$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: g/pbLz6PTNhD/HiEeSuBrJuvYGcG2C+Gpc8C1tJCGBQ= Subject key identifier: B1:B6:30:88:38:06:75:B1:B3:B4:A5:36:FD:AA:64:B6:68:5B:89:D0 Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 1B9A1581F0E4D2037D770383A6761F7523158D0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0331 Signing time: Fri 09 May 2025 18:50:04 +0000 Manifest this update: Fri 09 May 2025 18:45:04 +0000 Manifest next update: Mon 12 May 2025 21:12:04 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: zhcwfvWwihp8h3nGFgqribDDm+tVVg0ingo7WkXKey4=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9a:15:81:f0:e4:d2:03:7d:77:03:83:a6:76:1f:75:23:15:8d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: May 9 18:45:04 2025 GMT Not After : May 12 21:12:04 2025 GMT Subject: CN=B1B63088380675B1B3B4A536FDAA64B6685B89D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:57:85:f0:87:0e:f1:ff:e9:9e:58:86:a2: f2:0e:5e:ff:c1:7e:12:51:cb:37:e2:88:9b:cf:9d: d6:f4:d9:4b:ee:4c:55:94:43:35:d4:d6:c0:fe:bd: 0f:d6:fd:2a:6a:32:a1:56:86:c3:6f:8b:93:b8:e8: 84:6d:ce:0b:4a:26:90:5d:02:7f:de:eb:d9:ac:9a: 02:ec:49:3c:e3:1a:9d:1c:90:16:3b:e7:b8:d9:17: d8:3f:28:a3:61:9c:b3:39:af:91:1a:80:4d:36:6e: 9e:9f:51:f6:f5:fb:83:df:1d:11:fd:34:a4:e3:41: 7f:5d:81:a2:c2:1b:3a:86:36:24:bc:6f:b3:60:96: f1:4b:65:cc:b2:99:54:03:66:27:ae:44:99:0a:74: 8d:07:40:fb:b3:49:09:a7:1e:0e:64:29:40:be:25: 3c:68:b1:a1:b6:e5:26:c5:72:fd:17:03:aa:cc:02: a7:f5:2e:a1:e3:7e:7a:2f:35:eb:e4:6d:bd:fc:4c: e9:28:f6:6e:75:21:0d:c4:3d:a5:f7:7c:bc:3a:cc: 67:5c:52:8c:ea:4f:06:07:db:3e:b0:36:1f:83:87: 96:56:b1:ed:43:08:d6:66:cf:62:fa:01:75:e4:27: 3b:53:a6:22:b5:3e:5d:ad:7d:02:24:ec:ab:b0:73: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B6:30:88:38:06:75:B1:B3:B4:A5:36:FD:AA:64:B6:68:5B:89:D0 X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:5d:ae:04:e3:7b:01:6c:62:ca:ab:bd:02:0d:f3:4c:84:b3: c9:a7:61:e2:9a:09:d8:a2:1f:88:d3:58:72:86:8b:69:99:c9: a5:d3:46:3b:79:db:68:12:65:ec:0d:68:55:c3:5a:91:ef:b0: 3b:6a:d4:e1:bf:a1:fc:d2:b8:49:cf:fc:ab:a9:3c:00:27:87: c5:7f:c4:dc:56:a1:92:45:b3:f6:bb:ee:aa:e5:03:0a:98:bb: ee:23:74:46:5c:9e:f1:c6:e9:d7:14:77:ac:96:23:44:f6:f2: d2:b0:d2:5e:ac:02:11:a7:f1:8f:da:39:55:e6:be:83:b9:9a: 46:04:4d:3f:b8:3c:4d:ff:0b:92:e5:f7:cb:5f:c5:33:a8:6e: bd:20:cd:d5:27:83:c1:a4:bc:2a:ab:53:b0:95:30:6d:a0:98: c7:e3:b7:1b:3e:8e:e1:8e:55:8e:61:a0:02:1a:69:56:86:4b: d2:30:15:06:06:e7:ef:62:30:14:0c:57:85:7a:a8:96:78:3f: 96:ef:46:ab:e3:9d:e7:02:1a:74:8a:3e:8c:09:db:12:29:3a: 3d:09:09:c8:56:c2:3e:1e:bb:ab:b6:bc:6f:1d:38:68:eb:34: 4a:1c:61:17:ed:a0:ef:46:9e:86:e9:11:7b:a3:0d:3b:91:e1: 9e:57:30:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5oVgfDk0gN9dwODpnYfdSMVjQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA1MDkxODQ1MDRaFw0yNTA1MTIyMTEyMDRaMDMxMTAvBgNV BAMTKEIxQjYzMDg4MzgwNjc1QjFCM0I0QTUzNkZEQUE2NEI2Njg1Qjg5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cFeF8IcO8f/pnliGovIOXv/B fhJRyzfiiJvPndb02UvuTFWUQzXU1sD+vQ/W/SpqMqFWhsNvi5O46IRtzgtKJpBd An/e69msmgLsSTzjGp0ckBY757jZF9g/KKNhnLM5r5EagE02bp6fUfb1+4PfHRH9 NKTjQX9dgaLCGzqGNiS8b7NglvFLZcyymVQDZieuRJkKdI0HQPuzSQmnHg5kKUC+ JTxosaG25SbFcv0XA6rMAqf1LqHjfnovNevkbb38TOko9m51IQ3EPaX3fLw6zGdc UozqTwYH2z6wNh+Dh5ZWse1DCNZmz2L6AXXkJztTpiK1Pl2tfQIk7Kuwc+31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsbYwiDgGdbGztKU2/apktmhbidAwHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFldrgTjewFsYsqrvQIN80yEs8mnYeKaCdii H4jTWHKGi2mZyaXTRjt522gSZewNaFXDWpHvsDtq1OG/ofzSuEnP/KupPAAnh8V/ xNxWoZJFs/a77qrlAwqYu+4jdEZcnvHG6dcUd6yWI0T28tKw0l6sAhGn8Y/aOVXm voO5mkYETT+4PE3/C5Ll98tfxTOobr0gzdUng8GkvCqrU7CVMG2gmMfjtxs+juGO VY5hoAIaaVaGS9IwFQYG5+9iMBQMV4V6qJZ4P5bvRqvjnecCGnSKPowJ2xIpOj0J CchWwj4eu6u2vG8dOGjrNEocYRftoO9GnobpEXujDTuR4Z5XMOY= -----END CERTIFICATE-----Generated at Sat May 10 18:48:35 2025 by rpki-client