$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: c3QXA65jwENIcieLlGUCSn5N7Ck7UnfvrSWpQaoh19I= Subject key identifier: 1F:7A:58:B7:3B:A5:4F:F8:22:15:3D:CC:A0:3B:3C:29:28:C1:2C:0A Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 0AB3DB578D560A7928EDE3EC5583D390E59702BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: EA Signing time: Fri 13 Jun 2025 16:01:40 +0000 Manifest this update: Fri 13 Jun 2025 15:56:40 +0000 Manifest next update: Mon 16 Jun 2025 21:06:40 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) 3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: PWoWiKJWSTZSr3PkFEkBdc/56B1anz80Nr1acVkGHJs=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 21:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b3:db:57:8d:56:0a:79:28:ed:e3:ec:55:83:d3:90:e5:97:02:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Jun 13 15:56:40 2025 GMT Not After : Jun 16 21:06:40 2025 GMT Subject: CN=1F7A58B73BA54FF822153DCCA03B3C2928C12C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:99:5a:6a:11:be:d0:e3:76:04:61:ad:43: 75:86:64:e3:b8:d7:e1:a0:e7:84:32:ab:20:c8:4f: af:1b:4d:79:82:e5:cc:25:a5:bc:10:c5:cc:d4:df: c8:21:57:2e:a4:fc:f3:50:09:16:80:91:d4:14:41: d5:66:a8:ee:5d:2c:a7:0b:ed:de:ee:d8:4d:a8:90: ae:38:26:77:d0:9a:a8:9a:d5:a9:c4:17:67:66:d2: 2c:57:27:c6:7e:da:05:82:0a:c6:50:a0:49:bd:23: d9:ce:53:ba:51:a2:9b:1c:c5:b7:97:ff:72:8f:be: 00:66:d5:cf:d3:e1:4b:4e:85:52:b1:38:2a:40:08: 35:77:87:9d:80:96:bf:91:52:07:80:5f:3f:1a:22: f1:a4:f1:6d:bb:d3:9a:74:cd:7a:97:3c:ec:eb:70: 4a:dd:c4:96:51:0d:c5:88:ef:76:e7:77:25:be:cb: b2:4a:68:0e:b4:b4:c7:7a:d3:9b:81:6d:34:0c:71: 8d:eb:78:10:ea:8f:54:77:19:af:b0:6e:47:30:30: e2:bd:5b:90:2c:d4:f4:2b:bb:4b:04:97:b6:82:43: 8d:59:36:3c:5b:cd:a4:ae:fe:7a:29:13:4e:34:af: 97:32:c5:33:c3:55:69:d4:8f:a6:b2:96:c7:ab:23: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7A:58:B7:3B:A5:4F:F8:22:15:3D:CC:A0:3B:3C:29:28:C1:2C:0A X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:72:13:d6:ac:be:92:d1:28:d0:7b:b7:fd:a2:ac:67:05:40: 8e:59:8e:c6:f7:0d:b9:ed:04:35:0c:fe:b5:18:a0:0c:36:f6: 7e:2c:74:24:58:c5:bd:3d:2c:60:3c:01:6f:44:6d:35:82:55: 81:9c:c4:56:7b:19:a0:86:ac:2f:80:75:e2:42:b1:6f:b3:ad: 22:d5:7a:7f:19:61:48:40:d0:5e:f6:b7:2b:eb:3c:9d:62:80: 0c:0f:ba:9f:ee:17:8c:08:6d:53:93:64:b0:2b:d0:4b:c2:d9: 9a:46:cf:c7:93:40:2e:27:1a:c1:29:87:85:ba:a9:ad:67:e5: 58:72:c8:ff:30:6e:60:13:84:11:c2:5a:3f:34:a6:92:dc:30: 0e:fc:ff:71:66:2f:93:50:d3:6b:bd:4d:1b:f1:fb:6b:43:83: b4:47:bc:b6:b1:c7:a9:18:f0:bc:d9:7e:89:ab:49:9c:f4:9b: ad:b2:e5:3d:0c:5e:01:82:d0:ea:da:58:1b:9f:f1:e7:02:a6: 46:25:b8:34:88:87:27:2b:87:5b:db:f2:60:5b:6e:5d:b8:4b: e3:41:ad:1c:5c:65:dd:44:07:da:d5:21:af:d6:c9:9a:f8:f5: 86:8d:9f:d5:ba:2b:57:8a:3e:14:23:a6:33:1d:b0:91:bc:3a: 33:e0:93:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrPbV41WCnko7ePsVYPTkOWXAr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA2MTMxNTU2NDBaFw0yNTA2MTYyMTA2NDBaMDMxMTAvBgNV BAMTKDFGN0E1OEI3M0JBNTRGRjgyMjE1M0RDQ0EwM0IzQzI5MjhDMTJDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkplaahG+0ON2BGGtQ3WGZOO4 1+Gg54QyqyDIT68bTXmC5cwlpbwQxczU38ghVy6k/PNQCRaAkdQUQdVmqO5dLKcL 7d7u2E2okK44JnfQmqia1anEF2dm0ixXJ8Z+2gWCCsZQoEm9I9nOU7pRopscxbeX /3KPvgBm1c/T4UtOhVKxOCpACDV3h52Alr+RUgeAXz8aIvGk8W2705p0zXqXPOzr cErdxJZRDcWI73bndyW+y7JKaA60tMd605uBbTQMcY3reBDqj1R3Ga+wbkcwMOK9 W5As1PQru0sEl7aCQ41ZNjxbzaSu/nopE040r5cyxTPDVWnUj6aylserI6oRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH3pYtzulT/giFT3MoDs8KSjBLAowHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtyE9asvpLRKNB7t/2irGcFQI5Zjsb3Dbnt BDUM/rUYoAw29n4sdCRYxb09LGA8AW9EbTWCVYGcxFZ7GaCGrC+AdeJCsW+zrSLV en8ZYUhA0F72tyvrPJ1igAwPup/uF4wIbVOTZLAr0EvC2ZpGz8eTQC4nGsEph4W6 qa1n5VhyyP8wbmAThBHCWj80ppLcMA78/3FmL5NQ02u9TRvx+2tDg7RHvLaxx6kY 8LzZfomrSZz0m62y5T0MXgGC0OraWBuf8ecCpkYluDSIhycrh1vb8mBbbl24S+NB rRxcZd1EB9rVIa/WyZr49YaNn9W6K1eKPhQjpjMdsJG8OjPgk9g= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:20 2025 by rpki-client