$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: +QzjMDl87lB4NvbIdHAStGOBtbGEcUdKlubDjH7/Ac0= Subject key identifier: FB:DE:3F:68:54:1B:3C:6F:C1:05:9A:4D:BA:55:CB:F2:0C:1D:01:1E Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 13DE1B05D21CD4EB4ACF56DB5FB63F4B096D05DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 0227 Signing time: Fri 18 Apr 2025 21:01:36 +0000 Manifest this update: Fri 18 Apr 2025 20:56:36 +0000 Manifest next update: Tue 22 Apr 2025 07:17:36 +0000 Files and hashes: 1: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: aHYlu5r/QbmjfdZsqOjch5T9IPxNG0Pwrw8A3UKTenE=) 2: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:de:1b:05:d2:1c:d4:eb:4a:cf:56:db:5f:b6:3f:4b:09:6d:05:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Apr 18 20:56:36 2025 GMT Not After : Apr 22 07:17:36 2025 GMT Subject: CN=FBDE3F68541B3C6FC1059A4DBA55CBF20C1D011E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:01:e1:bc:52:c8:78:67:27:d1:b3:ff:f0:47: 56:8c:4a:ed:cb:1d:3b:a3:0d:ce:57:78:a8:c9:c4: d3:06:fa:a5:fd:04:6e:f1:92:22:a0:13:16:37:3d: 82:c0:3d:ca:07:57:b3:2f:22:d2:bf:76:13:1a:21: b9:5b:f4:c7:ab:77:4e:7e:68:73:ed:31:d4:5c:90: dc:52:5f:e6:3e:6a:a9:c9:bd:61:f3:2d:34:ad:f0: 40:d7:a8:50:f1:0f:5d:97:f2:9a:fc:6b:2f:04:59: fb:18:98:f3:49:c4:45:f6:4f:58:79:fe:a6:60:ef: 40:b5:19:92:15:dc:cd:5d:5d:68:f4:24:d6:df:4e: b1:86:6f:06:42:76:b5:05:ea:44:38:98:79:74:aa: f9:3a:77:9c:1e:53:c1:eb:9a:e0:6f:fe:ec:a0:fa: 0e:22:21:c8:f4:eb:49:e7:e1:1c:dc:a4:80:8e:ca: 75:f1:08:bd:b4:a5:e9:2b:be:b5:31:1f:66:4c:78: 67:5a:eb:20:77:75:a7:00:52:c8:3b:da:08:39:c5: 6d:ef:e4:30:52:41:21:57:2a:b3:e6:59:c0:03:a3: c9:44:f9:64:0e:88:dc:74:ed:cd:aa:9f:76:43:a8: b4:8f:5d:5d:07:62:20:a3:d5:89:b9:73:64:f1:5e: 7f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:3F:68:54:1B:3C:6F:C1:05:9A:4D:BA:55:CB:F2:0C:1D:01:1E X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f8:da:ee:ad:71:e9:36:f8:d0:c6:8d:25:65:a0:c5:70:f6: 89:c5:42:57:f7:ea:08:b7:3a:6c:f4:6d:47:a6:c1:93:cc:07: 7f:c4:09:60:95:11:33:82:bd:3c:1c:b8:c3:24:c8:ac:bc:9f: 32:10:d9:2f:b5:3b:1d:8b:c2:b5:2e:23:88:b1:d8:bf:46:37: f6:cf:07:e2:55:a2:b8:21:42:f5:ee:16:c3:4a:3f:cf:51:cf: 25:74:94:33:2c:1a:4b:f3:65:57:7d:dd:a9:60:8f:2c:60:e4: 5d:92:19:4f:01:20:ad:82:22:66:db:e3:59:21:3d:1c:42:25: 42:99:ba:f9:e7:88:cc:15:96:bf:83:18:83:7f:ef:b6:07:66: cd:e3:29:fb:4c:73:68:c7:7e:6a:df:7f:aa:fb:c8:7f:d0:0b: 8b:ac:3c:8e:7e:60:d3:7f:24:7a:fd:51:6c:cd:06:9c:d6:c5: e0:24:fa:fe:ee:e7:6f:83:33:6d:30:04:32:df:fc:03:71:1d: 5b:a5:a6:ac:bb:60:09:8d:64:16:80:16:27:43:fd:23:ba:47: 32:bd:3d:6d:97:2a:c1:8b:ac:51:85:49:85:11:4d:fb:74:71: 3c:03:59:61:dd:51:16:bf:39:63:7e:53:38:89:e4:4d:f3:75: 4c:3a:b8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE94bBdIc1OtKz1bbX7Y/SwltBdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA0MTgyMDU2MzZaFw0yNTA0MjIwNzE3MzZaMDMxMTAvBgNV BAMTKEZCREUzRjY4NTQxQjNDNkZDMTA1OUE0REJBNTVDQkYyMEMxRDAxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmAeG8Ush4ZyfRs//wR1aMSu3L HTujDc5XeKjJxNMG+qX9BG7xkiKgExY3PYLAPcoHV7MvItK/dhMaIblb9Merd05+ aHPtMdRckNxSX+Y+aqnJvWHzLTSt8EDXqFDxD12X8pr8ay8EWfsYmPNJxEX2T1h5 /qZg70C1GZIV3M1dXWj0JNbfTrGGbwZCdrUF6kQ4mHl0qvk6d5weU8HrmuBv/uyg +g4iIcj060nn4RzcpICOynXxCL20pekrvrUxH2ZMeGda6yB3dacAUsg72gg5xW3v 5DBSQSFXKrPmWcADo8lE+WQOiNx07c2qn3ZDqLSPXV0HYiCj1Ym5c2TxXn/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+94/aFQbPG/BBZpNulXL8gwdAR4wHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL42u6tcek2+NDGjSVloMVw9onFQlf36gi3 Omz0bUemwZPMB3/ECWCVETOCvTwcuMMkyKy8nzIQ2S+1Ox2LwrUuI4ix2L9GN/bP B+JVorghQvXuFsNKP89RzyV0lDMsGkvzZVd93algjyxg5F2SGU8BIK2CImbb41kh PRxCJUKZuvnniMwVlr+DGIN/77YHZs3jKftMc2jHfmrff6r7yH/QC4usPI5+YNN/ JHr9UWzNBpzWxeAk+v7u52+DM20wBDLf/ANxHVulpqy7YAmNZBaAFidD/SO6RzK9 PW2XKsGLrFGFSYURTft0cTwDWWHdURa/OWN+UziJ5E3zdUw6uHM= -----END CERTIFICATE-----Generated at Sat Apr 19 01:33:09 2025 by rpki-client