bf:f6:a1:76:72:bf:a1:7d:5c:d5:ed:29:76:f2: 6b:50:b0:31:94:d0:81:84:22:99:29:ff:e7:c8:70:3e:79:23: 61:d6:0e:c5:ce:46:4c:f8:4f:fd:02:b2:09:35:5b:e4:ef:3d: 32:09:66:a6:6a:d1:44:6e:56:07:81:08:de:34:3f:d5:dc:4e: 43:e8:7d:5b:8d:ee:65:a6:eb:ae:99:89:4e:2d:40:0e:2d:82: fa:30:e9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKa2B7zy8Djl+ldMymmjdKBfVvyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA3MjEwOTA1MDRaFw0yNTA3MjQxOTMzMDRaMDMxMTAvBgNV BAMTKEQxMjVBNDVCQTk4MzVDMkZCNzc0OENDRjQ4NEJGNUJEODQ0OEUwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhWSOJQGKZ6q81Jj7fLyggR2X 7gZn9VF2Z+BVN4R3osEakmsVM3CZm0GKZRFCznWlDPQdxB4VbrDAPs9J619tuOZc COcgJoZrCboYZ9cyZSJokFDi8a33ZCXB+uEjoBHsgfSHIZ2ufOSi4tbVr6DkZC78 6/njPvcmIMtQ44c7/HiDaq868SlMkCcjAc7hXg8dPQrWGpj4VBMmO413QNProzxz Yl7IEjDHuxUcXaniO2s5pCTt4tpuC/BdVwxe4nOCPBmUMa84fG/GZomhqp+K3h+X d1D2fmC3yW2nM3QtwgKK4tT23MIA60VTHwLy4y5fW9mN7CvLf3JquAR6VqwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SWkW6mDXC+3dIzPSEv1vYRI4EIwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF420vWVGyv5oChkylm5n/7Tlu00UZz1JVkW jUwu0xtGX62fq9+fSpXhRKJGZH/XJlAre6JiXb5Y6XIJpwvpNuyF2BE4uVEW0L7i naaVLBBV7mA3vehNgNgL4/QQ70iE9O4g9Rgt/koYMJukl3nqDAfnxXEy2kK6FkgI Y7AwTJiSpqnFi5MhLBn6RhgsKlPPU6OcC1+AHK201U1CTlxImwBr3LjR0Iq/9qF2 cr+hfVzV7Sl28mtQsDGU0IGEIpkp/+fIcD55I2HWDsXORkz4T/0Csgk1W+TvPTIJ ZqZq0URuVgeBCN40P9XcTkPofVuN7mWm666ZiU4tQA4tgvow6bo= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:57 2025 by rpki-client