$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: TuuZSlWLHPTAB8JVKuiY5Rr38U42H5ydC1UhN5ARjUo= Subject key identifier: F3:EA:16:40:2F:A9:90:46:77:9F:8A:D9:A0:02:74:B0:2C:EB:64:28 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 4608226B8D818ACE762C7D8BF142FAEAA4454DEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 02EA Signing time: Fri 08 Aug 2025 15:22:22 +0000 Manifest this update: Fri 08 Aug 2025 15:17:22 +0000 Manifest next update: Tue 12 Aug 2025 02:39:22 +0000 Files and hashes: 1: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 2: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: Em18K+MRLc18yaX14YQfb1826gcDLLiSRdz/WlnRnnE=) 3: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 4: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 5: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 6: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 7: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 18b0Gg5/45qsHWWMKCPhmvKnsrcZsZ/fmda1ZKbjIBk=) 8: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 9: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: 0F29fqUgaPE1CxEnD4yAU+tizddP08MzkvG70+k+OUg=) 10: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: C+T8dBvggaTCEh5/1ll1reorawVQeZDheWzvM6XklTw=) 11: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: /mZXNu9+SQReAU7jMOiZ9/UmtltzHLxdMGIPnZIiib4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:08:22:6b:8d:81:8a:ce:76:2c:7d:8b:f1:42:fa:ea:a4:45:4d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Aug 8 15:17:22 2025 GMT Not After : Aug 12 02:39:22 2025 GMT Subject: CN=F3EA16402FA99046779F8AD9A00274B02CEB6428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:d8:43:bd:f1:f8:89:57:4c:88:46:dc:3d: f1:8b:22:5a:f8:79:3d:da:dc:58:2d:80:fc:43:09: c0:16:18:dd:4c:ff:03:a8:8f:a7:ed:76:fd:d2:f1: ae:ae:68:43:59:28:17:94:b6:16:76:34:9a:10:3b: 23:b8:a6:b8:16:0e:96:ad:06:5a:0a:3b:72:fb:87: 70:38:a5:f7:37:27:e5:f6:4b:86:1f:ba:09:be:13: 31:e3:af:32:c1:eb:e4:03:b4:79:6d:64:7e:af:d0: 89:62:15:f4:09:34:72:e3:62:71:8b:a0:a9:8e:19: e0:4a:65:cc:61:0c:76:3f:46:09:7c:be:e4:7b:a3: bd:63:e9:0e:b9:3f:3d:6d:70:9b:f4:3f:36:23:45: 13:cf:08:7a:43:e7:48:71:fd:f0:0f:ba:a7:16:5f: 4f:24:5d:c9:82:4e:5d:68:68:94:8f:5d:9a:a9:7e: c6:9e:80:e8:36:8f:f0:2a:5e:90:93:8b:c5:14:cb: 12:0c:ee:c0:ce:fd:ec:a2:66:30:f2:2d:80:1f:5d: 5c:52:44:16:78:55:f1:5e:42:00:ac:94:3a:bf:d3: fe:12:f4:bc:be:c5:1b:1a:48:09:54:db:f3:94:09: 3d:50:73:0c:8a:72:55:17:98:87:e6:49:06:fc:50: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EA:16:40:2F:A9:90:46:77:9F:8A:D9:A0:02:74:B0:2C:EB:64:28 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:aa:39:cf:f0:36:4c:8b:4e:52:b6:25:44:dc:bb:dc:98:c4: 41:b9:56:10:26:17:a6:e0:10:53:8d:9e:cb:bc:e9:1a:61:8a: c2:5b:95:55:7a:9f:6e:85:74:9a:02:e4:7f:56:69:c2:e0:d4: 4c:8a:d9:2c:7c:8c:72:97:af:c5:58:78:69:69:39:9a:f8:15: 68:a0:39:4b:68:a5:5e:c0:2f:60:da:0e:a3:f4:30:8d:42:a5: 1f:53:cb:1d:08:02:f1:d4:76:5e:52:0f:84:b8:8b:65:dc:81: da:cd:da:41:83:d2:0b:cc:94:cc:a6:28:c7:6e:0c:4a:07:43: 17:c7:a5:cd:dd:36:56:84:3b:00:a7:33:33:49:b5:4d:24:c4: 03:5e:ef:fe:ff:84:4a:d8:4b:84:17:73:5c:36:8a:9d:61:bf: b0:44:c9:0a:e6:51:98:15:7f:f1:ee:50:b3:17:17:f7:59:a1: 4a:f8:25:3b:4b:6d:71:b8:9c:3d:68:d7:cd:71:68:03:f5:2c: 0e:07:be:20:40:f0:e4:f8:27:16:a7:90:38:76:1c:a2:f2:ee: c7:22:1b:fe:f4:30:1d:3a:bc:68:b1:d8:1e:0b:eb:45:f6:f2: 86:e7:29:58:a0:7a:8e:7a:23:53:4e:f1:6f:fc:a7:5e:95:e8: f6:c2:d8:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURggia42Bis52LH2L8UL66qRFTeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTA4MDgxNTE3MjJaFw0yNTA4MTIwMjM5MjJaMDMxMTAvBgNV BAMTKEYzRUExNjQwMkZBOTkwNDY3NzlGOEFEOUEwMDI3NEIwMkNFQjY0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQH9hDvfH4iVdMiEbcPfGLIlr4 eT3a3FgtgPxDCcAWGN1M/wOoj6ftdv3S8a6uaENZKBeUthZ2NJoQOyO4prgWDpat BloKO3L7h3A4pfc3J+X2S4Yfugm+EzHjrzLB6+QDtHltZH6v0IliFfQJNHLjYnGL oKmOGeBKZcxhDHY/Rgl8vuR7o71j6Q65Pz1tcJv0PzYjRRPPCHpD50hx/fAPuqcW X08kXcmCTl1oaJSPXZqpfsaegOg2j/AqXpCTi8UUyxIM7sDO/eyiZjDyLYAfXVxS RBZ4VfFeQgCslDq/0/4S9Ly+xRsaSAlU2/OUCT1QcwyKclUXmIfmSQb8UG19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+oWQC+pkEZ3n4rZoAJ0sCzrZCgwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWqOc/wNkyLTlK2JUTcu9yYxEG5VhAmF6bg EFONnsu86RphisJblVV6n26FdJoC5H9WacLg1EyK2Sx8jHKXr8VYeGlpOZr4FWig OUtopV7AL2DaDqP0MI1CpR9Tyx0IAvHUdl5SD4S4i2XcgdrN2kGD0gvMlMymKMdu DEoHQxfHpc3dNlaEOwCnMzNJtU0kxANe7/7/hErYS4QXc1w2ip1hv7BEyQrmUZgV f/HuULMXF/dZoUr4JTtLbXG4nD1o181xaAP1LA4HviBA8OT4JxankDh2HKLy7sci G/70MB06vGix2B4L60X28obnKVigeo56I1NO8W/8p16V6PbC2PI= -----END CERTIFICATE-----Generated at Sat Aug 9 10:31:42 2025 by rpki-client