$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json) Hash identifier: +md2z099SW0nGc6KTKqYUp3xYOXDoPOO5H+NhFB+5JM= Subject key identifier: 06:F5:03:22:64:3D:25:6A:6C:07:1B:99:2A:B1:C4:2B:BE:88:E1:65 Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Certificate serial: 2F9D752F64323D6E4F591496F2DB016BBAD6718A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft Manifest number: 93 Signing time: Mon 16 Jun 2025 04:01:42 +0000 Manifest this update: Mon 16 Jun 2025 03:56:42 +0000 Manifest next update: Thu 19 Jun 2025 13:21:42 +0000 Files and hashes: 1: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: c7u9a3tNo+sinKbXEOZIkxb5lpQ3V3xHWxLJ0wK62sQ=) 2: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: Sup9Fw29tD0flVClOEoSY9WgFqQT3F30EnAyBVurPE0=) 3: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: 4zrjWTGjIfmRVD7KoG+5XB5sYDfQiVJOsTHraO00txU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9d:75:2f:64:32:3d:6e:4f:59:14:96:f2:db:01:6b:ba:d6:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Validity Not Before: Jun 16 03:56:42 2025 GMT Not After : Jun 19 13:21:42 2025 GMT Subject: CN=06F50322643D256A6C071B992AB1C42BBE88E165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:8c:9e:cb:bc:bc:2b:d2:7c:5c:f9:c3:ea: fd:ca:7d:87:24:3d:38:0d:0b:ab:74:72:0f:e2:9b: 6f:d4:d6:c6:b0:54:ed:1b:eb:48:60:ca:da:01:98: fc:c2:88:33:ac:9b:5f:a8:8c:7b:cc:30:14:16:d7: 35:6e:f6:02:89:b5:85:bd:cd:56:83:15:c7:44:5f: c2:99:c8:7e:de:cf:82:57:a1:aa:bb:0e:03:4f:c2: 54:e7:d1:36:ef:79:49:b9:53:78:ca:20:53:99:d5: c7:42:48:85:39:6c:32:e6:6b:8e:a8:95:93:66:c7: 7d:e5:b9:a9:a1:9f:ae:cd:e6:1a:8f:8f:f2:d9:39: 44:82:27:77:c3:b8:d7:a7:fc:28:5b:5a:b2:23:b8: 55:98:25:8f:d8:68:c7:26:58:63:88:5c:98:95:4a: c9:90:a7:00:e7:ba:55:2a:b5:d2:16:32:36:bd:65: 48:c5:82:ba:88:04:c7:31:9e:45:a9:10:99:21:dd: 04:39:2d:4b:e8:2e:a5:06:d6:42:9a:3f:43:66:e1: d9:2e:ae:c6:f0:d3:ec:54:a8:9e:8d:6f:fb:91:e0: c2:14:73:9b:3c:22:7d:23:fa:86:5d:6e:88:7f:4b: 22:f8:ef:34:dc:2a:a2:e3:d1:d6:c4:9c:d0:b0:bd: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:03:22:64:3D:25:6A:6C:07:1B:99:2A:B1:C4:2B:BE:88:E1:65 X509v3 Authority Key Identifier: keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ee:c5:f4:7d:60:2b:0a:b3:bb:33:ee:c1:ab:c1:73:09:e6: 2b:9c:77:75:f0:3c:72:75:12:21:74:e7:b8:30:b2:6a:21:10: db:35:e8:35:35:1f:d7:e5:0c:e7:c0:ea:66:9e:72:0d:db:f1: 58:4d:a1:3b:de:9b:38:d4:88:16:c1:5e:6e:d5:6d:9a:26:f9: d0:bb:95:2c:6e:be:9d:16:53:04:18:ca:97:da:fc:ce:87:c1: 67:1a:3f:7d:25:1b:89:6c:c4:8f:e4:b6:1f:ae:27:39:ee:db: 3a:8e:ae:38:17:02:61:f3:6f:de:fc:57:9b:54:11:35:8a:7b: e0:8a:04:24:98:6f:b5:dc:55:4d:7b:26:5a:06:63:f7:4b:1e: 7f:d6:aa:40:16:b5:40:bc:49:71:cc:05:91:6a:a3:0f:34:f5: 0c:d4:0c:7d:3b:82:8c:44:b7:43:21:dd:72:df:81:92:e8:8c: f8:08:a5:d5:70:33:0e:50:61:03:1f:41:0b:ce:9d:78:c6:03: b6:34:cc:2f:0f:80:d7:ef:e8:9a:2a:61:fc:72:a1:74:0f:7f: f2:70:e6:b8:e8:c9:9b:33:c1:04:66:14:1d:48:88:7b:ba:45: f4:23:af:de:b7:88:11:61:bd:12:2b:e3:d6:be:c1:3d:0e:1c: cf:30:7f:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL511L2QyPW5PWRSW8tsBa7rWcYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdF MEU0RDA2OTAeFw0yNTA2MTYwMzU2NDJaFw0yNTA2MTkxMzIxNDJaMDMxMTAvBgNV BAMTKDA2RjUwMzIyNjQzRDI1NkE2QzA3MUI5OTJBQjFDNDJCQkU4OEUxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsp4yey7y8K9J8XPnD6v3KfYck PTgNC6t0cg/im2/U1sawVO0b60hgytoBmPzCiDOsm1+ojHvMMBQW1zVu9gKJtYW9 zVaDFcdEX8KZyH7ez4JXoaq7DgNPwlTn0TbveUm5U3jKIFOZ1cdCSIU5bDLma46o lZNmx33luamhn67N5hqPj/LZOUSCJ3fDuNen/ChbWrIjuFWYJY/YaMcmWGOIXJiV SsmQpwDnulUqtdIWMja9ZUjFgrqIBMcxnkWpEJkh3QQ5LUvoLqUG1kKaP0Nm4dku rsbw0+xUqJ6Nb/uR4MIUc5s8In0j+oZdboh/SyL47zTcKqLj0dbEnNCwvRDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvUDImQ9JWpsBxuZKrHEK76I4WUwHwYDVR0j BBgwFoAUWI3Q/OS8JDzJxtaK4E6EZ+Dk0GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMC81ODhERDBGQ0U0 QkMyNDNDQzlDNkQ2OEFFMDRFODQ2N0UwRTREMDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdFMEU0 RDA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzAvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0 NjdFMEU0RDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzuxfR9YCsKs7sz7sGrwXMJ5iucd3XwPHJ1 EiF057gwsmohENs16DU1H9flDOfA6maecg3b8VhNoTvemzjUiBbBXm7VbZom+dC7 lSxuvp0WUwQYypfa/M6HwWcaP30lG4lsxI/kth+uJznu2zqOrjgXAmHzb978V5tU ETWKe+CKBCSYb7XcVU17JloGY/dLHn/WqkAWtUC8SXHMBZFqow809QzUDH07goxE t0Mh3XLfgZLojPgIpdVwMw5QYQMfQQvOnXjGA7Y0zC8PgNfv6JoqYfxyoXQPf/Jw 5rjoyZszwQRmFB1IiHu6RfQjr963iBFhvRIr49a+wT0OHM8wf2c= -----END CERTIFICATE-----Generated at Tue Jun 17 22:50:06 2025 by rpki-client