$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: ThqIqCn3SjpsTpkwe7hzJhnN4qgcYtRHUS8iiED7Zwo= Subject key identifier: C2:19:56:CC:7D:7B:4E:34:0B:26:4C:33:A3:73:A5:28:22:35:EF:62 Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 05E838758E39A0887AD5066755159DFC16E16754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 0242 Signing time: Mon 16 Jun 2025 19:01:47 +0000 Manifest this update: Mon 16 Jun 2025 18:56:47 +0000 Manifest next update: Thu 19 Jun 2025 23:27:47 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) 2: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: WyZbPLiA6DkF7UOAttAbQ6cRpxJkVs4/mDblTXbagGQ=) 3: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 4: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e8:38:75:8e:39:a0:88:7a:d5:06:67:55:15:9d:fc:16:e1:67:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Jun 16 18:56:47 2025 GMT Not After : Jun 19 23:27:47 2025 GMT Subject: CN=C21956CC7D7B4E340B264C33A373A5282235EF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:21:a0:c3:b3:ba:cf:61:03:1b:47:ca:27: bd:04:36:44:1f:75:9a:a6:8b:a6:d8:4b:bc:0e:13: a4:08:69:a8:9b:9c:e0:6f:86:7e:5e:7b:ee:25:3e: f3:75:ee:f5:a5:71:0c:18:9e:dd:f6:d9:24:dd:54: f0:ab:f6:88:0e:0c:05:24:0a:ae:0f:6b:78:05:0c: 3f:d4:9b:33:fd:e7:74:d3:c5:f7:b9:60:3f:44:37: c7:52:e7:73:2b:16:9b:07:f8:42:8e:eb:1a:a0:3f: 84:92:65:4b:35:b6:c9:92:af:a7:47:8c:e1:98:c1: f5:09:0f:d7:90:4e:4e:07:d2:eb:54:05:37:df:7b: 85:b4:ce:bf:23:c4:7c:99:ca:77:5d:9a:31:e1:14: e5:8f:34:07:e0:f3:3e:db:e6:83:8a:8e:4f:07:c9: 5b:bf:37:34:42:23:8a:b8:3a:72:41:fd:84:8d:bc: 2a:c2:ae:4f:57:1b:96:58:10:9c:f7:99:86:c9:09: 43:8d:b8:ab:21:1b:1e:fb:28:ef:6e:2c:c1:cb:d4: 14:0d:ec:da:5d:a0:cc:a1:f3:a9:67:34:51:ba:4a: 16:8a:4e:2f:0e:ef:8d:2a:af:a0:ca:a5:57:6d:fe: 7c:56:03:07:a1:08:17:13:40:74:77:ef:95:2e:13: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:56:CC:7D:7B:4E:34:0B:26:4C:33:A3:73:A5:28:22:35:EF:62 X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e3:e6:9f:5f:db:aa:5e:09:9b:50:06:42:16:00:91:53:54: 7b:bf:8e:c1:81:26:d7:e7:c1:71:93:71:47:c4:ee:a3:f7:a2: 06:f7:c1:28:65:cc:cd:dd:ce:8f:fa:ae:eb:ae:72:b4:f3:1f: 01:fb:54:cc:84:26:f8:81:de:d2:d6:bc:db:f5:6b:27:4d:3a: 41:74:40:95:da:3c:a1:9e:fd:03:d8:96:78:b1:43:ef:a4:99: c4:50:5d:db:c9:9e:34:6c:48:d2:24:ce:38:fa:69:ac:da:fb: 73:f1:ac:8a:c3:fe:09:c6:7c:df:7e:e7:52:48:14:88:d7:2a: c9:8f:ec:e2:34:71:59:16:24:8a:f5:df:e8:b4:80:b4:08:98: 31:c6:3e:46:36:95:6e:ce:41:61:76:fb:26:ec:53:de:c0:dc: eb:45:2c:70:3e:7f:13:04:51:41:f4:4c:3c:eb:80:6c:f3:3d: ef:1a:e2:bd:79:e1:d6:13:85:9f:77:d6:67:cd:49:e7:9c:34: 91:5c:6f:32:33:fa:55:86:65:cb:b6:6e:1a:8b:94:cc:75:40: 23:17:6a:c8:90:ef:0e:6a:c6:cc:d3:f1:f8:08:be:10:9c:f7: 47:c9:2c:27:a3:7f:d0:1a:eb:1e:b9:62:b4:a7:29:e5:eb:0a: 3d:2c:91:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeg4dY45oIh61QZnVRWd/BbhZ1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA2MTYxODU2NDdaFw0yNTA2MTkyMzI3NDdaMDMxMTAvBgNV BAMTKEMyMTk1NkNDN0Q3QjRFMzQwQjI2NEMzM0EzNzNBNTI4MjIzNUVGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01SGgw7O6z2EDG0fKJ70ENkQf dZqmi6bYS7wOE6QIaaibnOBvhn5ee+4lPvN17vWlcQwYnt322STdVPCr9ogODAUk Cq4Pa3gFDD/UmzP953TTxfe5YD9EN8dS53MrFpsH+EKO6xqgP4SSZUs1tsmSr6dH jOGYwfUJD9eQTk4H0utUBTffe4W0zr8jxHyZynddmjHhFOWPNAfg8z7b5oOKjk8H yVu/NzRCI4q4OnJB/YSNvCrCrk9XG5ZYEJz3mYbJCUONuKshGx77KO9uLMHL1BQN 7NpdoMyh86lnNFG6ShaKTi8O740qr6DKpVdt/nxWAwehCBcTQHR375UuE2m9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhlWzH17TjQLJkwzo3OlKCI172IwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALj5p9f26peCZtQBkIWAJFTVHu/jsGBJtfn wXGTcUfE7qP3ogb3wShlzM3dzo/6ruuucrTzHwH7VMyEJviB3tLWvNv1aydNOkF0 QJXaPKGe/QPYlnixQ++kmcRQXdvJnjRsSNIkzjj6aaza+3PxrIrD/gnGfN9+51JI FIjXKsmP7OI0cVkWJIr13+i0gLQImDHGPkY2lW7OQWF2+ybsU97A3OtFLHA+fxME UUH0TDzrgGzzPe8a4r154dYThZ931mfNSeecNJFcbzIz+lWGZcu2bhqLlMx1QCMX asiQ7w5qxszT8fgIvhCc90fJLCejf9Aa6x65YrSnKeXrCj0skXk= -----END CERTIFICATE-----Generated at Wed Jun 18 16:00:08 2025 by rpki-client