$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: 4ssHV6QfOcwpEA6OJXBimmsuYykkdG8lJ9JM0cepKLA= Subject key identifier: A8:A3:72:BD:71:AB:DC:AE:86:DC:31:33:B1:AB:86:55:88:6A:42:1C Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 032ABE6B9F9B1B0CCC23FF699C18F399E97B6405 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 02C0 Signing time: Fri 09 May 2025 12:52:18 +0000 Manifest this update: Fri 09 May 2025 12:47:18 +0000 Manifest next update: Mon 12 May 2025 23:34:18 +0000 Files and hashes: 1: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: 4N83F1FY8HtDNTq6OMGSFNYU4XLLuDbuSDKgz6IAVpA=) 2: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: JCNF2AqA+9yLiNsXD2G46cVY5ai2iXqfYKsqNNx0uaI=) 3: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: Em18K+MRLc18yaX14YQfb1826gcDLLiSRdz/WlnRnnE=) 4: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: l5HfFkj7qaBk6UrDQlEUzt5Idpuoo2e9SC2YMxC+3h8=) 5: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: FrHSWZownm6A7T3AZIhQ7h7eaOkOIIg4+temM4RnNJ4=) 6: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 18b0Gg5/45qsHWWMKCPhmvKnsrcZsZ/fmda1ZKbjIBk=) 7: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: ae4O0AtYse0yRkTQsAXYp92EBw2Zh6JfYntTF84Qbd0=) 8: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: kPaKCzbfTu6Kb7lNVFVqCdSC7iBWhY5WqPXZPd+gQ/s=) 9: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=) 10: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: C+T8dBvggaTCEh5/1ll1reorawVQeZDheWzvM6XklTw=) 11: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2a:be:6b:9f:9b:1b:0c:cc:23:ff:69:9c:18:f3:99:e9:7b:64:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: May 9 12:47:18 2025 GMT Not After : May 12 23:34:18 2025 GMT Subject: CN=A8A372BD71ABDCAE86DC3133B1AB8655886A421C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:db:f1:ed:1d:c8:f5:e2:77:89:04:eb:ab: 13:f8:60:97:c6:ba:cc:8f:64:19:46:21:37:76:f7: 86:75:fa:60:93:e8:69:ab:57:c1:8f:87:37:61:c6: c9:d9:1d:bc:23:63:4c:75:c7:de:26:52:c7:30:8c: 66:f1:57:78:c6:33:99:1e:d8:f2:89:9f:52:21:db: 29:5a:18:b6:61:78:a8:9c:e8:d7:d7:4d:e6:57:65: 7d:60:b5:86:f0:70:3b:2d:a6:94:c9:2c:63:11:35: 62:5a:06:c4:e3:77:cb:b5:a7:bf:89:76:16:38:b6: 7a:b0:31:55:e6:d3:fc:a4:6d:d6:06:99:33:0a:c3: 28:b6:8f:52:aa:2e:eb:ea:6e:18:0e:50:92:ce:53: ba:38:47:54:b5:0c:5c:69:36:bc:3d:ed:aa:64:68: 65:a3:93:82:c2:1d:28:bc:01:7e:28:f7:9d:f1:f2: d4:02:4d:eb:68:3d:b1:8b:79:4b:5c:47:e6:fc:72: d5:24:c2:23:70:90:61:db:b9:70:13:66:6d:13:51: f9:6d:ce:04:49:07:3c:df:8a:48:39:50:cf:8a:9c: 0a:c6:f1:ed:e1:81:3a:23:55:97:c9:2f:b4:29:64: 82:dc:62:6a:a7:ae:ea:29:23:93:1d:3b:f2:f1:97: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A3:72:BD:71:AB:DC:AE:86:DC:31:33:B1:AB:86:55:88:6A:42:1C X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:79:aa:47:47:10:ac:e1:57:96:cc:a1:d3:73:09:0b:f7:4c: 3e:ee:f3:d0:ea:4a:f7:60:c2:41:5c:64:d8:c2:32:29:f2:c8: 78:35:9c:6a:61:6f:89:a2:20:53:1f:ca:71:4b:0f:db:e9:a6: b7:dc:66:4b:b9:85:ba:48:a2:87:83:d3:12:0b:cc:1b:58:56: 4f:14:4b:40:b3:dd:ac:a8:b5:09:4f:ea:15:83:0f:34:d9:6b: 56:fa:04:08:8c:ec:48:1d:f6:5e:61:c4:9d:f0:b3:8d:f6:53: bc:24:1c:36:49:91:58:f7:37:3a:4e:a1:4a:5a:53:f0:77:5f: d8:d3:92:8d:01:b5:05:e0:74:b6:47:62:b6:32:60:32:db:fa: 3f:c4:35:07:17:eb:3b:33:9f:5a:92:03:11:cc:41:02:4a:3a: 24:1b:4a:6b:b2:61:5f:c6:67:f9:3c:1f:d9:63:cc:cb:95:4f: fd:b5:e6:95:91:7c:a2:e8:e0:1d:34:0b:12:54:56:32:b7:8e: 1a:59:81:f2:cc:70:a3:de:4b:da:fe:c5:3a:78:40:2c:13:1e: 72:d6:8b:90:25:54:8a:62:64:4b:c9:d0:8e:8a:e2:79:9e:22: cf:4a:75:e5:d5:b9:5c:2d:5e:c6:d6:45:6c:12:ba:22:ab:f2: b2:26:cd:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyq+a5+bGwzMI/9pnBjzmel7ZAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTA1MDkxMjQ3MThaFw0yNTA1MTIyMzM0MThaMDMxMTAvBgNV BAMTKEE4QTM3MkJENzFBQkRDQUU4NkRDMzEzM0IxQUI4NjU1ODg2QTQyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiNvx7R3I9eJ3iQTrqxP4YJfG usyPZBlGITd294Z1+mCT6GmrV8GPhzdhxsnZHbwjY0x1x94mUscwjGbxV3jGM5ke 2PKJn1Ih2ylaGLZheKic6NfXTeZXZX1gtYbwcDstppTJLGMRNWJaBsTjd8u1p7+J dhY4tnqwMVXm0/ykbdYGmTMKwyi2j1KqLuvqbhgOUJLOU7o4R1S1DFxpNrw97apk aGWjk4LCHSi8AX4o953x8tQCTetoPbGLeUtcR+b8ctUkwiNwkGHbuXATZm0TUflt zgRJBzzfikg5UM+KnArG8e3hgTojVZfJL7QpZILcYmqnruopI5MdO/Lxl7kdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKNyvXGr3K6G3DEzsauGVYhqQhwwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJ5qkdHEKzhV5bModNzCQv3TD7u89DqSvdg wkFcZNjCMinyyHg1nGphb4miIFMfynFLD9vpprfcZku5hbpIooeD0xILzBtYVk8U S0Cz3ayotQlP6hWDDzTZa1b6BAiM7Egd9l5hxJ3ws432U7wkHDZJkVj3NzpOoUpa U/B3X9jTko0BtQXgdLZHYrYyYDLb+j/ENQcX6zszn1qSAxHMQQJKOiQbSmuyYV/G Z/k8H9ljzMuVT/215pWRfKLo4B00CxJUVjK3jhpZgfLMcKPeS9r+xTp4QCwTHnLW i5AlVIpiZEvJ0I6K4nmeIs9KdeXVuVwtXsbWRWwSuiKr8rImzfM= -----END CERTIFICATE-----Generated at Sat May 10 06:16:13 2025 by rpki-client