$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: suBn4bLFT2ZMgH/WdMTBiBf68mzF7e2OCEgPS/vu8y8= Subject key identifier: 45:4F:1E:0F:D8:62:95:61:E2:26:EA:A1:3D:66:59:D0:AF:2D:55:05 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 67FD6B7C827C5E505072A622FD84E6DE6E869060 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: C6 Signing time: Thu 03 Apr 2025 15:21:58 +0000 Manifest this update: Thu 03 Apr 2025 15:16:58 +0000 Manifest next update: Sun 06 Apr 2025 22:20:58 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) 2: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: rAt7s5P2W0mEs+EH1FfQ1xHD5Yh08R8jgzm+3st/Wto=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fd:6b:7c:82:7c:5e:50:50:72:a6:22:fd:84:e6:de:6e:86:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Apr 3 15:16:58 2025 GMT Not After : Apr 6 22:20:58 2025 GMT Subject: CN=454F1E0FD8629561E226EAA13D6659D0AF2D5505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:55:1e:0c:f6:75:12:50:c0:20:0b:de:41: 3a:49:b1:30:16:3e:09:6a:7e:0f:84:b3:9d:03:42: e9:dc:87:f9:87:3e:92:96:2b:bc:91:c5:60:7e:f2: 21:83:74:b1:5b:74:08:97:b1:ad:83:b4:b1:bd:01: 31:b8:61:c5:22:a5:14:ae:5b:39:29:fe:ae:9b:e9: 23:60:6f:a1:30:32:7b:03:a5:15:24:c0:7c:8c:f8: c5:2a:5f:bd:92:e1:17:e0:6c:63:47:14:bc:9e:37: 39:70:77:f5:73:be:db:26:d3:f7:f8:71:9d:87:18: dc:da:f0:28:07:16:27:2c:9f:b1:90:be:82:54:6a: 46:ea:77:a1:00:9a:4e:14:ad:35:03:6e:57:ad:97: 61:d5:8f:5c:5c:50:d1:78:4c:3c:5a:f2:1a:9d:be: a0:28:95:47:63:51:2c:21:63:1b:a4:5f:98:53:40: 8f:1b:9e:c5:ba:ca:21:3d:7d:7b:4a:ed:0d:d0:9f: 00:af:f7:f3:6e:f5:89:eb:10:d1:55:a2:02:14:59: 47:45:d6:d2:34:1c:50:c5:59:47:f3:e1:09:be:fd: 77:c1:d5:1b:b7:d3:68:fb:5e:18:6c:d2:52:c4:58: f1:25:18:c2:f9:ca:1e:96:e7:6f:f4:5a:41:8f:1b: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4F:1E:0F:D8:62:95:61:E2:26:EA:A1:3D:66:59:D0:AF:2D:55:05 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:15:7b:72:a6:84:18:16:1c:95:1c:b0:2b:58:71:e3:60:eb: e0:3a:d9:19:b1:96:99:a8:89:99:c9:e6:33:24:77:10:a6:4f: 0d:ce:fe:1c:c4:a7:05:86:60:8c:52:cb:87:df:96:91:83:1c: ce:4f:88:1e:fd:34:f9:29:c5:50:ba:a1:9c:67:99:dc:d5:eb: c2:54:d4:f3:e4:d0:4b:39:be:ad:c3:1f:88:59:92:98:3f:1c: 38:d3:c5:c0:cc:81:38:48:e4:92:c9:4d:96:7e:44:fd:2c:59: 02:3e:30:a8:84:cd:e3:57:4b:25:43:6a:53:8d:29:b6:59:73: 83:30:0e:5e:ec:83:f1:20:61:6f:ba:a5:e4:6e:e0:9c:31:6e: ad:b8:84:10:07:44:3e:29:c8:46:7b:fe:ad:2b:f7:5d:f0:a2: 91:90:87:ce:16:e1:a5:e3:5c:41:25:b0:0d:33:37:6f:77:9d: f7:5f:ff:23:77:4a:b0:4c:78:5b:3a:91:ad:d0:aa:7b:03:42: bc:12:41:f8:60:25:10:42:be:42:31:c4:4d:67:9a:ee:d6:24: 03:a9:2f:78:73:9c:5b:a9:3c:9c:15:43:ab:9b:a4:86:85:9c: 79:bb:a9:e4:77:d9:9c:a9:25:bc:2b:cf:98:61:73:bc:f8:82: 7d:a6:cf:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/1rfIJ8XlBQcqYi/YTm3m6GkGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA0MDMxNTE2NThaFw0yNTA0MDYyMjIwNThaMDMxMTAvBgNV BAMTKDQ1NEYxRTBGRDg2Mjk1NjFFMjI2RUFBMTNENjY1OUQwQUYyRDU1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QlUeDPZ1ElDAIAveQTpJsTAW Pglqfg+Es50DQunch/mHPpKWK7yRxWB+8iGDdLFbdAiXsa2DtLG9ATG4YcUipRSu Wzkp/q6b6SNgb6EwMnsDpRUkwHyM+MUqX72S4RfgbGNHFLyeNzlwd/Vzvtsm0/f4 cZ2HGNza8CgHFicsn7GQvoJUakbqd6EAmk4UrTUDbletl2HVj1xcUNF4TDxa8hqd vqAolUdjUSwhYxukX5hTQI8bnsW6yiE9fXtK7Q3QnwCv9/Nu9YnrENFVogIUWUdF 1tI0HFDFWUfz4Qm+/XfB1Ru302j7Xhhs0lLEWPElGML5yh6W52/0WkGPG6XDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURU8eD9hilWHiJuqhPWZZ0K8tVQUwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN0Ve3KmhBgWHJUcsCtYceNg6+A62Rmxlpmo iZnJ5jMkdxCmTw3O/hzEpwWGYIxSy4fflpGDHM5PiB79NPkpxVC6oZxnmdzV68JU 1PPk0Es5vq3DH4hZkpg/HDjTxcDMgThI5JLJTZZ+RP0sWQI+MKiEzeNXSyVDalON KbZZc4MwDl7sg/EgYW+6peRu4Jwxbq24hBAHRD4pyEZ7/q0r913wopGQh84W4aXj XEElsA0zN293nfdf/yN3SrBMeFs6ka3QqnsDQrwSQfhgJRBCvkIxxE1nmu7WJAOp L3hznFupPJwVQ6ubpIaFnHm7qeR32ZypJbwrz5hhc7z4gn2mzx8= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:24 2025 by rpki-client