$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json) Hash identifier: luwqWIebqpdKEbJwhgkNJnlxMrK29fzcvHpQ954o/uw= Subject key identifier: BE:91:EF:6F:19:EB:72:79:89:C2:7D:FA:20:EC:F9:A9:43:B5:32:6F Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 16AF3E50E3AD53C9C7BF46455CE5642F53D30FDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft Manifest number: 013A Signing time: Tue 03 Jun 2025 13:35:18 +0000 Manifest this update: Tue 03 Jun 2025 13:30:18 +0000 Manifest next update: Fri 06 Jun 2025 22:37:18 +0000 Files and hashes: 1: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: Y5PJHwAnNxDkxderyJuazZ7boejyhBCxkJ2fqMykdPw=) 2: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 61PqzbefMCe104GH4tvsaNnjc51GZYX3PE2lw6vf/AE=) 3: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: 0WXWQlb4tMBzSZgjns1zengdeTcdVp1QSefZx39KHLE=) 4: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=) 5: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M=) 6: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: xRhm+ztLVPsT2+vuoKMwBZMT/FF6d5r60ZpTwX3FlUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:af:3e:50:e3:ad:53:c9:c7:bf:46:45:5c:e5:64:2f:53:d3:0f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: Jun 3 13:30:18 2025 GMT Not After : Jun 6 22:37:18 2025 GMT Subject: CN=BE91EF6F19EB727989C27DFA20ECF9A943B5326F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:46:e4:53:69:f5:a3:06:32:6f:76:14:2c: 31:06:68:de:9f:7d:f7:c6:5d:87:43:16:59:a9:41: 8d:ad:7a:32:a1:ce:b9:c6:52:09:b5:67:57:8e:cf: 52:ec:d6:44:1f:9c:bd:a5:50:1c:50:2e:9e:b8:c3: 08:3b:1c:32:d8:47:a9:af:bb:20:d0:75:59:71:33: 27:c3:17:ab:59:f3:f0:e9:a8:96:bd:dc:ab:eb:25: 2c:5b:1e:60:de:a9:10:b7:ab:ba:3e:56:79:15:66: 72:18:29:fd:04:05:63:ad:d8:65:8b:f1:b3:5f:62: f1:69:9e:ff:fe:c2:92:bf:ae:d7:2d:63:2d:78:d2: 16:09:5a:eb:83:7f:31:17:c1:70:dc:7d:a2:72:5a: a5:7b:7f:02:0e:2d:82:7d:f6:6d:1f:2d:dc:fb:75: b7:03:60:a5:5c:bf:d0:de:ef:b8:c9:1f:2a:08:0d: 0a:0f:84:34:ed:78:df:7a:a0:ef:e4:b6:d4:34:13: 49:02:2d:df:1a:bc:1f:2c:01:0b:35:d6:56:e9:9f: f9:e2:2f:28:ed:7a:1d:9d:ec:75:48:78:21:66:71: e3:2d:f6:32:6e:83:b2:49:69:7e:0f:b1:3e:5b:07: 93:a1:95:0f:63:3e:29:1a:55:4f:ed:b3:f7:5d:d9: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:91:EF:6F:19:EB:72:79:89:C2:7D:FA:20:EC:F9:A9:43:B5:32:6F X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:00:34:3e:dd:7a:be:df:23:68:36:2d:9c:ad:13:af:66:bf: 1e:d6:a3:44:70:91:ac:af:f8:ac:81:a2:82:1b:71:cb:fa:a6: 75:d8:70:e4:19:94:fd:07:2a:38:f3:62:29:7e:f5:ef:7b:1b: c5:d8:03:d1:a2:08:4e:62:bc:64:3e:ab:a0:22:4b:34:06:ea: 0b:49:d3:d4:ca:be:46:27:6a:28:37:11:c0:e4:02:6f:96:0f: b6:60:7c:86:6c:51:e9:06:e3:4e:d8:e9:fa:f2:ad:30:4e:07: 4a:33:1e:45:1f:f4:1d:47:28:88:ca:65:15:c7:c7:fc:5c:37: 8d:f2:b7:44:92:76:04:cc:c1:b6:31:fa:2e:e7:c6:28:49:26: f5:0c:4b:ec:f0:90:a9:c7:de:34:a0:b8:f0:1c:a0:53:11:df: 1b:91:14:84:7d:3a:b2:14:70:12:63:20:a9:48:62:f4:af:f1: 47:d3:dc:ca:ba:54:a2:73:7f:41:01:a1:3c:fd:1f:20:26:f0: 68:25:ce:bd:68:50:0e:60:25:3e:29:c8:e9:e2:04:e6:53:54: 3c:7e:f8:65:4d:06:9a:5d:54:91:1c:1c:6e:a3:0a:d5:55:1a: f4:2a:fd:57:81:8d:8c:44:41:2e:32:15:f6:34:46:01:7c:db: 2c:db:35:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFq8+UOOtU8nHv0ZFXOVkL1PTD94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTA2MDMxMzMwMThaFw0yNTA2MDYyMjM3MThaMDMxMTAvBgNV BAMTKEJFOTFFRjZGMTlFQjcyNzk4OUMyN0RGQTIwRUNGOUE5NDNCNTMyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbG0bkU2n1owYyb3YULDEGaN6f fffGXYdDFlmpQY2tejKhzrnGUgm1Z1eOz1Ls1kQfnL2lUBxQLp64wwg7HDLYR6mv uyDQdVlxMyfDF6tZ8/DpqJa93KvrJSxbHmDeqRC3q7o+VnkVZnIYKf0EBWOt2GWL 8bNfYvFpnv/+wpK/rtctYy140hYJWuuDfzEXwXDcfaJyWqV7fwIOLYJ99m0fLdz7 dbcDYKVcv9De77jJHyoIDQoPhDTteN96oO/kttQ0E0kCLd8avB8sAQs11lbpn/ni Lyjteh2d7HVIeCFmceMt9jJug7JJaX4PsT5bB5OhlQ9jPikaVU/ts/dd2cHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvpHvbxnrcnmJwn36IOz5qUO1Mm8wHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENG MkVCMEMyNjFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4AND7der7fI2g2LZytE69mvx7Wo0Rwkayv +KyBooIbccv6pnXYcOQZlP0HKjjzYil+9e97G8XYA9GiCE5ivGQ+q6AiSzQG6gtJ 09TKvkYnaig3EcDkAm+WD7ZgfIZsUekG407Y6fryrTBOB0ozHkUf9B1HKIjKZRXH x/xcN43yt0SSdgTMwbYx+i7nxihJJvUMS+zwkKnH3jSguPAcoFMR3xuRFIR9OrIU cBJjIKlIYvSv8UfT3Mq6VKJzf0EBoTz9HyAm8Gglzr1oUA5gJT4pyOniBOZTVDx+ +GVNBppdVJEcHG6jCtVVGvQq/VeBjYxEQS4yFfY0RgF82yzbNX8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:30 2025 by rpki-client