$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: Jld7yIij1JSGOEPKmP/M4ZkYCduptzKblfmmuLEwNVA= Subject key identifier: 82:AF:53:3F:43:62:A7:93:1E:75:D6:88:0B:42:BA:36:03:6E:CA:FA Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 49BD3C2DC2F219A969B2858CD98FF0E4F3FD15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: ED Signing time: Mon 30 Jun 2025 04:41:59 +0000 Manifest this update: Mon 30 Jun 2025 04:36:59 +0000 Manifest next update: Thu 03 Jul 2025 10:19:59 +0000 Files and hashes: 1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) 2: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: 358ocmx0foDDQJPW46e6hDnRb16B2ZFdVaolEYPSUvc=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 10:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bd:3c:2d:c2:f2:19:a9:69:b2:85:8c:d9:8f:f0:e4:f3:fd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Jun 30 04:36:59 2025 GMT Not After : Jul 3 10:19:59 2025 GMT Subject: CN=82AF533F4362A7931E75D6880B42BA36036ECAFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:76:8d:7b:19:6a:65:bf:03:8d:b4:b6:8a: 3d:62:d0:ce:3f:ea:3d:e7:3b:b9:42:13:a3:a6:83: 14:21:91:2c:71:bb:4a:60:fb:1b:48:e8:3e:c3:02: a9:d6:aa:fe:fa:12:2e:37:9e:1b:a2:b0:34:16:ab: 39:1c:13:60:33:42:7d:d4:16:26:d5:da:94:e3:0c: f8:99:52:64:57:b2:cf:d0:28:d4:85:b4:94:ea:6e: e9:41:98:ee:c2:f0:6d:44:c3:36:ee:9c:3c:86:35: 44:04:2b:44:3f:7a:37:21:1b:00:57:11:3b:1e:02: f8:bb:1d:3d:21:9f:14:be:de:f5:68:90:10:e4:4f: 65:15:38:b3:08:77:1b:95:d3:c6:86:29:a5:c4:40: 51:56:61:1f:6d:e1:2d:41:bf:8e:97:14:68:de:86: 75:0c:f2:2a:c9:aa:42:37:be:e7:d9:e0:25:50:b5: 2b:fd:48:87:c2:65:6d:8d:f1:2d:84:6e:6a:b6:ef: 3c:1d:d5:4d:4a:2a:c4:13:69:e1:0a:62:46:7e:dd: a0:fd:2e:31:19:7b:96:a0:cd:0f:a7:e5:f5:7e:50: 8b:b6:71:48:3f:80:aa:85:7e:ed:64:fb:54:1e:1c: e7:37:51:07:55:a5:0a:97:5e:f3:6a:1a:16:44:37: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:53:3F:43:62:A7:93:1E:75:D6:88:0B:42:BA:36:03:6E:CA:FA X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cc:08:14:19:89:04:7b:e4:33:30:e0:69:22:8d:50:f9:fa: a1:ff:54:66:cc:2d:0e:92:30:d4:67:98:fe:4c:00:c3:b4:d0: a9:cb:78:fd:43:1b:44:4a:73:aa:81:3a:10:77:ce:25:dd:c0: 05:d7:0f:dc:a5:f4:54:30:16:d9:62:5f:37:48:89:b4:6f:ca: 64:83:e4:05:05:47:76:5e:d4:15:af:32:6d:36:af:f7:6a:8b: d1:bd:b3:4c:01:dc:0c:f9:58:55:c3:97:8a:39:d3:c6:73:a1: 66:f6:29:2e:c7:7b:79:5e:b5:bf:dc:62:8b:94:82:89:92:99: 8b:f1:0c:80:25:6d:43:27:6b:c3:dc:9f:63:68:78:e4:39:3c: cb:aa:89:42:57:fc:3b:bb:96:cb:3f:12:f2:d9:11:0d:8d:d3: be:99:ad:9d:13:a7:11:e7:d2:ca:05:ba:dd:cc:1c:1d:0d:10: 00:40:62:62:d0:1e:9c:07:be:b2:ae:bf:3a:eb:9c:45:ae:da: 83:41:8d:92:48:5c:53:f4:c4:89:7b:8e:c8:b7:36:75:fc:97: a2:89:fe:a2:ee:a1:39:e6:51:a6:18:b1:6d:1e:7c:8a:f3:3a: ff:a2:a0:22:e4:08:18:65:ff:a9:a5:39:cc:be:f3:56:64:de: f8:07:20:14 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITSb08LcLyGalpsoWM2Y/w5PP9FTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4OEQ1NkI5MzcyOTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFC NzcxREU2MB4XDTI1MDYzMDA0MzY1OVoXDTI1MDcwMzEwMTk1OVowMzExMC8GA1UE AxMoODJBRjUzM0Y0MzYyQTc5MzFFNzVENjg4MEI0MkJBMzYwMzZFQ0FGQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANYldo17GWplvwONtLaKPWLQzj/q Pec7uUITo6aDFCGRLHG7SmD7G0joPsMCqdaq/voSLjeeG6KwNBarORwTYDNCfdQW JtXalOMM+JlSZFeyz9Ao1IW0lOpu6UGY7sLwbUTDNu6cPIY1RAQrRD96NyEbAFcR Ox4C+LsdPSGfFL7e9WiQEORPZRU4swh3G5XTxoYppcRAUVZhH23hLUG/jpcUaN6G dQzyKsmqQje+59ngJVC1K/1Ih8JlbY3xLYRuarbvPB3VTUoqxBNp4QpiRn7doP0u MRl7lqDND6fl9X5Qi7ZxSD+AqoV+7WT7VB4c5zdRB1WlCpde82oaFkQ3fcUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSCr1M/Q2Knkx511ogLQro2A27K+jAfBgNVHSME GDAWgBSI1WuTcph5dNddX+tsSPpJG3cd5jAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ1 MDYzM2ZjLWZlMjMtNGQ4Mi1iYTY0LWJiN2VlNmRkNmUwNi8wLzg4RDU2QjkzNzI5 ODc5NzRENzVENUZFQjZDNDhGQTQ5MUI3NzFERTYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi84OEQ1NkI5MzcyOTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcx REU2LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80NTA2MzNmYy1mZTIzLTRkODItYmE2 NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5MzcyOTg3OTc0RDc1RDVGRUI2QzQ4RkE0 OTFCNzcxREU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAkswIFBmJBHvkMzDgaSKNUPn6of9UZswtDpIw 1GeY/kwAw7TQqct4/UMbREpzqoE6EHfOJd3ABdcP3KX0VDAW2WJfN0iJtG/KZIPk BQVHdl7UFa8ybTav92qL0b2zTAHcDPlYVcOXijnTxnOhZvYpLsd7eV61v9xii5SC iZKZi/EMgCVtQydrw9yfY2h45Dk8y6qJQlf8O7uWyz8S8tkRDY3TvpmtnROnEefS ygW63cwcHQ0QAEBiYtAenAe+sq6/OuucRa7ag0GNkkhcU/TEiXuOyLc2dfyXoon+ ou6hOeZRphixbR58ivM6/6KgIuQIGGX/qaU5zL7zVmTe+AcgFA== -----END CERTIFICATE-----Generated at Tue Jul 1 16:00:07 2025 by rpki-client