$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json) Hash identifier: kr89NIQjG0BGS9mPsPyDXkEh7e3zaWp6VnfFl0W9UjI= Subject key identifier: 91:8F:96:9F:DD:1E:36:54:B2:C1:27:54:3F:CF:C5:23:68:E8:23:21 Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 5CC89A0431D94979A3E5E078D4B28409E385D648 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft Manifest number: 0145 Signing time: Sat 28 Jun 2025 22:42:02 +0000 Manifest this update: Sat 28 Jun 2025 22:37:02 +0000 Manifest next update: Tue 01 Jul 2025 23:59:02 +0000 Files and hashes: 1: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=) 2: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: xRhm+ztLVPsT2+vuoKMwBZMT/FF6d5r60ZpTwX3FlUw=) 3: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 61PqzbefMCe104GH4tvsaNnjc51GZYX3PE2lw6vf/AE=) 4: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: 0WXWQlb4tMBzSZgjns1zengdeTcdVp1QSefZx39KHLE=) 5: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M=) 6: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: GSNP8KE/t7ej95tuXj3WudpBDRERIGZ0awyfoAPKtDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c8:9a:04:31:d9:49:79:a3:e5:e0:78:d4:b2:84:09:e3:85:d6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: Jun 28 22:37:02 2025 GMT Not After : Jul 1 23:59:02 2025 GMT Subject: CN=918F969FDD1E3654B2C127543FCFC52368E82321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:9c:88:76:b7:18:6c:b8:76:90:02:fb:64: 75:5a:4d:ec:f1:7c:da:94:14:72:f7:95:97:d3:91: ef:05:24:8f:16:eb:47:bc:f3:cf:a8:30:75:a6:5a: e7:f5:9b:ed:9d:c8:d7:09:f2:3c:20:89:df:71:d3: 55:f8:1b:99:40:4b:de:af:a7:3c:69:22:50:d0:8e: 73:94:ff:3a:8b:c5:4d:1f:df:e5:53:23:67:02:8d: ae:42:2d:28:65:46:f4:c0:3b:69:6f:21:80:3d:a8: 9c:42:70:53:f2:eb:eb:3d:22:c1:4d:e9:b0:c7:03: ff:55:9c:05:1e:92:f2:cb:92:da:43:f9:d1:ac:cd: df:37:93:a0:26:4b:53:34:ae:ad:f9:e7:07:d0:14: 3c:15:54:99:88:f7:67:f7:f2:e9:e6:21:c7:64:15: f3:9e:36:b0:62:4b:1d:50:12:40:ad:b2:6f:04:45: 80:4b:21:16:58:6e:d0:16:0a:f2:c9:36:5c:ac:63: cc:19:e6:7a:3f:d3:45:b8:55:5c:a6:4c:7f:b8:cd: 09:b8:cc:5f:69:19:d3:96:1c:10:54:a1:38:ec:d7: 55:45:66:2a:94:ed:0a:d9:ff:15:b3:a9:ef:4e:84: b9:39:ab:1a:c1:35:88:7a:86:a5:45:ec:cc:e0:04: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8F:96:9F:DD:1E:36:54:B2:C1:27:54:3F:CF:C5:23:68:E8:23:21 X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:95:63:c2:be:ed:97:45:4b:86:f6:fc:aa:49:33:80:e2:f7: 08:19:71:07:a0:2f:d8:54:11:ea:7e:72:bb:ca:fc:98:f7:1e: 86:e9:a2:86:a7:0b:de:0a:8c:a6:20:c2:ff:94:c2:80:bc:07: 86:ed:f5:bc:d6:82:6d:d4:9b:4b:29:1c:82:25:7e:17:54:ef: 99:9d:0a:7c:5f:80:80:b0:cc:d0:d2:4f:f8:9c:41:78:5b:53: eb:ee:b6:e3:23:5d:fc:f8:64:7e:69:fe:50:9b:5c:64:a7:3e: 73:19:3f:77:9e:bc:c5:37:57:87:08:e1:52:09:15:c7:5e:9c: 4f:f0:19:c7:ac:88:8d:df:99:84:c2:ae:34:df:aa:6c:98:c3: c0:15:9d:e9:9f:4f:2b:46:46:20:9d:8a:d0:52:67:ab:aa:e8: 1b:38:3d:dd:a9:4d:5b:cc:d8:8b:63:9e:b0:e3:b6:38:29:f6: d4:79:37:21:8b:19:5c:e7:23:1b:d8:97:63:3c:d2:f8:bd:3e: 53:b0:db:b2:a1:e0:7b:56:5f:10:4c:0d:a8:8e:dd:d3:ad:5e: 0e:d4:34:3d:94:53:e3:5b:27:33:9c:93:02:f2:1e:97:ab:09: 0e:6b:be:27:c1:f6:cd:96:c6:5b:e6:c6:77:e1:87:cd:9d:5c: 33:44:11:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMiaBDHZSXmj5eB41LKECeOF1kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTA2MjgyMjM3MDJaFw0yNTA3MDEyMzU5MDJaMDMxMTAvBgNV BAMTKDkxOEY5NjlGREQxRTM2NTRCMkMxMjc1NDNGQ0ZDNTIzNjhFODIzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPZyIdrcYbLh2kAL7ZHVaTezx fNqUFHL3lZfTke8FJI8W60e888+oMHWmWuf1m+2dyNcJ8jwgid9x01X4G5lAS96v pzxpIlDQjnOU/zqLxU0f3+VTI2cCja5CLShlRvTAO2lvIYA9qJxCcFPy6+s9IsFN 6bDHA/9VnAUekvLLktpD+dGszd83k6AmS1M0rq355wfQFDwVVJmI92f38unmIcdk FfOeNrBiSx1QEkCtsm8ERYBLIRZYbtAWCvLJNlysY8wZ5no/00W4VVymTH+4zQm4 zF9pGdOWHBBUoTjs11VFZiqU7QrZ/xWzqe9OhLk5qxrBNYh6hqVF7MzgBC13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkY+Wn90eNlSywSdUP8/FI2joIyEwHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENG MkVCMEMyNjFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeVY8K+7ZdFS4b2/KpJM4Di9wgZcQegL9hU Eep+crvK/Jj3HobpooanC94KjKYgwv+UwoC8B4bt9bzWgm3Um0spHIIlfhdU75md CnxfgICwzNDST/icQXhbU+vutuMjXfz4ZH5p/lCbXGSnPnMZP3eevMU3V4cI4VIJ FcdenE/wGcesiI3fmYTCrjTfqmyYw8AVnemfTytGRiCditBSZ6uq6Bs4Pd2pTVvM 2ItjnrDjtjgp9tR5NyGLGVznIxvYl2M80vi9PlOw27Kh4HtWXxBMDaiO3dOtXg7U ND2UU+NbJzOckwLyHperCQ5rvifB9s2Wxlvmxnfhh82dXDNEEY4= -----END CERTIFICATE-----Generated at Mon Jun 30 09:16:44 2025 by rpki-client