$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: STtQh34oU7BjkT15IUvaCGtZAWaQKEsUef12PPt+XhY= Subject key identifier: 0A:8D:6E:8B:C1:CB:C4:F6:58:38:E2:37:4C:98:8F:F7:0A:5C:F8:87 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 27A73E261DE568EAF8F97716F956F36A8C8A8868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 0105 Signing time: Fri 22 Aug 2025 07:42:01 +0000 Manifest this update: Fri 22 Aug 2025 07:37:01 +0000 Manifest next update: Mon 25 Aug 2025 11:20:01 +0000 Files and hashes: 1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) 2: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: mfCsNTh128x+VFgl0kxhZcVx4zFSqWFoug9SMnr4x48=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a7:3e:26:1d:e5:68:ea:f8:f9:77:16:f9:56:f3:6a:8c:8a:88:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Aug 22 07:37:01 2025 GMT Not After : Aug 25 11:20:01 2025 GMT Subject: CN=0A8D6E8BC1CBC4F65838E2374C988FF70A5CF887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e8:5b:4a:ac:f2:94:be:e8:f0:83:52:50:53: 7e:bc:2d:61:2d:e7:7c:82:41:d9:73:30:1b:88:a4: 6f:b4:27:0f:25:09:83:14:f1:78:2f:ec:db:d2:05: 4c:a4:89:1f:76:59:cb:dd:ba:f3:f3:62:20:1d:35: 60:72:5e:52:af:cc:8a:29:6a:7c:ca:43:46:84:2c: 83:08:68:98:40:4b:9f:94:4f:11:a9:65:0d:5f:ae: 1f:e0:30:c6:e7:9a:9c:65:45:fb:e2:0e:43:71:bc: 7d:34:59:4b:f8:71:85:0b:2d:5b:c1:69:72:2b:c7: ed:55:92:79:da:16:ea:00:c4:d2:25:d6:c6:4e:56: 68:96:45:51:66:f0:9f:d3:49:2f:ae:86:73:4f:21: 14:69:22:88:68:00:bd:25:a9:28:01:33:30:09:38: f9:b9:ad:56:49:33:62:9a:62:fd:e4:9b:43:00:44: 2a:9e:db:4d:8e:69:41:0a:fc:6a:1b:8c:c5:8a:7f: bb:4a:ef:3f:60:68:6d:ec:7f:8e:54:a4:85:67:9c: 5a:08:4a:74:c7:24:39:bb:0d:fd:0a:d4:4c:d7:14: 3e:02:0c:b2:ef:7b:55:36:46:c5:6c:dc:73:de:1f: 74:13:3c:2b:28:4a:da:a3:1d:73:54:a9:e3:45:68: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8D:6E:8B:C1:CB:C4:F6:58:38:E2:37:4C:98:8F:F7:0A:5C:F8:87 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c4:49:fc:cc:ca:7e:f7:90:c3:25:ac:a6:87:c0:b6:f3:0d: 0e:e9:dc:d1:98:0b:f6:15:0a:27:96:d4:e4:0a:73:0a:f4:ed: bc:ff:fe:f7:d7:c5:c7:3a:5a:6d:78:b5:34:3d:29:13:12:97: d1:47:b7:7a:64:fa:8c:da:bb:bd:50:06:d8:38:9a:e4:b1:7f: 4a:34:de:dc:d5:77:24:75:11:41:c8:bb:13:17:d4:fd:0a:dd: 95:ec:c7:dc:e6:f1:ec:8f:b9:81:f0:fb:22:00:9f:86:55:5f: fb:e2:82:c2:12:2f:46:b7:1e:26:ad:fa:64:8a:29:0c:a4:37: 34:1a:20:43:c4:fe:6f:c5:1d:47:12:7e:bf:ec:97:ab:f0:13: dd:d3:c4:f5:37:ae:7b:65:8e:e8:99:7b:91:44:36:68:7b:0b: 4e:e0:57:09:42:bc:18:5a:aa:5c:69:25:39:69:12:f1:d8:b6: e9:94:a2:66:95:01:8e:64:c6:cb:31:4f:83:70:ee:3c:90:31: 28:5d:c1:2e:eb:57:2d:00:02:11:8e:9e:19:17:0b:bc:22:9d: 3c:25:6e:d7:7d:07:8f:6b:ec:11:b8:33:4a:32:85:77:d3:93: a1:1a:93:3e:4f:52:45:3b:c6:ea:c0:d2:a5:56:59:1c:bb:91: 7f:38:ac:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6c+Jh3laOr4+XcW+VbzaoyKiGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA4MjIwNzM3MDFaFw0yNTA4MjUxMTIwMDFaMDMxMTAvBgNV BAMTKDBBOEQ2RThCQzFDQkM0RjY1ODM4RTIzNzRDOTg4RkY3MEE1Q0Y4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD36FtKrPKUvujwg1JQU368LWEt 53yCQdlzMBuIpG+0Jw8lCYMU8Xgv7NvSBUykiR92WcvduvPzYiAdNWByXlKvzIop anzKQ0aELIMIaJhAS5+UTxGpZQ1frh/gMMbnmpxlRfviDkNxvH00WUv4cYULLVvB aXIrx+1VknnaFuoAxNIl1sZOVmiWRVFm8J/TSS+uhnNPIRRpIohoAL0lqSgBMzAJ OPm5rVZJM2KaYv3km0MARCqe202OaUEK/GobjMWKf7tK7z9gaG3sf45UpIVnnFoI SnTHJDm7Df0K1EzXFD4CDLLve1U2RsVs3HPeH3QTPCsoStqjHXNUqeNFaGG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCo1ui8HLxPZYOOI3TJiP9wpc+IcwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfESfzMyn73kMMlrKaHwLbzDQ7p3NGYC/YV CieW1OQKcwr07bz//vfXxcc6Wm14tTQ9KRMSl9FHt3pk+ozau71QBtg4muSxf0o0 3tzVdyR1EUHIuxMX1P0K3ZXsx9zm8eyPuYHw+yIAn4ZVX/vigsISL0a3Hiat+mSK KQykNzQaIEPE/m/FHUcSfr/sl6vwE93TxPU3rntljuiZe5FENmh7C07gVwlCvBha qlxpJTlpEvHYtumUomaVAY5kxssxT4Nw7jyQMShdwS7rVy0AAhGOnhkXC7winTwl btd9B49r7BG4M0oyhXfTk6Eakz5PUkU7xurA0qVWWRy7kX84rCM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:52 2025 by rpki-client