$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: X0nlPwOXJq9NYizTsrYggBDVd8W+9lhzEMm3ARXSFwU= Subject key identifier: 31:86:AC:2A:0B:B5:F7:54:31:6F:53:56:05:78:FD:0E:5D:15:2B:CD Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 4723FB69D10F83213845F632CF23E2B14DD8A7A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0321 Signing time: Fri 04 Apr 2025 13:00:04 +0000 Manifest this update: Fri 04 Apr 2025 12:55:04 +0000 Manifest next update: Mon 07 Apr 2025 20:17:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: TxX16foFHY0P9rLHty/t34aBTRsPGLAmfWGkOzCDIEU=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: 9ypchOunCbbSJJOtfcLDtonTySqUlYi98qevtT8v/+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:23:fb:69:d1:0f:83:21:38:45:f6:32:cf:23:e2:b1:4d:d8:a7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Apr 4 12:55:04 2025 GMT Not After : Apr 7 20:17:04 2025 GMT Subject: CN=3186AC2A0BB5F754316F53560578FD0E5D152BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:aa:22:c3:ad:19:fe:3b:f2:0e:85:f1:11: d0:97:ad:db:92:d3:7d:98:93:34:63:55:aa:1f:ba: bb:2e:0d:3b:92:ce:cf:67:b7:dd:bd:0d:97:64:af: d7:66:e3:c9:ed:3b:81:0d:3d:46:e7:58:6a:9e:a6: bc:5b:27:ab:45:ca:9c:2d:d9:ea:a9:ba:41:36:dd: b1:b7:3c:1a:76:ce:3c:8b:9c:cf:06:d9:4f:3f:90: b7:ab:9f:69:84:f1:93:aa:b7:3a:77:52:60:5e:a4: 32:bb:b3:a9:87:ca:b7:d6:87:11:42:95:04:5c:d7: 31:06:1d:75:2b:f2:31:3e:df:8c:91:40:c9:92:f0: 2e:64:0f:ce:50:bd:0f:d7:64:0e:4a:78:e3:89:c3: 08:ae:6a:6f:d4:f7:74:d5:23:12:38:41:82:e3:47: a7:42:bd:12:62:8b:f4:cc:21:31:2b:68:42:66:b5: 58:ba:38:02:8a:d2:b9:74:b4:5a:65:90:d5:af:fe: df:74:ba:1f:5e:4e:7f:b2:b0:2d:6a:e4:16:34:2b: cc:6f:ec:60:86:0d:db:1a:cc:e0:9d:f7:24:0a:dd: 0b:ed:47:ec:5f:ed:a2:50:5e:9a:85:2d:ca:1d:1d: 05:a3:bd:c6:f7:de:e4:2e:e9:95:d9:34:a8:40:2e: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:AC:2A:0B:B5:F7:54:31:6F:53:56:05:78:FD:0E:5D:15:2B:CD X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:79:d5:c5:1b:24:8f:d8:26:d7:5a:e1:df:47:60:b0:6d: cb:50:6e:db:35:4e:70:0c:ed:b4:50:c5:2c:13:8e:40:c6:bb: 90:12:a1:b5:28:d8:a4:30:25:5c:77:a2:28:f0:1f:31:68:1c: 0b:0b:90:3a:c9:e0:5f:18:36:28:61:ea:3b:09:f3:8b:1a:ad: dd:f8:e4:4b:9c:be:1a:2c:ad:f8:67:d7:65:a1:16:6a:56:47: 5d:1a:1a:1e:de:bd:d0:10:a4:10:ce:0b:7f:53:a7:7c:4e:1e: 04:19:d8:52:0d:26:73:6a:66:b6:3f:8a:e8:61:7a:dc:55:5e: 59:bf:4c:89:ae:df:25:48:af:e1:9a:65:10:f9:2a:bb:1a:6f: 6e:86:71:87:cd:76:a6:96:81:3e:7c:c5:b5:cf:22:9a:da:4e: be:46:c4:57:a8:86:e3:ff:01:c7:6f:85:7d:a1:4d:21:b9:39: 62:8f:a5:f9:07:0e:a8:be:c0:04:72:74:ea:36:bf:e4:b2:a2: ef:31:10:d9:8a:d8:85:5f:64:85:9e:10:11:f6:08:0c:97:a6: d7:7a:ad:bc:b9:d8:60:61:01:65:2a:7c:91:2a:73:1d:c2:b6: 01:71:0d:40:21:db:8a:52:7e:9b:ff:99:1a:a7:4b:7c:ce:a7: c7:81:3d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyP7adEPgyE4RfYyzyPisU3Yp6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA0MDQxMjU1MDRaFw0yNTA0MDcyMDE3MDRaMDMxMTAvBgNV BAMTKDMxODZBQzJBMEJCNUY3NTQzMTZGNTM1NjA1NzhGRDBFNUQxNTJCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrKoiw60Z/jvyDoXxEdCXrduS 032YkzRjVaofursuDTuSzs9nt929DZdkr9dm48ntO4ENPUbnWGqeprxbJ6tFypwt 2eqpukE23bG3PBp2zjyLnM8G2U8/kLern2mE8ZOqtzp3UmBepDK7s6mHyrfWhxFC lQRc1zEGHXUr8jE+34yRQMmS8C5kD85QvQ/XZA5KeOOJwwiuam/U93TVIxI4QYLj R6dCvRJii/TMITEraEJmtVi6OAKK0rl0tFplkNWv/t90uh9eTn+ysC1q5BY0K8xv 7GCGDdsazOCd9yQK3QvtR+xf7aJQXpqFLcodHQWjvcb33uQu6ZXZNKhALk5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMYasKgu191Qxb1NWBXj9Dl0VK80wHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfUedXFGySP2CbXWuHfR2CwbctQbts1TnAM 7bRQxSwTjkDGu5ASobUo2KQwJVx3oijwHzFoHAsLkDrJ4F8YNihh6jsJ84sard34 5Eucvhosrfhn12WhFmpWR10aGh7evdAQpBDOC39Tp3xOHgQZ2FINJnNqZrY/iuhh etxVXlm/TImu3yVIr+GaZRD5Krsab26GcYfNdqaWgT58xbXPIpraTr5GxFeohuP/ AcdvhX2hTSG5OWKPpfkHDqi+wARydOo2v+Syou8xENmK2IVfZIWeEBH2CAyXptd6 rby52GBhAWUqfJEqcx3CtgFxDUAh24pSfpv/mRqnS3zOp8eBPek= -----END CERTIFICATE-----Generated at Sat Apr 5 23:26:25 2025 by rpki-client