$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: EFxM+ew+z5cQ0yyRjJse27/GK/w2MSCRgtrhxXGDBTc= Subject key identifier: E8:A2:42:7D:3F:B6:1C:E1:B0:FF:86:98:34:FE:F2:D5:CE:47:D3:1A Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 21F3073751257732639406FA5B8E86F1920DF440 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0380 Signing time: Mon 03 Nov 2025 15:20:04 +0000 Manifest this update: Mon 03 Nov 2025 15:15:04 +0000 Manifest next update: Fri 07 Nov 2025 00:17:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: ufu7JOJM2xM9TtGfBYcHI2OCrACCLZgmLDtouYerDQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f3:07:37:51:25:77:32:63:94:06:fa:5b:8e:86:f1:92:0d:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Nov 3 15:15:04 2025 GMT Not After : Nov 7 00:17:04 2025 GMT Subject: CN=E8A2427D3FB61CE1B0FF869834FEF2D5CE47D31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:ea:58:1d:06:c2:c9:88:cc:e2:55:94:44: 2e:31:64:5a:b7:e0:83:46:c2:28:3e:dd:3a:95:bc: c8:46:49:58:77:6a:06:ed:a0:4a:f9:af:34:5f:1f: 00:2c:3f:68:20:72:5c:40:ae:00:cb:f8:4e:25:c5: d4:d0:36:f3:15:f8:8c:48:2b:f7:6a:a9:40:86:64: cc:96:5f:97:54:fa:84:5e:0c:62:11:c3:50:66:f7: 78:a3:80:2d:cc:40:53:93:d6:9d:41:ab:52:da:b1: a7:b2:24:67:f6:73:57:5d:55:78:b0:e9:25:ec:0f: b7:0d:a2:c5:ef:8d:af:2c:a1:7e:04:de:ff:12:34: 91:8b:f9:6d:45:f3:28:cf:9a:9d:94:83:63:7a:aa: ab:f9:fa:2d:e5:02:65:88:af:30:57:96:22:5f:e6: 81:ad:3c:b3:ab:5b:87:54:e2:c9:f4:c6:65:02:04: e2:29:44:3c:2e:e1:b5:6b:eb:c9:cc:77:e7:0b:28: 3c:e3:f3:37:af:1d:1e:d9:58:06:8b:c8:2d:bc:01: c7:76:12:4f:ca:ac:db:ca:6f:54:6f:17:b7:89:0f: 8d:50:9c:a6:d0:08:de:d6:37:98:ed:51:c8:e4:76: d5:fa:c3:25:7d:ca:c4:1f:56:fc:54:cf:5e:0d:dc: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A2:42:7D:3F:B6:1C:E1:B0:FF:86:98:34:FE:F2:D5:CE:47:D3:1A X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:99:bc:16:f5:3b:9c:02:d4:18:f1:cb:36:ef:bd:64:83:b4: 2d:2b:aa:1d:b1:d9:68:c7:ff:04:be:9a:12:44:0c:05:4d:59: cd:52:5a:26:14:93:27:2c:56:3d:f4:71:13:62:83:cb:9e:0a: b6:17:9b:bb:86:b7:7b:ee:7b:63:76:3b:b6:10:02:f6:7a:39: 28:31:91:4d:92:2a:3c:a6:9c:13:85:25:35:a8:63:64:ee:41: a1:0f:04:e1:d8:45:10:54:70:db:d9:e4:e1:f1:07:7d:58:8d: db:6f:75:55:f3:ff:bf:71:c8:a9:5e:14:b7:e1:c3:f2:db:95: e6:32:0e:11:ca:fa:24:1e:4b:07:36:f0:87:8f:56:d2:c9:0f: 5d:37:34:ef:6d:a8:95:62:44:07:74:c2:db:35:01:17:8f:19: e4:ef:ba:b6:22:bf:c4:a2:90:8d:96:01:4a:a5:86:59:1d:ac: 86:91:85:9a:6c:da:31:56:8b:36:1f:56:a3:71:b2:5f:26:ef: a9:31:7a:04:38:d8:75:55:58:00:a1:ee:d7:c6:bf:77:dd:a2: 9b:41:a0:2d:c8:6a:ae:55:31:a3:da:2d:61:01:54:a4:e4:9c: 15:5c:41:a8:0e:b9:9f:97:8c:38:12:cb:52:a5:13:d0:87:f1: f5:30:bc:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfMHN1EldzJjlAb6W46G8ZIN9EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTExMDMxNTE1MDRaFw0yNTExMDcwMDE3MDRaMDMxMTAvBgNV BAMTKEU4QTI0MjdEM0ZCNjFDRTFCMEZGODY5ODM0RkVGMkQ1Q0U0N0QzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAepYHQbCyYjM4lWURC4xZFq3 4INGwig+3TqVvMhGSVh3agbtoEr5rzRfHwAsP2ggclxArgDL+E4lxdTQNvMV+IxI K/dqqUCGZMyWX5dU+oReDGIRw1Bm93ijgC3MQFOT1p1Bq1LasaeyJGf2c1ddVXiw 6SXsD7cNosXvja8soX4E3v8SNJGL+W1F8yjPmp2Ug2N6qqv5+i3lAmWIrzBXliJf 5oGtPLOrW4dU4sn0xmUCBOIpRDwu4bVr68nMd+cLKDzj8zevHR7ZWAaLyC28Acd2 Ek/KrNvKb1RvF7eJD41QnKbQCN7WN5jtUcjkdtX6wyV9ysQfVvxUz14N3PzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KJCfT+2HOGw/4aYNP7y1c5H0xowHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmZvBb1O5wC1BjxyzbvvWSDtC0rqh2x2WjH /wS+mhJEDAVNWc1SWiYUkycsVj30cRNig8ueCrYXm7uGt3vue2N2O7YQAvZ6OSgx kU2SKjymnBOFJTWoY2TuQaEPBOHYRRBUcNvZ5OHxB31YjdtvdVXz/79xyKleFLfh w/LbleYyDhHK+iQeSwc28IePVtLJD103NO9tqJViRAd0wts1ARePGeTvurYiv8Si kI2WAUqlhlkdrIaRhZps2jFWizYfVqNxsl8m76kxegQ42HVVWACh7tfGv3fdoptB oC3Iaq5VMaPaLWEBVKTknBVcQagOuZ+XjDgSy1KlE9CH8fUwvMw= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:13 2025 by rpki-client