$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: dKk81qgKbvhbaQWUF+zUBzBIbNOAM+XcEpJzGYbelYo= Subject key identifier: 40:02:B9:15:13:45:C0:76:A3:EB:CA:66:88:03:0B:26:1E:A9:0D:03 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 2AC8F5B7D33BCA61C9D8CF6BD120A8E200DD45DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: A1 Signing time: Thu 05 Jun 2025 16:12:19 +0000 Manifest this update: Thu 05 Jun 2025 16:07:19 +0000 Manifest next update: Mon 09 Jun 2025 01:44:19 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: YDNGZMtK5QhpBPUTSGj2+nMulIMgwMIt3Jrm1mA7OoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c8:f5:b7:d3:3b:ca:61:c9:d8:cf:6b:d1:20:a8:e2:00:dd:45:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Jun 5 16:07:19 2025 GMT Not After : Jun 9 01:44:19 2025 GMT Subject: CN=4002B9151345C076A3EBCA6688030B261EA90D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:eb:f8:c0:ef:db:02:8f:4b:0e:16:ab:67: f9:c7:24:56:87:31:aa:cf:67:e9:8d:de:5f:f0:b1: 6b:81:53:33:b8:56:46:35:45:9c:7b:bb:72:ba:bd: a4:40:7e:b5:bd:bc:8e:fc:ff:f1:83:74:f6:5c:c8: cd:8e:a1:0f:89:76:a1:85:ee:8d:e6:94:69:f3:39: 04:59:c5:11:d3:35:63:dc:71:6e:21:ed:ed:1b:9e: 53:60:8d:d5:d4:ee:be:21:4d:f7:ce:90:81:5a:f8: e7:b0:74:c8:42:68:aa:e5:3d:a5:6b:9b:b1:62:e2: cd:30:47:b9:cd:47:80:6c:1a:87:37:4c:78:3b:4d: c9:47:58:a1:4c:fc:7e:3a:04:74:32:4e:cd:d3:c9: ce:fb:86:3a:e8:e4:b0:30:f8:d6:37:5d:d8:c9:b8: 71:ac:f6:80:e5:19:f7:86:88:eb:40:8a:79:2d:a1: 1b:00:98:5d:e0:42:7b:8e:ab:91:4e:ba:10:0b:35: 3b:eb:34:63:c8:fd:1f:5d:26:41:50:90:f7:81:00: ac:cc:e2:6f:9e:45:8e:03:15:f7:b2:d0:55:24:ac: ad:e3:1b:92:05:73:e4:a6:bf:7c:ed:07:d0:48:1c: 54:34:99:ce:8c:ce:17:60:1e:4e:dc:d8:8d:c2:62: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:02:B9:15:13:45:C0:76:A3:EB:CA:66:88:03:0B:26:1E:A9:0D:03 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:68:60:ab:16:5d:64:4d:cd:27:a2:eb:a6:d5:93:a0:d9:d7: ef:99:e4:fc:91:33:0a:d5:79:f5:af:49:66:78:39:38:e0:2f: 20:71:f1:4a:27:f2:20:f3:c8:a1:1f:8c:2e:7e:b7:d8:7a:26: f1:28:ad:0f:b5:64:33:f8:6e:d4:06:67:0c:d7:c2:e7:c0:a9: e1:77:d7:b5:d4:e9:67:57:69:3c:bc:83:32:e8:ae:e4:4f:6f: 5d:6e:52:b3:1f:ad:96:a6:79:c1:a1:8c:0a:be:f6:30:b1:fe: 46:0f:a0:86:8f:aa:dc:05:f9:ee:51:ea:1b:86:9c:02:f1:1e: ed:5f:14:82:81:bc:71:be:9d:85:0b:e6:f8:01:30:20:00:3e: a7:37:d4:ed:34:cb:7b:a6:86:f3:74:ca:65:5a:7b:2a:af:90: ef:3b:8d:f3:34:f3:a4:19:da:73:d7:e6:a4:45:da:be:df:08: 98:1a:0e:98:2f:f5:5b:2c:40:6d:e0:20:36:97:2c:3f:19:e4: f2:1a:24:24:0c:2e:21:d0:14:39:7a:c4:ec:2b:a7:76:a4:4b: e3:25:b3:26:21:18:e5:09:13:f7:b3:07:ac:2e:ed:60:03:84: 53:04:4f:68:c8:8c:91:d3:8f:8f:f5:a5:15:e2:56:95:40:04: da:70:d9:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsj1t9M7ymHJ2M9r0SCo4gDdRd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA2MDUxNjA3MTlaFw0yNTA2MDkwMTQ0MTlaMDMxMTAvBgNV BAMTKDQwMDJCOTE1MTM0NUMwNzZBM0VCQ0E2Njg4MDMwQjI2MUVBOTBEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeeev4wO/bAo9LDharZ/nHJFaH MarPZ+mN3l/wsWuBUzO4VkY1RZx7u3K6vaRAfrW9vI78//GDdPZcyM2OoQ+JdqGF 7o3mlGnzOQRZxRHTNWPccW4h7e0bnlNgjdXU7r4hTffOkIFa+OewdMhCaKrlPaVr m7Fi4s0wR7nNR4BsGoc3THg7TclHWKFM/H46BHQyTs3Tyc77hjro5LAw+NY3XdjJ uHGs9oDlGfeGiOtAinktoRsAmF3gQnuOq5FOuhALNTvrNGPI/R9dJkFQkPeBAKzM 4m+eRY4DFfey0FUkrK3jG5IFc+Smv3ztB9BIHFQ0mc6MzhdgHk7c2I3CYqh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAK5FRNFwHaj68pmiAMLJh6pDQMwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZoYKsWXWRNzSei66bVk6DZ1++Z5PyRMwrV efWvSWZ4OTjgLyBx8Uon8iDzyKEfjC5+t9h6JvEorQ+1ZDP4btQGZwzXwufAqeF3 17XU6WdXaTy8gzLoruRPb11uUrMfrZamecGhjAq+9jCx/kYPoIaPqtwF+e5R6huG nALxHu1fFIKBvHG+nYUL5vgBMCAAPqc31O00y3umhvN0ymVaeyqvkO87jfM086QZ 2nPX5qRF2r7fCJgaDpgv9VssQG3gIDaXLD8Z5PIaJCQMLiHQFDl6xOwrp3akS+Ml syYhGOUJE/ezB6wu7WADhFMET2jIjJHTj4/1pRXiVpVABNpw2YM= -----END CERTIFICATE-----Generated at Thu Jun 5 19:49:05 2025 by rpki-client