$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: bKcZtk+2ZOxxCM44XmPzXJY8fyI+5soc71jDMoGokyA= Subject key identifier: 2D:B4:F1:13:72:59:CE:37:48:97:2A:82:ED:D7:AB:07:58:F9:68:EA Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 56CDFD9C7855A27724E29320A4B5B061600DFA81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 032C Signing time: Mon 28 Apr 2025 13:20:05 +0000 Manifest this update: Mon 28 Apr 2025 13:15:05 +0000 Manifest next update: Thu 01 May 2025 16:24:05 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: EO1mD7WE0u/2CBPnbJ//F+q+NGTVIGo8Pkn3wyn8mB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cd:fd:9c:78:55:a2:77:24:e2:93:20:a4:b5:b0:61:60:0d:fa:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Apr 28 13:15:05 2025 GMT Not After : May 1 16:24:05 2025 GMT Subject: CN=2DB4F1137259CE3748972A82EDD7AB0758F968EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:4f:0b:0c:d3:6c:9b:e5:ff:89:eb:2c:57: 60:06:f6:f1:70:62:d0:68:15:51:a7:a4:95:6f:0e: 9d:5d:0e:8b:ec:3e:12:73:85:9d:8e:60:7c:e2:d8: cb:d4:92:47:41:11:24:b7:79:e3:d3:d2:f7:50:94: c5:5f:d1:64:2a:e7:29:07:83:1b:41:c5:e0:2d:a9: 04:d1:fd:20:d3:3f:89:56:3a:34:15:e9:15:48:c6: 88:f3:1f:a7:1e:0f:d9:8d:5a:71:4d:b7:26:87:a7: 4a:68:4c:c7:16:2d:4f:b9:25:a5:8c:1b:c7:4e:b0: c4:e8:c1:ce:01:8b:b9:b4:ba:b8:bd:5a:3f:68:49: 68:44:6a:1b:ec:f4:de:ae:23:16:f9:c2:2e:ed:1c: 60:0d:ac:5a:1e:93:d0:8e:a3:a6:da:c5:31:c2:79: 02:05:d0:61:a8:b2:26:40:bd:6d:88:98:21:6d:29: 2d:7f:5f:70:3b:34:59:d4:26:33:70:ac:47:47:40: 95:b8:0a:46:f3:9c:c3:ee:30:e1:0f:7c:45:85:93: 45:28:e8:45:32:48:ad:9e:b3:3b:d8:8d:f0:03:e9: 11:43:ed:ae:c3:52:97:71:d9:d1:93:1f:d0:de:67: cb:33:75:f9:ee:45:7a:8f:b4:f2:5f:d3:73:1a:be: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:F1:13:72:59:CE:37:48:97:2A:82:ED:D7:AB:07:58:F9:68:EA X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:e8:c6:bb:69:ae:37:2d:9b:11:a6:f4:13:8d:98:a3:fd: 76:44:78:ff:8c:fc:0c:08:20:27:cf:7c:9b:e2:6e:09:10:6d: cb:ed:86:40:23:09:53:bb:55:13:f5:2b:07:b5:f7:c2:0c:ff: 4f:3c:43:53:f6:6f:b0:63:f8:c0:0d:dc:99:9b:c1:6a:ee:a7: b2:54:a1:7d:94:43:23:04:f1:f1:e4:33:fe:ba:69:7b:fd:ef: ff:9d:1d:38:a7:61:6e:ca:01:82:f8:be:9b:30:99:bf:f8:53: 6e:d1:a5:8d:44:f8:71:0e:ff:1c:49:3a:63:db:65:d7:55:ea: 33:59:20:29:bf:e2:e2:53:24:48:68:a6:b9:c1:f1:61:57:f4: ed:00:46:58:dc:0a:b2:51:7a:28:ba:fb:be:82:1b:19:e1:49: ad:fe:78:6d:5a:0a:32:83:bd:72:30:25:c2:9d:80:fc:7a:70: 06:a2:bc:96:32:f1:76:ea:99:04:07:e7:d6:e3:af:ca:d9:9c: 83:58:56:98:75:99:ba:7b:a1:12:66:66:4e:67:12:f8:23:c0: fa:e1:50:64:21:66:0c:e7:85:9f:f3:cd:82:97:03:63:6d:b9: df:15:de:64:9d:f4:26:88:5a:a4:45:25:f7:79:b6:87:b9:4c: 24:49:e1:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVs39nHhVonck4pMgpLWwYWAN+oEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA0MjgxMzE1MDVaFw0yNTA1MDExNjI0MDVaMDMxMTAvBgNV BAMTKDJEQjRGMTEzNzI1OUNFMzc0ODk3MkE4MkVERDdBQjA3NThGOTY4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5208LDNNsm+X/iessV2AG9vFw YtBoFVGnpJVvDp1dDovsPhJzhZ2OYHzi2MvUkkdBESS3eePT0vdQlMVf0WQq5ykH gxtBxeAtqQTR/SDTP4lWOjQV6RVIxojzH6ceD9mNWnFNtyaHp0poTMcWLU+5JaWM G8dOsMTowc4Bi7m0uri9Wj9oSWhEahvs9N6uIxb5wi7tHGANrFoek9COo6baxTHC eQIF0GGosiZAvW2ImCFtKS1/X3A7NFnUJjNwrEdHQJW4CkbznMPuMOEPfEWFk0Uo 6EUySK2eszvYjfAD6RFD7a7DUpdx2dGTH9DeZ8szdfnuRXqPtPJf03Mavjs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbTxE3JZzjdIlyqC7derB1j5aOowHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiR6Ma7aa43LZsRpvQTjZij/XZEeP+M/AwI ICfPfJvibgkQbcvthkAjCVO7VRP1Kwe198IM/088Q1P2b7Bj+MAN3JmbwWrup7JU oX2UQyME8fHkM/66aXv97/+dHTinYW7KAYL4vpswmb/4U27RpY1E+HEO/xxJOmPb ZddV6jNZICm/4uJTJEhoprnB8WFX9O0ARljcCrJReii6+76CGxnhSa3+eG1aCjKD vXIwJcKdgPx6cAaivJYy8XbqmQQH59bjr8rZnINYVph1mbp7oRJmZk5nEvgjwPrh UGQhZgznhZ/zzYKXA2Ntud8V3mSd9CaIWqRFJfd5toe5TCRJ4fk= -----END CERTIFICATE-----Generated at Tue Apr 29 09:46:12 2025 by rpki-client