$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: x11hooQCuvEt+bY1aMsxuVgfjqtDo4GBIU6lUgdxeV8= Subject key identifier: 94:EC:A8:33:97:A9:76:7B:08:1F:FD:A1:C8:DB:A9:79:7C:1D:B8:50 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 064ECD899D147CBB79E06A9F96D2B2729A188AF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 0312 Signing time: Wed 05 Nov 2025 06:02:22 +0000 Manifest this update: Wed 05 Nov 2025 05:57:22 +0000 Manifest next update: Sat 08 Nov 2025 16:10:22 +0000 Files and hashes: 1: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 2: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: IrUxjUbVnfIjKJCVS9M3DV+eL1fJU3FyX0Cq6NU8ovo=) 3: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 4: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 5: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 6: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) 7: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 8: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 9: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 10: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 11: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 16:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4e:cd:89:9d:14:7c:bb:79:e0:6a:9f:96:d2:b2:72:9a:18:8a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Nov 5 05:57:22 2025 GMT Not After : Nov 8 16:10:22 2025 GMT Subject: CN=94ECA83397A9767B081FFDA1C8DBA9797C1DB850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:08:5a:8e:e4:03:c0:c0:f0:d6:89:3d:63: 4f:39:05:9a:10:6a:70:42:7b:5e:81:7a:d3:b4:8f: f8:0c:ea:b3:0c:b4:53:04:cd:15:b8:7e:a4:70:98: da:f7:23:18:cf:36:5c:b3:90:7e:4a:b5:b0:a4:e2: 51:81:56:14:f6:1a:11:c3:30:3d:2a:f1:6e:61:39: 63:53:f0:70:03:0d:20:76:c2:e5:a4:76:97:72:75: 87:fc:77:73:80:4e:d2:9d:92:8a:98:ec:fc:50:59: 40:6e:2b:b9:80:78:15:6f:fd:47:28:f2:84:d8:ce: 8f:e0:79:03:40:43:3d:81:44:c3:52:d7:ee:be:98: 65:0a:60:76:53:58:f4:b7:22:b4:99:43:24:52:06: 25:b9:3b:55:29:94:a8:5b:bd:6d:9c:c1:6a:9a:b4: 58:61:1c:3d:fe:8b:59:31:6b:70:7b:59:b1:41:f4: 26:ab:2a:36:fe:ea:ef:7b:6b:43:db:07:c1:a1:23: ae:fa:4c:56:98:a6:bb:96:e5:55:8b:6c:fe:2e:f0: 90:92:f6:87:be:14:62:9f:61:71:b5:c1:d4:8e:6f: ab:2e:02:a3:33:0e:19:19:bf:6e:8b:16:30:e0:dc: f4:84:b8:65:66:22:6c:14:8b:dc:55:11:24:73:16: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:A8:33:97:A9:76:7B:08:1F:FD:A1:C8:DB:A9:79:7C:1D:B8:50 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:26:43:9f:4f:e8:88:b1:6f:51:d7:cd:9c:31:f8:b4:57:fe: f1:db:9f:44:0f:25:3b:51:15:45:30:50:8e:ef:d9:03:46:d6: 34:c3:16:6e:ff:04:db:50:68:57:53:bb:eb:12:c8:17:f5:86: 9f:c0:21:a8:d6:3b:55:c9:f9:db:87:07:1c:ea:da:f3:cc:a0: 76:b7:f2:e3:1c:ba:a1:09:a7:2a:95:65:d2:ba:d6:cd:a7:2d: 7b:e3:61:20:4a:d2:44:07:8e:c6:25:c9:fe:85:15:1e:ef:18: 91:dc:89:6d:a2:50:66:5a:2b:54:8f:96:ff:65:e5:f6:22:98: 3a:51:cd:da:2f:1c:bb:09:77:f8:2f:39:89:ea:ea:82:a4:2b: 52:23:7e:90:01:7d:c8:fa:ba:e9:2a:c7:9f:f9:3e:1f:77:31: 70:28:18:4b:4c:e9:e5:4e:ca:9d:6b:12:e3:a3:67:42:64:d5: 84:df:14:da:7c:b3:92:d4:3b:eb:df:e3:5c:f4:5d:11:22:da: e3:14:63:3c:67:81:90:d9:65:2e:16:b8:0e:63:ae:01:02:6d: b3:ca:c9:b5:4a:db:0d:01:e3:75:05:ce:89:09:e5:ec:ec:a0: ad:d0:79:62:6a:93:22:6d:08:42:d8:3d:b5:b9:a8:80:42:c7: f5:e3:ae:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBk7NiZ0UfLt54GqfltKycpoYivAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTExMDUwNTU3MjJaFw0yNTExMDgxNjEwMjJaMDMxMTAvBgNV BAMTKDk0RUNBODMzOTdBOTc2N0IwODFGRkRBMUM4REJBOTc5N0MxREI4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKghajuQDwMDw1ok9Y085BZoQ anBCe16BetO0j/gM6rMMtFMEzRW4fqRwmNr3IxjPNlyzkH5KtbCk4lGBVhT2GhHD MD0q8W5hOWNT8HADDSB2wuWkdpdydYf8d3OATtKdkoqY7PxQWUBuK7mAeBVv/Uco 8oTYzo/geQNAQz2BRMNS1+6+mGUKYHZTWPS3IrSZQyRSBiW5O1UplKhbvW2cwWqa tFhhHD3+i1kxa3B7WbFB9CarKjb+6u97a0PbB8GhI676TFaYpruW5VWLbP4u8JCS 9oe+FGKfYXG1wdSOb6suAqMzDhkZv26LFjDg3PSEuGVmImwUi9xVESRzFp21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOyoM5epdnsIH/2hyNupeXwduFAwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4mQ59P6Iixb1HXzZwx+LRX/vHbn0QPJTtR FUUwUI7v2QNG1jTDFm7/BNtQaFdTu+sSyBf1hp/AIajWO1XJ+duHBxzq2vPMoHa3 8uMcuqEJpyqVZdK61s2nLXvjYSBK0kQHjsYlyf6FFR7vGJHciW2iUGZaK1SPlv9l 5fYimDpRzdovHLsJd/gvOYnq6oKkK1IjfpABfcj6uukqx5/5Ph93MXAoGEtM6eVO yp1rEuOjZ0Jk1YTfFNp8s5LUO+vf41z0XREi2uMUYzxngZDZZS4WuA5jrgECbbPK ybVK2w0B43UFzokJ5ezsoK3QeWJqkyJtCELYPbW5qIBCx/Xjrn0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:50:07 2025 by rpki-client