$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: F94MYPsbQ/Ni8FwamZGT7BudUdAyfOsOAttB1AOJiKg= Subject key identifier: 0D:07:D2:6A:BA:71:A2:8C:38:34:95:BD:E2:3A:16:B7:C6:C2:B5:5E Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 15995852B8555EF9B454249A15563F02757BA4F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: E6 Signing time: Wed 04 Jun 2025 09:31:40 +0000 Manifest this update: Wed 04 Jun 2025 09:26:40 +0000 Manifest next update: Sat 07 Jun 2025 21:25:40 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: IqDiTIo936utn1WgDVlO+GV/y3di58RrfT2AHYLu1jo=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:99:58:52:b8:55:5e:f9:b4:54:24:9a:15:56:3f:02:75:7b:a4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Jun 4 09:26:40 2025 GMT Not After : Jun 7 21:25:40 2025 GMT Subject: CN=0D07D26ABA71A28C383495BDE23A16B7C6C2B55E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:3b:99:0f:9a:5d:e3:06:68:90:03:5c:15: ec:eb:46:10:c9:71:9c:bd:0f:27:75:1b:2c:fa:9c: 24:83:c2:ba:0d:db:93:ba:7e:2a:40:00:bf:e1:34: 8e:78:2d:36:bc:14:ac:6c:ab:2d:18:e9:cd:44:7a: ed:1b:1e:5b:0d:23:e0:5f:ac:d5:d1:ce:ec:47:02: a7:a2:3a:8c:fb:77:73:f2:14:43:70:95:77:97:72: 0c:61:44:b7:da:55:0a:5c:d3:08:9c:7d:81:86:4a: 2a:0b:25:af:cc:ab:89:6c:14:da:c4:ba:cb:5b:8a: d8:6c:66:c8:de:43:14:4f:49:24:97:6c:f7:5c:c7: 6f:6b:99:a2:6c:b1:f6:51:59:1a:8a:e7:29:75:ad: fd:b7:ea:56:69:8b:05:6a:61:97:07:47:37:93:35: 9e:a7:b6:1a:56:17:d4:72:2a:8a:e2:da:ba:ef:e1: 46:f0:17:1e:aa:ee:cd:49:3d:d4:83:37:ac:ce:da: ad:14:86:fe:34:ab:0b:bd:0d:f9:3b:68:08:32:f4: 51:ce:31:26:34:db:0d:97:f1:de:74:12:19:8a:62: ae:68:57:a8:da:18:c0:46:85:a1:08:1f:99:46:b7: ce:81:c6:e1:60:82:71:51:aa:29:09:f6:66:ca:d0: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:D2:6A:BA:71:A2:8C:38:34:95:BD:E2:3A:16:B7:C6:C2:B5:5E X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cf:3f:76:56:40:4e:b3:93:2f:47:7f:ab:a7:7c:8c:3d:21: d2:03:31:ce:b7:1b:ec:8b:e7:91:96:f5:c7:3f:71:ac:16:e5: 42:a0:b7:fe:3a:b1:8c:7b:40:dc:8a:6d:ab:95:b3:7e:18:91: 4a:1a:ee:c9:2f:05:4b:23:48:bc:5f:4c:f9:eb:7b:b4:02:76: 1b:6a:9a:c4:08:51:05:64:0c:d6:d3:3b:20:6b:27:dd:24:c2: 14:ab:d7:8a:1f:dd:82:fc:67:bb:35:39:63:18:79:70:53:19: 04:84:75:33:5d:a6:65:4a:f7:33:3a:45:dd:22:d9:7f:a1:16: 3b:54:f3:8f:5a:b0:ff:74:d1:e7:87:6d:d9:0f:f6:72:60:53: 2a:bb:8d:c2:4f:1c:da:16:75:fa:be:0c:b4:ad:3c:e4:5b:26: 1e:db:9e:cf:05:da:82:2d:31:ee:07:27:59:01:bf:ac:ba:97: 40:c4:8c:65:5d:78:0c:d0:f0:b4:1a:37:e8:36:35:b2:3d:4e: 4e:12:08:dd:b0:7d:d6:99:f8:6c:7d:1a:f5:88:ad:53:74:cf: d7:b7:d1:10:cd:7b:c5:32:7d:03:49:51:c5:a7:25:ce:60:fd: af:15:04:75:2a:9f:9e:c5:33:01:7b:48:95:0a:db:46:20:40: aa:fb:4f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZlYUrhVXvm0VCSaFVY/AnV7pPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA2MDQwOTI2NDBaFw0yNTA2MDcyMTI1NDBaMDMxMTAvBgNV BAMTKDBEMDdEMjZBQkE3MUEyOEMzODM0OTVCREUyM0ExNkI3QzZDMkI1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorzuZD5pd4wZokANcFezrRhDJ cZy9Dyd1Gyz6nCSDwroN25O6fipAAL/hNI54LTa8FKxsqy0Y6c1Eeu0bHlsNI+Bf rNXRzuxHAqeiOoz7d3PyFENwlXeXcgxhRLfaVQpc0wicfYGGSioLJa/Mq4lsFNrE ustbithsZsjeQxRPSSSXbPdcx29rmaJssfZRWRqK5yl1rf236lZpiwVqYZcHRzeT NZ6nthpWF9RyKori2rrv4UbwFx6q7s1JPdSDN6zO2q0Uhv40qwu9Dfk7aAgy9FHO MSY02w2X8d50EhmKYq5oV6jaGMBGhaEIH5lGt86BxuFggnFRqikJ9mbK0LtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQfSarpxoow4NJW94joWt8bCtV4wHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPPP3ZWQE6zky9Hf6unfIw9IdIDMc63G+yL 55GW9cc/cawW5UKgt/46sYx7QNyKbauVs34YkUoa7skvBUsjSLxfTPnre7QCdhtq msQIUQVkDNbTOyBrJ90kwhSr14of3YL8Z7s1OWMYeXBTGQSEdTNdpmVK9zM6Rd0i 2X+hFjtU849asP900eeHbdkP9nJgUyq7jcJPHNoWdfq+DLStPORbJh7bns8F2oIt Me4HJ1kBv6y6l0DEjGVdeAzQ8LQaN+g2NbI9Tk4SCN2wfdaZ+Gx9GvWIrVN0z9e3 0RDNe8UyfQNJUcWnJc5g/a8VBHUqn57FMwF7SJUK20YgQKr7T5E= -----END CERTIFICATE-----Generated at Fri Jun 6 17:45:24 2025 by rpki-client