$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: qyHOHKGQAreRvyTZdjALnC+qCfKNFLX4O9+VDB7nxW8= Subject key identifier: 28:97:FF:12:87:AD:96:0B:00:B9:B9:B7:30:73:A6:89:0E:05:17:97 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 6394324F933130724CA833EF559A1BA830819D1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 02CC Signing time: Thu 05 Jun 2025 11:32:18 +0000 Manifest this update: Thu 05 Jun 2025 11:27:18 +0000 Manifest next update: Sun 08 Jun 2025 22:08:18 +0000 Files and hashes: 1: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: FrHSWZownm6A7T3AZIhQ7h7eaOkOIIg4+temM4RnNJ4=) 2: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: kPaKCzbfTu6Kb7lNVFVqCdSC7iBWhY5WqPXZPd+gQ/s=) 3: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: f9qu1+6icUHcBMgqClJr2Y3pi0b4uzzF3pDKSv6z4Eo=) 4: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 18b0Gg5/45qsHWWMKCPhmvKnsrcZsZ/fmda1ZKbjIBk=) 5: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: Em18K+MRLc18yaX14YQfb1826gcDLLiSRdz/WlnRnnE=) 6: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: ae4O0AtYse0yRkTQsAXYp92EBw2Zh6JfYntTF84Qbd0=) 7: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=) 8: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: JCNF2AqA+9yLiNsXD2G46cVY5ai2iXqfYKsqNNx0uaI=) 9: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: 4N83F1FY8HtDNTq6OMGSFNYU4XLLuDbuSDKgz6IAVpA=) 10: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: C+T8dBvggaTCEh5/1ll1reorawVQeZDheWzvM6XklTw=) 11: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: IXux5BvkTuomSLlcfO/atgRq6FYsd2lPJysl7WoyMqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:94:32:4f:93:31:30:72:4c:a8:33:ef:55:9a:1b:a8:30:81:9d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Jun 5 11:27:18 2025 GMT Not After : Jun 8 22:08:18 2025 GMT Subject: CN=2897FF1287AD960B00B9B9B73073A6890E051797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:2e:e0:05:57:41:e0:48:e1:b8:b4:77:62: 4f:17:83:b1:07:cb:08:76:4d:00:5d:20:d5:e0:60: 2e:8e:32:2f:bb:d9:4b:6a:d8:a9:31:40:d9:e0:54: 0a:32:98:6e:6b:77:f4:ee:79:49:fa:3d:5d:05:80: dc:61:71:a1:19:60:d8:d6:e3:f6:13:1f:cc:49:dd: f1:c9:59:79:c9:1b:ae:1f:5a:71:c3:90:c2:e3:bd: c7:17:ce:84:4f:3a:a5:f4:21:82:4f:1d:58:6c:c6: dd:f4:65:f3:7f:1a:76:dc:38:6e:7d:a7:bb:5c:e9: 4b:c6:58:a0:5b:89:dc:e4:cb:72:44:49:9a:53:2f: 56:71:f2:85:d3:fd:be:2e:85:91:2d:78:42:66:fe: ee:97:60:79:33:52:97:6f:b1:ac:4e:61:6f:23:f0: b4:b5:06:c1:3d:df:d4:15:56:4c:f1:6f:2f:09:8b: 9f:a9:85:86:73:20:e7:a1:5b:0d:e7:a3:d8:0c:15: b0:9a:2a:e8:58:c6:1f:1c:bd:e0:9f:d6:09:72:d6: 27:9f:3c:35:63:04:9b:8e:96:35:f2:b5:78:ee:f3: 9b:d0:61:bd:f3:35:a6:15:73:73:6e:aa:fe:fa:0e: 34:0e:67:f9:02:e3:b5:0c:70:17:bc:c4:da:4f:54: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:97:FF:12:87:AD:96:0B:00:B9:B9:B7:30:73:A6:89:0E:05:17:97 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:67:5e:31:09:c1:c3:ae:8e:77:27:a0:97:52:27:3d:8d:21: 8a:4f:a4:e5:1f:27:39:1b:56:51:67:03:6e:38:c9:e0:54:41: 23:de:57:36:70:e7:b4:dd:ea:86:34:9c:71:e5:4e:45:18:a2: bf:c9:75:b1:d7:42:0d:d9:4e:58:3c:31:dc:e2:4e:5b:f0:08: 4b:0f:57:10:c5:ba:8f:e1:ca:14:7a:93:c6:09:26:c4:ff:b9: 28:60:88:43:38:df:d6:a4:8c:e4:2b:7f:44:f7:55:d7:f0:1b: be:be:75:40:d9:d9:5a:0c:f7:35:e7:63:23:d0:c7:13:a4:d2: a2:c4:eb:00:58:b1:8b:75:bc:85:36:52:95:78:0f:eb:dd:11: fd:5e:18:d6:65:48:9a:63:67:1b:b1:25:92:03:9f:c0:29:88: 1a:82:9f:85:39:89:cc:10:03:30:95:29:d7:6e:53:83:64:f7: 4b:2c:62:61:12:73:a2:2c:8f:6d:10:99:7c:37:6c:af:11:e2: a6:97:18:2a:45:1f:c8:51:54:eb:58:e9:7c:96:91:6f:8a:28: 79:3c:d8:42:ad:08:a6:d2:bb:0e:f9:2e:be:03:8b:40:f8:0e: a8:ae:29:28:61:5b:c8:65:4d:be:52:9c:20:87:21:a2:3c:74: cc:00:56:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5QyT5MxMHJMqDPvVZobqDCBnRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTA2MDUxMTI3MThaFw0yNTA2MDgyMjA4MThaMDMxMTAvBgNV BAMTKDI4OTdGRjEyODdBRDk2MEIwMEI5QjlCNzMwNzNBNjg5MEUwNTE3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtS7gBVdB4EjhuLR3Yk8Xg7EH ywh2TQBdINXgYC6OMi+72Utq2KkxQNngVAoymG5rd/TueUn6PV0FgNxhcaEZYNjW 4/YTH8xJ3fHJWXnJG64fWnHDkMLjvccXzoRPOqX0IYJPHVhsxt30ZfN/GnbcOG59 p7tc6UvGWKBbidzky3JESZpTL1Zx8oXT/b4uhZEteEJm/u6XYHkzUpdvsaxOYW8j 8LS1BsE939QVVkzxby8Ji5+phYZzIOehWw3no9gMFbCaKuhYxh8cveCf1gly1ief PDVjBJuOljXytXju85vQYb3zNaYVc3Nuqv76DjQOZ/kC47UMcBe8xNpPVJmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJf/EoetlgsAubm3MHOmiQ4FF5cwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpnXjEJwcOujncnoJdSJz2NIYpPpOUfJzkb VlFnA244yeBUQSPeVzZw57Td6oY0nHHlTkUYor/JdbHXQg3ZTlg8MdziTlvwCEsP VxDFuo/hyhR6k8YJJsT/uShgiEM439akjOQrf0T3VdfwG76+dUDZ2VoM9zXnYyPQ xxOk0qLE6wBYsYt1vIU2UpV4D+vdEf1eGNZlSJpjZxuxJZIDn8ApiBqCn4U5icwQ AzCVKdduU4Nk90ssYmESc6Isj20QmXw3bK8R4qaXGCpFH8hRVOtY6XyWkW+KKHk8 2EKtCKbSuw75Lr4Di0D4DqiuKShhW8hlTb5SnCCHIaI8dMwAVoU= -----END CERTIFICATE-----Generated at Fri Jun 6 16:35:29 2025 by rpki-client