$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: 1e3UicZuKNXuB5cVT+6wZwUh6+Sj1kHaW0NOXvCVH6w= Subject key identifier: 1D:53:9A:12:8F:6C:75:87:B1:D9:77:2E:5A:00:B6:FF:BB:71:83:6E Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 77C1E8D4FF8D725520AD1D9C127CD433C01AD100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02B9 Signing time: Thu 21 Aug 2025 13:30:39 +0000 Manifest this update: Thu 21 Aug 2025 13:25:39 +0000 Manifest next update: Sun 24 Aug 2025 22:06:39 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: 9NgGxNUHZnOOSFKnwcK1w9CHW9oYr5BzXZpUrE0jBDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c1:e8:d4:ff:8d:72:55:20:ad:1d:9c:12:7c:d4:33:c0:1a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Aug 21 13:25:39 2025 GMT Not After : Aug 24 22:06:39 2025 GMT Subject: CN=1D539A128F6C7587B1D9772E5A00B6FFBB71836E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:28:3d:6e:be:62:72:da:74:7a:db:6a:c7:e8: 53:6f:21:8e:97:6b:c7:c9:91:6f:78:8e:82:e9:8f: 74:fb:ec:c6:2c:36:4a:40:17:22:49:3d:94:e4:88: ee:14:90:50:70:84:6b:b9:4c:6e:2f:0e:66:86:42: 3c:46:03:62:b2:cc:da:3b:a3:be:08:fc:7c:a1:37: 47:5d:29:5c:d1:7c:92:bf:d9:47:98:1c:dd:c3:e0: 6e:29:99:83:ff:1c:08:62:28:bf:69:af:c6:66:b5: 7a:77:56:11:04:8a:df:02:49:e2:1b:02:0a:d1:a0: 9f:7c:e0:da:a7:83:79:57:17:7f:54:cf:50:3c:6e: cf:c3:f4:3e:fc:be:3a:0c:26:3f:5c:c9:e4:29:84: a9:a4:b9:1f:0c:f6:ca:59:02:38:51:2d:fe:46:6d: ab:fd:1d:c9:30:b8:47:86:f6:2d:47:f8:de:bf:0a: 59:7a:a2:ed:8b:99:69:91:63:7e:46:0c:cd:e3:49: b7:b4:eb:ce:5d:54:cf:1f:4f:67:91:32:4d:42:56: 11:0d:8c:78:8c:80:19:d7:cd:66:6e:58:31:40:a9: 12:7d:d0:89:99:5a:fa:ee:84:75:a2:1d:2b:5f:5e: 49:64:22:84:e9:27:c8:f8:04:3f:01:ee:ab:c0:48: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:53:9A:12:8F:6C:75:87:B1:D9:77:2E:5A:00:B6:FF:BB:71:83:6E X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4a:c6:95:be:72:2d:5f:30:8b:e4:3b:e2:0e:e4:54:03:4f: a9:8b:7d:87:11:a7:fa:e2:46:5b:42:d0:35:b7:1f:4d:0a:02: 51:1f:81:0c:b7:cd:82:c7:78:b5:f0:f7:01:88:f6:a2:87:b8: db:70:21:54:0d:93:e5:92:91:2c:0b:dc:af:20:6b:89:87:a5: 93:c4:81:7e:db:99:4e:5b:13:64:ba:e5:12:a1:cc:a1:8a:e1: d3:e6:0a:d5:70:40:b4:06:b1:c6:f5:96:19:f8:e0:57:a8:38: 86:d5:cf:67:bd:d7:80:74:d6:d5:c7:be:52:72:9a:ed:be:2c: 2d:f1:5a:4f:e8:ce:7c:40:fa:76:23:fc:6e:ba:e4:10:d9:9a: 39:a0:63:bd:6d:02:f2:38:b9:d9:55:d1:7d:c7:a5:35:80:c3: 02:96:ef:b7:53:a5:3d:6d:65:c5:20:eb:5b:ea:d7:ee:62:f9: 08:b6:b6:e4:61:92:12:72:03:c5:f5:67:f8:43:83:87:65:bf: d4:f3:ff:81:18:be:6f:34:73:06:b2:01:b6:05:5a:a9:48:8e: 09:46:39:a7:03:bd:66:0c:ee:48:24:0a:55:a7:68:74:1b:97: db:09:f4:05:6f:b3:91:cb:10:a9:92:bb:0d:bd:8f:a5:31:63: 46:7a:59:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8Ho1P+NclUgrR2cEnzUM8Aa0QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA4MjExMzI1MzlaFw0yNTA4MjQyMjA2MzlaMDMxMTAvBgNV BAMTKDFENTM5QTEyOEY2Qzc1ODdCMUQ5NzcyRTVBMDBCNkZGQkI3MTgzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpKD1uvmJy2nR622rH6FNvIY6X a8fJkW94joLpj3T77MYsNkpAFyJJPZTkiO4UkFBwhGu5TG4vDmaGQjxGA2KyzNo7 o74I/HyhN0ddKVzRfJK/2UeYHN3D4G4pmYP/HAhiKL9pr8ZmtXp3VhEEit8CSeIb AgrRoJ984Nqng3lXF39Uz1A8bs/D9D78vjoMJj9cyeQphKmkuR8M9spZAjhRLf5G bav9HckwuEeG9i1H+N6/Cll6ou2LmWmRY35GDM3jSbe0685dVM8fT2eRMk1CVhEN jHiMgBnXzWZuWDFAqRJ90ImZWvruhHWiHStfXklkIoTpJ8j4BD8B7qvASIf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHVOaEo9sdYex2XcuWgC2/7txg24wHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlKxpW+ci1fMIvkO+IO5FQDT6mLfYcRp/ri RltC0DW3H00KAlEfgQy3zYLHeLXw9wGI9qKHuNtwIVQNk+WSkSwL3K8ga4mHpZPE gX7bmU5bE2S65RKhzKGK4dPmCtVwQLQGscb1lhn44FeoOIbVz2e914B01tXHvlJy mu2+LC3xWk/oznxA+nYj/G665BDZmjmgY71tAvI4udlV0X3HpTWAwwKW77dTpT1t ZcUg61vq1+5i+Qi2tuRhkhJyA8X1Z/hDg4dlv9Tz/4EYvm80cwayAbYFWqlIjglG OacDvWYM7kgkClWnaHQbl9sJ9AVvs5HLEKmSuw29j6UxY0Z6Wcs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:47 2025 by rpki-client