$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: uIhsGECr0faEPeHOnNhmVkRwnYt9iJXCUxB0E4S7S/Y= Subject key identifier: CA:E3:51:AB:1F:BD:DD:27:73:53:90:4C:95:68:C4:04:C5:4A:94:76 Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 72F649D5757B653A86F8CFDC7949152305E6CE6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 0232 Signing time: Sun 11 May 2025 20:51:37 +0000 Manifest this update: Sun 11 May 2025 20:46:37 +0000 Manifest next update: Thu 15 May 2025 00:57:37 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) 2: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 3: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: Iqsd50I0rvh9EcJnaEkERfl428hQbOQgi0VyjpSS6lc=) 4: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 00:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f6:49:d5:75:7b:65:3a:86:f8:cf:dc:79:49:15:23:05:e6:ce:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: May 11 20:46:37 2025 GMT Not After : May 15 00:57:37 2025 GMT Subject: CN=CAE351AB1FBDDD277353904C9568C404C54A9476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:32:2d:1f:e2:01:50:97:97:a7:f4:c9:c6: 9c:dd:b3:46:1f:03:58:fd:9a:d3:e7:4b:04:5a:58: ac:92:ac:c6:05:6f:86:75:94:2b:d7:55:8c:19:18: d8:1b:f7:eb:63:f0:5c:6f:0c:9e:89:82:49:35:98: 1d:e1:73:ac:4e:61:ae:06:09:98:1c:e5:e3:a4:ca: ae:68:3f:8f:1a:c8:52:29:23:5b:2b:3f:92:ba:26: 5b:d6:af:8d:34:a4:64:d7:b5:38:a2:99:91:5c:d3: 91:09:d2:92:9a:4f:d0:24:d7:88:eb:4c:8c:e8:fd: dc:03:f4:dc:ff:3c:5d:bd:f5:70:2e:74:2b:92:79: 0f:e7:09:d5:2a:e3:99:28:ad:eb:a2:1c:a8:57:ca: 65:18:19:ca:44:95:29:0b:d3:63:fa:22:a1:06:47: 4b:dc:c2:dc:1d:b1:7a:4e:7b:22:63:e5:04:76:c0: 3b:7f:8b:d9:f8:12:e7:6f:f4:ff:04:7d:a8:6d:47: 6a:5b:09:b6:b1:30:8d:b3:44:a0:32:63:c8:32:07: 6f:e7:fd:6f:c7:fc:7c:bf:32:79:f3:de:42:c5:ac: 88:fc:75:55:ce:03:f9:04:6d:88:03:68:30:f7:6a: fd:79:80:1a:92:d4:97:96:25:e3:f8:58:9a:bb:4b: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:51:AB:1F:BD:DD:27:73:53:90:4C:95:68:C4:04:C5:4A:94:76 X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2c:82:89:a6:aa:f8:9e:9e:f7:1b:20:b5:c1:c2:53:36:05: 58:a0:f8:79:9a:4c:d4:30:56:f7:39:94:d7:59:83:b8:61:26: 1b:a4:aa:8b:0e:be:65:1c:e8:85:bb:76:df:45:e2:67:6c:7f: d2:11:ee:ad:1c:0a:96:fc:5e:30:78:ef:9c:a1:b0:02:ac:97: 46:43:15:83:60:3a:e6:8b:25:3b:c3:8d:42:44:d7:7c:2b:6f: e0:ea:75:fd:44:ba:45:bc:53:09:a8:39:a0:d3:c6:d6:ab:cb: 2e:dc:35:c7:4e:14:9b:c3:e5:73:f6:2c:29:9a:db:2c:73:94: 27:ee:39:59:9a:04:a0:b4:6f:ad:d4:65:22:4e:33:06:ba:55: 98:bc:9f:15:dc:56:e9:ee:ec:44:eb:92:35:ab:49:b7:39:fd: ec:f6:ee:0e:80:3e:19:a7:74:e0:e8:19:85:49:ea:6c:97:6c: 3a:ea:a1:4b:76:a5:35:a0:c9:91:3d:cf:ff:69:11:2e:c5:50: 78:0f:29:d5:88:ab:1c:67:5b:cc:eb:11:cb:14:8d:e5:af:0f: c0:1b:c3:9f:09:1e:ae:c0:b6:32:86:5d:40:91:78:87:05:48: 92:96:69:b7:48:40:aa:9d:6f:fa:a1:46:9d:9b:be:74:3b:66: 18:ae:d2:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvZJ1XV7ZTqG+M/ceUkVIwXmzmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA1MTEyMDQ2MzdaFw0yNTA1MTUwMDU3MzdaMDMxMTAvBgNV BAMTKENBRTM1MUFCMUZCREREMjc3MzUzOTA0Qzk1NjhDNDA0QzU0QTk0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBjItH+IBUJeXp/TJxpzds0Yf A1j9mtPnSwRaWKySrMYFb4Z1lCvXVYwZGNgb9+tj8FxvDJ6Jgkk1mB3hc6xOYa4G CZgc5eOkyq5oP48ayFIpI1srP5K6JlvWr400pGTXtTiimZFc05EJ0pKaT9Ak14jr TIzo/dwD9Nz/PF299XAudCuSeQ/nCdUq45koreuiHKhXymUYGcpElSkL02P6IqEG R0vcwtwdsXpOeyJj5QR2wDt/i9n4Eudv9P8EfahtR2pbCbaxMI2zRKAyY8gyB2/n /W/H/Hy/Mnnz3kLFrIj8dVXOA/kEbYgDaDD3av15gBqS1JeWJeP4WJq7S7cDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuNRqx+93SdzU5BMlWjEBMVKlHYwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMsgommqvienvcbILXBwlM2BVig+HmaTNQw Vvc5lNdZg7hhJhukqosOvmUc6IW7dt9F4mdsf9IR7q0cCpb8XjB475yhsAKsl0ZD FYNgOuaLJTvDjUJE13wrb+Dqdf1EukW8UwmoOaDTxtaryy7cNcdOFJvD5XP2LCma 2yxzlCfuOVmaBKC0b63UZSJOMwa6VZi8nxXcVunu7ETrkjWrSbc5/ez27g6APhmn dODoGYVJ6myXbDrqoUt2pTWgyZE9z/9pES7FUHgPKdWIqxxnW8zrEcsUjeWvD8Ab w58JHq7AtjKGXUCReIcFSJKWabdIQKqdb/qhRp2bvnQ7Zhiu0sM= -----END CERTIFICATE-----Generated at Tue May 13 07:12:58 2025 by rpki-client