$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: 6CYqBdFLJrlVUw0dYaM+ilQSR7DKBllIY5HWvyglPFI= Subject key identifier: 77:BC:28:EB:4E:E3:8E:E2:2A:9F:7A:17:C6:81:FC:81:EE:EF:97:D7 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 123F32D7B04FE9F9A32A10B79D6DDED94997EA0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0123 Signing time: Mon 20 Oct 2025 04:41:42 +0000 Manifest this update: Mon 20 Oct 2025 04:36:41 +0000 Manifest next update: Thu 23 Oct 2025 12:25:41 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: AspRF1s2O/hwdARajA5vkzf7cKwa6aVPO3gH8TSrOyc=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3f:32:d7:b0:4f:e9:f9:a3:2a:10:b7:9d:6d:de:d9:49:97:ea:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Oct 20 04:36:41 2025 GMT Not After : Oct 23 12:25:41 2025 GMT Subject: CN=77BC28EB4EE38EE22A9F7A17C681FC81EEEF97D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:a0:4a:fa:f9:a1:72:a3:06:7e:ff:6e:be: 18:52:b3:c1:eb:d0:6c:d8:47:88:4d:48:a2:59:43: 18:66:b2:78:ff:89:f1:5e:33:ae:21:a9:7b:3a:b0: 42:ca:eb:4d:2f:54:a2:46:19:22:8d:5e:44:25:70: 25:f5:49:a1:3c:1c:93:d4:0c:bb:d0:46:ba:2c:fd: e1:64:18:f8:3b:af:ab:4a:36:32:9a:21:ba:92:dd: 62:8b:96:5f:62:f9:9d:f5:4b:12:cd:5c:c8:c4:56: 75:21:0d:de:d2:a3:e3:45:6a:93:a9:42:a6:5c:e8: 68:91:b0:f6:5a:24:f7:78:16:ca:4c:3e:f2:61:9d: 4e:ac:23:cb:67:a4:e5:b3:68:63:71:89:6d:9d:ef: de:5e:dc:79:8e:63:14:ae:a9:84:07:91:80:58:93: 16:91:93:f2:e7:42:f0:a6:6e:e9:40:80:58:47:12: 69:fa:44:b2:ca:4a:d7:89:24:43:b6:07:eb:51:6f: 9d:1d:36:c8:6e:93:e2:85:62:54:c7:1d:94:7a:19: 72:97:e6:c8:dc:a2:b8:19:23:46:03:3a:fd:4e:e8: 2f:f4:5a:a0:ca:1c:11:6b:15:e1:e3:bb:5b:c4:29: ea:3d:91:a5:e4:c1:13:15:54:3e:75:93:9b:ae:4a: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:28:EB:4E:E3:8E:E2:2A:9F:7A:17:C6:81:FC:81:EE:EF:97:D7 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7f:e3:16:37:90:c3:d6:1f:fb:47:a3:74:f0:e5:10:2b:82: 36:dd:16:e1:70:be:54:2c:d6:05:12:ba:a2:e2:58:9c:9a:0d: 27:9b:2c:bc:ee:fb:24:d6:2b:ed:6e:d0:ae:00:33:8b:16:c4: 03:14:16:7b:0e:9c:55:4a:30:16:31:c6:b0:f2:60:f4:86:b2: 5d:a5:59:13:6a:64:a2:2c:80:21:dd:7e:c1:c9:a1:86:87:78: 42:4b:cf:55:e2:0a:e2:45:30:5f:2d:07:79:c2:72:8f:24:9c: b3:02:67:49:0e:64:eb:9c:0c:11:b9:e2:66:6d:97:fc:7a:d8: ba:33:0d:b1:66:a5:2a:83:85:e4:20:b3:2f:6f:ba:77:a3:6e: 0a:d7:a7:ae:6c:78:91:f2:63:98:58:8d:80:59:f5:c6:af:82: d0:d6:dd:55:c4:4b:65:36:81:2a:58:24:d5:ec:ca:13:af:e4: ff:06:a6:cd:02:41:73:6e:9a:14:06:b3:05:57:f3:4d:f3:b7: 13:e7:15:1b:ee:3f:01:6b:79:12:b1:05:9e:59:d3:b0:94:c7: 03:34:5d:39:dc:5f:94:dd:5b:94:1d:5a:2d:69:34:53:b0:ec: cc:74:36:20:28:fe:1e:6c:46:38:d3:08:09:10:b0:1d:43:dd: de:e7:4b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEj8y17BP6fmjKhC3nW3e2UmX6gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTEwMjAwNDM2NDFaFw0yNTEwMjMxMjI1NDFaMDMxMTAvBgNV BAMTKDc3QkMyOEVCNEVFMzhFRTIyQTlGN0ExN0M2ODFGQzgxRUVFRjk3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/66BK+vmhcqMGfv9uvhhSs8Hr 0GzYR4hNSKJZQxhmsnj/ifFeM64hqXs6sELK600vVKJGGSKNXkQlcCX1SaE8HJPU DLvQRros/eFkGPg7r6tKNjKaIbqS3WKLll9i+Z31SxLNXMjEVnUhDd7So+NFapOp QqZc6GiRsPZaJPd4FspMPvJhnU6sI8tnpOWzaGNxiW2d795e3HmOYxSuqYQHkYBY kxaRk/LnQvCmbulAgFhHEmn6RLLKSteJJEO2B+tRb50dNshuk+KFYlTHHZR6GXKX 5sjcorgZI0YDOv1O6C/0WqDKHBFrFeHju1vEKeo9kaXkwRMVVD51k5uuSnsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7wo607jjuIqn3oXxoH8ge7vl9cwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFp/4xY3kMPWH/tHo3Tw5RArgjbdFuFwvlQs 1gUSuqLiWJyaDSebLLzu+yTWK+1u0K4AM4sWxAMUFnsOnFVKMBYxxrDyYPSGsl2l WRNqZKIsgCHdfsHJoYaHeEJLz1XiCuJFMF8tB3nCco8knLMCZ0kOZOucDBG54mZt l/x62LozDbFmpSqDheQgsy9vunejbgrXp65seJHyY5hYjYBZ9cavgtDW3VXES2U2 gSpYJNXsyhOv5P8Gps0CQXNumhQGswVX803ztxPnFRvuPwFreRKxBZ5Z07CUxwM0 XTncX5TdW5QdWi1pNFOw7Mx0NiAo/h5sRjjTCAkQsB1D3d7nS7M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:32 2025 by rpki-client