$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: qxo48uNHUEEIVxp6usgNFbylwPIoTwaOGCouBYevo+4= Subject key identifier: D5:CE:A7:D6:3E:6C:CA:85:D0:51:6E:35:74:A6:0D:73:06:E2:B8:81 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 7C10CE170141618DC3F0647E897DBE3B71A6506F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 02BB Signing time: Mon 28 Apr 2025 08:52:16 +0000 Manifest this update: Mon 28 Apr 2025 08:47:16 +0000 Manifest next update: Thu 01 May 2025 11:41:16 +0000 Files and hashes: 1: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 18b0Gg5/45qsHWWMKCPhmvKnsrcZsZ/fmda1ZKbjIBk=) 2: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: kPaKCzbfTu6Kb7lNVFVqCdSC7iBWhY5WqPXZPd+gQ/s=) 3: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY=) 4: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: cepAJn8agdY+jNIp6J3XAutc8+tu3bbIJtY/L+UpD4k=) 5: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: Em18K+MRLc18yaX14YQfb1826gcDLLiSRdz/WlnRnnE=) 6: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: JCNF2AqA+9yLiNsXD2G46cVY5ai2iXqfYKsqNNx0uaI=) 7: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: FrHSWZownm6A7T3AZIhQ7h7eaOkOIIg4+temM4RnNJ4=) 8: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: ae4O0AtYse0yRkTQsAXYp92EBw2Zh6JfYntTF84Qbd0=) 9: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: 4N83F1FY8HtDNTq6OMGSFNYU4XLLuDbuSDKgz6IAVpA=) 10: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=) 11: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: C+T8dBvggaTCEh5/1ll1reorawVQeZDheWzvM6XklTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 11:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:10:ce:17:01:41:61:8d:c3:f0:64:7e:89:7d:be:3b:71:a6:50:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Apr 28 08:47:16 2025 GMT Not After : May 1 11:41:16 2025 GMT Subject: CN=D5CEA7D63E6CCA85D0516E3574A60D7306E2B881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:85:10:d2:3e:dc:65:c5:20:81:6c:3e:07:d1: ad:76:75:39:f5:2e:fd:56:48:e7:ca:8a:f4:3b:6b: 79:63:78:c8:7c:62:a8:6d:6a:06:f8:4c:b0:fe:6e: 73:4a:ff:03:e7:36:84:13:75:e2:a4:9b:1f:12:63: 27:c6:fd:84:08:45:da:77:38:93:2a:dc:45:1f:b1: 8e:7e:d7:98:7e:d7:fe:12:98:06:20:95:19:57:17: b8:d0:4e:52:3e:18:1c:28:b0:d1:63:e2:44:8d:c7: ed:42:5b:92:0f:72:8d:23:ae:5b:73:29:d2:9c:22: 17:1a:bb:d7:19:a3:97:02:f3:d9:56:00:63:98:9e: 92:4f:27:f9:d3:5f:b2:e7:dd:c1:34:96:22:b4:6d: c3:3a:c1:b9:6a:54:7c:e2:e1:45:f5:45:13:79:8d: f3:6c:14:3c:8f:d4:01:53:25:71:65:47:bc:cb:58: 6f:1b:81:58:53:31:6e:8d:e6:e4:a7:18:44:ad:fa: 86:47:bc:bc:29:cf:fc:b4:67:07:0b:f6:e0:07:83: 03:16:e6:16:11:0e:e5:0c:fe:ed:4d:e7:2a:51:2e: 5f:ca:42:76:2b:a8:6d:6c:b7:58:06:5c:3a:c1:77: 22:8e:fa:a9:54:5b:6b:d7:33:ec:b7:1e:4f:44:cb: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CE:A7:D6:3E:6C:CA:85:D0:51:6E:35:74:A6:0D:73:06:E2:B8:81 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:96:b7:92:2a:08:48:3e:fe:63:6e:8e:4c:cb:8d:0f:0d:a4: 00:33:42:e9:c1:a6:fc:64:b5:3d:fa:8b:04:d9:ed:a1:0b:d3: 4d:7a:91:ea:47:06:d4:0c:e5:c9:5c:d3:0c:ad:ee:f2:3d:dc: 6d:72:13:d1:23:48:5d:a8:c3:fe:33:f7:66:61:3e:72:be:b6: 2a:c6:29:f8:fe:ef:19:81:a3:3c:47:f9:f6:18:74:60:7c:cb: 87:b3:97:fe:1a:04:49:4c:cb:c0:dd:20:db:2e:1a:76:93:f0: b8:99:2d:11:1c:b2:a6:6a:b5:02:94:d0:c2:36:e6:3b:6d:33: 40:08:da:2e:c5:05:90:4f:79:42:e4:fd:a2:59:4a:aa:83:af: 2e:b9:f8:68:67:33:78:bc:0b:d0:e7:0a:78:01:cc:c5:df:88: db:0c:bc:df:b6:79:1c:e5:0a:7d:aa:6d:af:a3:05:3a:be:4e: 31:85:fb:d4:b2:91:e0:93:80:c0:9d:6f:c8:62:a5:c1:9d:dc: 0c:c4:2e:6f:2e:5f:80:28:4e:b7:b7:ba:1e:7c:49:e4:3d:5f: a3:9e:49:ef:4c:6c:38:b3:0e:a7:52:c1:70:88:e5:e9:66:97: 17:df:ed:a8:ed:f5:a3:7d:e3:7c:7b:a8:9b:fb:fc:da:9e:2c: dd:b6:b1:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBDOFwFBYY3D8GR+iX2+O3GmUG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTA0MjgwODQ3MTZaFw0yNTA1MDExMTQxMTZaMDMxMTAvBgNV BAMTKEQ1Q0VBN0Q2M0U2Q0NBODVEMDUxNkUzNTc0QTYwRDczMDZFMkI4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhRDSPtxlxSCBbD4H0a12dTn1 Lv1WSOfKivQ7a3ljeMh8Yqhtagb4TLD+bnNK/wPnNoQTdeKkmx8SYyfG/YQIRdp3 OJMq3EUfsY5+15h+1/4SmAYglRlXF7jQTlI+GBwosNFj4kSNx+1CW5IPco0jrltz KdKcIhcau9cZo5cC89lWAGOYnpJPJ/nTX7Ln3cE0liK0bcM6wblqVHzi4UX1RRN5 jfNsFDyP1AFTJXFlR7zLWG8bgVhTMW6N5uSnGESt+oZHvLwpz/y0ZwcL9uAHgwMW 5hYRDuUM/u1N5ypRLl/KQnYrqG1st1gGXDrBdyKO+qlUW2vXM+y3Hk9Ey/V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1c6n1j5syoXQUW41dKYNcwbiuIEwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiWt5IqCEg+/mNujkzLjQ8NpAAzQunBpvxk tT36iwTZ7aEL0016kepHBtQM5clc0wyt7vI93G1yE9EjSF2ow/4z92ZhPnK+tirG Kfj+7xmBozxH+fYYdGB8y4ezl/4aBElMy8DdINsuGnaT8LiZLREcsqZqtQKU0MI2 5jttM0AI2i7FBZBPeULk/aJZSqqDry65+GhnM3i8C9DnCngBzMXfiNsMvN+2eRzl Cn2qba+jBTq+TjGF+9SykeCTgMCdb8hipcGd3AzELm8uX4AoTre3uh58SeQ9X6Oe Se9MbDizDqdSwXCI5elmlxff7ajt9aN943x7qJv7/NqeLN22sb0= -----END CERTIFICATE-----Generated at Wed Apr 30 05:38:54 2025 by rpki-client