$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: NXHjMu+rcAh+CvvBXwOWIvAnfMtoF+j1EZP/Fa/qkwc= Subject key identifier: 26:5A:E3:45:10:81:16:C3:5C:ED:68:95:88:20:8C:F1:94:04:FA:79 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 33947236B7717EEAC6B4DAA44AB9E952586280CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: C4 Signing time: Sat 23 Aug 2025 09:21:22 +0000 Manifest this update: Sat 23 Aug 2025 09:16:22 +0000 Manifest next update: Tue 26 Aug 2025 15:22:22 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: n7DgcSBd1ordHUlp2v2vc8ZnqadR7iY31Pe9KSWxy+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:94:72:36:b7:71:7e:ea:c6:b4:da:a4:4a:b9:e9:52:58:62:80:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Aug 23 09:16:22 2025 GMT Not After : Aug 26 15:22:22 2025 GMT Subject: CN=265AE345108116C35CED689588208CF19404FA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:8e:36:65:20:d4:38:8f:97:82:10:71:81: fa:fd:42:17:d7:ee:59:e1:1f:66:f7:17:12:1a:56: 62:9e:ec:b4:24:80:92:62:9d:b2:48:a8:7b:5d:14: 1f:a9:8c:6c:38:86:63:8f:28:c0:5f:1d:32:a3:3d: 7f:86:cf:70:0a:d3:d1:81:36:9e:96:b1:26:6c:f9: b1:f5:cc:a6:9b:bb:21:a2:8e:92:11:09:b7:5e:d1: 88:c5:f6:bd:57:7b:52:a4:ca:62:ab:69:7c:97:2d: c9:bb:9f:12:11:c2:34:dd:0c:d8:ce:3b:08:b2:d4: 03:3a:28:07:3c:f3:7b:33:21:4e:07:df:07:43:29: 8c:db:94:c8:5b:cc:a7:09:79:24:51:e1:dd:3c:72: 1b:31:cd:dd:23:8e:96:14:bb:f1:a9:62:ca:d4:58: 81:41:6e:49:b5:e9:df:ee:67:04:9f:84:b8:46:db: bc:bd:a1:5c:76:23:b0:83:1e:dd:13:1e:e7:7c:80: e0:2c:65:c7:53:ff:e7:09:7d:a4:e9:a8:49:ce:d9: 14:4c:67:d0:d0:5f:53:d5:ec:20:90:63:0e:d0:6f: 4a:ec:c5:d0:76:b5:d4:54:d1:d5:c7:e4:38:ea:33: 57:f1:c5:cc:b5:66:6b:22:d6:5d:d4:49:44:65:dd: cf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5A:E3:45:10:81:16:C3:5C:ED:68:95:88:20:8C:F1:94:04:FA:79 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9f:7d:da:84:94:d5:e8:5e:05:e0:00:53:4f:91:86:ad:8b: 09:a8:b1:9a:d6:2f:52:10:17:41:ef:2e:bf:44:ed:9e:47:6b: d9:c4:61:53:3b:e5:8e:fa:f7:fc:37:48:6e:33:5f:ee:25:8d: 41:81:d4:51:6a:71:84:68:1f:c5:7f:98:f7:9d:cc:ef:6c:88: 21:e8:ec:80:a4:45:a0:c3:f3:d3:d3:40:91:2b:6d:ac:f3:cd: dc:61:b6:95:d9:9e:06:55:f2:2d:b8:fe:0e:ef:99:26:c8:b0: 58:b8:05:8b:fb:95:1a:0c:92:cc:2f:77:9d:d4:5a:be:27:bd: be:a7:b2:dc:4b:77:3d:ac:9d:cc:43:54:ef:55:b6:45:81:2d: c3:17:dc:79:5a:d4:d5:61:8b:6e:9e:88:ad:c7:c6:47:30:62: 1a:72:04:70:05:94:2f:55:53:7d:19:78:5e:84:c5:2c:f1:0d: d8:87:59:01:22:2d:8e:d4:d6:6d:fb:8d:ee:12:e0:e2:b8:43: c4:be:50:69:6e:44:7d:65:eb:b3:ab:06:7b:63:06:b9:b7:ef: 44:73:69:48:36:cb:5d:69:9f:f9:a3:d4:72:22:eb:a8:ac:7b: e7:3a:7d:c2:10:f0:fb:66:c4:57:fe:5c:87:ba:58:36:4a:67: 2c:49:93:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5RyNrdxfurGtNqkSrnpUlhigMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA4MjMwOTE2MjJaFw0yNTA4MjYxNTIyMjJaMDMxMTAvBgNV BAMTKDI2NUFFMzQ1MTA4MTE2QzM1Q0VENjg5NTg4MjA4Q0YxOTQwNEZBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNY42ZSDUOI+XghBxgfr9QhfX 7lnhH2b3FxIaVmKe7LQkgJJinbJIqHtdFB+pjGw4hmOPKMBfHTKjPX+Gz3AK09GB Np6WsSZs+bH1zKabuyGijpIRCbde0YjF9r1Xe1KkymKraXyXLcm7nxIRwjTdDNjO Owiy1AM6KAc883szIU4H3wdDKYzblMhbzKcJeSRR4d08chsxzd0jjpYUu/GpYsrU WIFBbkm16d/uZwSfhLhG27y9oVx2I7CDHt0THud8gOAsZcdT/+cJfaTpqEnO2RRM Z9DQX1PV7CCQYw7Qb0rsxdB2tdRU0dXH5DjqM1fxxcy1Zmsi1l3USURl3c8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJlrjRRCBFsNc7WiViCCM8ZQE+nkwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISffdqElNXoXgXgAFNPkYatiwmosZrWL1IQ F0HvLr9E7Z5Ha9nEYVM75Y769/w3SG4zX+4ljUGB1FFqcYRoH8V/mPedzO9siCHo 7ICkRaDD89PTQJErbazzzdxhtpXZngZV8i24/g7vmSbIsFi4BYv7lRoMkswvd53U Wr4nvb6nstxLdz2sncxDVO9VtkWBLcMX3Hla1NVhi26eiK3HxkcwYhpyBHAFlC9V U30ZeF6ExSzxDdiHWQEiLY7U1m37je4S4OK4Q8S+UGluRH1l67OrBntjBrm370Rz aUg2y11pn/mj1HIi66ise+c6fcIQ8PtmxFf+XIe6WDZKZyxJk4k= -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:18 2025 by rpki-client