$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: P9Y7vFsnwEPbsgvyF+eskv4A4DypI+DtSvemP7YRSio= Subject key identifier: 8D:E7:A2:BD:91:49:DE:1F:34:80:4C:33:D9:C6:CF:E3:28:5F:3D:45 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 57D6EC95D67318E4A0F66D8EB5B8E722287AEBC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0109 Signing time: Fri 22 Aug 2025 22:01:43 +0000 Manifest this update: Fri 22 Aug 2025 21:56:43 +0000 Manifest next update: Mon 25 Aug 2025 22:50:43 +0000 Files and hashes: 1: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: YptCV9ORlq9+3sOZYDJvr+8vup2fI+RazbD40RDW2Vc=) 2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 05UZd4BWdi52DY97e7aLuT6iJ/2mROnvelwIkUa/Mu0=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: bSxzudI9OYvmZ5EdGZhQqubuN+mAmlNw8OprHgwvC2c=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: fCmuv22JKcQw5T0X5AWh4BcOe/zqqe61bniHVwvlRMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d6:ec:95:d6:73:18:e4:a0:f6:6d:8e:b5:b8:e7:22:28:7a:eb:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Aug 22 21:56:43 2025 GMT Not After : Aug 25 22:50:43 2025 GMT Subject: CN=8DE7A2BD9149DE1F34804C33D9C6CFE3285F3D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:e1:95:ad:b5:6e:b7:fd:63:6c:69:d8:26: c4:82:43:79:a2:19:51:10:3e:b7:2f:a2:ce:59:16: 8f:da:fe:22:9c:99:fa:90:79:c0:d4:d7:30:c1:92: 24:26:a2:25:07:24:4f:1e:8f:96:64:a3:38:34:b5: 72:05:cf:f2:17:41:9f:2e:76:52:72:71:f5:74:1c: e9:1e:0a:3e:70:13:0b:9a:72:30:4c:d1:85:dd:e8: ff:7f:c8:3e:42:72:e2:c4:d7:df:6c:98:7e:dc:48: 54:6a:28:26:ec:a5:9d:b1:a8:dd:e6:06:8e:fe:bb: a3:25:83:17:d6:41:96:bf:89:15:28:6d:37:af:e9: d9:09:6d:0f:67:ab:4a:1a:81:a4:0b:8c:8a:75:8f: db:f0:8e:4e:2e:f5:7a:ed:fc:15:1c:b9:a9:30:5b: 6d:46:e1:70:52:d5:a0:10:1a:10:f1:fa:30:54:47: 53:63:34:0f:cd:78:60:39:ef:00:33:13:46:59:38: d7:0e:31:c3:e1:c0:17:79:b9:bc:eb:9e:fe:51:d3: 44:03:dc:fe:f9:16:da:7e:f9:05:0e:3a:b4:5b:92: 50:3e:4f:08:9a:7b:e4:1f:27:cd:e5:54:19:b1:dc: 12:8b:4e:de:07:28:d0:e4:c8:9d:1a:09:bc:a3:6c: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E7:A2:BD:91:49:DE:1F:34:80:4C:33:D9:C6:CF:E3:28:5F:3D:45 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:eb:3a:99:84:c2:ca:36:08:b9:9d:8e:02:d3:e4:7a:a1:e5: 38:35:60:f1:86:fd:18:4f:59:d6:af:1b:3e:df:81:f6:90:ea: ee:3a:90:70:38:24:cf:22:1d:06:f8:79:28:d0:f4:a5:b9:78: 6a:69:70:a9:43:0b:8a:b8:53:d7:5e:97:89:83:f1:e3:ed:b8: 33:9c:21:1f:83:70:2d:29:18:d2:2f:70:d9:9d:48:63:3b:ca: db:16:74:d6:d9:c4:13:34:3e:a1:17:b2:8e:d4:5f:49:64:c3: b7:a0:08:0a:56:ab:c1:5b:9b:92:dc:5b:85:31:cf:a2:83:3c: d6:68:75:a2:91:b4:90:cf:45:2f:78:37:a6:b7:54:13:b0:7a: e5:eb:75:5d:c3:f4:f9:58:48:f1:37:ec:88:99:73:99:3d:31: 81:0b:28:52:41:33:4c:a7:fe:5e:44:e7:f9:45:3b:f5:95:7f: 96:c2:bc:38:69:2b:82:2f:34:6e:29:c2:e3:57:62:3a:53:4d: 99:0b:08:0f:f5:25:7c:e4:7a:b8:3e:51:08:a3:e2:ea:b2:7e: 83:59:86:e2:89:f7:6f:ea:ba:8c:51:a0:e8:eb:97:a6:ae:d5: 29:c7:5f:98:bb:de:f7:83:9b:9c:d1:8b:83:81:68:b0:43:f7: ce:ed:99:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9bsldZzGOSg9m2OtbjnIih668QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNTA4MjIyMTU2NDNaFw0yNTA4MjUyMjUwNDNaMDMxMTAvBgNV BAMTKDhERTdBMkJEOTE0OURFMUYzNDgwNEMzM0Q5QzZDRkUzMjg1RjNENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYuGVrbVut/1jbGnYJsSCQ3mi GVEQPrcvos5ZFo/a/iKcmfqQecDU1zDBkiQmoiUHJE8ej5Zkozg0tXIFz/IXQZ8u dlJycfV0HOkeCj5wEwuacjBM0YXd6P9/yD5CcuLE199smH7cSFRqKCbspZ2xqN3m Bo7+u6MlgxfWQZa/iRUobTev6dkJbQ9nq0oagaQLjIp1j9vwjk4u9Xrt/BUcuakw W21G4XBS1aAQGhDx+jBUR1NjNA/NeGA57wAzE0ZZONcOMcPhwBd5ubzrnv5R00QD 3P75Ftp++QUOOrRbklA+Twiae+QfJ83lVBmx3BKLTt4HKNDkyJ0aCbyjbHfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjeeivZFJ3h80gEwz2cbP4yhfPUUwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfrOpmEwso2CLmdjgLT5Hqh5Tg1YPGG/RhP WdavGz7fgfaQ6u46kHA4JM8iHQb4eSjQ9KW5eGppcKlDC4q4U9del4mD8ePtuDOc IR+DcC0pGNIvcNmdSGM7ytsWdNbZxBM0PqEXso7UX0lkw7egCApWq8Fbm5LcW4Ux z6KDPNZodaKRtJDPRS94N6a3VBOweuXrdV3D9PlYSPE37IiZc5k9MYELKFJBM0yn /l5E5/lFO/WVf5bCvDhpK4IvNG4pwuNXYjpTTZkLCA/1JXzkerg+UQij4uqyfoNZ huKJ92/quoxRoOjrl6au1SnHX5i73veDm5zRi4OBaLBD987tmSw= -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:23 2025 by rpki-client