$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: /yxwzVjRaY3ljdChAD6tw05UNTcLtHR3RPJTxvG4/5A= Subject key identifier: D8:A1:7D:CB:D6:11:BA:CD:B0:9C:DE:68:6B:70:6D:10:AC:06:57:B8 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 0EB74FB53C7953BA4F06A85496431961DC98BA08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02B5 Signing time: Tue 12 Aug 2025 11:40:38 +0000 Manifest this update: Tue 12 Aug 2025 11:35:38 +0000 Manifest next update: Fri 15 Aug 2025 17:25:38 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: WODM/D4UAqP6UY4N5mLdbt8hbi5KcgZ5o0xABu0lfXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 17:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b7:4f:b5:3c:79:53:ba:4f:06:a8:54:96:43:19:61:dc:98:ba:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Aug 12 11:35:38 2025 GMT Not After : Aug 15 17:25:38 2025 GMT Subject: CN=D8A17DCBD611BACDB09CDE686B706D10AC0657B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:48:48:f0:8d:11:2a:6a:bf:0f:30:8a:11: 67:c1:83:8a:fb:b7:aa:67:29:27:3f:63:74:5b:04: f6:db:05:86:3a:d9:46:86:9a:af:54:60:d8:13:e8: 19:d8:24:03:05:38:49:07:93:e7:bb:64:1a:15:13: 45:da:9a:82:a4:f2:ae:94:98:f0:2a:af:ce:d0:f0: f3:29:2b:69:a4:bd:0a:48:06:f8:fe:53:10:1c:59: b5:76:8e:05:70:7c:0e:96:de:b6:1d:e4:1a:9b:66: 8d:70:c5:eb:2c:8b:d5:55:ad:05:8e:d6:63:c3:bc: a5:40:b4:37:62:96:4d:a9:3e:18:07:bb:d2:58:e8: df:38:b3:2e:67:04:72:4f:9c:60:86:8f:49:a8:a0: b4:83:f7:e6:54:c4:30:ea:ea:a4:24:92:27:75:50: 81:5c:b9:db:b9:ad:7d:a3:e4:9e:5a:11:c4:d4:03: e4:8f:54:a9:23:22:e2:21:57:38:f6:38:18:ce:41: 6f:62:7e:e1:71:8c:42:6e:c9:2a:2a:ab:21:87:47: 34:30:10:09:74:2b:e2:f6:50:fb:79:f6:43:36:a1: 5d:7a:36:de:e6:0c:63:da:8a:db:a5:b3:50:7e:28: 02:e9:25:3c:0d:39:aa:f2:cf:56:ed:68:5a:60:82: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A1:7D:CB:D6:11:BA:CD:B0:9C:DE:68:6B:70:6D:10:AC:06:57:B8 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ff:b9:1e:e1:ce:d6:bb:a4:65:bd:70:be:77:12:9d:c6:2f: 3e:3b:c7:36:22:9c:2a:03:17:34:bf:25:54:bd:39:98:e0:d1: 33:82:8d:67:28:1e:1a:e9:1a:29:94:11:da:97:30:e7:ae:2d: c3:22:d2:88:b2:5f:68:31:ad:d6:a4:68:a9:a6:40:7f:ac:93: b5:2e:c2:e2:cd:22:b1:a3:5a:df:70:c1:7a:0e:f0:c8:67:8d: 91:9a:d1:88:f0:1b:2b:72:ab:73:ce:e3:db:c2:6a:14:84:79: 1a:ca:bc:f0:73:7d:9f:39:77:f0:2e:c3:ab:cf:51:df:3b:87: 65:65:87:f2:c6:98:ff:23:23:d1:08:be:45:c0:12:f0:3a:2d: c3:3c:ae:9a:5e:34:8f:0c:68:4d:88:51:88:70:f2:e6:27:f2: e8:71:cc:a6:c5:c5:19:f9:ed:5a:d7:d9:3d:69:e0:8e:b6:fe: 51:54:10:fd:1e:82:d3:3b:3e:5c:8f:98:fa:54:a9:75:a0:72: d8:02:0e:91:9b:07:e2:bc:d6:52:08:6e:2b:b6:6d:58:4c:4b: b6:dd:4b:ea:81:82:7c:67:c3:1e:7d:6f:72:cd:f8:99:ce:1a: 35:7a:fa:13:a4:af:08:95:a5:c8:6a:f9:1f:d3:8d:d4:8e:3b: ca:f5:26:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrdPtTx5U7pPBqhUlkMZYdyYuggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA4MTIxMTM1MzhaFw0yNTA4MTUxNzI1MzhaMDMxMTAvBgNV BAMTKEQ4QTE3RENCRDYxMUJBQ0RCMDlDREU2ODZCNzA2RDEwQUMwNjU3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGckhI8I0RKmq/DzCKEWfBg4r7 t6pnKSc/Y3RbBPbbBYY62UaGmq9UYNgT6BnYJAMFOEkHk+e7ZBoVE0XamoKk8q6U mPAqr87Q8PMpK2mkvQpIBvj+UxAcWbV2jgVwfA6W3rYd5BqbZo1wxessi9VVrQWO 1mPDvKVAtDdilk2pPhgHu9JY6N84sy5nBHJPnGCGj0mooLSD9+ZUxDDq6qQkkid1 UIFcudu5rX2j5J5aEcTUA+SPVKkjIuIhVzj2OBjOQW9ifuFxjEJuySoqqyGHRzQw EAl0K+L2UPt59kM2oV16Nt7mDGPaituls1B+KALpJTwNOaryz1btaFpggpqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KF9y9YRus2wnN5oa3BtEKwGV7gwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKz/uR7hzta7pGW9cL53Ep3GLz47xzYinCoD FzS/JVS9OZjg0TOCjWcoHhrpGimUEdqXMOeuLcMi0oiyX2gxrdakaKmmQH+sk7Uu wuLNIrGjWt9wwXoO8MhnjZGa0YjwGytyq3PO49vCahSEeRrKvPBzfZ85d/Auw6vP Ud87h2Vlh/LGmP8jI9EIvkXAEvA6LcM8rppeNI8MaE2IUYhw8uYn8uhxzKbFxRn5 7VrX2T1p4I62/lFUEP0egtM7PlyPmPpUqXWgctgCDpGbB+K81lIIbiu2bVhMS7bd S+qBgnxnwx59b3LN+JnOGjV6+hOkrwiVpchq+R/TjdSOO8r1Jr4= -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:28 2025 by rpki-client