$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: zQK82xGh8K4HcR8xkb0Hfm/2WwMxehkMxyNMp+JrU+w= Subject key identifier: 74:2E:57:2C:49:3B:90:CF:85:DE:64:AC:A1:F6:1D:C5:C0:17:09:9A Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 708B0E0C34E1A42B9EDA6AAE620D20B05E926BBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0359 Signing time: Fri 08 Aug 2025 11:40:04 +0000 Manifest this update: Fri 08 Aug 2025 11:35:04 +0000 Manifest next update: Mon 11 Aug 2025 18:40:04 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: RyXsAemvy5gE1b5XJvdh4HBUpqwsTKLFR55L21zR8k4=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:0e:0c:34:e1:a4:2b:9e:da:6a:ae:62:0d:20:b0:5e:92:6b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Aug 8 11:35:04 2025 GMT Not After : Aug 11 18:40:04 2025 GMT Subject: CN=742E572C493B90CF85DE64ACA1F61DC5C017099A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:61:a2:59:ba:de:1c:82:1a:ae:2a:e1:24:85: 1d:e6:fd:7f:11:d4:9d:d6:b3:67:f1:98:58:7a:66: 0e:1a:86:68:d2:59:dc:90:1b:e2:69:1e:a9:d6:43: 1c:a5:56:ab:e8:b0:2f:aa:f5:0a:eb:87:36:1c:b9: 7b:6c:29:2c:49:2f:32:99:c1:4c:7d:26:22:a1:81: 7b:2b:fe:46:16:02:b4:6a:4e:6f:ea:cd:15:0f:9e: 16:83:9c:bb:e0:3c:05:97:9a:2c:ae:6b:a4:cf:1b: d8:5f:b5:97:03:b5:a1:67:a5:9b:8d:58:b6:8e:96: d9:e0:80:32:be:4b:57:ab:5e:92:28:d0:03:8d:ae: 45:70:61:93:4d:22:85:33:93:fb:76:9c:6b:19:20: e2:56:a8:4c:c4:7f:5a:b6:10:b9:96:c0:32:72:10: a4:ed:b1:0b:31:b4:b1:a1:2d:41:cc:90:45:35:41: 00:f5:0d:48:c7:00:86:36:50:b3:89:55:2e:27:15: 24:b1:dd:b4:f0:b2:3f:bc:59:19:e3:83:5b:7e:f6: 90:4f:d5:94:ff:11:8a:8e:ca:74:e9:f1:47:1a:83: d9:a8:f3:95:fd:6a:64:eb:67:b7:c3:f3:76:57:f9: 09:4f:72:b1:4e:88:76:d1:a3:14:2a:e3:b3:19:f5: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2E:57:2C:49:3B:90:CF:85:DE:64:AC:A1:F6:1D:C5:C0:17:09:9A X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:64:e1:e1:ab:f4:31:c1:63:83:f2:f9:00:b2:bf:be:52:a4: ca:29:e1:1b:25:4d:1a:dd:c8:89:64:b7:27:a4:f2:73:83:68: d4:17:75:82:3b:64:1e:ae:ac:9f:8d:b5:df:07:ae:a1:99:be: ce:b4:4d:d9:a5:04:81:1d:60:c1:88:b8:e2:d1:23:97:3d:6e: e8:91:b0:26:02:b8:13:e5:f8:34:02:23:d1:36:64:32:9f:d7: 1d:c6:47:e0:92:0f:08:26:98:a7:9b:89:e1:6e:8b:a6:42:85: a3:27:81:ef:f3:88:72:3e:71:51:8c:d5:f6:20:9e:56:d2:86: 08:dc:3b:3e:78:64:29:8a:5f:59:de:5f:87:e9:6e:ec:28:a0: ce:a2:d3:9f:8e:1d:d9:d5:a2:5a:26:5a:1a:32:7e:d6:fc:bd: c6:d0:69:02:78:ec:72:e0:ad:88:3c:e9:aa:2a:2a:d9:bb:5c: fa:c8:4d:3a:7e:0b:01:ff:4c:07:73:29:3f:09:3c:10:01:f3: c5:c2:4a:51:af:2c:e3:17:36:eb:58:e5:02:e4:82:1c:d8:40: 16:9f:32:82:57:a2:14:c7:cf:7c:8d:24:14:7d:3b:b2:d4:02: 4e:f8:5a:e0:59:40:44:d2:72:a6:e1:6d:26:e4:ba:5d:2f:26: e4:2a:f7:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIsODDThpCue2mquYg0gsF6Sa74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA4MDgxMTM1MDRaFw0yNTA4MTExODQwMDRaMDMxMTAvBgNV BAMTKDc0MkU1NzJDNDkzQjkwQ0Y4NURFNjRBQ0ExRjYxREM1QzAxNzA5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3YaJZut4cghquKuEkhR3m/X8R 1J3Ws2fxmFh6Zg4ahmjSWdyQG+JpHqnWQxylVqvosC+q9QrrhzYcuXtsKSxJLzKZ wUx9JiKhgXsr/kYWArRqTm/qzRUPnhaDnLvgPAWXmiyua6TPG9hftZcDtaFnpZuN WLaOltnggDK+S1erXpIo0AONrkVwYZNNIoUzk/t2nGsZIOJWqEzEf1q2ELmWwDJy EKTtsQsxtLGhLUHMkEU1QQD1DUjHAIY2ULOJVS4nFSSx3bTwsj+8WRnjg1t+9pBP 1ZT/EYqOynTp8Ucag9mo85X9amTrZ7fD83ZX+QlPcrFOiHbRoxQq47MZ9aezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdC5XLEk7kM+F3mSsofYdxcAXCZowHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFk4eGr9DHBY4Py+QCyv75SpMop4RslTRrd yIlktyek8nODaNQXdYI7ZB6urJ+Ntd8HrqGZvs60TdmlBIEdYMGIuOLRI5c9buiR sCYCuBPl+DQCI9E2ZDKf1x3GR+CSDwgmmKebieFui6ZChaMnge/ziHI+cVGM1fYg nlbShgjcOz54ZCmKX1neX4fpbuwooM6i05+OHdnVolomWhoyftb8vcbQaQJ47HLg rYg86aoqKtm7XPrITTp+CwH/TAdzKT8JPBAB88XCSlGvLOMXNutY5QLkghzYQBaf MoJXohTHz3yNJBR9O7LUAk74WuBZQETScqbhbSbkul0vJuQq91U= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:25 2025 by rpki-client