$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: fWpESD9mfhVmHcVUDQ6flbPyEacUckVjs8y8TPC3LK8= Subject key identifier: 27:80:7F:60:0F:CC:17:5E:32:EC:D4:D5:3D:C3:06:E6:4C:46:0F:F1 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 6120EB94DC8F2BCD2A1272720B250C0949BBAC9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: D1 Signing time: Thu 17 Apr 2025 18:21:40 +0000 Manifest this update: Thu 17 Apr 2025 18:16:40 +0000 Manifest next update: Sun 20 Apr 2025 23:32:40 +0000 Files and hashes: 1: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: p5Y07gVS/fSGJ60pgNZ+u9SA3p1AxzmpcKoV98VoDoM=) 2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:20:eb:94:dc:8f:2b:cd:2a:12:72:72:0b:25:0c:09:49:bb:ac:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Apr 17 18:16:40 2025 GMT Not After : Apr 20 23:32:40 2025 GMT Subject: CN=27807F600FCC175E32ECD4D53DC306E64C460FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:f1:89:d5:33:ff:87:78:9e:db:bf:41:1b: 88:40:5b:69:ca:6e:d1:fc:87:16:35:c4:26:f3:4c: c2:ed:53:eb:6e:ca:1d:28:74:3c:1e:f1:e3:66:24: 51:77:65:76:33:74:a7:ec:d3:2a:36:59:6e:7a:36: 03:4a:21:8b:95:2b:1b:0b:2b:d6:67:3f:63:2f:b1: b3:29:85:3f:15:f1:10:ca:8a:67:f6:96:68:25:61: 95:bc:34:5a:11:4a:4a:ee:fc:0c:e3:29:12:48:73: 57:51:fb:c1:dd:16:bf:ca:b1:e4:81:0b:51:32:f2: e6:3b:34:97:a4:8e:92:45:32:bb:09:c9:c5:40:c4: ee:0e:8f:85:a9:7e:5a:2f:17:ad:e5:5a:b1:ab:ea: 65:97:e4:b3:0e:9f:de:4b:f1:70:5c:4a:6a:7a:a0: 58:25:e3:0f:3a:ad:1e:38:2f:02:e2:03:a0:3d:ae: 06:95:76:48:79:1d:b9:ec:b7:60:3f:7a:14:f2:0b: 63:e0:7b:0c:ec:9b:90:c1:a2:b7:60:bd:05:c0:13: db:73:96:98:43:e3:9a:30:f8:d0:46:d5:f5:e2:72: a0:c7:f0:13:98:34:92:28:c8:f0:94:3e:7c:e7:91: b6:89:34:e7:87:db:f8:05:1f:bc:e5:4d:69:86:29: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:80:7F:60:0F:CC:17:5E:32:EC:D4:D5:3D:C3:06:E6:4C:46:0F:F1 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c4:29:9c:51:29:87:ab:4a:c6:dd:f0:94:cb:7e:81:87:23: de:ba:33:6e:03:75:5a:fc:f5:6c:0a:64:aa:0a:a2:f7:d5:70: 05:91:27:4d:2d:cc:47:ac:53:87:28:56:4b:a2:6b:db:80:db: 18:0f:8b:e2:cf:78:81:20:1d:e6:5b:80:cf:1d:c1:7d:c7:bf: a4:a2:74:8a:c8:da:2b:5b:e9:a5:b1:0f:1f:a2:0e:ae:e7:8f: 2e:54:ec:cb:af:54:09:1d:83:66:2e:86:ba:91:fd:20:dc:20: d3:35:33:88:43:11:f3:52:ed:00:15:5a:fc:d5:85:e1:c4:26: 4a:f2:83:ce:d4:5c:91:d5:3e:5d:92:1f:2b:35:b1:24:c1:d5: e5:a0:81:55:fe:82:72:97:ff:31:2e:74:42:00:3d:30:ca:53: 53:6c:aa:b4:06:71:1e:45:49:1e:6c:cc:26:b8:aa:c3:e2:e3: c4:ec:13:11:43:b6:a2:91:4f:82:8e:51:77:c8:7a:1e:f4:e6: 07:6c:fd:01:16:d8:b7:85:31:1c:84:46:4d:7a:4a:6f:63:85: d4:c2:33:97:c9:1c:d5:e0:c8:7b:53:fa:df:34:68:7a:f6:8c: f9:ad:4f:3a:0a:89:16:e3:a2:9a:3b:94:60:2d:7e:25:4c:a3: ee:a4:60:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSDrlNyPK80qEnJyCyUMCUm7rJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA0MTcxODE2NDBaFw0yNTA0MjAyMzMyNDBaMDMxMTAvBgNV BAMTKDI3ODA3RjYwMEZDQzE3NUUzMkVDRDRENTNEQzMwNkU2NEM0NjBGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDvGJ1TP/h3ie279BG4hAW2nK btH8hxY1xCbzTMLtU+tuyh0odDwe8eNmJFF3ZXYzdKfs0yo2WW56NgNKIYuVKxsL K9ZnP2MvsbMphT8V8RDKimf2lmglYZW8NFoRSkru/AzjKRJIc1dR+8HdFr/KseSB C1Ey8uY7NJekjpJFMrsJycVAxO4Oj4WpflovF63lWrGr6mWX5LMOn95L8XBcSmp6 oFgl4w86rR44LwLiA6A9rgaVdkh5Hbnst2A/ehTyC2Pgewzsm5DBordgvQXAE9tz lphD45ow+NBG1fXicqDH8BOYNJIoyPCUPnznkbaJNOeH2/gFH7zlTWmGKXS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4B/YA/MF14y7NTVPcMG5kxGD/EwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHEKZxRKYerSsbd8JTLfoGHI966M24DdVr8 9WwKZKoKovfVcAWRJ00tzEesU4coVkuia9uA2xgPi+LPeIEgHeZbgM8dwX3Hv6Si dIrI2itb6aWxDx+iDq7njy5U7MuvVAkdg2YuhrqR/SDcINM1M4hDEfNS7QAVWvzV heHEJkryg87UXJHVPl2SHys1sSTB1eWggVX+gnKX/zEudEIAPTDKU1NsqrQGcR5F SR5szCa4qsPi48TsExFDtqKRT4KOUXfIeh705gds/QEW2LeFMRyERk16Sm9jhdTC M5fJHNXgyHtT+t80aHr2jPmtTzoKiRbjopo7lGAtfiVMo+6kYIo= -----END CERTIFICATE-----Generated at Fri Apr 18 01:52:42 2025 by rpki-client