$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: IPm0uj1mxVyRatqOXWLSbjYojlrcUKGiLhSrr+W079g= Subject key identifier: F2:18:14:1C:DC:0A:48:D5:41:CA:6E:C7:D9:34:83:CD:1D:9A:B4:85 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 4A29CDEF35455D784187DFDF0E934C7F181E54E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: DE Signing time: Mon 20 Oct 2025 17:41:24 +0000 Manifest this update: Mon 20 Oct 2025 17:36:24 +0000 Manifest next update: Thu 23 Oct 2025 18:40:24 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: ZpM23S0QedCeP3ltiVnmi2LPfjo5UXURoaIa/FVFpMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:29:cd:ef:35:45:5d:78:41:87:df:df:0e:93:4c:7f:18:1e:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Oct 20 17:36:24 2025 GMT Not After : Oct 23 18:40:24 2025 GMT Subject: CN=F218141CDC0A48D541CA6EC7D93483CD1D9AB485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:3f:2e:50:cf:11:e2:35:b5:e3:76:61:a1: 64:55:cc:22:40:b4:3a:75:83:14:8c:78:d3:4d:47: 5c:db:03:64:3a:b1:7f:e5:25:2c:56:d1:f0:04:5e: af:c4:57:e1:09:c3:96:02:74:97:f3:5e:e5:4c:55: f2:88:f6:5f:7c:5c:02:79:96:e7:4f:e1:b7:fc:e4: eb:78:8a:3d:a3:e3:b4:03:f4:38:b7:f4:88:72:b8: 97:c3:96:bc:86:08:33:1c:97:2b:70:d7:6b:b5:34: a8:da:16:64:7f:ed:bc:9d:1d:dc:d8:8c:8d:38:f9: 0a:fd:d3:d3:6f:7f:50:2e:29:e1:7f:c8:3f:4c:b8: 00:58:59:0c:d9:98:a1:89:7c:67:c9:0b:7b:2d:ea: 4f:6d:13:d3:8a:cf:05:76:ec:9a:f0:59:a8:1a:8a: e1:50:ff:ec:9b:8c:58:a5:0c:87:aa:73:c2:e0:9a: 31:15:ef:9d:83:b7:61:01:0e:a0:0f:cd:07:65:f2: 4e:92:8f:6c:b2:38:33:00:98:50:ae:82:8d:a3:aa: 53:58:1b:bf:fa:40:4c:49:2c:92:30:31:0b:21:9f: ed:99:76:be:58:2b:4c:f6:99:c9:ff:6b:01:a8:8a: 66:21:23:95:0a:31:92:f6:68:31:8e:fd:4f:81:5e: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:18:14:1C:DC:0A:48:D5:41:CA:6E:C7:D9:34:83:CD:1D:9A:B4:85 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c1:14:9f:24:9a:d4:32:07:ba:0c:4f:d5:03:8b:77:a7:fe: 7d:9d:dd:d5:59:5a:31:fe:ab:7e:9d:29:8f:f8:a3:03:fc:cf: 35:78:22:bb:9a:f7:50:81:f7:e7:40:04:13:3d:d3:63:a8:0d: 98:73:2d:5d:c0:f1:b9:c0:76:be:74:83:1f:8c:11:f1:ba:a2: fa:21:51:95:3b:98:b4:0f:02:cb:de:51:5c:14:49:b5:fe:fc: 30:21:c7:a6:57:28:9a:6f:d2:72:3f:b6:2d:67:64:f8:0c:26: fa:6a:64:20:e2:f2:ef:59:d1:dc:0c:83:9f:e3:32:97:0e:f2: ec:3c:23:72:f0:e2:50:98:cc:9b:cc:0b:25:a3:3a:8e:21:40: e8:2d:8d:48:c0:cb:5c:df:23:ed:a3:14:9f:bd:84:04:56:c8: 37:67:88:de:15:cb:9e:3d:60:23:b0:07:85:c7:b9:8e:48:63: a0:8d:b7:e2:aa:4c:32:61:91:b7:63:8e:17:58:4a:8a:42:10: 0a:62:d6:39:be:6f:a3:04:1f:9d:bb:bb:9f:d6:34:19:2e:65: e0:36:77:0f:c4:21:1f:e3:e2:42:35:20:73:87:ef:23:b7:df: c3:15:be:eb:09:a2:be:12:1f:8a:02:dc:32:d1:fc:0c:ea:8d: 41:3b:e0:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSinN7zVFXXhBh9/fDpNMfxgeVOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTEwMjAxNzM2MjRaFw0yNTEwMjMxODQwMjRaMDMxMTAvBgNV BAMTKEYyMTgxNDFDREMwQTQ4RDU0MUNBNkVDN0Q5MzQ4M0NEMUQ5QUI0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/j8uUM8R4jW143ZhoWRVzCJA tDp1gxSMeNNNR1zbA2Q6sX/lJSxW0fAEXq/EV+EJw5YCdJfzXuVMVfKI9l98XAJ5 ludP4bf85Ot4ij2j47QD9Di39IhyuJfDlryGCDMclytw12u1NKjaFmR/7bydHdzY jI04+Qr909Nvf1AuKeF/yD9MuABYWQzZmKGJfGfJC3st6k9tE9OKzwV27JrwWaga iuFQ/+ybjFilDIeqc8LgmjEV752Dt2EBDqAPzQdl8k6Sj2yyODMAmFCugo2jqlNY G7/6QExJLJIwMQshn+2Zdr5YK0z2mcn/awGoimYhI5UKMZL2aDGO/U+BXlQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hgUHNwKSNVBym7H2TSDzR2atIUwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7BFJ8kmtQyB7oMT9UDi3en/n2d3dVZWjH+ q36dKY/4owP8zzV4Irua91CB9+dABBM902OoDZhzLV3A8bnAdr50gx+MEfG6ovoh UZU7mLQPAsveUVwUSbX+/DAhx6ZXKJpv0nI/ti1nZPgMJvpqZCDi8u9Z0dwMg5/j MpcO8uw8I3Lw4lCYzJvMCyWjOo4hQOgtjUjAy1zfI+2jFJ+9hARWyDdniN4Vy549 YCOwB4XHuY5IY6CNt+KqTDJhkbdjjhdYSopCEApi1jm+b6MEH527u5/WNBkuZeA2 dw/EIR/j4kI1IHOH7yO338MVvusJor4SH4oC3DLR/AzqjUE74AU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:51:26 2025 by rpki-client