$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: fZbyyWiPlix3ctaRgcr3No3OZ9+XRqyqkkaXOqC5nb8= Subject key identifier: A0:1F:FF:CD:7D:6C:4B:A3:A1:D3:AB:0A:E3:31:78:B3:8A:E7:E9:F2 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 326477496544A7E7C1EA1F61C0FB191F706CF081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: FE Signing time: Thu 07 Aug 2025 00:22:04 +0000 Manifest this update: Thu 07 Aug 2025 00:17:04 +0000 Manifest next update: Sun 10 Aug 2025 00:37:04 +0000 Files and hashes: 1: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: UnD1ZQEB+FYUSr2lokXXWS/TQ6bydUdMkOHWDaOmthM=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:64:77:49:65:44:a7:e7:c1:ea:1f:61:c0:fb:19:1f:70:6c:f0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Aug 7 00:17:04 2025 GMT Not After : Aug 10 00:37:04 2025 GMT Subject: CN=A01FFFCD7D6C4BA3A1D3AB0AE33178B38AE7E9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:37:85:0e:66:c7:8d:f3:d6:7c:8f:e8:0f: e5:45:19:30:63:84:c5:b0:8f:c3:f3:5b:86:a3:aa: d2:0b:45:c0:73:ff:8d:13:db:32:ee:b5:19:85:ac: eb:fb:f1:89:cf:16:2e:32:42:50:8b:8c:0a:e5:98: db:85:05:ec:8b:c0:51:76:cf:75:cc:77:a0:bf:b7: f0:b6:61:ae:bf:83:4a:a2:11:8c:1e:0e:93:ad:83: d4:c2:27:84:8a:0f:d1:a3:8d:00:ee:a6:f4:72:57: 7f:50:6f:23:32:42:29:f3:9b:b7:e2:6d:ef:20:a0: 0e:db:93:ea:ea:f6:38:68:4d:9e:aa:6d:72:a1:23: 8e:92:22:b7:03:83:ad:5e:67:0f:16:66:8e:12:b8: 38:c7:1c:1f:46:1e:07:82:55:f2:6c:02:c2:c6:04: 42:ea:c2:d3:32:ca:6c:20:02:02:e9:f4:55:6a:43: 02:c5:45:6d:df:f7:eb:2e:ef:a4:08:47:61:bf:fb: 7d:1e:fa:7d:78:cb:94:24:6c:4d:eb:c4:e0:11:2d: 9f:d5:13:fe:4b:ad:a4:1f:25:c9:97:3f:91:99:21: 3f:1c:7f:c2:77:06:af:eb:d0:7c:06:04:23:f4:bf: 84:b1:b6:98:08:c8:de:80:7d:ed:96:34:26:b9:48: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1F:FF:CD:7D:6C:4B:A3:A1:D3:AB:0A:E3:31:78:B3:8A:E7:E9:F2 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:7d:46:79:c5:ae:01:e0:4c:a3:55:4c:60:54:99:98:b8:fa: fe:86:3d:06:9f:4d:62:1d:74:b1:11:6d:e5:c2:81:cd:30:e9: 9c:f9:e6:90:f8:ce:96:21:8f:bc:20:af:6c:fc:81:91:32:e6: 3f:d6:7c:bc:4c:b9:a1:7c:7e:62:15:56:f9:05:48:99:7e:1d: 43:ec:e0:e8:49:d6:e3:1d:05:a7:c1:08:b0:c2:1c:90:5b:16: 57:ee:29:a7:0e:ec:c3:d7:30:fd:b0:08:e6:2a:3d:83:15:55: 16:97:b0:6e:19:a6:98:f4:2c:63:9c:7d:57:c1:dd:88:af:ad: 42:ec:7c:04:2f:bb:29:b1:25:ce:95:02:44:f8:77:84:11:4a: c0:10:da:fe:f6:df:af:7b:ea:26:de:ba:9f:1e:78:77:0d:18: 71:6f:d0:8e:1c:5e:c2:9f:f4:01:08:43:6c:71:f0:03:61:28: 22:ff:c5:9e:bc:4f:e6:df:ce:8c:77:91:6b:0a:e0:75:db:84: 36:cc:ca:11:bb:ee:e4:ce:72:b0:e1:a3:ea:03:df:b9:ab:60: 07:37:bf:3f:73:3a:f4:b9:c9:88:64:fd:95:f8:91:15:ba:44: b1:67:57:a1:3b:6e:c9:16:39:25:ec:dc:3b:92:d1:d2:e0:76: b0:d4:c5:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmR3SWVEp+fB6h9hwPsZH3Bs8IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA4MDcwMDE3MDRaFw0yNTA4MTAwMDM3MDRaMDMxMTAvBgNV BAMTKEEwMUZGRkNEN0Q2QzRCQTNBMUQzQUIwQUUzMzE3OEIzOEFFN0U5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKDeFDmbHjfPWfI/oD+VFGTBj hMWwj8PzW4ajqtILRcBz/40T2zLutRmFrOv78YnPFi4yQlCLjArlmNuFBeyLwFF2 z3XMd6C/t/C2Ya6/g0qiEYweDpOtg9TCJ4SKD9GjjQDupvRyV39QbyMyQinzm7fi be8goA7bk+rq9jhoTZ6qbXKhI46SIrcDg61eZw8WZo4SuDjHHB9GHgeCVfJsAsLG BELqwtMyymwgAgLp9FVqQwLFRW3f9+su76QIR2G/+30e+n14y5QkbE3rxOARLZ/V E/5LraQfJcmXP5GZIT8cf8J3Bq/r0HwGBCP0v4SxtpgIyN6Afe2WNCa5SPiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoB//zX1sS6Oh06sK4zF4s4rn6fIwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL59RnnFrgHgTKNVTGBUmZi4+v6GPQafTWId dLERbeXCgc0w6Zz55pD4zpYhj7wgr2z8gZEy5j/WfLxMuaF8fmIVVvkFSJl+HUPs 4OhJ1uMdBafBCLDCHJBbFlfuKacO7MPXMP2wCOYqPYMVVRaXsG4Zppj0LGOcfVfB 3YivrULsfAQvuymxJc6VAkT4d4QRSsAQ2v7236976ibeup8eeHcNGHFv0I4cXsKf 9AEIQ2xx8ANhKCL/xZ68T+bfzox3kWsK4HXbhDbMyhG77uTOcrDho+oD37mrYAc3 vz9zOvS5yYhk/ZX4kRW6RLFnV6E7bskWOSXs3DuS0dLgdrDUxYw= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:01 2025 by rpki-client