$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: cV6hbNK4vZd7kY3RFdDj8NZzFJ71ddhsOddKAwvJNcY= Subject key identifier: 96:57:06:DC:B2:F2:DF:69:76:CF:10:36:70:01:D0:81:F2:70:B8:97 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 2DE5134E536BEA03A52F0483B9635F8566A296E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 09:22:03 +0000 Manifest this update: Sun 19 Oct 2025 09:17:03 +0000 Manifest next update: Wed 22 Oct 2025 16:13:03 +0000 Files and hashes: 1: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: bHKaPgyETQbPBpwhpj1r/RI4UX3CYkpULH0TUpIQHHc=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e5:13:4e:53:6b:ea:03:a5:2f:04:83:b9:63:5f:85:66:a2:96:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Oct 19 09:17:03 2025 GMT Not After : Oct 22 16:13:03 2025 GMT Subject: CN=965706DCB2F2DF6976CF10367001D081F270B897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:19:ad:86:81:0b:f3:b3:b2:9c:01:92:cb: 44:4d:00:87:91:52:1b:39:40:0b:c0:9b:e7:e3:1f: 9a:76:ab:c9:c9:b0:cd:c8:13:f5:cc:30:a9:d2:74: da:f5:6a:67:b9:c7:6b:5c:82:a6:e9:d4:bb:be:ee: d4:15:9f:38:b3:17:fa:d4:a9:64:31:2e:0e:f9:68: b1:ea:fd:78:e1:5e:d6:c5:ae:4f:de:56:23:14:31: de:e2:04:73:7a:0a:cd:ca:47:bc:0d:47:6c:f0:f7: fb:1d:4b:39:7b:56:fd:42:6c:2f:af:c6:d8:73:19: cd:b9:d2:a4:a3:28:00:5b:54:d4:17:09:de:12:5a: 04:5d:79:ae:9c:10:df:98:1f:25:8b:95:ed:3c:7b: 7d:5d:21:b5:38:94:04:5d:ea:a5:c1:64:4b:b0:73: 68:e6:d3:f0:04:79:c2:f7:98:13:c3:92:2a:f0:9e: f3:95:c7:71:ce:e8:65:81:f5:d4:d1:62:1d:47:a9: 6d:ac:ca:60:10:6e:a4:4b:11:b3:d0:bb:91:3a:6d: 64:22:cd:2d:23:51:9f:47:ad:6a:c6:27:37:f4:ba: f5:61:93:bd:99:11:73:7f:16:2e:6d:9c:2b:aa:51: 95:51:a6:93:f5:f4:0c:e7:d5:c3:e1:e7:b9:0e:de: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:57:06:DC:B2:F2:DF:69:76:CF:10:36:70:01:D0:81:F2:70:B8:97 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ed:68:81:f1:bf:8d:9b:59:b4:19:c4:b0:0a:0c:f9:78:07: c7:00:35:91:4e:ab:44:9e:11:79:b0:ed:eb:da:e8:6b:61:d7: f2:69:bc:3d:84:8b:f8:d8:5b:24:ef:41:4a:bf:16:c6:19:36: 6b:72:46:41:5f:35:ca:90:d0:c2:cf:7d:6e:fd:93:b7:89:24: b2:dd:59:58:9c:61:cb:25:3b:9a:c9:35:70:78:76:a4:48:e0: 5b:d3:a6:00:12:0d:2e:f5:5e:05:67:74:4f:de:8e:a4:5d:13: 2c:42:b3:79:09:c3:bf:e9:cb:15:01:71:75:e2:30:84:09:a3: a9:9e:9d:79:07:21:96:53:db:09:7c:e5:c8:03:c1:27:a9:20: 76:45:01:c3:ab:b7:75:de:2b:4d:ac:90:f3:98:94:9c:b0:0c: b7:d1:6d:61:a4:5f:bf:75:e2:01:dc:33:55:b3:99:eb:ba:f7: c7:8f:ab:4e:0d:09:02:5f:0d:d9:99:40:80:ed:41:91:19:d9: 3e:f3:f7:04:83:fa:7e:7e:2f:6c:bc:6c:55:80:ad:e3:c4:c2: 15:39:91:0e:82:a1:f6:a0:24:50:0f:c7:b6:50:90:f7:53:ac: b1:9c:09:a9:c0:a7:fa:a9:9c:91:bf:f9:81:68:42:c6:9a:42: c3:72:2a:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeUTTlNr6gOlLwSDuWNfhWailuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTEwMTkwOTE3MDNaFw0yNTEwMjIxNjEzMDNaMDMxMTAvBgNV BAMTKDk2NTcwNkRDQjJGMkRGNjk3NkNGMTAzNjcwMDFEMDgxRjI3MEI4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+hmthoEL87OynAGSy0RNAIeR Uhs5QAvAm+fjH5p2q8nJsM3IE/XMMKnSdNr1ame5x2tcgqbp1Lu+7tQVnzizF/rU qWQxLg75aLHq/XjhXtbFrk/eViMUMd7iBHN6Cs3KR7wNR2zw9/sdSzl7Vv1CbC+v xthzGc250qSjKABbVNQXCd4SWgRdea6cEN+YHyWLle08e31dIbU4lARd6qXBZEuw c2jm0/AEecL3mBPDkirwnvOVx3HO6GWB9dTRYh1HqW2symAQbqRLEbPQu5E6bWQi zS0jUZ9HrWrGJzf0uvVhk72ZEXN/Fi5tnCuqUZVRppP19Azn1cPh57kO3lJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUllcG3LLy32l2zxA2cAHQgfJwuJcwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/taIHxv42bWbQZxLAKDPl4B8cANZFOq0Se EXmw7eva6Gth1/JpvD2Ei/jYWyTvQUq/FsYZNmtyRkFfNcqQ0MLPfW79k7eJJLLd WVicYcslO5rJNXB4dqRI4FvTpgASDS71XgVndE/ejqRdEyxCs3kJw7/pyxUBcXXi MIQJo6menXkHIZZT2wl85cgDwSepIHZFAcOrt3XeK02skPOYlJywDLfRbWGkX791 4gHcM1Wzmeu698ePq04NCQJfDdmZQIDtQZEZ2T7z9wSD+n5+L2y8bFWArePEwhU5 kQ6CofagJFAPx7ZQkPdTrLGcCanAp/qpnJG/+YFoQsaaQsNyKmE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:08 2025 by rpki-client