$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: FXncoWgH081e9KtYa1P90CJJ16+/wWF7SdNqvj7LG84= Subject key identifier: 07:4E:F9:8D:16:E2:8C:FF:6B:38:76:F2:BE:D6:B4:19:2B:A7:59:B1 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 5CCC77223BEF03AF49EC5792E82E57E04D56753A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: F6 Signing time: Sun 20 Jul 2025 08:52:02 +0000 Manifest this update: Sun 20 Jul 2025 08:47:02 +0000 Manifest next update: Wed 23 Jul 2025 17:45:02 +0000 Files and hashes: 1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) 3: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: 6vbnQGSwJw2SNXo4wpmAGa5TnrvGYJK5xICjIbBO3/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cc:77:22:3b:ef:03:af:49:ec:57:92:e8:2e:57:e0:4d:56:75:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Jul 20 08:47:02 2025 GMT Not After : Jul 23 17:45:02 2025 GMT Subject: CN=074EF98D16E28CFF6B3876F2BED6B4192BA759B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:39:94:fe:e5:03:e3:3c:77:97:63:16:d0: 4b:83:da:db:2f:19:74:89:00:1f:06:d0:4d:32:77: c7:aa:48:f9:5f:ab:1d:b4:9c:57:0c:bb:52:45:f9: 83:e9:2f:02:41:85:6f:03:bf:ec:47:60:e9:e2:7a: 85:ab:ec:f4:52:31:a4:a0:0e:f5:bc:f3:8c:70:db: 78:b3:94:a8:87:df:d7:d0:12:c8:96:b6:14:99:63: 53:4f:5c:2f:a8:af:31:df:a2:16:9a:a2:b1:19:de: 77:bb:39:c4:a8:50:7e:58:48:1f:ad:b2:a5:c7:bb: 84:b8:5d:06:e5:eb:c9:5f:73:67:be:c6:0f:6f:69: 31:01:11:0a:e1:5a:c7:69:c5:6a:f9:60:8c:a1:96: 65:35:6e:8e:ea:76:1b:e4:ea:57:18:70:fe:7b:93: 3c:18:62:e7:3d:b8:bf:dd:71:19:ce:51:8e:a0:5d: 36:62:2b:6f:7b:69:79:bf:f3:89:fe:15:23:57:11: cd:de:44:1e:db:15:b9:63:3b:ee:d2:50:7a:1d:ee: 2a:a4:c4:32:65:71:96:74:d4:a3:cf:49:1b:96:b1: 25:32:1a:3d:43:48:f0:1f:39:e2:a1:2e:bf:aa:eb: bf:9c:f4:ad:46:13:3b:c0:32:88:aa:e3:25:72:46: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4E:F9:8D:16:E2:8C:FF:6B:38:76:F2:BE:D6:B4:19:2B:A7:59:B1 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5f:f7:e3:7b:e5:f9:f6:a1:38:ee:6f:3e:f3:26:26:aa:14: b3:0b:27:5f:df:75:97:49:53:76:f2:0c:d6:0d:5a:72:3d:fc: 98:24:1c:ff:02:a5:f1:88:23:36:e1:0a:14:cf:30:00:80:0e: f2:06:97:40:1f:58:02:44:a8:0d:f8:1c:5f:04:ce:99:f1:3e: 19:e0:a2:8a:08:9c:b6:cb:d2:26:78:c2:3b:13:1c:a8:7f:d0: 9b:bd:94:97:83:3a:e9:cc:9a:66:10:8f:37:43:1a:f9:da:07: 68:88:a5:ce:24:e1:dc:d2:37:2a:bc:f7:72:74:81:0e:bf:0a: 9c:87:83:b4:94:fb:69:2d:a8:6c:14:8f:3c:68:6c:3a:9a:5e: 43:b3:65:c3:fc:b9:4c:16:85:9d:a3:1a:37:a9:bc:02:57:33: 73:95:85:d5:d2:27:ec:6a:7d:77:42:35:bc:6f:1a:f8:44:bf: 4d:38:61:9b:98:da:de:7d:bb:a3:40:ad:4f:b0:42:66:bf:d5: 2e:1d:6e:8c:91:38:f7:3d:35:85:25:2f:dd:21:8a:bf:10:c2: fa:55:b4:8d:b1:bd:1f:a4:e0:c0:78:e4:95:8c:2a:8f:e2:8e: 3a:ba:07:5b:71:ac:df:04:7c:fd:51:87:a2:f8:53:46:ee:24: ca:2d:12:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMx3IjvvA69J7FeS6C5X4E1WdTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA3MjAwODQ3MDJaFw0yNTA3MjMxNzQ1MDJaMDMxMTAvBgNV BAMTKDA3NEVGOThEMTZFMjhDRkY2QjM4NzZGMkJFRDZCNDE5MkJBNzU5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kjmU/uUD4zx3l2MW0EuD2tsv GXSJAB8G0E0yd8eqSPlfqx20nFcMu1JF+YPpLwJBhW8Dv+xHYOnieoWr7PRSMaSg DvW884xw23izlKiH39fQEsiWthSZY1NPXC+orzHfohaaorEZ3ne7OcSoUH5YSB+t sqXHu4S4XQbl68lfc2e+xg9vaTEBEQrhWsdpxWr5YIyhlmU1bo7qdhvk6lcYcP57 kzwYYuc9uL/dcRnOUY6gXTZiK297aXm/84n+FSNXEc3eRB7bFbljO+7SUHod7iqk xDJlcZZ01KPPSRuWsSUyGj1DSPAfOeKhLr+q67+c9K1GEzvAMoiq4yVyRhP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB075jRbijP9rOHbyvta0GSunWbEwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVf9+N75fn2oTjubz7zJiaqFLMLJ1/fdZdJ U3byDNYNWnI9/JgkHP8CpfGIIzbhChTPMACADvIGl0AfWAJEqA34HF8EzpnxPhng oooInLbL0iZ4wjsTHKh/0Ju9lJeDOunMmmYQjzdDGvnaB2iIpc4k4dzSNyq893J0 gQ6/CpyHg7SU+2ktqGwUjzxobDqaXkOzZcP8uUwWhZ2jGjepvAJXM3OVhdXSJ+xq fXdCNbxvGvhEv004YZuY2t59u6NArU+wQma/1S4dboyROPc9NYUlL90hir8QwvpV tI2xvR+k4MB45JWMKo/ijjq6B1txrN8EfP1Rh6L4U0buJMotEuY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:20 2025 by rpki-client