$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: iJi5WqFOJw+JCR8h85+O3Vck/iD+iFvVgb60p2RefS0= Subject key identifier: D1:EC:1B:CD:B4:D9:35:6D:DF:E1:47:93:C3:14:09:98:D5:60:D6:C5 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 3E04D63C96C8E84617585FC524CE9A8B56C503A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 02A3 Signing time: Thu 03 Jul 2025 11:30:37 +0000 Manifest this update: Thu 03 Jul 2025 11:25:37 +0000 Manifest next update: Sun 06 Jul 2025 11:33:37 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: JvbNEZsnbXEAz27i346dm0JDqjC9+k9M4VqvMmXPpRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 11:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:04:d6:3c:96:c8:e8:46:17:58:5f:c5:24:ce:9a:8b:56:c5:03:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Jul 3 11:25:37 2025 GMT Not After : Jul 6 11:33:37 2025 GMT Subject: CN=D1EC1BCDB4D9356DDFE14793C3140998D560D6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:29:20:99:41:8b:c4:42:80:ee:25:61:fc: 47:ad:c4:ce:db:16:7d:aa:bc:6e:12:01:ca:88:ef: 73:48:dd:a7:72:e7:9e:f5:b6:e1:93:f0:71:82:51: 9f:5a:f2:05:b4:59:54:55:b4:c1:22:96:c8:84:d5: 2a:fe:df:d3:d9:74:67:0c:32:68:4b:c4:3e:c0:9b: 85:29:cb:78:b4:56:ed:88:0c:62:c1:3a:29:fa:2e: de:e1:19:da:aa:9d:50:1a:d9:d6:23:02:25:a2:cc: a8:5f:6d:a4:39:44:08:d6:a0:13:c7:01:a1:ac:da: eb:9c:7d:96:31:85:3a:d0:82:c6:e8:d1:ae:a5:39: 4c:3f:72:25:fa:2a:68:a9:60:c9:bd:5a:42:c5:a3: a2:b2:7a:36:36:03:3a:5b:cf:5f:a0:74:50:81:2d: 85:29:3c:b9:ad:df:d6:0c:db:8e:50:5f:c5:30:90: 68:91:6d:6d:40:d6:67:36:d7:56:09:79:4e:c8:05: b8:4e:8b:89:8d:be:d3:8a:3a:50:e7:2e:f3:74:dc: e2:c4:8f:04:d0:e7:f3:37:2f:1c:09:7c:d6:b2:69: f3:d1:0d:0a:32:c4:57:0d:a3:e4:6d:68:45:f5:27: 57:dc:c4:26:a9:27:83:a0:64:b7:0a:80:17:0e:d1: 33:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EC:1B:CD:B4:D9:35:6D:DF:E1:47:93:C3:14:09:98:D5:60:D6:C5 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ce:7f:23:6a:23:54:c4:bf:20:9f:a7:7e:9f:0d:e9:8e:e4: 44:52:ac:f7:99:b1:99:18:78:47:10:58:db:e0:0f:dc:16:49: 70:00:7f:29:d1:8d:12:32:ca:a9:3b:4b:5d:0a:fc:42:b5:d0: 9e:a8:96:0e:b0:e6:1e:69:18:6a:1e:62:13:0d:45:e9:f0:23: ce:6f:88:9c:c2:04:20:7c:47:00:cc:26:b4:76:85:a3:ea:52: 6f:35:98:81:9d:b4:a7:e2:55:b2:e5:9f:43:91:ff:fc:06:5f: af:38:30:71:60:bd:04:58:8c:9d:ed:8c:59:6b:e4:7e:cb:ce: ce:71:32:ac:2a:f8:46:9b:3f:83:17:a5:e7:96:08:68:d1:56: 26:c1:a2:50:47:cb:2f:56:cd:f5:5e:65:c1:2a:b1:5d:a4:2e: 6b:8a:8c:2b:c3:ce:d6:ed:bd:77:63:a5:d8:5c:50:6f:44:10: ad:a5:a2:10:43:eb:18:34:b7:6c:99:73:40:0e:a3:4c:92:5d: 7c:90:37:a7:f7:85:03:2f:e2:77:19:ba:f7:ec:62:5b:20:a0: 2b:04:d8:d8:65:51:87:81:19:90:18:b6:27:c6:ba:15:e9:05: 48:f4:2e:76:aa:e7:d1:ec:83:3f:91:22:c2:8d:30:aa:bb:9c: 44:da:5d:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgTWPJbI6EYXWF/FJM6ai1bFA6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA3MDMxMTI1MzdaFw0yNTA3MDYxMTMzMzdaMDMxMTAvBgNV BAMTKEQxRUMxQkNEQjREOTM1NkRERkUxNDc5M0MzMTQwOTk4RDU2MEQ2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oykgmUGLxEKA7iVh/EetxM7b Fn2qvG4SAcqI73NI3ady5571tuGT8HGCUZ9a8gW0WVRVtMEilsiE1Sr+39PZdGcM MmhLxD7Am4Upy3i0Vu2IDGLBOin6Lt7hGdqqnVAa2dYjAiWizKhfbaQ5RAjWoBPH AaGs2uucfZYxhTrQgsbo0a6lOUw/ciX6KmipYMm9WkLFo6KyejY2Azpbz1+gdFCB LYUpPLmt39YM245QX8UwkGiRbW1A1mc211YJeU7IBbhOi4mNvtOKOlDnLvN03OLE jwTQ5/M3LxwJfNayafPRDQoyxFcNo+RtaEX1J1fcxCapJ4OgZLcKgBcO0TO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ewbzbTZNW3f4UeTwxQJmNVg1sUwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbOfyNqI1TEvyCfp36fDemO5ERSrPeZsZkY eEcQWNvgD9wWSXAAfynRjRIyyqk7S10K/EK10J6olg6w5h5pGGoeYhMNRenwI85v iJzCBCB8RwDMJrR2haPqUm81mIGdtKfiVbLln0OR//wGX684MHFgvQRYjJ3tjFlr 5H7Lzs5xMqwq+EabP4MXpeeWCGjRVibBolBHyy9WzfVeZcEqsV2kLmuKjCvDztbt vXdjpdhcUG9EEK2lohBD6xg0t2yZc0AOo0ySXXyQN6f3hQMv4ncZuvfsYlsgoCsE 2NhlUYeBGZAYtifGuhXpBUj0Lnaq59Hsgz+RIsKNMKq7nETaXeA= -----END CERTIFICATE-----Generated at Fri Jul 4 18:03:10 2025 by rpki-client