$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: qp21NM+lYKVRe5yw0TQd7wKw/lcyHaX7u19aW97r3QY= Subject key identifier: 31:9B:00:45:A5:51:09:5E:18:9E:99:F3:E6:4C:2A:A6:62:B5:78:C8 Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 1554E6C5EBA672AE54CC6CA551CC146A9D48E6EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 0249 Signing time: Wed 02 Jul 2025 09:01:36 +0000 Manifest this update: Wed 02 Jul 2025 08:56:36 +0000 Manifest next update: Sat 05 Jul 2025 12:03:36 +0000 Files and hashes: 1: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: sPiJbOyvr7+jwXzQp3g1+fAcdd+XPgvJe/J6m1L+ogc=) 2: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) 3: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) 4: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 12:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:54:e6:c5:eb:a6:72:ae:54:cc:6c:a5:51:cc:14:6a:9d:48:e6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Jul 2 08:56:36 2025 GMT Not After : Jul 5 12:03:36 2025 GMT Subject: CN=319B0045A551095E189E99F3E64C2AA662B578C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:05:32:6d:4d:f8:77:ce:41:2b:ed:53:43: 20:b6:e1:04:61:4a:02:65:5e:be:c6:7a:69:da:c9: d3:d1:b6:48:c3:44:89:65:0b:8f:4d:c4:10:2c:94: bf:9d:60:11:36:ea:0c:31:2c:2d:77:6b:b7:19:97: 33:12:89:14:b1:fc:44:8e:02:84:12:da:b6:bb:fd: 54:9a:da:fe:56:a6:d7:4c:9e:83:34:16:18:8f:59: 42:90:56:2a:d5:e7:87:94:f8:85:89:95:fa:92:5a: ec:3f:cc:17:34:dc:73:0e:73:d2:2b:cb:ea:b5:6e: 3f:f4:2e:0d:f9:10:76:e8:29:ba:23:0e:e5:06:41: 5d:a9:e9:45:c6:4e:93:f0:78:06:f6:ac:7a:b2:25: 4f:97:6d:d9:7b:d6:ff:e6:65:21:93:f0:6f:a0:ce: fd:6e:e9:36:86:60:ab:5f:15:78:8a:e4:99:a2:10: 5e:b6:fe:9e:ca:9b:6c:e9:12:f6:85:ca:90:fc:e9: e2:9e:cc:ed:50:b3:20:de:18:75:35:f7:59:f1:e3: c1:85:1c:e9:12:e3:66:02:4a:a6:47:6b:92:30:f5: 5f:3c:f5:f2:8c:e3:4d:f2:75:b1:1b:63:25:98:a4: 20:60:b2:59:bc:c6:b4:db:88:9b:e4:1f:e2:1e:b5: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:00:45:A5:51:09:5E:18:9E:99:F3:E6:4C:2A:A6:62:B5:78:C8 X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e9:f3:e3:82:ff:71:f6:ad:18:4a:57:f3:1d:fd:85:02:7a: 85:c1:06:3b:97:03:bb:ac:ee:90:ce:69:d0:ed:bc:c6:7e:a0: cc:9a:43:3a:dd:07:65:8d:54:6b:71:f1:93:eb:4a:c5:8c:92: ca:6e:f3:37:70:55:d8:76:02:ac:74:3a:0d:f4:f8:ef:83:25: 01:ab:6b:5c:1e:34:e1:c2:5e:9f:d9:11:cd:3a:9a:e8:22:ad: 9a:31:62:bf:64:3c:6a:4f:47:96:3f:0d:2d:bb:21:23:fc:ca: 99:1b:2c:0e:31:a5:29:fe:41:ab:d2:71:e8:02:ed:b9:01:0e: bf:ab:26:4b:a2:20:da:0b:80:bd:d2:29:3d:d5:76:63:e0:5b: d4:ae:49:ae:0b:01:1f:e4:d0:14:03:1d:33:d8:4c:4e:26:5a: 82:f9:16:84:19:cb:c5:d7:30:af:48:6d:96:ee:b9:09:82:b4: 95:10:85:98:af:a2:61:26:4d:5a:20:e6:ff:17:49:d2:80:18: ea:a9:c4:3c:eb:60:96:40:6a:86:16:cd:d9:9d:9f:be:b3:fc: da:10:3b:c5:33:aa:9e:96:33:22:9c:3e:58:59:88:fd:ef:9a: 1a:62:47:67:ba:86:72:4b:25:34:c4:d8:84:c0:dc:cb:88:49: 95:75:59:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVTmxeumcq5UzGylUcwUap1I5u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA3MDIwODU2MzZaFw0yNTA3MDUxMjAzMzZaMDMxMTAvBgNV BAMTKDMxOUIwMDQ1QTU1MTA5NUUxODlFOTlGM0U2NEMyQUE2NjJCNTc4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSAUybU34d85BK+1TQyC24QRh SgJlXr7GemnaydPRtkjDRIllC49NxBAslL+dYBE26gwxLC13a7cZlzMSiRSx/ESO AoQS2ra7/VSa2v5WptdMnoM0FhiPWUKQVirV54eU+IWJlfqSWuw/zBc03HMOc9Ir y+q1bj/0Lg35EHboKbojDuUGQV2p6UXGTpPweAb2rHqyJU+Xbdl71v/mZSGT8G+g zv1u6TaGYKtfFXiK5JmiEF62/p7Km2zpEvaFypD86eKezO1QsyDeGHU191nx48GF HOkS42YCSqZHa5Iw9V889fKM403ydbEbYyWYpCBgslm8xrTbiJvkH+IetXeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZsARaVRCV4Ynpnz5kwqpmK1eMgwHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzp8+OC/3H2rRhKV/Md/YUCeoXBBjuXA7us 7pDOadDtvMZ+oMyaQzrdB2WNVGtx8ZPrSsWMkspu8zdwVdh2Aqx0Og30+O+DJQGr a1weNOHCXp/ZEc06mugirZoxYr9kPGpPR5Y/DS27ISP8ypkbLA4xpSn+QavScegC 7bkBDr+rJkuiINoLgL3SKT3VdmPgW9SuSa4LAR/k0BQDHTPYTE4mWoL5FoQZy8XX MK9IbZbuuQmCtJUQhZivomEmTVog5v8XSdKAGOqpxDzrYJZAaoYWzdmdn76z/NoQ O8Uzqp6WMyKcPlhZiP3vmhpiR2e6hnJLJTTE2ITA3MuISZV1WUA= -----END CERTIFICATE-----Generated at Thu Jul 3 03:49:01 2025 by rpki-client