$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: We2GEAV8qJmT7uAzl7mAqGi+nWMoyqgjP4D4h7goGPw= Subject key identifier: D3:AE:F4:D9:40:10:9F:C8:82:56:70:E2:17:69:E7:1D:8A:27:44:44 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 78107356A500F1D9D36C1F4404A00085C85FB2C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: B5 Signing time: Sat 19 Jul 2025 18:31:21 +0000 Manifest this update: Sat 19 Jul 2025 18:26:21 +0000 Manifest next update: Tue 22 Jul 2025 23:37:21 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: Qo5eXCxtW9YnGbujhkSbJT9eODWij6HRIDVVYuDnSt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:10:73:56:a5:00:f1:d9:d3:6c:1f:44:04:a0:00:85:c8:5f:b2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Jul 19 18:26:21 2025 GMT Not After : Jul 22 23:37:21 2025 GMT Subject: CN=D3AEF4D940109FC8825670E21769E71D8A274444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:28:8a:a5:31:79:22:e7:cd:bf:dc:88:03: 59:da:7f:5c:65:47:80:00:13:6e:2c:1a:31:26:22: 8e:a3:97:f5:68:a1:86:4e:d3:45:e6:d9:e6:da:b3: 7c:f0:d8:26:99:3d:b9:25:db:f8:87:12:7d:8b:0e: 8e:b9:c6:3a:ef:a0:49:7e:cf:7c:74:a0:c2:6a:1a: 8d:d4:7f:12:6f:05:9f:d8:07:af:9e:50:10:eb:3c: 91:b9:bd:a8:9b:c1:30:93:8d:0d:96:d9:ff:87:6f: aa:11:02:97:0c:7f:5b:6c:e5:5c:3f:98:86:18:21: 84:c1:9b:44:56:88:df:66:fc:c1:5a:6d:50:9e:b7: 33:6b:3e:29:9c:76:24:08:c3:69:59:d2:9b:17:a0: 96:cf:4f:0d:c9:ba:1e:f1:09:1a:ff:0b:86:08:55: 8e:68:bc:5b:e3:f0:d6:1e:cb:ed:1c:04:73:99:bb: 2e:1b:43:6e:cf:ad:0a:0c:f5:ed:b9:0c:03:b2:c3: 22:dc:e8:e5:9b:49:77:db:b8:a8:59:66:9a:5f:fb: 36:f4:24:ec:35:b8:5e:0a:ae:37:23:1f:16:fd:36: 99:e6:a5:39:a0:2b:02:25:58:65:e5:67:50:0b:50: 44:e5:dc:9c:3f:56:65:21:cc:ab:00:9b:2e:c5:59: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AE:F4:D9:40:10:9F:C8:82:56:70:E2:17:69:E7:1D:8A:27:44:44 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:95:a1:57:34:43:99:b3:87:46:c4:bf:d6:60:1c:f4:72:d1: 2a:0d:a7:ce:b5:1a:4b:e0:74:a1:07:c1:89:7c:66:2f:d2:69: 88:14:f8:65:4f:f0:3e:2f:b8:13:57:aa:4d:89:19:84:f9:28: 1d:0c:3a:34:ad:8b:4b:3d:ce:8b:be:cd:32:3a:53:57:9a:38: 1e:52:83:4a:6d:ad:96:e8:b7:c0:ac:44:87:4b:cd:bd:57:08: 89:a2:de:6f:6e:12:b0:d9:27:46:56:11:39:a3:cf:45:93:47: 4a:c4:98:ad:ea:b0:23:15:1a:07:f3:3a:a5:4d:9f:a4:2f:27: 13:9e:14:b2:69:97:77:d4:33:23:c2:05:11:82:be:28:ff:c2: ab:42:dd:52:8d:2c:ad:f9:ae:40:44:fc:18:06:19:0d:73:0a: f4:2e:19:27:88:f5:0f:e6:3b:04:3b:55:74:11:56:44:7d:8b: b1:57:12:56:c8:5e:fc:f1:eb:5f:bb:c7:80:3c:3d:dc:b9:bb: 6e:89:82:32:89:63:3d:af:41:d0:de:82:8f:44:52:9a:5e:17: ec:ac:01:aa:38:cf:aa:09:b8:2d:3b:ad:03:58:19:58:06:cc: 20:2d:63:76:e1:ac:1b:14:7a:a1:b7:9e:c8:c6:c7:85:1c:bc: 94:1f:bd:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBBzVqUA8dnTbB9EBKAAhchfssUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA3MTkxODI2MjFaFw0yNTA3MjIyMzM3MjFaMDMxMTAvBgNV BAMTKEQzQUVGNEQ5NDAxMDlGQzg4MjU2NzBFMjE3NjlFNzFEOEEyNzQ0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpiiKpTF5IufNv9yIA1naf1xl R4AAE24sGjEmIo6jl/VooYZO00Xm2ebas3zw2CaZPbkl2/iHEn2LDo65xjrvoEl+ z3x0oMJqGo3UfxJvBZ/YB6+eUBDrPJG5vaibwTCTjQ2W2f+Hb6oRApcMf1ts5Vw/ mIYYIYTBm0RWiN9m/MFabVCetzNrPimcdiQIw2lZ0psXoJbPTw3Juh7xCRr/C4YI VY5ovFvj8NYey+0cBHOZuy4bQ27PrQoM9e25DAOywyLc6OWbSXfbuKhZZppf+zb0 JOw1uF4KrjcjHxb9NpnmpTmgKwIlWGXlZ1ALUETl3Jw/VmUhzKsAmy7FWUzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06702UAQn8iCVnDiF2nnHYonREQwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeVoVc0Q5mzh0bEv9ZgHPRy0SoNp861Gkvg dKEHwYl8Zi/SaYgU+GVP8D4vuBNXqk2JGYT5KB0MOjSti0s9zou+zTI6U1eaOB5S g0ptrZbot8CsRIdLzb1XCImi3m9uErDZJ0ZWETmjz0WTR0rEmK3qsCMVGgfzOqVN n6QvJxOeFLJpl3fUMyPCBRGCvij/wqtC3VKNLK35rkBE/BgGGQ1zCvQuGSeI9Q/m OwQ7VXQRVkR9i7FXElbIXvzx61+7x4A8Pdy5u26JgjKJYz2vQdDego9EUppeF+ys Aao4z6oJuC07rQNYGVgGzCAtY3bhrBsUeqG3nsjGx4UcvJQfvYk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:44:27 2025 by rpki-client