$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: uZ0J4eCgY4zHKZ0iQLxftz39wSj1mnGlZRO7uOCDNac= Subject key identifier: 7F:ED:23:8A:FE:38:14:DD:E9:5A:28:EA:48:36:FF:76:9E:D6:62:3F Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 7736CE496409F7E65A6400D70FABE9CB8A83D881 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: BF Signing time: Mon 11 Aug 2025 11:11:24 +0000 Manifest this update: Mon 11 Aug 2025 11:06:24 +0000 Manifest next update: Thu 14 Aug 2025 21:18:24 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: 5EeX1pD4E7mE1F4PuuDVN+HJfxyUCY3ZPe21SWmAkgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 21:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:36:ce:49:64:09:f7:e6:5a:64:00:d7:0f:ab:e9:cb:8a:83:d8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Aug 11 11:06:24 2025 GMT Not After : Aug 14 21:18:24 2025 GMT Subject: CN=7FED238AFE3814DDE95A28EA4836FF769ED6623F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:8f:67:f4:4d:c7:34:89:0c:4a:af:85:e3: b4:15:9b:14:6e:2e:91:e3:e2:c8:b4:0f:e0:17:54: 40:a4:3f:66:64:cf:bc:fe:36:6d:f9:f4:3b:1d:48: 74:e4:2a:bb:4e:f0:da:37:8a:f4:a7:2d:b3:b4:68: 02:f6:36:ef:fd:2a:6c:f2:a9:fc:fd:42:d6:a5:5e: a5:01:d5:31:3e:ed:9d:23:b3:41:0d:d2:da:c8:fe: 8c:ba:4a:7c:97:06:96:d8:bd:ed:2c:92:7d:ed:27: 96:13:22:77:5c:2a:95:14:7b:8c:96:a4:47:75:0f: d5:61:98:6e:95:e4:f1:18:38:c9:64:32:06:e9:78: ae:de:25:38:de:42:d9:1b:9c:cb:6d:12:49:92:6a: f3:79:d8:24:3f:e1:f5:96:b6:35:e1:e7:25:69:84: bb:a5:c9:da:aa:f8:42:4c:04:58:e5:23:11:11:64: 37:0c:5e:ce:f9:a6:95:d8:80:8d:72:27:b5:3c:cd: 67:f8:74:c6:5c:bd:d5:03:0e:9d:39:1b:98:99:76: f0:00:14:da:ab:cd:46:01:f0:a4:64:fc:3d:8b:5e: de:24:39:da:39:8d:ed:e8:3b:e4:fe:85:64:fa:89: 59:02:c5:c8:cf:9d:29:54:6b:89:d8:f3:71:e4:03: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:ED:23:8A:FE:38:14:DD:E9:5A:28:EA:48:36:FF:76:9E:D6:62:3F X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:bb:8b:92:9c:26:fe:ec:a5:15:22:bc:e2:17:e8:cf:91:95: 6c:1b:44:e9:1d:bb:93:0f:be:f7:49:58:fc:d5:a8:73:1a:9e: ce:8f:75:22:76:84:f5:2d:45:87:eb:c3:28:6e:9b:4b:f8:23: 8d:d4:da:37:a2:75:01:e5:ac:6c:5e:80:09:aa:bf:62:92:35: a2:8c:5c:bb:e5:eb:89:89:93:8f:fa:5d:28:53:18:0a:71:22: c7:80:f6:84:c5:6b:32:ae:08:bb:56:e3:b8:a5:a0:78:f9:b2: c3:49:ba:fb:40:fc:ab:d2:98:25:32:97:db:3d:dc:13:5f:69: 48:34:92:95:2d:ea:3c:d3:35:0b:a6:6a:78:9b:e2:40:bb:51: 31:cb:c2:14:32:af:5b:00:c3:3c:90:8c:0e:66:14:a8:11:55: c3:0d:b3:81:23:1f:8b:06:d6:2b:cf:e0:59:70:ac:e5:ed:41: 1e:b5:12:d0:41:1f:86:1b:1d:91:02:59:84:61:51:67:5f:93: 40:7b:9e:8b:9d:30:49:44:03:36:05:44:14:68:a9:65:fa:bd: e4:0e:82:ec:c1:52:a5:0f:0e:1d:22:a2:b0:56:d3:8f:43:84: 3d:4c:da:28:a5:10:89:a7:c6:1a:bb:65:4e:86:7e:c7:03:ea: 39:9b:11:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzbOSWQJ9+ZaZADXD6vpy4qD2IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA4MTExMTA2MjRaFw0yNTA4MTQyMTE4MjRaMDMxMTAvBgNV BAMTKDdGRUQyMzhBRkUzODE0RERFOTVBMjhFQTQ4MzZGRjc2OUVENjYyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi49n9E3HNIkMSq+F47QVmxRu LpHj4si0D+AXVECkP2Zkz7z+Nm359DsdSHTkKrtO8No3ivSnLbO0aAL2Nu/9Kmzy qfz9QtalXqUB1TE+7Z0js0EN0trI/oy6SnyXBpbYve0skn3tJ5YTIndcKpUUe4yW pEd1D9VhmG6V5PEYOMlkMgbpeK7eJTjeQtkbnMttEkmSavN52CQ/4fWWtjXh5yVp hLulydqq+EJMBFjlIxERZDcMXs75ppXYgI1yJ7U8zWf4dMZcvdUDDp05G5iZdvAA FNqrzUYB8KRk/D2LXt4kOdo5je3oO+T+hWT6iVkCxcjPnSlUa4nY83HkA4+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+0jiv44FN3pWijqSDb/dp7WYj8wHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK7i5KcJv7spRUivOIX6M+RlWwbROkdu5MP vvdJWPzVqHMans6PdSJ2hPUtRYfrwyhum0v4I43U2jeidQHlrGxegAmqv2KSNaKM XLvl64mJk4/6XShTGApxIseA9oTFazKuCLtW47iloHj5ssNJuvtA/KvSmCUyl9s9 3BNfaUg0kpUt6jzTNQumanib4kC7UTHLwhQyr1sAwzyQjA5mFKgRVcMNs4EjH4sG 1ivP4FlwrOXtQR61EtBBH4YbHZECWYRhUWdfk0B7noudMElEAzYFRBRoqWX6veQO guzBUqUPDh0iorBW049DhD1M2iilEImnxhq7ZU6GfscD6jmbEQM= -----END CERTIFICATE-----Generated at Wed Aug 13 02:43:02 2025 by rpki-client