$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: BYd8TPrtvk2l65OSxI0pe2pPo0Fwra6mTIOsTjUz9dk= Subject key identifier: A9:96:45:FB:D3:EA:06:44:95:AB:E1:DF:4F:9D:C4:C1:2F:91:6D:57 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 0D40A976454B17D615349EC2A7B2551F5173BF1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0341 Signing time: Sun 15 Jun 2025 04:40:04 +0000 Manifest this update: Sun 15 Jun 2025 04:35:04 +0000 Manifest next update: Wed 18 Jun 2025 14:42:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: U2iQNuq6+t+p8KSYA2I36SAzN75yoSwtD0rElKuaFG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:a9:76:45:4b:17:d6:15:34:9e:c2:a7:b2:55:1f:51:73:bf:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Jun 15 04:35:04 2025 GMT Not After : Jun 18 14:42:04 2025 GMT Subject: CN=A99645FBD3EA064495ABE1DF4F9DC4C12F916D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:56:82:a9:10:07:bf:f3:04:f6:0e:26:ed: 8f:7f:6d:38:af:3e:f0:20:d2:b7:2e:c3:03:42:45: 99:fd:a6:4f:28:a1:82:26:e4:38:8e:a6:a7:35:b0: 46:7b:89:ce:a6:1c:71:a0:a5:48:88:d4:36:05:40: f9:7b:ff:70:3c:f9:30:52:85:ee:d4:c5:ed:fd:e3: 31:ee:b8:d8:e8:17:0a:df:04:f3:58:ee:c2:1a:b3: 28:4d:0e:11:c0:3a:49:a8:ef:cb:f9:0a:fd:99:c7: 28:b0:72:d0:2b:5d:c6:9a:0b:2f:6c:f4:71:cd:66: e2:0b:fb:4f:f3:53:bc:1d:c9:88:31:22:20:ad:33: 19:f8:2d:2c:c4:e5:29:8d:52:81:d7:ef:fc:41:38: 15:d8:8a:2d:f2:b1:72:d3:67:09:3b:0f:98:0b:b7: 6c:37:b0:e2:a3:e2:76:37:46:66:dd:8b:c4:c1:a5: 78:43:0e:98:af:55:c3:0d:1f:46:96:d4:42:ee:c7: b3:c5:32:63:4c:2d:a4:68:bd:25:d8:d6:75:d5:1a: e2:c5:be:6b:59:31:d2:a0:9f:16:11:cf:b0:5c:61: b7:27:19:df:4e:8d:c3:d7:90:8a:57:a2:d4:ea:66: 14:fa:65:95:14:61:3c:04:07:e3:ef:03:a7:0a:fd: 59:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:45:FB:D3:EA:06:44:95:AB:E1:DF:4F:9D:C4:C1:2F:91:6D:57 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:fd:7d:2e:72:20:61:b1:db:33:97:3c:df:98:dc:79:7d:c0: de:12:7e:5b:ae:16:93:e9:1a:03:4c:6d:4e:b9:25:b2:2e:46: 1f:4a:43:5f:11:15:46:ef:e4:48:5e:bf:33:b1:24:c1:29:b1: 44:1d:3d:de:7c:9b:db:86:13:d6:6f:22:58:0a:23:ec:78:f0: bb:59:51:46:f8:cd:c8:18:26:3a:1d:46:54:87:f2:11:8a:bc: 45:5b:49:f5:88:61:1d:6b:a6:ba:14:5e:52:fd:41:e7:1c:1a: 4e:9c:7e:c5:c0:37:92:54:dc:4b:7f:89:f8:3d:c3:46:4a:f2: 96:38:99:5f:4d:ea:a3:72:19:f2:d3:1c:1b:32:02:e3:94:66: 7c:eb:a0:8c:84:f8:57:9d:36:45:6e:c7:e3:58:d8:bc:a8:d4: 9a:85:93:08:9d:0e:94:bb:cf:dd:68:85:14:87:de:1c:91:fc: 48:e7:75:fc:86:3f:4d:af:17:0c:4a:f8:d8:91:05:49:db:70: 80:79:92:e9:02:4c:5b:c0:58:95:d4:ee:de:36:7c:36:0b:e8: 51:98:69:32:00:17:a6:e6:f0:f9:00:df:04:33:63:81:49:52: 2d:8b:de:ff:bf:d8:30:54:a9:8e:7c:dd:52:bd:4e:c8:16:83: 37:24:19:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUCpdkVLF9YVNJ7Cp7JVH1FzvxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA2MTUwNDM1MDRaFw0yNTA2MTgxNDQyMDRaMDMxMTAvBgNV BAMTKEE5OTY0NUZCRDNFQTA2NDQ5NUFCRTFERjRGOURDNEMxMkY5MTZENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkVaCqRAHv/ME9g4m7Y9/bTiv PvAg0rcuwwNCRZn9pk8ooYIm5DiOpqc1sEZ7ic6mHHGgpUiI1DYFQPl7/3A8+TBS he7Uxe394zHuuNjoFwrfBPNY7sIasyhNDhHAOkmo78v5Cv2ZxyiwctArXcaaCy9s 9HHNZuIL+0/zU7wdyYgxIiCtMxn4LSzE5SmNUoHX7/xBOBXYii3ysXLTZwk7D5gL t2w3sOKj4nY3Rmbdi8TBpXhDDpivVcMNH0aW1ELux7PFMmNMLaRovSXY1nXVGuLF vmtZMdKgnxYRz7BcYbcnGd9OjcPXkIpXotTqZhT6ZZUUYTwEB+PvA6cK/VkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZZF+9PqBkSVq+HfT53EwS+RbVcwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP9fS5yIGGx2zOXPN+Y3Hl9wN4SfluuFpPp GgNMbU65JbIuRh9KQ18RFUbv5EhevzOxJMEpsUQdPd58m9uGE9ZvIlgKI+x48LtZ UUb4zcgYJjodRlSH8hGKvEVbSfWIYR1rproUXlL9QeccGk6cfsXAN5JU3Et/ifg9 w0ZK8pY4mV9N6qNyGfLTHBsyAuOUZnzroIyE+FedNkVux+NY2Lyo1JqFkwidDpS7 z91ohRSH3hyR/EjndfyGP02vFwxK+NiRBUnbcIB5kukCTFvAWJXU7t42fDYL6FGY aTIAF6bm8PkA3wQzY4FJUi2L3v+/2DBUqY583VK9TsgWgzckGQY= -----END CERTIFICATE-----Generated at Tue Jun 17 11:13:06 2025 by rpki-client