$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: 8YRkOXQ1DXNkPy1YIliR7IVI/e4j/sLo56iaq4+oq/4= Subject key identifier: 74:36:65:FA:29:96:49:15:28:35:25:3D:B6:8E:56:30:CF:C9:C7:E5 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 5126A00C07944FC4E680A5D2AC943F673E74F1FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 97 Signing time: Wed 14 May 2025 15:51:21 +0000 Manifest this update: Wed 14 May 2025 15:46:21 +0000 Manifest next update: Sat 17 May 2025 19:42:21 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: cMmskAetUhGziFx58T1Tj2CUeClkOqiuGew7jrnHptM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:26:a0:0c:07:94:4f:c4:e6:80:a5:d2:ac:94:3f:67:3e:74:f1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: May 14 15:46:21 2025 GMT Not After : May 17 19:42:21 2025 GMT Subject: CN=743665FA299649152835253DB68E5630CFC9C7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:b1:cd:65:82:9e:de:7f:a9:05:bd:30:0c: b5:a8:6d:f2:16:e5:3a:c0:74:e6:d9:78:c3:38:30: 9d:df:84:64:6f:d8:96:88:45:63:68:fd:86:30:96: b3:8b:6b:7d:ed:f4:00:97:e9:4a:e9:4c:e6:98:69: eb:e4:8c:fd:b6:8d:9c:08:b1:21:9e:31:39:a7:a5: cf:34:2f:9a:04:b9:36:d0:f7:67:8b:8b:8c:db:e0: b0:8a:82:e0:a3:05:a8:0a:93:44:04:84:0c:3f:88: 5b:87:b4:f8:cd:87:f5:c2:62:2b:fd:df:ee:98:0c: 73:02:91:3e:96:8d:29:09:8d:a6:59:c3:f0:69:57: c3:96:ed:70:ba:d6:ee:54:0e:4b:25:64:81:4e:4d: aa:b8:cc:69:1b:82:bd:68:58:de:11:d1:c0:c3:86: 98:d9:51:89:21:94:27:67:e7:1d:ba:c2:6c:b2:87: e9:5d:e0:bb:3c:74:88:1a:39:c5:1c:fc:a2:5b:1d: 04:e3:de:bb:06:4b:cf:18:4c:0f:66:bd:a6:5f:45: f4:06:14:8d:25:6e:80:10:48:e8:08:5b:9c:c6:3a: 5b:93:63:71:d4:5f:72:a3:1e:ed:7a:ca:c0:3f:6b: 61:f2:af:f1:61:e7:12:7a:82:bf:9a:48:65:78:4a: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:36:65:FA:29:96:49:15:28:35:25:3D:B6:8E:56:30:CF:C9:C7:E5 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3c:09:a8:e6:55:8e:12:15:0e:7e:1f:80:0f:dd:57:17:a8: f9:89:13:2a:54:6e:43:f0:7e:9c:ed:87:43:c5:5f:a0:7b:be: 4f:6d:e5:3f:42:f2:6d:55:55:82:06:f6:1d:49:fb:a6:41:47: 96:63:57:29:01:c0:c2:80:e4:18:cd:6c:99:f3:bf:c9:ba:55: b0:ba:7f:c6:c2:7e:a9:34:ef:9b:8a:cc:3d:31:8b:09:d1:fa: 07:a6:c3:cc:8f:2b:ac:97:f2:e8:e8:54:e3:76:eb:c1:4d:ce: 84:be:fc:40:2d:33:44:ff:3f:d9:d8:8c:dc:c1:b2:f8:08:97: 7e:7e:8a:6c:17:e1:98:58:b2:84:c2:8b:cc:3d:fa:fe:c4:04: ba:36:35:4d:54:bd:59:73:06:5a:bd:63:2e:84:39:82:4b:4b: 7e:d8:ab:7e:26:4f:f1:07:7f:ba:88:94:6e:e7:13:fe:d2:9c: bc:e5:6a:03:61:d5:9f:36:b9:2a:0a:fe:df:6d:3c:56:93:04: ff:34:f5:dc:c3:1d:ea:30:23:1e:d6:e2:6c:eb:48:b0:d2:5d: b3:75:d9:b3:c7:5d:33:60:44:09:da:5c:c3:c3:f4:08:c4:b5: 15:8d:b0:9b:9b:1f:40:93:0c:6e:3e:0b:f2:b9:d4:73:10:ee: 27:5f:f5:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSagDAeUT8TmgKXSrJQ/Zz508fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA1MTQxNTQ2MjFaFw0yNTA1MTcxOTQyMjFaMDMxMTAvBgNV BAMTKDc0MzY2NUZBMjk5NjQ5MTUyODM1MjUzREI2OEU1NjMwQ0ZDOUM3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjLHNZYKe3n+pBb0wDLWobfIW 5TrAdObZeMM4MJ3fhGRv2JaIRWNo/YYwlrOLa33t9ACX6UrpTOaYaevkjP22jZwI sSGeMTmnpc80L5oEuTbQ92eLi4zb4LCKguCjBagKk0QEhAw/iFuHtPjNh/XCYiv9 3+6YDHMCkT6WjSkJjaZZw/BpV8OW7XC61u5UDkslZIFOTaq4zGkbgr1oWN4R0cDD hpjZUYkhlCdn5x26wmyyh+ld4Ls8dIgaOcUc/KJbHQTj3rsGS88YTA9mvaZfRfQG FI0lboAQSOgIW5zGOluTY3HUX3KjHu16ysA/a2Hyr/Fh5xJ6gr+aSGV4SkMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDZl+imWSRUoNSU9to5WMM/Jx+UwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI8CajmVY4SFQ5+H4AP3VcXqPmJEypUbkPw fpzth0PFX6B7vk9t5T9C8m1VVYIG9h1J+6ZBR5ZjVykBwMKA5BjNbJnzv8m6VbC6 f8bCfqk075uKzD0xiwnR+gemw8yPK6yX8ujoVON268FNzoS+/EAtM0T/P9nYjNzB svgIl35+imwX4ZhYsoTCi8w9+v7EBLo2NU1UvVlzBlq9Yy6EOYJLS37Yq34mT/EH f7qIlG7nE/7SnLzlagNh1Z82uSoK/t9tPFaTBP809dzDHeowIx7W4mzrSLDSXbN1 2bPHXTNgRAnaXMPD9AjEtRWNsJubH0CTDG4+C/K51HMQ7idf9eI= -----END CERTIFICATE-----Generated at Thu May 15 05:40:06 2025 by rpki-client