$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: oKeGRLOrK4ADO28p8aBLnj0RaAv0QpixffTWI0i7DH8= Subject key identifier: 02:A9:84:C8:44:D4:E7:E5:59:6A:60:2E:E9:48:94:CC:5C:E7:43:89 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 0DFC1FF236314ECD364A152CBD445D443FE10A6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 0126 Signing time: Mon 03 Nov 2025 23:02:04 +0000 Manifest this update: Mon 03 Nov 2025 22:57:04 +0000 Manifest next update: Fri 07 Nov 2025 09:33:04 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) 2: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: srluRI5DOJLvhqnBKdypWZlbiyZgLwxSVkeaamqkYXg=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fc:1f:f2:36:31:4e:cd:36:4a:15:2c:bd:44:5d:44:3f:e1:0a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Nov 3 22:57:04 2025 GMT Not After : Nov 7 09:33:04 2025 GMT Subject: CN=02A984C844D4E7E5596A602EE94894CC5CE74389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:d1:6c:60:42:92:f3:a6:bd:62:b3:84:c4: e1:8e:10:81:e3:94:e0:23:15:73:0b:c3:b9:7f:ce: e6:a2:11:a9:36:0b:e6:d3:b6:78:a4:ef:a8:14:ed: c5:4d:8b:f4:b5:f7:09:e3:3a:52:cd:43:82:71:4b: f0:68:65:70:2b:98:b4:b2:c0:11:5c:c5:2b:28:6c: ef:82:97:9f:c6:63:1d:62:71:7a:51:47:00:ad:e4: 3c:49:4b:c9:56:e9:91:d6:b7:9a:49:96:f3:10:d0: a7:78:78:5c:df:04:a4:99:3b:1b:cd:81:eb:9f:bc: 62:d0:51:b2:88:fd:fe:f8:70:30:46:51:2f:d1:06: 9e:37:90:15:19:92:14:48:25:47:79:7f:6c:1e:80: b8:e5:61:61:6c:1b:fc:b8:f9:4c:32:6b:bb:bc:64: 19:83:d7:f2:d7:45:dc:ac:7d:5f:b7:1a:2e:f9:93: 03:34:fe:3e:20:bd:20:da:97:4f:cb:90:4c:6a:3d: 8a:38:d3:ae:24:80:03:dc:c5:3a:9a:12:6e:ae:58: d3:1e:b2:a3:c7:5e:74:c2:8c:0e:a0:d3:af:6e:ac: e8:47:1a:3b:a2:e4:3b:2e:0e:42:a3:34:1c:7e:2c: 0f:3d:9e:50:a9:1a:14:e2:a2:53:cd:ad:6d:2e:d0: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:84:C8:44:D4:E7:E5:59:6A:60:2E:E9:48:94:CC:5C:E7:43:89 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:74:e0:17:cd:ed:34:8a:3e:44:ac:f9:83:b3:23:16:03:8c: e9:fb:2d:31:4a:2c:82:ff:62:3b:68:ac:72:e0:05:50:55:c1: 76:25:09:0f:50:c3:02:53:8b:a6:a8:6f:c4:d5:68:e4:9f:23: 9e:35:19:0c:21:06:dc:0f:9b:d5:cd:ac:e9:94:07:60:4a:a6: 99:c2:28:b6:42:04:31:88:52:c0:b3:1e:bc:20:5b:8e:03:5f: f7:5d:15:44:90:85:d9:fc:62:e0:9c:95:d4:aa:de:30:26:93: de:f3:e7:f5:50:73:08:ab:33:44:e9:91:4c:5c:36:82:98:9d: 11:4a:04:ee:0a:06:74:34:4d:9c:6e:cf:9b:57:f7:03:f0:3e: d5:8e:41:13:9c:46:da:3f:62:ab:ed:7a:35:e0:a1:66:ec:4b: 2d:51:3a:8a:16:ab:61:7c:ef:52:ec:f1:e6:91:68:fd:32:77: 03:89:58:e2:d2:a3:22:f7:8a:bb:f8:db:7f:a8:54:e9:a3:52: ff:e5:d8:cb:9b:c3:2b:05:d8:f1:2d:9b:bf:57:49:92:7b:5a: b8:a7:3f:eb:e6:c8:59:8f:94:ee:f2:99:bc:10:26:15:d5:38: b4:36:d0:c4:1b:3e:bb:4a:9d:cb:e6:7e:de:73:46:46:74:09: 01:92:59:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfwf8jYxTs02ShUsvURdRD/hCm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTExMDMyMjU3MDRaFw0yNTExMDcwOTMzMDRaMDMxMTAvBgNV BAMTKDAyQTk4NEM4NDRENEU3RTU1OTZBNjAyRUU5NDg5NENDNUNFNzQzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJstFsYEKS86a9YrOExOGOEIHj lOAjFXMLw7l/zuaiEak2C+bTtnik76gU7cVNi/S19wnjOlLNQ4JxS/BoZXArmLSy wBFcxSsobO+Cl5/GYx1icXpRRwCt5DxJS8lW6ZHWt5pJlvMQ0Kd4eFzfBKSZOxvN geufvGLQUbKI/f74cDBGUS/RBp43kBUZkhRIJUd5f2wegLjlYWFsG/y4+Uwya7u8 ZBmD1/LXRdysfV+3Gi75kwM0/j4gvSDal0/LkExqPYo4064kgAPcxTqaEm6uWNMe sqPHXnTCjA6g069urOhHGjui5DsuDkKjNBx+LA89nlCpGhTiolPNrW0u0PFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqmEyETU5+VZamAu6UiUzFznQ4kwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt04BfN7TSKPkSs+YOzIxYDjOn7LTFKLIL/ YjtorHLgBVBVwXYlCQ9QwwJTi6aob8TVaOSfI541GQwhBtwPm9XNrOmUB2BKppnC KLZCBDGIUsCzHrwgW44DX/ddFUSQhdn8YuCcldSq3jAmk97z5/VQcwirM0TpkUxc NoKYnRFKBO4KBnQ0TZxuz5tX9wPwPtWOQROcRto/YqvtejXgoWbsSy1ROooWq2F8 71Ls8eaRaP0ydwOJWOLSoyL3irv423+oVOmjUv/l2MubwysF2PEtm79XSZJ7Wrin P+vmyFmPlO7ymbwQJhXVOLQ20MQbPrtKncvmft5zRkZ0CQGSWU4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:30 2025 by rpki-client