$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: F27jvpmHLbBlAL8NTFZEthcrEpmJckEfONW1Bj1abR4= Subject key identifier: 8A:C9:1E:EA:DF:07:34:B1:41:85:D0:F7:60:DC:62:86:79:7F:58:CA Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 1AA46BFB0481195000B560A742391324F9ED07C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02AB Signing time: Mon 21 Jul 2025 09:20:37 +0000 Manifest this update: Mon 21 Jul 2025 09:15:37 +0000 Manifest next update: Thu 24 Jul 2025 18:45:37 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: ul/XwUVejcsJJnmNAyYb0mgkPw9B+1o3c2O+1Mi8SaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 18:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:6b:fb:04:81:19:50:00:b5:60:a7:42:39:13:24:f9:ed:07:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Jul 21 09:15:37 2025 GMT Not After : Jul 24 18:45:37 2025 GMT Subject: CN=8AC91EEADF0734B14185D0F760DC6286797F58CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:cd:c3:8c:68:8f:48:bd:3d:c0:a0:79:84: 42:4e:41:c1:61:b3:28:65:d8:0d:e1:34:22:7d:e4: 29:19:a8:fe:9e:14:dc:3a:f3:10:f2:53:cd:58:20: c0:1e:71:c9:50:a6:5f:76:e6:ee:1d:88:f7:4f:f8: 17:03:d6:35:30:ed:b4:b1:27:f3:c0:c4:97:eb:74: 04:0b:f4:29:13:fc:8d:c9:02:94:19:71:21:01:c5: 5b:0f:e5:53:fd:7d:5a:a9:d1:9c:4b:75:6f:b7:aa: a0:4f:5e:c6:21:0d:b8:28:ee:a2:70:89:1e:5c:e9: 57:77:81:40:84:2f:7e:aa:24:e8:dd:d9:e4:3e:31: 6f:62:27:1c:f5:ad:5e:8b:07:a8:28:01:c5:f5:98: bd:b3:9d:88:38:fb:1f:4c:80:ef:9e:ef:28:e4:3a: b2:db:fa:8e:cb:b5:c6:58:5e:30:3b:da:b2:47:58: 79:d0:1f:3a:5a:c6:86:a7:51:ca:a3:43:4d:f5:d9: 11:2f:a0:2f:0b:a8:72:8f:44:20:1a:51:57:63:ed: dd:8a:31:a8:14:55:8a:6d:b7:9c:ec:d5:88:ac:49: 0d:75:65:9f:6d:2f:3b:11:1c:3b:0a:04:50:eb:64: 66:bd:77:3b:5c:01:7a:1d:35:70:79:ee:ac:6d:d1: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:1E:EA:DF:07:34:B1:41:85:D0:F7:60:DC:62:86:79:7F:58:CA X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a6:17:03:3f:b4:c6:f5:8c:2f:11:b0:b1:75:11:c5:3c:a4: 51:68:ad:c0:bb:9c:bd:90:71:f9:49:32:07:70:c0:02:c6:0c: 82:1e:8b:f3:91:1b:97:22:c3:e0:7c:44:6f:5a:c6:d7:5d:e1: 9a:79:2c:b9:2f:b0:ae:67:d2:e8:a4:16:3c:1c:64:c1:4e:48: 2e:46:5e:20:7c:b4:9f:f5:c4:23:25:ed:02:b3:f6:c8:67:4e: b7:5f:aa:b4:90:40:ba:a3:eb:81:98:14:1c:7e:9f:de:e8:8c: dd:af:3b:f2:82:32:e1:62:bb:0d:04:c0:43:38:da:59:56:64: bb:43:cc:84:fd:53:01:06:0c:9c:ec:98:56:03:3d:7c:b2:e0: 53:41:f1:3b:79:c1:21:8c:38:ac:55:66:fc:5f:8a:7d:89:51: 3e:07:0b:17:3d:e8:df:67:fe:d1:a9:d8:08:43:ae:c5:e9:17: bf:a3:62:6a:f1:3b:af:f2:10:2e:11:ab:92:d1:50:56:08:7d: 79:84:4b:a3:42:94:83:67:b6:14:f1:39:8f:91:69:60:cf:a6: b0:fa:4b:0d:39:c6:7b:5b:9e:93:35:71:a6:b7:f1:de:44:a6: b6:ec:09:9c:7f:a2:3c:f6:e2:f8:a7:44:81:1b:73:b0:9f:34: 08:f9:1e:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqRr+wSBGVAAtWCnQjkTJPntB8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA3MjEwOTE1MzdaFw0yNTA3MjQxODQ1MzdaMDMxMTAvBgNV BAMTKDhBQzkxRUVBREYwNzM0QjE0MTg1RDBGNzYwREM2Mjg2Nzk3RjU4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqM3DjGiPSL09wKB5hEJOQcFh syhl2A3hNCJ95CkZqP6eFNw68xDyU81YIMAecclQpl925u4diPdP+BcD1jUw7bSx J/PAxJfrdAQL9CkT/I3JApQZcSEBxVsP5VP9fVqp0ZxLdW+3qqBPXsYhDbgo7qJw iR5c6Vd3gUCEL36qJOjd2eQ+MW9iJxz1rV6LB6goAcX1mL2znYg4+x9MgO+e7yjk OrLb+o7LtcZYXjA72rJHWHnQHzpaxoanUcqjQ0312REvoC8LqHKPRCAaUVdj7d2K MagUVYptt5zs1YisSQ11ZZ9tLzsRHDsKBFDrZGa9dztcAXodNXB57qxt0f7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiske6t8HNLFBhdD3YNxihnl/WMowHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEemFwM/tMb1jC8RsLF1EcU8pFForcC7nL2Q cflJMgdwwALGDIIei/ORG5ciw+B8RG9axtdd4Zp5LLkvsK5n0uikFjwcZMFOSC5G XiB8tJ/1xCMl7QKz9shnTrdfqrSQQLqj64GYFBx+n97ojN2vO/KCMuFiuw0EwEM4 2llWZLtDzIT9UwEGDJzsmFYDPXyy4FNB8Tt5wSGMOKxVZvxfin2JUT4HCxc96N9n /tGp2AhDrsXpF7+jYmrxO6/yEC4Rq5LRUFYIfXmES6NClINnthTxOY+RaWDPprD6 Sw05xntbnpM1caa38d5EprbsCZx/ojz24vinRIEbc7CfNAj5Hho= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:45 2025 by rpki-client