$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: F8POLacUTjneIDdko3+H9BNHo7YBsjOXYIyppqbTBJE= Subject key identifier: B0:77:D0:98:06:AD:EE:F8:B6:07:82:18:13:BB:EA:5D:83:14:6C:31 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 3AD0E3F3019C846B4C7B79072EEB16958543799F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 03C1 Signing time: Thu 26 Mar 2026 13:00:05 +0000 Manifest this update: Thu 26 Mar 2026 12:55:05 +0000 Manifest next update: Mon 30 Mar 2026 00:32:05 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: mBYH8gEsLmD3y+qkk4G3qCPY2je4uGHtFmuvsJ2F9co=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: KLFAeWGV9bdnf6Cj3XWhChq8Lqq0Qb63LuNGsGrVUXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:e3:f3:01:9c:84:6b:4c:7b:79:07:2e:eb:16:95:85:43:79:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Mar 26 12:55:05 2026 GMT Not After : Mar 30 00:32:05 2026 GMT Subject: CN=B077D09806ADEEF8B607821813BBEA5D83146C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:b2:15:5c:ad:6a:34:3f:0b:95:22:9e:ae: 2c:74:b3:f1:23:5c:bc:0c:e4:be:d3:b1:56:20:91: 00:84:fc:66:f9:ea:e8:19:c4:94:4b:b1:81:f4:32: b6:76:01:c0:2f:21:53:ab:6a:6b:c8:8b:15:89:c8: a9:65:1b:b6:ca:0d:81:a1:6c:0f:60:86:c1:8a:34: ed:dd:4b:d7:77:e4:8a:38:66:34:a7:71:24:45:3f: 5c:0e:09:ea:10:27:74:0c:c0:30:9b:f5:85:dc:bf: ee:7a:12:ec:d2:70:61:8c:dc:58:00:f9:b0:26:0e: a7:db:d7:0d:a4:77:f2:41:83:72:ec:72:ae:74:a8: b3:45:e9:12:68:a0:b9:08:15:02:a6:1d:b9:8a:2b: db:db:1a:cd:41:2c:df:01:96:c7:e2:b0:35:04:97: cb:11:9f:86:c9:2e:15:10:ed:0e:8b:d5:9c:cd:cb: 54:61:56:cd:bb:5c:b2:2a:9c:58:52:54:8d:44:26: 9b:98:30:70:09:9d:7e:ad:81:56:9b:0e:a7:78:3a: 30:b7:a7:92:6f:32:c6:b0:80:fa:40:ef:f4:57:ef: 84:38:47:b4:d8:1c:55:29:68:e9:a6:56:e3:45:a5: 8e:33:06:cb:2d:ac:46:d7:77:97:db:d4:01:98:aa: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:77:D0:98:06:AD:EE:F8:B6:07:82:18:13:BB:EA:5D:83:14:6C:31 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e9:a3:fa:a3:c1:41:6b:19:f3:1d:44:ff:1e:17:8b:7d:98: 40:ff:34:58:0a:14:18:7b:dd:f4:82:ca:e1:44:d0:cf:ed:ef: a8:0e:c0:84:89:0f:c2:b5:99:02:aa:6d:6b:12:39:bf:da:ef: fe:19:cb:96:26:ff:e0:29:d4:85:6c:f5:c0:16:dd:43:42:5d: 41:4d:89:e2:23:28:52:9b:b1:50:fe:d2:cd:e2:ab:3a:cd:7f: 60:a6:93:22:51:c2:72:8e:ac:ad:9a:6b:b1:fd:36:13:2c:e7: 0c:db:f5:cd:f4:60:75:e5:c7:29:df:12:18:72:02:27:22:52: 6f:0e:c6:64:44:9a:95:dc:6d:b1:d4:65:30:e8:f8:44:52:0d: 36:1f:42:5c:28:3a:9a:43:f5:09:3c:e2:7c:16:93:97:24:77: ab:b9:21:52:42:fb:d0:17:06:5e:b1:4d:18:cb:63:00:de:dc: ae:7f:00:4c:8e:8d:79:2d:c6:36:01:6a:03:03:14:11:00:c5: 41:e3:ec:42:ad:3f:3d:a8:1c:dd:71:32:9b:27:fe:66:50:88: 5b:e2:1a:4f:c5:db:bf:69:e0:d7:36:57:8c:5f:91:09:ed:7f: 48:2e:2a:79:92:d0:71:09:5d:2e:07:31:4a:1a:89:8f:a4:ec: e4:92:35:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtDj8wGchGtMe3kHLusWlYVDeZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNjAzMjYxMjU1MDVaFw0yNjAzMzAwMDMyMDVaMDMxMTAvBgNV BAMTKEIwNzdEMDk4MDZBREVFRjhCNjA3ODIxODEzQkJFQTVEODMxNDZDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrn7IVXK1qND8LlSKerix0s/Ej XLwM5L7TsVYgkQCE/Gb56ugZxJRLsYH0MrZ2AcAvIVOramvIixWJyKllG7bKDYGh bA9ghsGKNO3dS9d35Io4ZjSncSRFP1wOCeoQJ3QMwDCb9YXcv+56EuzScGGM3FgA +bAmDqfb1w2kd/JBg3Lscq50qLNF6RJooLkIFQKmHbmKK9vbGs1BLN8BlsfisDUE l8sRn4bJLhUQ7Q6L1ZzNy1RhVs27XLIqnFhSVI1EJpuYMHAJnX6tgVabDqd4OjC3 p5JvMsawgPpA7/RX74Q4R7TYHFUpaOmmVuNFpY4zBsstrEbXd5fb1AGYqo4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsHfQmAat7vi2B4IYE7vqXYMUbDEwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDpo/qjwUFrGfMdRP8eF4t9mED/NFgKFBh7 3fSCyuFE0M/t76gOwISJD8K1mQKqbWsSOb/a7/4Zy5Ym/+Ap1IVs9cAW3UNCXUFN ieIjKFKbsVD+0s3iqzrNf2CmkyJRwnKOrK2aa7H9NhMs5wzb9c30YHXlxynfEhhy AiciUm8OxmREmpXcbbHUZTDo+ERSDTYfQlwoOppD9Qk84nwWk5ckd6u5IVJC+9AX Bl6xTRjLYwDe3K5/AEyOjXktxjYBagMDFBEAxUHj7EKtPz2oHN1xMpsn/mZQiFvi Gk/F279p4Nc2V4xfkQntf0guKnmS0HEJXS4HMUoaiY+k7OSSNWY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:57 2026 by rpki-client