$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: vXCAqi6IslJQnrBHwmqtEIfWGcQtTKAr+q0Gg99zj1s= Subject key identifier: 59:5D:BF:46:E4:32:4F:2A:15:1B:B9:06:09:E4:EB:13:46:09:71:06 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 6443A9CC94346AC4FF562F6A3F1CC6CBBF9D9C9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 010B Signing time: Thu 04 Sep 2025 12:22:29 +0000 Manifest this update: Thu 04 Sep 2025 12:17:29 +0000 Manifest next update: Sun 07 Sep 2025 15:35:29 +0000 Files and hashes: 1: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: ekUvVSPphAkN/dJPN5oARy+DcdSNecCjQXgnxOKaSjI=) 2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:43:a9:cc:94:34:6a:c4:ff:56:2f:6a:3f:1c:c6:cb:bf:9d:9c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Sep 4 12:17:29 2025 GMT Not After : Sep 7 15:35:29 2025 GMT Subject: CN=595DBF46E4324F2A151BB90609E4EB1346097106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:3d:23:46:ae:dc:e6:a0:0f:fe:19:ec:2a: d2:86:1b:49:91:b2:89:d6:f9:41:fb:1f:c3:0c:79: 8a:93:0c:6f:39:68:9a:c9:38:8f:75:5e:b4:f1:5a: 81:c0:42:c7:40:4d:50:64:ce:c0:7d:a7:c9:01:dc: 32:02:4c:e5:85:6b:d6:32:28:b7:fc:77:a2:0a:7f: 74:32:55:1a:87:7b:72:5d:e2:b6:88:94:a5:0e:0b: 15:b7:ba:5b:19:2c:c8:58:01:5a:4f:c2:a5:32:40: 42:42:1f:76:d7:dd:39:2f:f8:0a:76:29:ad:d7:6f: 33:49:15:61:eb:0a:0f:39:0d:dd:97:4b:92:fb:b6: af:99:03:85:c1:bc:46:a0:a8:5a:ec:b6:f0:33:5d: 42:e7:97:32:71:bc:0f:d7:4b:ba:80:3c:5e:f8:c0: b5:21:e8:0f:b7:6f:a9:4e:49:19:d2:6b:c5:cb:1e: 2f:d9:d2:c3:42:42:24:3f:6b:aa:1b:08:87:6a:18: 4d:fc:71:31:b4:99:88:a3:db:b9:c6:f6:e4:6e:be: 09:91:ed:e4:1b:21:cd:e6:f1:96:98:a5:2c:91:99: bd:10:9d:62:3e:e1:f9:26:51:b7:fe:09:5d:4a:ff: b1:6f:88:8a:f8:46:1d:e5:d2:6d:e2:2d:cc:bb:7d: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5D:BF:46:E4:32:4F:2A:15:1B:B9:06:09:E4:EB:13:46:09:71:06 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:91:23:33:49:c0:25:bd:2e:62:8d:73:a6:22:bc:c0:a1:f4: 1a:8c:0d:76:92:da:1e:3f:0f:34:d0:03:94:6d:1d:d2:4c:e5: 6d:de:af:5a:d5:d1:26:eb:d8:d7:e3:c4:65:3b:b8:90:37:b2: 59:75:1c:98:6b:57:9c:6d:53:53:b4:ec:66:5f:2c:b0:8b:59: 91:8f:a2:57:03:ad:78:7c:de:5d:8e:6b:90:91:61:95:4d:4a: 8c:94:cb:d2:7f:91:95:cc:d9:7a:a0:e1:bf:2c:2f:1b:8b:82: cf:1d:ac:3e:f4:d9:32:4c:71:08:92:3b:1b:94:45:38:06:4c: b7:92:84:ac:19:40:63:05:72:f8:66:9f:13:1b:e6:54:c4:29: 46:3c:37:cd:f4:3c:a7:d4:a5:46:0b:17:b9:2f:bc:a4:ec:0c: 46:ad:ca:7d:c8:3b:70:42:e5:db:db:33:9b:eb:87:df:4c:ad: db:6b:9d:4f:49:bd:fd:6f:ce:0e:8f:06:a7:d2:30:0c:5e:1c: 11:ce:1b:5d:b6:c5:91:a5:75:4c:e3:e3:cb:a6:d5:49:e0:35: 78:38:b9:c8:5f:27:ee:62:88:2c:27:a1:8e:d8:20:b7:a8:fa: 26:6c:9e:aa:aa:34:73:fe:c6:53:6d:9e:32:d3:36:8d:99:43: a5:1a:98:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEOpzJQ0asT/Vi9qPxzGy7+dnJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA5MDQxMjE3MjlaFw0yNTA5MDcxNTM1MjlaMDMxMTAvBgNV BAMTKDU5NURCRjQ2RTQzMjRGMkExNTFCQjkwNjA5RTRFQjEzNDYwOTcxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9D0jRq7c5qAP/hnsKtKGG0mR sonW+UH7H8MMeYqTDG85aJrJOI91XrTxWoHAQsdATVBkzsB9p8kB3DICTOWFa9Yy KLf8d6IKf3QyVRqHe3Jd4raIlKUOCxW3ulsZLMhYAVpPwqUyQEJCH3bX3Tkv+Ap2 Ka3XbzNJFWHrCg85Dd2XS5L7tq+ZA4XBvEagqFrstvAzXULnlzJxvA/XS7qAPF74 wLUh6A+3b6lOSRnSa8XLHi/Z0sNCQiQ/a6obCIdqGE38cTG0mYij27nG9uRuvgmR 7eQbIc3m8ZaYpSyRmb0QnWI+4fkmUbf+CV1K/7FviIr4Rh3l0m3iLcy7fRcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWV2/RuQyTyoVG7kGCeTrE0YJcQYwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2RIzNJwCW9LmKNc6YivMCh9BqMDXaS2h4/ DzTQA5RtHdJM5W3er1rV0Sbr2NfjxGU7uJA3sll1HJhrV5xtU1O07GZfLLCLWZGP olcDrXh83l2Oa5CRYZVNSoyUy9J/kZXM2Xqg4b8sLxuLgs8drD702TJMcQiSOxuU RTgGTLeShKwZQGMFcvhmnxMb5lTEKUY8N830PKfUpUYLF7kvvKTsDEatyn3IO3BC 5dvbM5vrh99MrdtrnU9Jvf1vzg6PBqfSMAxeHBHOG122xZGldUzj48um1UngNXg4 uchfJ+5iiCwnoY7YILeo+iZsnqqqNHP+xlNtnjLTNo2ZQ6UamLg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:59 2025 by rpki-client