$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: gm371YSXcgX2EJY/pFIYObAvV0LqRTVTyBl5u7KQsis= Subject key identifier: FF:85:0B:4D:C6:2E:3C:F0:2B:F0:69:38:F9:42:DC:BB:87:96:D5:DA Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 07DB26EBFE3F4E43F644E601E9FADAA3AA4C2F44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: C1 Signing time: Thu 13 Mar 2025 05:31:40 +0000 Manifest this update: Thu 13 Mar 2025 05:26:40 +0000 Manifest next update: Sun 16 Mar 2025 09:17:40 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: cux57UlAIcYbf6dUqh/B/ahfyUt6mIVxxUkts+NwCLA=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:db:26:eb:fe:3f:4e:43:f6:44:e6:01:e9:fa:da:a3:aa:4c:2f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Mar 13 05:26:40 2025 GMT Not After : Mar 16 09:17:40 2025 GMT Subject: CN=FF850B4DC62E3CF02BF06938F942DCBB8796D5DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:24:55:37:16:af:c7:1e:8c:18:0a:bb:8d: 7c:fc:ba:3b:d4:6a:5f:58:a5:3b:3e:13:c7:d1:95: 0a:00:35:2a:ac:d6:8c:b3:72:31:9d:a5:0a:02:d3: 87:fe:53:eb:2a:b6:c9:e3:08:46:bd:b4:8f:f3:35: aa:da:38:fa:52:5f:5f:82:04:df:be:b2:12:a7:f0: d1:97:e6:df:8d:9b:2e:48:9e:f0:3e:9e:1f:14:9e: 42:8e:87:50:4a:cc:d1:dc:4f:be:a7:fc:97:f3:08: 11:68:21:12:35:7d:19:ef:5a:dc:99:cb:b6:23:a8: 62:29:e3:89:61:6a:65:5d:82:a3:54:7a:a0:be:47: c1:6d:a9:e5:9b:81:65:13:d5:38:7a:ee:e2:4d:e6: 90:ff:a9:88:c0:f1:b1:7f:d2:fc:8a:63:a6:fd:49: a2:55:8e:18:45:a3:2c:c6:ff:26:84:40:e3:a9:7a: 07:13:cb:49:e8:19:c8:9c:4f:b5:d6:31:c4:b9:ca: 47:f1:cc:70:a9:99:ab:7b:fa:8e:66:1f:c3:f5:14: ee:88:37:20:8b:29:bd:c5:3c:f3:3b:c1:b3:bc:3c: fb:d9:1e:ab:bd:cf:35:60:9c:d8:81:ff:a1:64:9c: f1:84:c0:5b:93:7f:77:1a:54:0d:c7:f7:1f:0a:77: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:0B:4D:C6:2E:3C:F0:2B:F0:69:38:F9:42:DC:BB:87:96:D5:DA X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:80:0a:26:a3:ed:28:3b:71:2b:96:10:07:a7:50:33:dd:69: 75:65:3e:26:9f:50:da:02:e9:27:04:28:fb:91:2c:03:8b:cb: 33:14:2e:ce:73:60:e3:31:6d:8c:01:dc:d0:87:97:bc:26:a0: ab:0d:4a:47:cd:4d:84:ea:72:36:06:70:47:8c:e3:a5:ff:eb: 0e:bd:93:e2:52:c2:95:11:bd:ea:5e:ce:7d:aa:a5:cc:f3:f5: 4b:59:90:f1:23:ba:16:09:cf:02:be:a5:8d:f0:3e:b7:e5:3e: e5:84:3d:a2:aa:e6:7c:ed:02:b8:02:42:31:08:ed:5f:b8:b4: eb:7c:ea:ef:2b:a1:ee:a6:0d:80:dc:06:ac:ef:0c:20:94:0a: 6c:e6:83:53:6b:24:7e:29:61:db:23:2f:07:8d:5e:eb:17:07: c6:d8:5d:54:10:26:aa:5e:a2:26:70:25:5a:f0:48:2e:b2:17: 8f:98:07:5b:2b:26:ce:c5:2f:06:6a:2e:23:3f:3b:7f:c8:e8: b4:2d:22:57:98:a9:0f:d2:93:78:09:65:05:76:a2:34:aa:8b: 29:28:e9:5e:b2:8b:89:42:f9:b6:73:65:64:ad:f0:a1:4c:e6: 9c:33:a8:37:b1:9a:bc:0c:44:21:0b:5d:91:83:d6:e4:65:46: cd:05:6c:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9sm6/4/TkP2ROYB6frao6pML0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTAzMTMwNTI2NDBaFw0yNTAzMTYwOTE3NDBaMDMxMTAvBgNV BAMTKEZGODUwQjREQzYyRTNDRjAyQkYwNjkzOEY5NDJEQ0JCODc5NkQ1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCByRVNxavxx6MGAq7jXz8ujvU al9YpTs+E8fRlQoANSqs1oyzcjGdpQoC04f+U+sqtsnjCEa9tI/zNaraOPpSX1+C BN++shKn8NGX5t+Nmy5InvA+nh8UnkKOh1BKzNHcT76n/JfzCBFoIRI1fRnvWtyZ y7YjqGIp44lhamVdgqNUeqC+R8FtqeWbgWUT1Th67uJN5pD/qYjA8bF/0vyKY6b9 SaJVjhhFoyzG/yaEQOOpegcTy0noGcicT7XWMcS5ykfxzHCpmat7+o5mH8P1FO6I NyCLKb3FPPM7wbO8PPvZHqu9zzVgnNiB/6FknPGEwFuTf3caVA3H9x8Kd3g3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4ULTcYuPPAr8Gk4+ULcu4eW1dowHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSACiaj7Sg7cSuWEAenUDPdaXVlPiafUNoC 6ScEKPuRLAOLyzMULs5zYOMxbYwB3NCHl7wmoKsNSkfNTYTqcjYGcEeM46X/6w69 k+JSwpURvepezn2qpczz9UtZkPEjuhYJzwK+pY3wPrflPuWEPaKq5nztArgCQjEI 7V+4tOt86u8roe6mDYDcBqzvDCCUCmzmg1NrJH4pYdsjLweNXusXB8bYXVQQJqpe oiZwJVrwSC6yF4+YB1srJs7FLwZqLiM/O3/I6LQtIleYqQ/Sk3gJZQV2ojSqiyko 6V6yi4lC+bZzZWSt8KFM5pwzqDexmrwMRCELXZGD1uRlRs0FbOo= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:57 2025 by rpki-client