$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: W2T2azuFPpByzNKvaHcRjMSuf/3wp7SmFUlDoEOGtVE= Subject key identifier: 51:36:C5:AB:D2:78:C1:0A:18:57:3C:E5:EA:F1:F6:42:72:EC:1C:36 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 2E25BF845631E05E07D9A5BCFEEE2BBD502F7F70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: C9 Signing time: Wed 03 Sep 2025 15:01:24 +0000 Manifest this update: Wed 03 Sep 2025 14:56:24 +0000 Manifest next update: Sat 06 Sep 2025 18:58:24 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: Ia7wGaJJ/I8MOj5w/LsGA+IPSG1te7hwUdBNAgdkoyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:25:bf:84:56:31:e0:5e:07:d9:a5:bc:fe:ee:2b:bd:50:2f:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Sep 3 14:56:24 2025 GMT Not After : Sep 6 18:58:24 2025 GMT Subject: CN=5136C5ABD278C10A18573CE5EAF1F64272EC1C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:71:af:ff:47:e1:cf:b5:e8:35:9f:d3:99: a0:60:b2:db:48:b4:5e:36:a9:bc:c1:26:e8:5f:40: ee:72:eb:6c:1a:1b:dc:94:b7:fd:81:c0:e6:d7:3d: 75:d4:2d:2a:b2:e1:35:51:ee:79:e8:e6:d7:6b:8a: 5b:bb:87:a2:a7:5b:75:ef:06:bb:be:7e:fb:30:9a: 9c:d4:29:4a:04:05:b1:44:69:c2:52:8f:e5:ca:36: 1b:b4:25:61:90:af:7c:29:04:c1:3c:e0:16:f0:f5: 6d:2f:ac:ac:f9:c6:cb:49:94:49:77:5d:c3:0e:ef: 75:63:c4:d2:18:f6:6c:7e:79:e4:7e:83:39:79:9b: 97:47:92:92:fb:77:b4:4c:9c:18:b3:be:2f:d6:fa: 01:d8:3e:0f:4c:0f:00:b5:39:99:a7:e5:55:e6:30: d0:9b:94:78:b2:c9:2c:6f:dd:d2:a0:78:6e:37:4e: d0:af:7e:9b:31:be:9c:60:90:d1:fb:f0:43:51:9b: 14:8a:5d:56:11:f3:92:53:4d:99:c9:ff:fb:b5:3e: 18:55:46:6c:1b:3d:92:f8:62:f6:b2:fb:78:1e:55: 15:d3:ce:2a:58:03:08:32:45:9a:fe:86:ae:46:68: 1b:39:c5:24:46:26:04:f5:8e:e8:72:2a:43:b5:ac: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:36:C5:AB:D2:78:C1:0A:18:57:3C:E5:EA:F1:F6:42:72:EC:1C:36 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:99:6b:e5:3e:8c:71:39:c2:34:e0:30:33:f6:0e:e8:35:1e: 46:7f:46:94:16:70:39:99:d1:f7:9c:ca:c0:92:95:91:46:31: b3:a7:0b:59:63:6e:2b:79:9d:d0:b3:92:ce:7c:fe:52:0c:4d: 97:b9:4a:a2:81:24:d1:b6:89:df:1a:f9:7d:f6:bc:22:15:4f: 60:d7:5a:db:85:97:c0:49:b4:5f:27:d0:ba:71:df:24:dc:73: 96:d7:6c:64:18:83:be:73:16:ae:78:68:07:69:f7:a5:b9:a5: 0f:e8:c2:d4:67:75:36:58:0d:f6:7b:de:c8:13:1d:24:6a:5d: bd:45:9b:9f:94:59:9c:17:b1:fb:24:3f:70:4f:38:43:48:1b: 27:b1:b9:a4:9c:35:cc:0e:83:7c:8b:97:47:76:4f:ed:77:e4: 8c:36:9d:07:c3:62:b0:59:c3:44:84:5a:cf:ba:d9:f9:41:14: e5:c8:5f:9f:7d:a8:05:29:b5:66:d4:31:f8:b0:4d:0e:84:fb: fc:d4:21:c8:8b:03:29:f7:7f:1f:24:e2:b5:6d:9f:bd:80:77: 86:f9:78:84:71:70:4c:24:a1:30:0c:84:73:6e:b3:8b:29:29: f9:62:77:c5:51:ec:d1:0e:ca:c1:b8:78:53:86:44:25:54:c2: 22:a6:15:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULiW/hFYx4F4H2aW8/u4rvVAvf3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA5MDMxNDU2MjRaFw0yNTA5MDYxODU4MjRaMDMxMTAvBgNV BAMTKDUxMzZDNUFCRDI3OEMxMEExODU3M0NFNUVBRjFGNjQyNzJFQzFDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KHGv/0fhz7XoNZ/TmaBgsttI tF42qbzBJuhfQO5y62waG9yUt/2BwObXPXXULSqy4TVR7nno5tdrilu7h6KnW3Xv Bru+fvswmpzUKUoEBbFEacJSj+XKNhu0JWGQr3wpBME84Bbw9W0vrKz5xstJlEl3 XcMO73VjxNIY9mx+eeR+gzl5m5dHkpL7d7RMnBizvi/W+gHYPg9MDwC1OZmn5VXm MNCblHiyySxv3dKgeG43TtCvfpsxvpxgkNH78ENRmxSKXVYR85JTTZnJ//u1PhhV RmwbPZL4Yvay+3geVRXTzipYAwgyRZr+hq5GaBs5xSRGJgT1juhyKkO1rJZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTbFq9J4wQoYVzzl6vH2QnLsHDYwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGZa+U+jHE5wjTgMDP2Dug1HkZ/RpQWcDmZ 0fecysCSlZFGMbOnC1ljbit5ndCzks58/lIMTZe5SqKBJNG2id8a+X32vCIVT2DX WtuFl8BJtF8n0Lpx3yTcc5bXbGQYg75zFq54aAdp96W5pQ/owtRndTZYDfZ73sgT HSRqXb1Fm5+UWZwXsfskP3BPOENIGyexuaScNcwOg3yLl0d2T+135Iw2nQfDYrBZ w0SEWs+62flBFOXIX599qAUptWbUMfiwTQ6E+/zUIciLAyn3fx8k4rVtn72Ad4b5 eIRxcEwkoTAMhHNus4spKflid8VR7NEOysG4eFOGRCVUwiKmFZU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:16 2025 by rpki-client