$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: PVsTXnDpEUex2LSFDqIe8Q/3ux1SAgKVm+KrepUzM14= Subject key identifier: 31:15:37:75:76:6F:AA:EE:E8:E5:62:1E:BE:1A:38:13:6F:26:57:39 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 4B0964247B7CE53D326081EC2642D5C3FF392009 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0348 Signing time: Tue 01 Jul 2025 01:30:04 +0000 Manifest this update: Tue 01 Jul 2025 01:25:04 +0000 Manifest next update: Fri 04 Jul 2025 09:13:04 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: uTffo5XPsEXv6wEGKC2B7nl47cAx8dZsKN0eZZ6eNC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:09:64:24:7b:7c:e5:3d:32:60:81:ec:26:42:d5:c3:ff:39:20:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Jul 1 01:25:04 2025 GMT Not After : Jul 4 09:13:04 2025 GMT Subject: CN=31153775766FAAEEE8E5621EBE1A38136F265739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:7f:c6:6b:39:3c:75:c7:8e:f3:b2:e8:9b: 53:bd:6a:92:f5:7e:55:3d:06:53:09:50:6b:cd:36: 1d:d0:12:17:1a:2a:9c:1c:81:ce:de:f5:07:1c:f7: 61:c2:17:16:c4:78:73:8d:5d:a2:ba:67:16:fa:1c: 3b:01:53:7c:fd:67:78:e6:04:a0:10:a5:96:ad:38: 97:a6:18:be:22:91:1c:79:34:39:93:b5:07:ce:63: e0:0f:c8:63:13:a6:de:bd:9e:73:93:ca:43:19:61: fe:5f:9e:43:99:08:77:4a:95:2a:73:e0:4b:7d:42: 10:93:8f:c4:f3:c3:df:d9:28:d5:85:3b:86:57:35: 60:a2:c9:c8:d7:79:34:5e:42:8f:f8:dc:ad:55:55: d9:97:95:17:2f:33:81:d2:5c:a9:50:64:ef:94:8f: df:36:63:92:8c:34:d8:ea:de:40:76:69:69:36:9e: 8a:ed:73:8e:18:76:d4:26:81:cb:f3:68:ca:4b:20: 1d:54:19:c4:33:2a:99:26:85:d5:c2:15:7d:c0:72: 94:3b:28:0d:3a:ac:17:45:f0:28:44:95:17:3c:ff: 60:37:12:b5:33:2d:39:4e:a0:2a:95:a4:a2:bd:54: ce:0a:23:7a:3b:7a:99:cf:c1:1f:eb:65:7e:9d:34: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:15:37:75:76:6F:AA:EE:E8:E5:62:1E:BE:1A:38:13:6F:26:57:39 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:93:9e:c4:bb:b8:ab:0e:09:42:ba:a4:f1:52:da:62:02:31: 28:19:e4:0d:ec:27:d4:b4:df:83:3d:2b:a2:bd:59:25:96:20: 64:bb:e6:59:0d:a2:d1:8c:d1:8d:5e:c1:4c:8f:c1:db:b2:29: dc:09:11:72:75:0f:ae:9e:75:80:ae:a8:32:e3:dc:3a:04:06: 73:09:a9:ae:10:31:1c:77:63:23:cb:d5:1a:fa:04:59:85:c2: 03:54:32:35:9c:12:f4:bb:01:5f:28:d3:4c:c3:0c:30:d1:48: 54:2c:95:28:a8:1f:c6:5e:2d:6f:75:15:0c:69:75:30:18:27: 39:83:15:5b:d7:39:74:95:b9:46:eb:0c:f2:68:db:b6:51:8f: a3:d3:5d:0b:79:49:bb:11:6f:bf:a8:c4:71:4e:9d:9a:a6:80: 4d:c8:61:06:09:a4:e0:20:f7:9a:70:45:b0:78:0e:a7:eb:53: 44:cb:9f:15:c9:00:ec:7e:1e:03:99:81:3e:85:99:68:c4:3d: d7:54:b9:40:75:1b:ed:a1:ee:44:25:80:39:7f:6c:1b:d2:b5: 5a:77:d4:9b:48:11:64:94:b3:6c:51:e2:41:a4:0a:75:79:d0: e9:75:9a:4d:0a:7c:9e:43:0f:98:4f:87:87:ef:eb:ea:8d:97: 86:8e:1f:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwlkJHt85T0yYIHsJkLVw/85IAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA3MDEwMTI1MDRaFw0yNTA3MDQwOTEzMDRaMDMxMTAvBgNV BAMTKDMxMTUzNzc1NzY2RkFBRUVFOEU1NjIxRUJFMUEzODEzNkYyNjU3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcX/Gazk8dceO87Lom1O9apL1 flU9BlMJUGvNNh3QEhcaKpwcgc7e9Qcc92HCFxbEeHONXaK6Zxb6HDsBU3z9Z3jm BKAQpZatOJemGL4ikRx5NDmTtQfOY+APyGMTpt69nnOTykMZYf5fnkOZCHdKlSpz 4Et9QhCTj8Tzw9/ZKNWFO4ZXNWCiycjXeTReQo/43K1VVdmXlRcvM4HSXKlQZO+U j982Y5KMNNjq3kB2aWk2nortc44YdtQmgcvzaMpLIB1UGcQzKpkmhdXCFX3AcpQ7 KA06rBdF8ChElRc8/2A3ErUzLTlOoCqVpKK9VM4KI3o7epnPwR/rZX6dNAtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMRU3dXZvqu7o5WIevho4E28mVzkwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOTnsS7uKsOCUK6pPFS2mICMSgZ5A3sJ9S0 34M9K6K9WSWWIGS75lkNotGM0Y1ewUyPwduyKdwJEXJ1D66edYCuqDLj3DoEBnMJ qa4QMRx3YyPL1Rr6BFmFwgNUMjWcEvS7AV8o00zDDDDRSFQslSioH8ZeLW91FQxp dTAYJzmDFVvXOXSVuUbrDPJo27ZRj6PTXQt5SbsRb7+oxHFOnZqmgE3IYQYJpOAg 95pwRbB4DqfrU0TLnxXJAOx+HgOZgT6FmWjEPddUuUB1G+2h7kQlgDl/bBvStVp3 1JtIEWSUs2xR4kGkCnV50Ol1mk0KfJ5DD5hPh4fv6+qNl4aOH4g= -----END CERTIFICATE-----Generated at Wed Jul 2 04:33:57 2025 by rpki-client