$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: SJHZ1ZynIgP42ylkgEVlPRv/kMOah0fShc9ZSECWOpg= Subject key identifier: 41:45:8A:19:5D:A8:C0:EC:DE:D4:72:F9:EB:1E:6D:E4:BF:29:33:30 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 0A8A9CFAF540BAF183C415699482C2D557BB324B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: DB Signing time: Sat 10 May 2025 22:41:40 +0000 Manifest this update: Sat 10 May 2025 22:36:40 +0000 Manifest next update: Wed 14 May 2025 06:58:40 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: XV4n3rUdlwwiVQORAytkd3QwNNfgqkcKLQsrqQQFzEs=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 06:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8a:9c:fa:f5:40:ba:f1:83:c4:15:69:94:82:c2:d5:57:bb:32:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: May 10 22:36:40 2025 GMT Not After : May 14 06:58:40 2025 GMT Subject: CN=41458A195DA8C0ECDED472F9EB1E6DE4BF293330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:3e:af:3b:4b:13:da:a4:20:0d:20:22:d4: 03:21:41:e4:51:0e:45:09:f4:9a:eb:fd:d4:af:b5: 0d:6e:38:27:e9:33:da:e9:63:45:bb:dc:91:ce:08: 64:c8:79:68:92:ff:96:97:1a:c3:6c:d9:f5:33:9d: b1:d5:a8:61:88:c2:31:1b:e9:a3:bb:76:eb:32:0e: 11:88:c2:b2:e8:d4:c3:58:fe:f7:25:aa:cc:b6:8c: 26:5f:ec:e0:2b:06:6e:54:31:b7:ab:24:56:e1:a8: 3c:e8:77:fe:0e:a9:41:0d:72:7b:5f:50:62:78:b3: fb:0c:04:93:72:d4:f2:7f:c4:c2:bb:c8:4f:3a:e3: a0:5d:e6:15:46:f4:32:b7:07:ea:ce:19:82:59:f2: 0c:81:bc:a7:d9:b2:21:8e:e0:ad:a0:44:ba:1c:c6: fc:4a:20:4c:c0:9c:05:1b:8a:cd:12:84:43:b1:7a: 63:b3:2c:dc:6f:62:a5:25:d6:0e:aa:eb:eb:64:fe: 04:7a:22:8c:a9:56:9b:77:4a:4b:e3:01:49:cd:f4: 01:98:7a:0f:f4:9c:9a:f7:91:34:ca:be:c4:46:b2: 24:0a:61:ab:13:7f:ea:5f:4b:29:fa:cc:0b:75:83: 46:c0:95:18:3e:05:ea:cf:8e:b6:c5:74:35:0e:9e: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:8A:19:5D:A8:C0:EC:DE:D4:72:F9:EB:1E:6D:E4:BF:29:33:30 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:67:6f:e3:7a:c2:8d:55:25:3e:25:c5:36:87:7b:4e:c4: a3:8b:67:3c:a0:31:7c:c6:e8:bc:72:fe:68:a8:75:a0:88:d4: d5:de:cc:b0:9b:d6:5e:13:dc:b4:10:e1:f4:07:d3:00:3b:34: d7:70:8f:a7:cf:74:49:7f:fa:3b:2e:6e:94:5d:cd:d5:ce:8c: 9a:83:83:59:eb:f9:aa:b2:bf:48:99:11:f5:83:c1:ea:08:17: 27:88:19:6a:6a:0a:c6:fe:3f:07:df:f9:44:80:02:f2:7c:91: 5c:df:4f:81:cd:b6:ab:74:db:6e:16:53:57:34:5b:78:fa:39: b7:07:f6:76:04:79:48:39:4d:d6:dd:87:12:9f:93:bf:80:9b: 76:d6:2d:f6:54:53:ef:22:0a:8a:05:5b:67:48:18:f9:88:b0: 8e:9a:f2:59:d0:79:ce:34:5d:c2:86:ff:0a:43:04:64:48:1e: df:c0:9f:12:7d:5e:84:61:ca:df:e0:fe:2a:9a:09:3c:ef:a3: 0e:08:d3:2c:f6:73:6b:c8:73:b5:14:1f:f7:01:60:79:8d:d8: c8:ed:c1:f2:a0:be:3e:ae:6a:df:16:74:7a:0d:c7:1e:60:bd: 9a:58:88:96:cc:f3:2a:37:2a:40:fa:09:1b:a5:dc:e6:56:19: 88:ed:53:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCoqc+vVAuvGDxBVplILC1Ve7MkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA1MTAyMjM2NDBaFw0yNTA1MTQwNjU4NDBaMDMxMTAvBgNV BAMTKDQxNDU4QTE5NURBOEMwRUNERUQ0NzJGOUVCMUU2REU0QkYyOTMzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhj6vO0sT2qQgDSAi1AMhQeRR DkUJ9Jrr/dSvtQ1uOCfpM9rpY0W73JHOCGTIeWiS/5aXGsNs2fUznbHVqGGIwjEb 6aO7dusyDhGIwrLo1MNY/vclqsy2jCZf7OArBm5UMberJFbhqDzod/4OqUENcntf UGJ4s/sMBJNy1PJ/xMK7yE8646Bd5hVG9DK3B+rOGYJZ8gyBvKfZsiGO4K2gRLoc xvxKIEzAnAUbis0ShEOxemOzLNxvYqUl1g6q6+tk/gR6IoypVpt3SkvjAUnN9AGY eg/0nJr3kTTKvsRGsiQKYasTf+pfSyn6zAt1g0bAlRg+BerPjrbFdDUOnvJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQUWKGV2owOze1HL56x5t5L8pMzAwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANmZ2/jesKNVSU+JcU2h3tOxKOLZzygMXzG 6Lxy/miodaCI1NXezLCb1l4T3LQQ4fQH0wA7NNdwj6fPdEl/+jsubpRdzdXOjJqD g1nr+aqyv0iZEfWDweoIFyeIGWpqCsb+Pwff+USAAvJ8kVzfT4HNtqt0224WU1c0 W3j6ObcH9nYEeUg5TdbdhxKfk7+Am3bWLfZUU+8iCooFW2dIGPmIsI6a8lnQec40 XcKG/wpDBGRIHt/AnxJ9XoRhyt/g/iqaCTzvow4I0yz2c2vIc7UUH/cBYHmN2Mjt wfKgvj6uat8WdHoNxx5gvZpYiJbM8yo3KkD6CRul3OZWGYjtUyo= -----END CERTIFICATE-----Generated at Mon May 12 13:53:00 2025 by rpki-client