$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: FCCIQqbq5f0Jrhexm2vQgjzis5C9sQsNMtusCXKv3ak= Subject key identifier: 41:B3:62:5E:6D:1E:67:7C:91:EC:6A:3C:30:59:BD:8C:47:D7:66:DE Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 2F6F0E89B9AC71568D34E6FC543C65C1F0D5E99A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02D3 Signing time: Sun 19 Oct 2025 10:30:39 +0000 Manifest this update: Sun 19 Oct 2025 10:25:39 +0000 Manifest next update: Wed 22 Oct 2025 18:44:39 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: rn+1wsQ30cCf/k4rXVLxTl12reVy614H3al62gEbZ44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6f:0e:89:b9:ac:71:56:8d:34:e6:fc:54:3c:65:c1:f0:d5:e9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Oct 19 10:25:39 2025 GMT Not After : Oct 22 18:44:39 2025 GMT Subject: CN=41B3625E6D1E677C91EC6A3C3059BD8C47D766DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:53:e3:6d:2c:5c:1c:93:13:b9:da:9d:69:a1: 80:0e:13:c5:c6:cc:ab:14:7e:e4:ee:1d:5b:78:59: 02:19:29:b7:f2:6b:af:2c:2d:e8:af:7a:39:5f:64: f7:d6:3d:86:b7:b0:b4:c6:a1:09:a6:b4:02:2a:65: 3c:bc:7f:4b:9b:92:c9:de:34:ba:1e:d4:02:ce:11: 76:79:6b:15:5d:ab:b3:23:0d:c3:35:ae:07:5a:55: ae:93:e1:ef:e1:fd:96:68:cb:dc:a2:3e:b8:20:82: 2f:f4:57:c1:58:56:a2:66:97:9c:00:07:f8:b3:33: bc:18:58:6b:91:a1:10:ad:ee:6a:38:40:54:5f:54: 83:29:0e:e5:e9:12:fb:09:97:7e:80:2f:2d:fe:35: 00:03:d5:d9:79:5c:aa:e6:f1:f1:ad:bd:cb:cd:9d: f8:98:69:a7:d5:d2:ff:3f:60:73:33:b2:e9:db:24: d8:90:87:10:3e:ce:71:17:eb:5a:20:fe:7a:7c:eb: 1f:07:bc:32:85:4e:44:40:76:87:65:b7:8b:f8:53: 16:43:50:1a:62:07:06:6d:fb:e5:ab:ba:09:1b:8e: e5:c9:35:f5:03:a7:98:e2:96:5e:22:dc:e7:83:f0: 8e:34:16:1f:e3:8e:ad:84:d8:c7:4e:84:73:fd:1d: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B3:62:5E:6D:1E:67:7C:91:EC:6A:3C:30:59:BD:8C:47:D7:66:DE X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8b:56:c7:43:64:3c:2f:d4:15:55:c9:38:34:b3:03:3d:b3: cb:5d:bb:04:ae:e2:98:87:ba:70:60:40:af:cd:b2:18:41:34: bd:cd:74:d9:33:c7:d8:aa:07:f9:96:29:2c:18:3f:56:fe:52: c3:83:50:90:0e:1a:32:ce:9e:5d:34:36:c3:b3:f5:ce:ef:27: ea:4f:d7:fe:52:1c:24:dc:ef:b0:e5:42:db:97:fd:e5:4a:cb: 54:fe:d9:5b:75:ab:2c:0e:d3:7d:18:83:f5:65:d6:79:92:ce: 90:21:cb:1f:18:ef:28:30:cc:d8:cc:d8:56:1c:a0:04:40:91: 88:1c:7c:10:28:38:e8:a2:76:a5:0c:86:32:9b:e6:ef:48:9b: d2:22:8d:7b:72:2e:03:82:89:59:8f:70:31:95:cf:99:59:5a: fe:e6:34:43:bc:af:65:ac:87:fe:9e:65:54:9d:f9:26:2b:83: f7:91:f9:cf:b8:67:1a:62:b8:e6:59:8a:6a:e1:ba:81:42:a9: b8:89:24:15:89:6e:e3:1c:ba:0e:25:74:d8:2b:d0:79:2f:f4: 4f:7c:eb:9f:4a:9d:f2:b6:23:21:a6:90:2c:4d:c0:1f:25:cd: 4a:19:17:82:c6:6b:b3:63:55:52:42:08:b7:d8:75:e5:4e:e5: 6c:0b:e7:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL28OibmscVaNNOb8VDxlwfDV6ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTEwMTkxMDI1MzlaFw0yNTEwMjIxODQ0MzlaMDMxMTAvBgNV BAMTKDQxQjM2MjVFNkQxRTY3N0M5MUVDNkEzQzMwNTlCRDhDNDdENzY2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzU+NtLFwckxO52p1poYAOE8XG zKsUfuTuHVt4WQIZKbfya68sLeivejlfZPfWPYa3sLTGoQmmtAIqZTy8f0ubksne NLoe1ALOEXZ5axVdq7MjDcM1rgdaVa6T4e/h/ZZoy9yiPrgggi/0V8FYVqJml5wA B/izM7wYWGuRoRCt7mo4QFRfVIMpDuXpEvsJl36ALy3+NQAD1dl5XKrm8fGtvcvN nfiYaafV0v8/YHMzsunbJNiQhxA+znEX61og/np86x8HvDKFTkRAdodlt4v4UxZD UBpiBwZt++WrugkbjuXJNfUDp5jill4i3OeD8I40Fh/jjq2E2MdOhHP9HeUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQbNiXm0eZ3yR7Go8MFm9jEfXZt4wHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeLVsdDZDwv1BVVyTg0swM9s8tduwSu4piH unBgQK/NshhBNL3NdNkzx9iqB/mWKSwYP1b+UsODUJAOGjLOnl00NsOz9c7vJ+pP 1/5SHCTc77DlQtuX/eVKy1T+2Vt1qywO030Yg/Vl1nmSzpAhyx8Y7ygwzNjM2FYc oARAkYgcfBAoOOiidqUMhjKb5u9Im9IijXtyLgOCiVmPcDGVz5lZWv7mNEO8r2Ws h/6eZVSd+SYrg/eR+c+4ZxpiuOZZimrhuoFCqbiJJBWJbuMcug4ldNgr0Hkv9E98 659KnfK2IyGmkCxNwB8lzUoZF4LGa7NjVVJCCLfYdeVO5WwL5/o= -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:42 2025 by rpki-client