$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: bwqQ06sVWdPzBl+CfQl/Shh9Ha4e8u9rcBMYjqbVu6Y= Subject key identifier: 1B:02:00:12:BC:E9:67:CD:F5:43:12:04:BF:91:A4:FA:C0:94:1A:4F Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 3401293D5482CBA6B32F7FD0946D313F2CE1D7BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0365 Signing time: Thu 04 Sep 2025 14:00:04 +0000 Manifest this update: Thu 04 Sep 2025 13:55:04 +0000 Manifest next update: Sun 07 Sep 2025 20:01:04 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: lhttU68vQQvkWm+orXvI6U5r5lIFeD361okmTKEmDgw=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:01:29:3d:54:82:cb:a6:b3:2f:7f:d0:94:6d:31:3f:2c:e1:d7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Sep 4 13:55:04 2025 GMT Not After : Sep 7 20:01:04 2025 GMT Subject: CN=1B020012BCE967CDF5431204BF91A4FAC0941A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:45:b6:34:d9:fb:7f:aa:55:c2:30:19:53:80: 16:1d:0e:4b:b5:68:0e:1f:8f:00:d6:e0:c6:86:b6: b9:e9:4e:fb:d5:d4:bc:a5:8a:10:1b:87:45:70:23: fb:9c:e2:ff:51:05:1b:9f:ff:fe:8c:67:78:a1:2f: 72:e4:68:c9:e7:1c:b9:21:95:df:49:25:a6:51:5b: cb:2a:92:12:61:f5:39:1c:e9:50:4a:0f:1f:4b:f0: 7b:6a:bf:60:f4:f0:6c:8b:0f:ea:36:90:02:7c:24: cb:c2:27:6d:0e:2e:23:2a:c0:73:9b:e1:81:00:ca: 78:07:3d:4a:0f:37:73:ec:a5:dc:3c:96:97:68:21: fe:3c:a3:38:db:f4:66:b8:23:a7:b2:2f:b7:04:ca: 30:3c:28:47:c1:b1:81:f4:a8:c1:f8:92:74:6e:a0: d5:69:95:69:fd:3f:52:a5:16:12:79:67:6d:6a:e5: 4b:b9:24:91:13:db:3e:ff:60:7c:7d:46:7b:e8:e7: 4a:b5:bf:34:c1:d3:da:72:f7:c9:a2:09:93:d9:e5: ea:5b:b6:e0:e0:53:14:25:c9:a8:22:10:d0:e1:cb: 92:e5:df:58:20:b0:19:3a:64:9d:c0:3e:da:26:0a: 1a:b7:f1:a7:8f:9c:8f:6e:31:49:b3:34:46:93:11: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:02:00:12:BC:E9:67:CD:F5:43:12:04:BF:91:A4:FA:C0:94:1A:4F X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6f:ce:47:61:fa:a6:45:fa:d7:c0:b9:20:97:e6:b1:2e:ce: 2b:24:27:64:45:03:eb:9d:bd:4d:08:12:80:86:26:1d:ea:2f: cc:90:11:81:a4:ba:05:97:d6:fb:47:8d:51:a9:80:09:1d:cc: 12:a6:0a:75:da:49:94:4a:02:b9:4a:1b:99:05:b4:ab:6b:d0: b6:56:43:0a:12:c5:55:51:87:18:3c:f4:34:9d:4f:27:14:4a: 44:21:d6:02:6c:ad:a0:a2:5b:a8:67:2c:bc:4e:a5:f1:93:d4: 4e:22:54:5e:9b:b8:53:b7:5f:6f:bd:b9:2f:40:6b:85:41:fe: 67:9b:71:00:e5:f2:7f:22:70:d1:79:76:54:75:cd:a7:af:2c: 54:f3:b5:55:ba:85:77:a5:cb:c4:b5:6e:04:1c:11:a6:55:04: 1d:9e:97:16:d8:db:cd:54:aa:64:39:9f:d9:17:bb:b7:0b:d5: cd:fa:ec:83:f1:f8:78:f2:db:54:11:3a:ce:56:f2:4f:d7:1a: 26:ca:c0:22:af:28:81:ca:35:25:2e:98:3c:18:1e:f6:e0:e4: e0:6e:60:e6:70:9a:61:c7:6b:51:a4:18:04:ef:14:b7:d2:a9: a2:69:31:f6:89:bc:8f:a2:90:1d:2a:c1:bc:58:21:14:c3:98: 0d:e0:42:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAEpPVSCy6azL3/QlG0xPyzh170wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA5MDQxMzU1MDRaFw0yNTA5MDcyMDAxMDRaMDMxMTAvBgNV BAMTKDFCMDIwMDEyQkNFOTY3Q0RGNTQzMTIwNEJGOTFBNEZBQzA5NDFBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvRbY02ft/qlXCMBlTgBYdDku1 aA4fjwDW4MaGtrnpTvvV1LylihAbh0VwI/uc4v9RBRuf//6MZ3ihL3LkaMnnHLkh ld9JJaZRW8sqkhJh9Tkc6VBKDx9L8Htqv2D08GyLD+o2kAJ8JMvCJ20OLiMqwHOb 4YEAyngHPUoPN3Pspdw8lpdoIf48ozjb9Ga4I6eyL7cEyjA8KEfBsYH0qMH4knRu oNVplWn9P1KlFhJ5Z21q5Uu5JJET2z7/YHx9Rnvo50q1vzTB09py98miCZPZ5epb tuDgUxQlyagiENDhy5Ll31ggsBk6ZJ3APtomChq38aePnI9uMUmzNEaTEXxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGwIAErzpZ831QxIEv5Gk+sCUGk8wHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZvzkdh+qZF+tfAuSCX5rEuziskJ2RFA+ud vU0IEoCGJh3qL8yQEYGkugWX1vtHjVGpgAkdzBKmCnXaSZRKArlKG5kFtKtr0LZW QwoSxVVRhxg89DSdTycUSkQh1gJsraCiW6hnLLxOpfGT1E4iVF6buFO3X2+9uS9A a4VB/mebcQDl8n8icNF5dlR1zaevLFTztVW6hXely8S1bgQcEaZVBB2elxbY281U qmQ5n9kXu7cL1c367IPx+Hjy21QROs5W8k/XGibKwCKvKIHKNSUumDwYHvbg5OBu YOZwmmHHa1GkGATvFLfSqaJpMfaJvI+ikB0qwbxYIRTDmA3gQpc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:55 2025 by rpki-client