$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: VAErGGU6NnwNKyHGiPczjk56T5PXPUlaL1pHKVDRGP0= Subject key identifier: 97:B7:4F:6F:71:0B:E9:12:EB:D7:01:7E:40:AC:DE:29:B9:5C:5B:5D Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 7EDA81533DE03BB33FF18A260F49A84A5227C7F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 012A Signing time: Tue 04 Nov 2025 20:11:47 +0000 Manifest this update: Tue 04 Nov 2025 20:06:47 +0000 Manifest next update: Sat 08 Nov 2025 08:07:47 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) 3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: zinmGbJ3NeV1GDXMDgMlEo3Gw6GSlgplSFiY+PbqyZ0=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:da:81:53:3d:e0:3b:b3:3f:f1:8a:26:0f:49:a8:4a:52:27:c7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Nov 4 20:06:47 2025 GMT Not After : Nov 8 08:07:47 2025 GMT Subject: CN=97B74F6F710BE912EBD7017E40ACDE29B95C5B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:39:33:52:09:92:cd:a1:cf:bf:1d:93:98: 96:6d:8f:2d:ed:8a:79:ba:5c:25:53:ed:2a:7d:24: 79:db:05:a6:4a:9c:c9:eb:2e:d6:ec:5d:33:d5:d3: bc:dc:09:70:d1:52:63:34:01:64:4b:b9:c7:b3:d2: c1:b4:93:05:55:40:2a:d6:ab:d3:9f:d0:71:7a:25: 4f:d5:76:92:fc:af:b7:08:9e:c4:4c:ff:2c:ce:2d: a8:6a:cb:36:36:4b:7c:b1:aa:6b:f1:31:f9:df:93: 7e:2f:82:72:18:00:4a:94:1b:fc:51:3d:de:84:75: af:08:12:89:58:5b:ed:2f:c0:f9:ea:0c:e0:22:93: 4f:86:e2:5f:d1:97:87:b6:6e:ba:d0:dd:50:21:8c: de:d5:db:5d:66:bd:d6:b5:6d:08:b0:8e:7f:59:ac: e2:b4:62:19:ab:47:89:c4:c3:32:e9:75:b1:10:a0: e7:d0:04:fc:5e:c1:45:9f:c7:f6:6a:40:dd:9b:3c: c7:45:af:b0:ac:29:ee:53:cf:66:46:08:a0:3c:2e: 73:30:86:3d:e9:c2:33:a4:fb:87:6c:65:3c:b9:be: 07:81:92:42:ac:22:5a:26:ec:b5:4b:ca:f6:98:c5: ca:80:50:0d:69:b2:40:f5:44:6c:ee:5c:24:0a:eb: 94:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B7:4F:6F:71:0B:E9:12:EB:D7:01:7E:40:AC:DE:29:B9:5C:5B:5D X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1d:47:1f:b1:a7:4f:3c:0b:66:f0:9c:dc:f0:63:8b:89:80: c0:e8:84:a4:72:54:b2:31:d3:29:8f:71:dc:dc:c0:81:db:06: 51:ee:43:59:c3:07:16:d3:62:b2:ee:9d:89:e7:a0:ce:fc:b9: 93:df:44:0a:00:66:15:e6:3d:f2:6d:2c:de:6e:6e:97:d1:84: ad:71:40:04:0b:ac:37:9d:85:20:45:9e:a9:f6:ce:b2:1d:ef: 38:e5:3a:ee:5e:a3:48:81:65:60:b8:c1:6e:83:59:54:25:d1: f6:18:0b:dd:94:a0:6f:53:59:71:8a:a5:87:1b:49:bf:e3:ff: fb:cd:e3:7e:20:52:c1:50:7c:9f:1f:9a:cb:0e:2a:31:20:88: 38:b2:47:35:e4:67:5a:20:80:90:2a:e5:69:da:89:3a:57:30: e3:23:14:e3:f8:8e:c9:c7:33:6b:38:89:6d:a9:08:44:b7:6d: 6d:c5:5b:4b:d2:88:f4:23:d3:45:50:42:50:a8:a9:5d:37:e8: dd:7b:d7:6e:36:21:63:c1:e6:a2:87:1d:5d:03:33:bd:ed:96: ce:bd:46:66:81:24:9b:09:24:24:61:45:65:3f:e4:4b:ff:83: cf:0e:db:aa:22:a9:83:11:50:27:0d:0b:55:17:03:f1:b5:c9: f6:cd:f0:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftqBUz3gO7M/8YomD0moSlInx/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTExMDQyMDA2NDdaFw0yNTExMDgwODA3NDdaMDMxMTAvBgNV BAMTKDk3Qjc0RjZGNzEwQkU5MTJFQkQ3MDE3RTQwQUNERTI5Qjk1QzVCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNjkzUgmSzaHPvx2TmJZtjy3t inm6XCVT7Sp9JHnbBaZKnMnrLtbsXTPV07zcCXDRUmM0AWRLucez0sG0kwVVQCrW q9Of0HF6JU/VdpL8r7cInsRM/yzOLahqyzY2S3yxqmvxMfnfk34vgnIYAEqUG/xR Pd6Eda8IEolYW+0vwPnqDOAik0+G4l/Rl4e2brrQ3VAhjN7V211mvda1bQiwjn9Z rOK0YhmrR4nEwzLpdbEQoOfQBPxewUWfx/ZqQN2bPMdFr7CsKe5Tz2ZGCKA8LnMw hj3pwjOk+4dsZTy5vgeBkkKsIlom7LVLyvaYxcqAUA1pskD1RGzuXCQK65RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7dPb3EL6RLr1wF+QKzeKblcW10wHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAdRx+xp088C2bwnNzwY4uJgMDohKRyVLIx 0ymPcdzcwIHbBlHuQ1nDBxbTYrLunYnnoM78uZPfRAoAZhXmPfJtLN5ubpfRhK1x QAQLrDedhSBFnqn2zrId7zjlOu5eo0iBZWC4wW6DWVQl0fYYC92UoG9TWXGKpYcb Sb/j//vN434gUsFQfJ8fmssOKjEgiDiyRzXkZ1oggJAq5WnaiTpXMOMjFOP4jsnH M2s4iW2pCES3bW3FW0vSiPQj00VQQlCoqV036N171242IWPB5qKHHV0DM73tls69 RmaBJJsJJCRhRWU/5Ev/g88O26oiqYMRUCcNC1UXA/G1yfbN8FI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:49 2025 by rpki-client