$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: 3c6vVEroEpwz6MI7PEDhlk5nFPYchdihAZLrqrDS5Pw= Subject key identifier: F5:2F:A9:48:D6:DA:66:53:40:CF:EB:31:5C:76:BF:9F:86:FD:AF:0F Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 63EABD1BC772A1BC5755182C56469DB02B05C1AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: B6 Signing time: Sat 15 Feb 2025 21:01:41 +0000 Manifest this update: Sat 15 Feb 2025 20:56:41 +0000 Manifest next update: Tue 18 Feb 2025 21:08:41 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: vcNwL6wMlb/T6BVpshqq1QaNve418U3U2rMxy4yAZ7Y=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 21:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ea:bd:1b:c7:72:a1:bc:57:55:18:2c:56:46:9d:b0:2b:05:c1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Feb 15 20:56:41 2025 GMT Not After : Feb 18 21:08:41 2025 GMT Subject: CN=F52FA948D6DA665340CFEB315C76BF9F86FDAF0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:cd:ad:7a:5b:d5:de:67:ad:f2:38:fc:e8: 5f:90:69:24:ab:b7:5f:3b:c1:4d:ce:4c:bb:d1:e1: 19:b3:35:78:5f:f3:4f:d8:f1:3f:ba:ad:dc:46:ed: e9:ef:99:17:34:6d:4d:4d:f3:3f:99:a9:aa:df:3c: 2c:86:4e:f5:8e:6f:23:43:af:f2:84:4d:ab:10:aa: 49:65:8e:b4:f5:96:d0:fc:34:67:4e:aa:53:2f:c4: a6:8f:99:c2:86:4b:97:3a:6b:46:03:a4:6d:4d:47: 9c:d7:51:b4:9d:40:ee:8c:83:39:d3:e4:d6:57:5a: 1c:e6:96:6a:05:0e:0e:3f:77:bd:4c:97:90:09:5f: 37:52:91:3f:90:61:09:a5:c3:b0:54:ca:05:fe:6a: c7:a6:a7:0c:97:a6:f8:d5:48:43:d6:6c:c5:24:52: 03:b2:b7:57:1e:85:d3:0e:87:d7:b3:1b:ce:12:9c: 21:24:c1:ca:c5:7e:2e:ba:6f:28:46:3e:17:ed:0a: df:41:95:92:e0:5a:c5:e5:06:69:55:61:38:fa:c0: 6c:51:9c:c9:74:e3:4e:db:ec:2a:0e:1f:79:87:6b: 5b:2e:51:10:4b:77:9f:1c:97:20:67:e2:60:30:26: 7d:ce:e7:01:48:a3:90:ab:9b:71:15:02:8c:e1:e3: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:A9:48:D6:DA:66:53:40:CF:EB:31:5C:76:BF:9F:86:FD:AF:0F X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:62:d8:c4:e9:da:21:e2:02:36:60:47:1a:73:fc:11:e9: 1c:5b:ba:64:04:37:81:6f:ad:02:ba:a2:5e:48:14:97:0a:3f: 63:47:86:18:e4:da:c4:53:c7:3c:ba:5a:e1:a7:2d:cf:bf:09: 2c:34:4c:f5:28:55:84:37:7e:87:9a:bb:51:2d:ff:09:31:6c: 04:61:f6:e0:bb:9c:bc:3f:ab:05:29:bd:0e:66:b4:b1:ac:5c: fe:b5:37:33:66:d4:c4:ac:d8:27:e6:e7:54:c4:fa:65:b1:69: e8:1b:26:a6:84:c8:5e:f6:22:89:02:84:60:5e:05:06:d3:6d: 25:87:58:4c:47:4c:88:d5:e7:47:41:91:fd:70:48:7e:89:4f: 56:3e:ea:63:cb:bb:66:e3:64:92:c3:01:d0:21:8c:23:1f:98: 57:ec:0c:34:e3:3a:41:51:4f:dc:2d:a7:d1:07:b8:a3:52:35: 6a:42:38:6a:f8:92:58:d9:04:fe:c4:19:04:bf:d9:95:66:8e: 2f:9c:ac:e1:c6:17:f2:79:03:37:03:dc:a9:7a:73:d7:e9:5c: 4b:93:cc:9f:36:9b:6b:68:81:51:fc:b8:5f:3a:7e:7a:74:32: a8:b4:55:e9:d7:cc:22:96:5f:97:4e:af:a6:53:b6:71:9f:3e: ac:d1:b4:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+q9G8dyobxXVRgsVkadsCsFwaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTAyMTUyMDU2NDFaFw0yNTAyMTgyMTA4NDFaMDMxMTAvBgNV BAMTKEY1MkZBOTQ4RDZEQTY2NTM0MENGRUIzMTVDNzZCRjlGODZGREFGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJc2telvV3met8jj86F+QaSSr t187wU3OTLvR4RmzNXhf80/Y8T+6rdxG7envmRc0bU1N8z+ZqarfPCyGTvWObyND r/KETasQqklljrT1ltD8NGdOqlMvxKaPmcKGS5c6a0YDpG1NR5zXUbSdQO6MgznT 5NZXWhzmlmoFDg4/d71Ml5AJXzdSkT+QYQmlw7BUygX+asempwyXpvjVSEPWbMUk UgOyt1cehdMOh9ezG84SnCEkwcrFfi66byhGPhftCt9BlZLgWsXlBmlVYTj6wGxR nMl0407b7CoOH3mHa1suURBLd58clyBn4mAwJn3O5wFIo5Crm3EVAozh4+39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9S+pSNbaZlNAz+sxXHa/n4b9rw8wHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHUYtjE6doh4gI2YEcac/wR6RxbumQEN4Fv rQK6ol5IFJcKP2NHhhjk2sRTxzy6WuGnLc+/CSw0TPUoVYQ3foeau1Et/wkxbARh 9uC7nLw/qwUpvQ5mtLGsXP61NzNm1MSs2Cfm51TE+mWxaegbJqaEyF72IokChGBe BQbTbSWHWExHTIjV50dBkf1wSH6JT1Y+6mPLu2bjZJLDAdAhjCMfmFfsDDTjOkFR T9wtp9EHuKNSNWpCOGr4kljZBP7EGQS/2ZVmji+crOHGF/J5AzcD3Kl6c9fpXEuT zJ82m2togVH8uF86fnp0Mqi0VenXzCKWX5dOr6ZTtnGfPqzRtNc= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:49 2025 by rpki-client