$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: FGH5zLDnbTr5le2B2Kr14YAbpkU8oTfyMVaUfAqkv/c= Subject key identifier: 43:B6:FD:8E:6F:A0:30:4C:40:E3:07:01:47:DB:17:14:A2:61:64:7E Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 2AE8960D0273841DA50728128CA5E49549D556BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 023E Signing time: Sat 07 Jun 2025 18:01:37 +0000 Manifest this update: Sat 07 Jun 2025 17:56:37 +0000 Manifest next update: Tue 10 Jun 2025 23:02:37 +0000 Files and hashes: 1: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) 2: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: l7dCIXqa0GrBzZjvS68lPK98CdGyZG/kG3XJBwEOx2c=) 3: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 4: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: A45+3mXjfkgALekCRxngBHusZ/K0q+rMdgxZ3UYtL0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e8:96:0d:02:73:84:1d:a5:07:28:12:8c:a5:e4:95:49:d5:56:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Jun 7 17:56:37 2025 GMT Not After : Jun 10 23:02:37 2025 GMT Subject: CN=43B6FD8E6FA0304C40E3070147DB1714A261647E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:4f:38:dd:14:cf:a5:75:d8:7e:2a:9b:a2: ab:57:58:e5:30:e9:c4:dd:b7:53:a0:dc:7b:73:b6: a9:3e:d0:9b:eb:8a:51:6f:a4:01:f6:9e:5f:27:a0: 96:d5:d9:2e:8a:57:ca:d9:d0:29:9d:1b:36:e7:ad: 3a:5f:8e:a1:e4:24:a5:16:a0:c6:e5:3f:4b:f8:64: 0f:76:55:d9:b2:2c:d5:b4:78:08:a9:86:1c:42:fd: dc:5c:8f:96:2a:47:88:b8:69:0c:f0:c2:ef:9e:d8: 2b:44:b8:8b:1d:3d:b2:43:82:af:ff:e9:a7:20:f3: 82:74:09:1d:7e:5d:26:e1:7c:bf:8a:a7:c9:9e:6c: 1d:93:94:95:df:4a:3b:10:0d:36:0c:be:70:6c:4e: 58:34:34:ed:b5:b3:62:2f:37:88:7b:c3:da:ae:54: e0:fa:fb:18:0f:e8:10:62:85:03:eb:e3:f9:f9:4d: f9:69:dc:29:90:9b:89:fe:80:c3:e5:ca:06:77:b4: 5c:5e:1c:bf:15:3d:af:60:49:5d:d8:68:ba:1e:b8: 1c:b5:d9:9e:f5:a5:d4:dc:5e:ad:5a:ef:19:18:c6: 5a:58:3d:15:44:43:cf:a9:04:68:b4:6f:e4:c6:4c: 76:5f:31:ac:6b:b8:3d:f1:58:e7:20:da:2a:cf:68: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B6:FD:8E:6F:A0:30:4C:40:E3:07:01:47:DB:17:14:A2:61:64:7E X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:17:19:70:4c:ab:5a:c7:ee:d3:b7:05:6c:77:6f:d4:91:c0: ae:26:a7:95:1d:fc:e6:e9:64:24:d7:79:fd:35:3e:07:1e:5f: d6:fd:58:5c:80:5b:0a:05:dc:9e:5e:78:1a:66:17:94:2e:d9: eb:73:4a:a9:64:de:36:00:93:38:70:74:f1:57:49:31:e6:f5: c2:17:c5:50:0d:f5:c8:50:d4:68:cc:6a:93:31:fc:91:18:bb: 6e:36:41:13:da:20:fc:4b:c5:ce:3a:de:32:f4:43:d9:63:1b: d4:57:9d:38:6b:6f:3d:e3:d7:17:f7:e0:9c:e2:f0:25:1a:5f: 5d:60:58:95:b6:b7:8e:f8:57:7e:ee:eb:5d:ad:2f:cf:cb:bb: 7f:21:9f:49:95:9b:20:c3:89:e7:fb:5b:b7:8a:42:74:b8:83: 47:5a:d6:de:f8:7f:df:2b:85:ae:cf:64:c8:d1:7f:d0:40:48: 63:ed:ee:e8:d8:9a:ed:cd:b3:e6:2e:cf:71:8e:4c:b4:49:0e: 85:e8:21:9e:a6:2a:22:d5:2f:e7:7c:f2:7d:e7:ff:43:3b:23: 64:90:82:a2:ed:67:ef:df:20:e5:3b:48:47:66:46:09:d0:f0: 76:f5:98:a9:cf:5d:cf:8b:d8:e9:e8:63:32:60:50:7c:1f:d8: 39:fa:22:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuiWDQJzhB2lBygSjKXklUnVVrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNTA2MDcxNzU2MzdaFw0yNTA2MTAyMzAyMzdaMDMxMTAvBgNV BAMTKDQzQjZGRDhFNkZBMDMwNEM0MEUzMDcwMTQ3REIxNzE0QTI2MTY0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nE843RTPpXXYfiqboqtXWOUw 6cTdt1Og3Htztqk+0JvrilFvpAH2nl8noJbV2S6KV8rZ0CmdGzbnrTpfjqHkJKUW oMblP0v4ZA92VdmyLNW0eAiphhxC/dxcj5YqR4i4aQzwwu+e2CtEuIsdPbJDgq// 6acg84J0CR1+XSbhfL+Kp8mebB2TlJXfSjsQDTYMvnBsTlg0NO21s2IvN4h7w9qu VOD6+xgP6BBihQPr4/n5Tflp3CmQm4n+gMPlygZ3tFxeHL8VPa9gSV3YaLoeuBy1 2Z71pdTcXq1a7xkYxlpYPRVEQ8+pBGi0b+TGTHZfMaxruD3xWOcg2irPaKHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7b9jm+gMExA4wcBR9sXFKJhZH4wHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcXGXBMq1rH7tO3BWx3b9SRwK4mp5Ud/Obp ZCTXef01PgceX9b9WFyAWwoF3J5eeBpmF5Qu2etzSqlk3jYAkzhwdPFXSTHm9cIX xVAN9chQ1GjMapMx/JEYu242QRPaIPxLxc463jL0Q9ljG9RXnThrbz3j1xf34Jzi 8CUaX11gWJW2t474V37u612tL8/Lu38hn0mVmyDDief7W7eKQnS4g0da1t74f98r ha7PZMjRf9BASGPt7ujYmu3Ns+Yuz3GOTLRJDoXoIZ6mKiLVL+d88n3n/0M7I2SQ gqLtZ+/fIOU7SEdmRgnQ8Hb1mKnPXc+L2OnoYzJgUHwf2Dn6IoA= -----END CERTIFICATE-----Generated at Sun Jun 8 23:29:25 2025 by rpki-client