$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: GF2g4o0gqixK9hwmEeoxQM3b0l0ahhUz+7kLd3wMAt0= Subject key identifier: 66:08:A2:96:6F:0F:DD:94:EB:97:A5:84:0C:FD:53:43:FF:02:05:36 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 3EC26F59D8DF3D2C54F3051D4B33D4D8F6B8E8DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0101 Signing time: Mon 04 Aug 2025 17:31:45 +0000 Manifest this update: Mon 04 Aug 2025 17:26:45 +0000 Manifest next update: Thu 07 Aug 2025 23:03:45 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: uoinfBt/o+MsHFgHrUoAE3narm7BF4B2wG9zh6gW9g8=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c2:6f:59:d8:df:3d:2c:54:f3:05:1d:4b:33:d4:d8:f6:b8:e8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Aug 4 17:26:45 2025 GMT Not After : Aug 7 23:03:45 2025 GMT Subject: CN=6608A2966F0FDD94EB97A5840CFD5343FF020536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:eb:91:53:0b:2f:04:69:40:61:a7:64:83: 72:6a:f5:10:65:38:df:17:40:f9:16:a2:43:22:e8: b9:cf:9f:fe:b8:50:89:b6:f3:2c:25:fd:b1:1b:54: e9:a2:c1:3e:23:7b:91:3b:2a:f7:4d:8d:fd:16:e8: 67:50:cc:d3:f2:80:b6:27:0b:e6:03:42:7d:a5:d9: 4d:97:e2:7a:e8:70:c4:76:24:57:1f:67:76:18:9e: f6:58:46:4c:f9:02:3d:3d:8e:1c:e8:dc:62:ba:51: 5a:20:83:25:f0:b1:c3:98:4b:0e:3e:8a:b3:06:0e: cc:fc:ea:5d:fe:8c:69:04:fb:d6:2b:cb:f6:b3:6e: f7:31:73:1d:7a:fa:e8:d5:42:cb:dd:9d:39:75:1a: ab:6f:4f:61:34:76:5f:34:bb:e6:96:b4:2b:ec:75: 02:3b:37:c3:2b:0f:13:e4:80:6d:e4:a4:ee:5e:6b: cc:63:1f:ae:5f:df:01:c4:ba:6b:8c:18:c9:43:28: 67:62:f3:b1:9c:cf:5b:f0:14:0e:45:1c:4b:7e:51: 13:b6:ca:1f:fc:51:9e:72:72:a2:eb:f1:07:f9:9a: 31:66:ca:d8:97:4d:16:f3:1e:bd:c4:d6:80:06:c3: 27:65:41:89:d8:f0:42:6f:a8:24:d1:ca:2c:c8:1c: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:A2:96:6F:0F:DD:94:EB:97:A5:84:0C:FD:53:43:FF:02:05:36 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5c:a0:d4:1e:d0:86:1e:f8:25:1f:e2:cd:b2:d4:ab:d0:54: 63:a9:6f:99:45:14:13:56:1f:fd:c9:5a:a3:a3:f6:33:f1:29: a5:e3:26:ff:6c:b4:29:fa:36:df:00:2c:37:57:1e:2d:46:ee: 19:2c:9d:ba:01:ca:71:ae:eb:ff:52:03:1b:a8:44:7e:88:5d: 64:50:65:31:47:76:40:83:d1:8b:c0:3c:0a:95:c5:a4:59:00: ab:6d:ca:dc:8f:46:58:9a:a9:e9:cd:bf:fc:c3:8c:e3:66:57: 91:f3:f6:5b:40:2f:30:71:fc:4b:89:9a:e3:19:02:12:c3:2a: be:89:ff:4b:c0:ef:6e:b2:54:16:47:27:98:6e:2a:19:c7:9a: 05:fe:ac:02:d3:4d:88:12:c7:af:92:07:a5:b0:82:30:7a:5b: ba:2e:65:89:cf:b8:96:0d:68:77:1c:4f:06:10:10:b8:ea:46: d3:5b:a1:d4:09:eb:40:67:0a:a9:74:7a:1a:74:9f:81:95:fa: 24:09:7b:57:f1:e4:26:9b:a0:b5:87:2c:6c:f4:0d:54:f9:f5: 2e:d4:15:7f:4c:e9:6a:73:ab:18:0f:ea:e4:37:51:ba:90:b9: 71:15:08:5e:c9:5f:9e:43:95:ef:44:c7:64:cb:61:79:0a:81: f0:66:7b:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsJvWdjfPSxU8wUdSzPU2Pa46N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA4MDQxNzI2NDVaFw0yNTA4MDcyMzAzNDVaMDMxMTAvBgNV BAMTKDY2MDhBMjk2NkYwRkREOTRFQjk3QTU4NDBDRkQ1MzQzRkYwMjA1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/+uRUwsvBGlAYadkg3Jq9RBl ON8XQPkWokMi6LnPn/64UIm28ywl/bEbVOmiwT4je5E7KvdNjf0W6GdQzNPygLYn C+YDQn2l2U2X4nrocMR2JFcfZ3YYnvZYRkz5Aj09jhzo3GK6UVoggyXwscOYSw4+ irMGDsz86l3+jGkE+9Yry/azbvcxcx16+ujVQsvdnTl1GqtvT2E0dl80u+aWtCvs dQI7N8MrDxPkgG3kpO5ea8xjH65f3wHEumuMGMlDKGdi87Gcz1vwFA5FHEt+URO2 yh/8UZ5ycqLr8Qf5mjFmytiXTRbzHr3E1oAGwydlQYnY8EJvqCTRyizIHAOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgiilm8P3ZTrl6WEDP1TQ/8CBTYwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhcoNQe0IYe+CUf4s2y1KvQVGOpb5lFFBNW H/3JWqOj9jPxKaXjJv9stCn6Nt8ALDdXHi1G7hksnboBynGu6/9SAxuoRH6IXWRQ ZTFHdkCD0YvAPAqVxaRZAKttytyPRliaqenNv/zDjONmV5Hz9ltALzBx/EuJmuMZ AhLDKr6J/0vA726yVBZHJ5huKhnHmgX+rALTTYgSx6+SB6WwgjB6W7ouZYnPuJYN aHccTwYQELjqRtNbodQJ60BnCql0ehp0n4GV+iQJe1fx5CaboLWHLGz0DVT59S7U FX9M6WpzqxgP6uQ3UbqQuXEVCF7JX55Dle9Ex2TLYXkKgfBmexo= -----END CERTIFICATE-----Generated at Wed Aug 6 07:46:17 2025 by rpki-client