$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: d8Ed7ByDT3iWf3nozpPEgWbOj7PsUAlJ3z1IO8e4oqQ= Subject key identifier: 0D:90:9E:47:9B:0E:E0:05:AA:DE:0C:9F:7C:F9:DA:9E:95:9C:05:86 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 459E56078BDEEDC48DC936E555497D5DAB565E1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: D6 Signing time: Fri 09 May 2025 18:01:59 +0000 Manifest this update: Fri 09 May 2025 17:56:59 +0000 Manifest next update: Mon 12 May 2025 21:46:59 +0000 Files and hashes: 1: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: lc9ERHIoyz044um0W3huQshiz3Tleh6GSiWqYpEJaF4=) 2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9e:56:07:8b:de:ed:c4:8d:c9:36:e5:55:49:7d:5d:ab:56:5e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: May 9 17:56:59 2025 GMT Not After : May 12 21:46:59 2025 GMT Subject: CN=0D909E479B0EE005AADE0C9F7CF9DA9E959C0586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:35:44:66:3e:13:d8:ab:14:1d:b1:e4:3e: 94:8b:f3:35:48:a8:a7:6b:70:2d:17:58:c0:aa:4c: de:d0:4e:83:01:bb:15:d3:65:1f:9f:62:29:93:5a: 7d:07:10:ab:2d:0c:10:9b:a5:b9:4c:6c:43:7f:15: e5:ee:e8:79:0a:5f:87:20:9e:84:55:8b:dc:0a:c5: cb:c2:41:c8:70:68:22:ed:e9:d8:5e:13:6e:e9:e0: 32:f0:3f:95:c4:83:32:b1:96:08:06:56:a6:eb:24: 36:d3:c4:10:17:4d:44:5c:a3:c4:43:df:ad:b4:66: 49:36:dc:2a:4a:e0:31:2e:91:d6:00:cc:a7:3f:70: a9:73:f1:45:cf:09:83:84:3b:2d:bb:f4:cc:95:a5: 3b:f4:96:24:4c:4e:78:38:d0:72:c7:7e:42:ae:a1: 97:68:b2:9b:4a:a9:d5:79:92:09:76:e4:7d:2d:77: 55:fc:39:17:01:99:65:f9:ce:2b:58:a5:0d:67:81: 4e:f8:f8:74:b3:3d:6d:a5:5d:21:3d:05:e0:de:95: a2:83:f0:23:1a:62:21:c8:4b:71:ce:7f:62:38:21: fb:df:ae:32:99:47:7b:db:a3:d4:86:8c:a5:9f:16: 35:e4:2c:d9:5e:28:79:2f:ca:21:dd:95:e1:08:1d: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:9E:47:9B:0E:E0:05:AA:DE:0C:9F:7C:F9:DA:9E:95:9C:05:86 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8a:e7:67:9b:1d:d1:c8:2c:64:bc:9b:3b:0f:fc:29:be:d5: a8:a8:d2:03:64:cd:27:2c:71:4c:7e:7f:61:fb:cd:22:1b:61: 0e:1d:ad:53:3e:47:c6:a4:2e:45:78:c6:8d:a4:40:da:41:27: e9:a1:9a:97:df:93:98:c2:fb:62:d9:3e:c2:9f:5f:93:43:11: 16:68:87:de:76:93:00:2c:13:34:e8:fd:03:f1:ab:c0:f7:76: 4d:68:a9:5a:74:de:b0:d4:a2:1e:db:a5:27:b7:3e:91:f3:6c: 79:55:94:82:d8:5b:57:ba:e7:da:a3:19:d1:d3:45:a2:d3:9d: 8e:df:31:e7:09:cc:eb:9a:d6:cb:62:4f:3d:ab:cd:4e:3f:48: 30:e0:82:99:df:65:42:6b:9d:04:f2:a4:36:df:ff:62:23:10: b9:02:3b:93:12:f0:5c:08:c9:01:e9:f2:82:5c:35:06:9b:e8: 0d:ea:ca:cd:ae:95:0b:2a:5d:45:75:24:5d:5b:94:40:2d:76: fe:98:ca:f0:13:55:0e:fd:e0:d8:0f:1c:0a:ab:11:f6:23:4d: ba:50:1c:f3:d1:b6:9c:ab:e4:f3:23:4d:93:54:58:d5:93:56: 72:67:aa:97:a6:fa:cc:23:d7:31:78:00:8d:89:cf:d6:13:72: d5:6d:c4:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZ5WB4ve7cSNyTblVUl9XatWXhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA1MDkxNzU2NTlaFw0yNTA1MTIyMTQ2NTlaMDMxMTAvBgNV BAMTKDBEOTA5RTQ3OUIwRUUwMDVBQURFMEM5RjdDRjlEQTlFOTU5QzA1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XzVEZj4T2KsUHbHkPpSL8zVI qKdrcC0XWMCqTN7QToMBuxXTZR+fYimTWn0HEKstDBCbpblMbEN/FeXu6HkKX4cg noRVi9wKxcvCQchwaCLt6dheE27p4DLwP5XEgzKxlggGVqbrJDbTxBAXTURco8RD 3620Zkk23CpK4DEukdYAzKc/cKlz8UXPCYOEOy279MyVpTv0liRMTng40HLHfkKu oZdosptKqdV5kgl25H0td1X8ORcBmWX5zitYpQ1ngU74+HSzPW2lXSE9BeDelaKD 8CMaYiHIS3HOf2I4IfvfrjKZR3vbo9SGjKWfFjXkLNleKHkvyiHdleEIHZ9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZCeR5sO4AWq3gyffPnanpWcBYYwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6K52ebHdHILGS8mzsP/Cm+1aio0gNkzScs cUx+f2H7zSIbYQ4drVM+R8akLkV4xo2kQNpBJ+mhmpffk5jC+2LZPsKfX5NDERZo h952kwAsEzTo/QPxq8D3dk1oqVp03rDUoh7bpSe3PpHzbHlVlILYW1e659qjGdHT RaLTnY7fMecJzOua1stiTz2rzU4/SDDggpnfZUJrnQTypDbf/2IjELkCO5MS8FwI yQHp8oJcNQab6A3qys2ulQsqXUV1JF1blEAtdv6YyvATVQ794NgPHAqrEfYjTbpQ HPPRtpyr5PMjTZNUWNWTVnJnqpem+swj1zF4AI2Jz9YTctVtxGA= -----END CERTIFICATE-----Generated at Sat May 10 23:45:37 2025 by rpki-client