$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: lT1FxFi5yiCr6yN6zXYoA9qZ/4S9n4H8fSG2buXEdJo= Subject key identifier: E9:7E:9C:F4:C8:94:A9:D3:94:B6:8E:DE:9F:CB:AE:27:90:8A:94:88 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 75E3B33D43CABF1AC8E927FFFDA2D74D7234DEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 033C Signing time: Tue 03 Jun 2025 13:00:26 +0000 Manifest this update: Tue 03 Jun 2025 12:55:26 +0000 Manifest next update: Fri 06 Jun 2025 19:07:26 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: KYfGYE7f4ZPvmEBiJx9K8K02fB0f+eyjl9ugU3Nvsfw=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:b3:3d:43:ca:bf:1a:c8:e9:27:ff:fd:a2:d7:4d:72:34:de:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Jun 3 12:55:26 2025 GMT Not After : Jun 6 19:07:26 2025 GMT Subject: CN=E97E9CF4C894A9D394B68EDE9FCBAE27908A9488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:a2:bc:cb:d8:b4:44:da:8b:9d:88:d3:65: 7a:a4:50:ae:cd:b0:4c:66:6c:58:2a:2e:6e:98:90: f3:aa:b2:07:be:fd:46:c6:c9:4e:d8:87:ba:f7:1b: 26:0f:c5:73:cb:17:3d:69:68:53:74:30:dc:9a:72: 29:e8:c9:e9:94:11:44:ed:53:e0:99:df:26:52:1e: 08:e0:5a:e8:9a:25:e2:85:0c:a6:e0:ab:f6:a1:db: 35:fd:db:c3:61:c8:25:c6:8c:6a:d3:d7:c0:c3:35: 58:11:af:2b:87:69:cf:21:c7:e0:14:8c:71:4a:e9: 93:15:79:19:e4:54:8c:fc:be:f0:ee:3a:d5:85:c9: 16:25:df:a7:48:ea:00:67:97:fb:31:b0:96:10:1b: 2f:10:50:ea:a1:11:e0:35:18:b6:3b:fb:83:94:b4: e3:6a:9d:c1:28:c2:ee:e0:92:d8:33:28:55:58:f4: 25:41:2e:42:1f:1a:10:ad:4a:ff:01:0e:72:ca:46: 56:70:da:f6:e5:55:df:50:d9:ac:91:40:27:93:c6: 75:46:75:4b:a5:16:b2:4f:c3:80:8a:b7:70:02:70: a0:15:b1:9b:16:9b:98:c3:12:2c:33:52:f5:99:0e: c3:b2:39:c6:df:3f:cf:c3:18:b0:b4:71:84:ba:43: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7E:9C:F4:C8:94:A9:D3:94:B6:8E:DE:9F:CB:AE:27:90:8A:94:88 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:41:d6:d0:09:f1:c2:da:71:26:76:89:01:fa:58:3c:8e:3d: c9:af:4e:b7:d0:1e:6a:3b:5e:4e:16:08:d2:3c:86:d5:b9:d0: 79:ae:a4:b0:6a:8e:7e:7b:dd:a8:4e:cd:2b:f8:b4:43:cd:03: da:4b:4f:82:b5:7c:0b:e2:53:64:89:f6:bc:c2:1a:89:46:6f: 36:f2:4a:61:8a:91:8a:a1:1e:2a:80:21:6b:bb:2a:10:83:05: c8:30:00:63:d9:74:96:f9:f6:25:ad:de:18:44:d1:7b:c8:9a: a5:18:3a:aa:a2:2e:7d:af:87:fd:a8:60:f7:63:e4:1a:b4:11: 93:89:c4:d1:82:d0:22:b3:f4:41:11:1e:d7:8b:b5:47:16:56: df:59:85:57:9b:f5:14:53:bb:fb:8a:4b:b1:26:db:89:59:28: e3:72:77:10:cd:7b:e4:f5:a4:28:94:8b:5c:64:26:c2:79:21: d8:a5:a1:ea:57:ee:6e:37:09:35:ee:b8:54:a5:98:e8:ac:63: e5:2f:b2:61:d6:f7:2e:1a:fc:8b:fd:36:94:cf:02:33:5c:c0: 85:79:1c:7b:74:40:99:68:0c:a0:4f:ec:36:a6:e5:73:8c:8b: 58:81:10:14:d5:9d:95:de:98:d5:e3:1a:2d:fa:48:03:0a:2e: 61:d9:74:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeOzPUPKvxrI6Sf//aLXTXI03vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA2MDMxMjU1MjZaFw0yNTA2MDYxOTA3MjZaMDMxMTAvBgNV BAMTKEU5N0U5Q0Y0Qzg5NEE5RDM5NEI2OEVERTlGQ0JBRTI3OTA4QTk0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeIqK8y9i0RNqLnYjTZXqkUK7N sExmbFgqLm6YkPOqsge+/UbGyU7Yh7r3GyYPxXPLFz1paFN0MNyacinoyemUEUTt U+CZ3yZSHgjgWuiaJeKFDKbgq/ah2zX928NhyCXGjGrT18DDNVgRryuHac8hx+AU jHFK6ZMVeRnkVIz8vvDuOtWFyRYl36dI6gBnl/sxsJYQGy8QUOqhEeA1GLY7+4OU tONqncEowu7gktgzKFVY9CVBLkIfGhCtSv8BDnLKRlZw2vblVd9Q2ayRQCeTxnVG dUulFrJPw4CKt3ACcKAVsZsWm5jDEiwzUvWZDsOyOcbfP8/DGLC0cYS6Qy8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6X6c9MiUqdOUto7en8uuJ5CKlIgwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdB1tAJ8cLacSZ2iQH6WDyOPcmvTrfQHmo7 Xk4WCNI8htW50HmupLBqjn573ahOzSv4tEPNA9pLT4K1fAviU2SJ9rzCGolGbzby SmGKkYqhHiqAIWu7KhCDBcgwAGPZdJb59iWt3hhE0XvImqUYOqqiLn2vh/2oYPdj 5Bq0EZOJxNGC0CKz9EERHteLtUcWVt9ZhVeb9RRTu/uKS7Em24lZKONydxDNe+T1 pCiUi1xkJsJ5IdiloepX7m43CTXuuFSlmOisY+UvsmHW9y4a/Iv9NpTPAjNcwIV5 HHt0QJloDKBP7Dam5XOMi1iBEBTVnZXemNXjGi36SAMKLmHZdFM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:55 2025 by rpki-client