$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: GJX02YcPgD1e9YG2yl63DN37HPA/xKnlweuuVHaCkHE= Subject key identifier: 88:F0:F1:96:82:AB:1A:E8:76:76:A8:1A:EE:E0:62:E1:39:83:CE:7A Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 626DE60F885F17A326FBECA1A8E073D49C4E231F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01C0 Signing time: Tue 03 Jun 2025 05:12:19 +0000 Manifest this update: Tue 03 Jun 2025 05:07:19 +0000 Manifest next update: Fri 06 Jun 2025 16:15:19 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: ZIvgL7/TSUjSQgis1M5EWea31F4jkT0hl76IfkMAhxg=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 4: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: DsQQ8Ks8Q4doZplzqsSpJNVnFcTomYXiaHt1o4DXJRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6d:e6:0f:88:5f:17:a3:26:fb:ec:a1:a8:e0:73:d4:9c:4e:23:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Jun 3 05:07:19 2025 GMT Not After : Jun 6 16:15:19 2025 GMT Subject: CN=88F0F19682AB1AE87676A81AEEE062E13983CE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:93:2f:c2:e7:27:f7:b2:a5:a2:d7:79:71: db:53:5b:4a:8e:71:ec:d7:32:55:03:eb:50:f7:ed: 35:80:2b:6a:a7:a8:c6:fa:25:3d:b2:a9:a1:c5:f2: dd:51:68:ce:73:3b:57:3c:a1:54:42:7c:d1:4c:b2: 2f:5d:37:06:04:38:6b:71:88:04:43:cd:ed:e9:11: 72:f3:be:57:46:ee:20:aa:3d:0c:1a:66:13:e7:33: d2:ec:fe:6a:f7:f4:c6:57:51:89:17:b9:0b:46:dc: ac:5b:36:6e:e2:2d:7e:ca:bc:3e:57:25:c4:e6:ff: 4b:ca:c9:1a:e3:70:b9:b9:21:6e:0c:8d:77:dd:c4: e6:b5:44:ef:3b:e5:0e:bb:97:90:b8:54:6d:98:ed: 19:d9:59:d5:6a:df:ba:50:11:db:b1:59:57:4c:71: 6b:ae:ee:66:46:47:ed:ca:9f:2a:90:9d:db:5f:97: 4f:12:45:bb:90:6b:db:df:41:2b:d4:7f:7e:cd:f4: 32:51:3d:da:15:9f:66:66:cd:c3:91:c9:e6:a8:21: 2e:d7:23:d7:e7:2f:91:a1:3f:87:94:a5:c9:32:fe: de:ac:26:41:c7:62:a4:70:62:f1:cf:a6:7b:5e:39: cd:56:dd:e5:87:7f:fe:46:9f:96:65:f8:20:cc:25: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:F1:96:82:AB:1A:E8:76:76:A8:1A:EE:E0:62:E1:39:83:CE:7A X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5e:13:9f:33:79:29:67:9f:49:07:5f:06:2b:f6:3f:09:77: 20:f6:78:b7:02:51:fa:91:ba:f2:d4:8e:63:32:1c:c3:b6:cb: 19:75:13:b5:ba:06:e4:cc:5b:73:04:74:a9:4d:c4:80:f4:fb: 98:a9:bb:95:c4:18:d4:1c:6f:29:b9:a9:8d:8d:f5:53:c8:7e: f4:e9:f9:90:d5:01:a9:46:6c:ce:a6:22:fd:ec:1f:57:ac:3b: f1:df:25:a9:50:de:d2:a2:76:4f:3f:c1:1d:61:55:eb:cc:00: 88:04:3b:99:4d:b3:3c:fe:1a:57:1e:50:56:de:1c:b5:1d:c8: 7a:ba:74:68:2e:29:f4:0f:06:43:79:48:ff:54:ba:7d:dd:ad: 85:ae:66:46:59:b2:98:19:62:f9:c5:68:46:09:97:a0:46:93: a3:81:77:c1:bc:66:15:47:23:7e:20:a2:de:52:5e:84:6c:c0: f5:b6:dd:f9:66:9d:dd:da:d1:b7:86:5d:e9:92:2f:cb:0d:77: 26:c6:02:8b:a3:0c:ba:4e:13:c9:dd:68:ab:09:ef:8b:a8:36: 81:10:24:54:2d:53:d9:31:c8:8f:e1:cf:35:01:b8:0b:8b:8e: 14:ef:f1:4a:ba:4a:4b:2f:4a:ac:d1:7c:d4:32:b9:71:d0:a6: 09:35:19:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYm3mD4hfF6Mm++yhqOBz1JxOIx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA2MDMwNTA3MTlaFw0yNTA2MDYxNjE1MTlaMDMxMTAvBgNV BAMTKDg4RjBGMTk2ODJBQjFBRTg3Njc2QTgxQUVFRTA2MkUxMzk4M0NFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBypMvwucn97Klotd5cdtTW0qO cezXMlUD61D37TWAK2qnqMb6JT2yqaHF8t1RaM5zO1c8oVRCfNFMsi9dNwYEOGtx iARDze3pEXLzvldG7iCqPQwaZhPnM9Ls/mr39MZXUYkXuQtG3KxbNm7iLX7KvD5X JcTm/0vKyRrjcLm5IW4MjXfdxOa1RO875Q67l5C4VG2Y7RnZWdVq37pQEduxWVdM cWuu7mZGR+3KnyqQndtfl08SRbuQa9vfQSvUf37N9DJRPdoVn2ZmzcORyeaoIS7X I9fnL5GhP4eUpcky/t6sJkHHYqRwYvHPpnteOc1W3eWHf/5Gn5Zl+CDMJV1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPDxloKrGuh2dqga7uBi4TmDznowHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1eE58zeSlnn0kHXwYr9j8JdyD2eLcCUfqR uvLUjmMyHMO2yxl1E7W6BuTMW3MEdKlNxID0+5ipu5XEGNQcbym5qY2N9VPIfvTp +ZDVAalGbM6mIv3sH1esO/HfJalQ3tKidk8/wR1hVevMAIgEO5lNszz+GlceUFbe HLUdyHq6dGguKfQPBkN5SP9Uun3drYWuZkZZspgZYvnFaEYJl6BGk6OBd8G8ZhVH I34got5SXoRswPW23flmnd3a0beGXemSL8sNdybGAoujDLpOE8ndaKsJ74uoNoEQ JFQtU9kxyI/hzzUBuAuLjhTv8Uq6SksvSqzRfNQyuXHQpgk1GVU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:47 2025 by rpki-client