$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: ScoJ0nWgnNwW5+vx6CS8Yu8icTza22hDv4dl0X09AQQ= Subject key identifier: 32:B2:3E:9C:DD:9E:A4:B1:0C:B2:DC:6F:9B:3D:26:74:DF:4C:8E:F4 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 57B606B11C049158F2CB25A08E5E3387A081859D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: FD Signing time: Sat 26 Jul 2025 02:11:41 +0000 Manifest this update: Sat 26 Jul 2025 02:06:41 +0000 Manifest next update: Tue 29 Jul 2025 13:33:41 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: H3bGOEnd8mYV6EJGZQaCKCrn/xKpFOhExRDw1EtPYiM=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 09:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:06:b1:1c:04:91:58:f2:cb:25:a0:8e:5e:33:87:a0:81:85:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Jul 26 02:06:41 2025 GMT Not After : Jul 29 13:33:41 2025 GMT Subject: CN=32B23E9CDD9EA4B10CB2DC6F9B3D2674DF4C8EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:2e:e4:46:19:67:e0:61:3f:69:d0:29:aa: 12:2f:8a:5e:b8:2e:91:a4:54:23:66:5c:b6:5a:88: bf:ba:6d:ca:e2:54:f7:58:26:a2:3a:fc:90:4a:6a: 18:e2:14:e3:6e:d7:5c:69:36:92:7e:d3:48:d3:c0: 75:41:e3:25:45:e7:df:c2:c1:ff:47:66:60:ba:92: 4a:0f:9d:6f:19:77:c3:24:e0:be:a6:b7:02:34:58: 9b:dd:a7:2f:0b:c4:18:37:ea:92:5b:19:a2:f7:98: be:0d:06:df:65:1c:b3:32:04:e3:09:14:4c:a1:12: 00:7b:ce:6d:74:49:3c:0d:fa:ce:7d:11:5a:3c:23: 40:8d:3a:66:b9:8e:4a:bf:67:f6:23:f0:b3:2c:a8: 73:a9:67:77:19:0f:f5:76:69:33:ef:5f:82:9f:4f: a3:28:49:52:fd:fa:cc:b6:53:24:f3:ce:62:82:90: b8:eb:f4:06:e4:69:81:87:de:4a:8f:10:b8:cd:aa: c0:d2:ed:7f:bf:07:a4:59:d4:fa:d6:29:35:c9:ca: 84:e1:57:3c:69:da:f4:c4:fa:13:51:39:a7:d0:4c: bd:a5:2d:fb:c7:85:77:0a:3f:7f:71:19:96:50:fe: 4a:0f:b3:86:5a:36:a9:a5:5a:d3:cc:6c:75:8b:2c: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B2:3E:9C:DD:9E:A4:B1:0C:B2:DC:6F:9B:3D:26:74:DF:4C:8E:F4 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:71:5c:aa:5a:49:fb:de:02:fe:ac:3e:0c:2c:9a:b4:8b:73: 2c:49:c0:11:42:aa:68:9f:40:d2:b7:10:10:4e:70:de:f5:81: fb:09:1c:0e:67:b5:51:67:aa:2d:10:ae:bb:31:3f:8b:4b:7a: fe:07:f3:f7:41:83:2f:4b:74:3a:8c:99:0d:e8:c2:82:77:93: ec:9f:0e:6c:82:c8:00:8e:ff:81:29:8b:e5:ae:05:23:a6:12: dd:1d:f1:a6:5a:3b:f4:ad:27:13:42:4d:3a:3b:8e:0a:11:75: 07:ec:7f:3e:78:2e:88:12:93:aa:0f:52:e0:ba:8d:31:78:fb: 44:48:b7:1d:8a:4e:dc:0b:71:61:4e:04:34:25:cc:94:6f:ce: 74:be:6d:3b:13:e1:c9:d6:ae:d7:11:05:bd:15:f4:4b:22:40: 7c:95:b5:a8:0d:98:e0:c8:43:cb:23:c4:59:ec:67:df:3b:3a: 1d:fb:19:79:27:4b:34:7f:af:4a:7a:e6:6b:01:0b:33:10:dc: 78:39:e9:80:bc:40:9a:ab:fa:ef:ce:11:ae:da:e4:71:10:d6: 05:ba:12:12:5a:f5:2f:fa:2f:4e:35:f1:56:66:1e:8d:07:59: 9d:8d:2f:2f:4f:d1:b3:b4:1c:f4:3f:c9:88:cc:48:f0:85:84: 88:52:30:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7YGsRwEkVjyyyWgjl4zh6CBhZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA3MjYwMjA2NDFaFw0yNTA3MjkxMzMzNDFaMDMxMTAvBgNV BAMTKDMyQjIzRTlDREQ5RUE0QjEwQ0IyREM2RjlCM0QyNjc0REY0QzhFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyaC7kRhln4GE/adApqhIvil64 LpGkVCNmXLZaiL+6bcriVPdYJqI6/JBKahjiFONu11xpNpJ+00jTwHVB4yVF59/C wf9HZmC6kkoPnW8Zd8Mk4L6mtwI0WJvdpy8LxBg36pJbGaL3mL4NBt9lHLMyBOMJ FEyhEgB7zm10STwN+s59EVo8I0CNOma5jkq/Z/Yj8LMsqHOpZ3cZD/V2aTPvX4Kf T6MoSVL9+sy2UyTzzmKCkLjr9AbkaYGH3kqPELjNqsDS7X+/B6RZ1PrWKTXJyoTh Vzxp2vTE+hNROafQTL2lLfvHhXcKP39xGZZQ/koPs4ZaNqmlWtPMbHWLLMdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrI+nN2epLEMstxvmz0mdN9MjvQwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZxXKpaSfveAv6sPgwsmrSLcyxJwBFCqmif QNK3EBBOcN71gfsJHA5ntVFnqi0QrrsxP4tLev4H8/dBgy9LdDqMmQ3owoJ3k+yf DmyCyACO/4Epi+WuBSOmEt0d8aZaO/StJxNCTTo7jgoRdQfsfz54LogSk6oPUuC6 jTF4+0RItx2KTtwLcWFOBDQlzJRvznS+bTsT4cnWrtcRBb0V9EsiQHyVtagNmODI Q8sjxFnsZ987Oh37GXknSzR/r0p65msBCzMQ3Hg56YC8QJqr+u/OEa7a5HEQ1gW6 EhJa9S/6L0418VZmHo0HWZ2NLy9P0bO0HPQ/yYjMSPCFhIhSMDI= -----END CERTIFICATE-----Generated at Sat Jul 26 19:31:51 2025 by rpki-client