$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: +bqieHuSBc0Y5hJCbqMQ/2j0Pc417dU6MGDSRmgSfuQ= Subject key identifier: 79:3A:D3:D3:82:7C:AF:11:97:EC:A1:40:87:64:85:94:8E:1A:C1:04 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 7AC3373CC1CBAE7C03B0988E9BEF5FA88D222727 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 03B5 Signing time: Sun 01 Mar 2026 17:10:05 +0000 Manifest this update: Sun 01 Mar 2026 17:05:05 +0000 Manifest next update: Wed 04 Mar 2026 17:42:05 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: KfPmmv+g0IbE2+N7UhYvWO7/lFW7Ri7aAWFo7j11hcc=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c3:37:3c:c1:cb:ae:7c:03:b0:98:8e:9b:ef:5f:a8:8d:22:27:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Mar 1 17:05:05 2026 GMT Not After : Mar 4 17:42:05 2026 GMT Subject: CN=793AD3D3827CAF1197ECA140876485948E1AC104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:ff:1e:a6:86:46:ad:ac:66:02:5a:9f:2d: 75:d4:2f:62:f8:c5:fc:6f:bc:8a:ed:53:ba:3c:bc: 42:82:41:8a:26:c6:42:a3:61:7d:91:ed:c5:5d:9a: 84:af:3b:2f:01:ea:37:9c:a8:b2:d8:81:90:ee:45: 57:2c:72:d7:46:30:e2:68:dd:f6:f1:b9:a1:8d:b5: ad:fb:e0:8f:06:00:5d:68:85:a1:a8:92:3d:96:8c: 6d:42:34:a2:b4:cc:f6:bc:0f:6b:6e:e6:e8:33:72: be:05:05:5d:e0:f7:90:c7:91:78:6a:00:0c:68:29: 2e:be:d2:8e:62:2a:63:48:72:94:e3:a4:bb:83:87: 9c:a1:38:9e:ed:ff:21:8f:af:c6:bb:47:81:58:62: 8e:49:ba:dd:a8:6b:ba:f1:c9:02:a9:66:71:bd:e2: 53:7b:6e:09:8a:a9:a7:c9:8d:97:5f:f7:7c:5b:08: d8:cd:a3:30:d1:78:79:dc:67:c3:09:24:56:5a:7e: a0:d2:cc:10:1c:0f:99:bb:d0:77:70:a6:3b:9d:c0: e5:5d:18:96:8c:08:75:ce:c7:e7:dc:3d:d4:6d:5b: 90:5b:f0:28:ca:c1:ce:b4:cb:cb:55:53:f4:7e:05: 3a:db:2b:67:9a:f3:2c:17:24:e0:16:a8:e2:24:20: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:D3:D3:82:7C:AF:11:97:EC:A1:40:87:64:85:94:8E:1A:C1:04 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1a:2e:fd:4e:dc:a5:42:cf:fd:53:43:0f:71:ec:c3:1a:e8: dc:07:5c:9f:3c:60:06:ee:dd:6c:ac:3d:18:87:83:93:92:04: 42:72:49:0f:b9:2d:04:72:1f:be:4a:88:88:90:df:2c:18:9a: a3:ee:a7:3b:91:e6:69:67:96:aa:39:93:e0:8e:ce:00:5a:c3: c3:92:74:d5:35:0a:69:50:1c:8e:33:66:01:43:b7:d4:7f:93: 8a:18:0f:27:82:69:44:6d:ff:b7:f1:8b:6e:db:af:6b:14:ba: c5:5b:ee:12:9f:e2:b0:2f:d5:e6:13:7c:ba:58:2f:0d:31:72: f4:ba:31:ff:9c:e8:a2:8b:b0:76:03:00:49:e3:08:af:f0:8b: 44:b9:92:0d:58:ec:cd:67:3d:b3:35:f4:7a:b5:42:8f:7c:5e: 12:0a:bd:4a:f1:29:2f:64:b2:a8:f0:e8:29:f2:00:3f:67:a1: a9:c5:2f:fc:25:44:42:04:b8:77:ee:52:07:23:3e:4c:6b:3e: b7:82:0e:f2:dc:81:99:68:c6:93:05:89:e6:34:b1:d3:f7:d6: 22:8b:db:49:ab:de:08:b3:64:2d:17:9b:e3:9b:1c:8e:e6:3c: fa:b5:8e:49:e6:dd:36:f9:b8:9e:5c:9f:93:a7:0a:91:02:7a: a3:ad:0a:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesM3PMHLrnwDsJiOm+9fqI0iJycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNjAzMDExNzA1MDVaFw0yNjAzMDQxNzQyMDVaMDMxMTAvBgNV BAMTKDc5M0FEM0QzODI3Q0FGMTE5N0VDQTE0MDg3NjQ4NTk0OEUxQUMxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAP8epoZGraxmAlqfLXXUL2L4 xfxvvIrtU7o8vEKCQYomxkKjYX2R7cVdmoSvOy8B6jecqLLYgZDuRVcsctdGMOJo 3fbxuaGNta374I8GAF1ohaGokj2WjG1CNKK0zPa8D2tu5ugzcr4FBV3g95DHkXhq AAxoKS6+0o5iKmNIcpTjpLuDh5yhOJ7t/yGPr8a7R4FYYo5Jut2oa7rxyQKpZnG9 4lN7bgmKqafJjZdf93xbCNjNozDReHncZ8MJJFZafqDSzBAcD5m70HdwpjudwOVd GJaMCHXOx+fcPdRtW5Bb8CjKwc60y8tVU/R+BTrbK2ea8ywXJOAWqOIkINUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeTrT04J8rxGX7KFAh2SFlI4awQQwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAaLv1O3KVCz/1TQw9x7MMa6NwHXJ88YAbu 3WysPRiHg5OSBEJySQ+5LQRyH75KiIiQ3ywYmqPupzuR5mlnlqo5k+COzgBaw8OS dNU1CmlQHI4zZgFDt9R/k4oYDyeCaURt/7fxi27br2sUusVb7hKf4rAv1eYTfLpY Lw0xcvS6Mf+c6KKLsHYDAEnjCK/wi0S5kg1Y7M1nPbM19Hq1Qo98XhIKvUrxKS9k sqjw6CnyAD9noanFL/wlREIEuHfuUgcjPkxrPreCDvLcgZloxpMFieY0sdP31iKL 20mr3gizZC0Xm+ObHI7mPPq1jknm3Tb5uJ5cn5OnCpECeqOtCmo= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:06 2026 by rpki-client