$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: ujltU58ehvFofN4kRTyHibe3BgCAySaFUgsfIgMMYSk= Subject key identifier: 59:2B:CC:94:7E:88:F0:6E:B7:2D:C9:49:C6:82:9A:3F:F7:FA:D5:87 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 2F3C019A0A44AF5F6A49A58193F7B785618AF21E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 02F1 Signing time: Thu 21 Aug 2025 06:52:23 +0000 Manifest this update: Thu 21 Aug 2025 06:47:23 +0000 Manifest next update: Sun 24 Aug 2025 16:49:23 +0000 Files and hashes: 1: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 2: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 3: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 4: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 5: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 6: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 7: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 8: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 9: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 10: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) 11: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: olV2xsWyFosrh+zbABu68z46+kIGX5q5j6y9/fPmp2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3c:01:9a:0a:44:af:5f:6a:49:a5:81:93:f7:b7:85:61:8a:f2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Aug 21 06:47:23 2025 GMT Not After : Aug 24 16:49:23 2025 GMT Subject: CN=592BCC947E88F06EB72DC949C6829A3FF7FAD587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:9d:50:b2:32:14:89:35:51:d0:ee:a0:42: 97:17:cc:52:8b:1d:1f:62:bd:4e:59:86:47:95:04: ac:16:7d:e4:5c:42:21:b4:36:94:bb:28:07:1e:1f: d9:b1:83:56:13:b4:d9:36:46:25:67:eb:ea:5d:99: 75:43:1d:ad:a7:d4:dd:02:74:e9:e8:b8:c6:e9:24: c5:3b:61:f2:03:2f:02:0b:fd:cb:c3:b9:9d:85:d7: c3:50:89:69:e8:a5:aa:02:af:84:2e:3b:7e:36:f4: c6:ee:11:22:42:fc:ee:ee:fc:45:e5:8c:25:2b:68: b8:ba:b7:28:5d:d2:be:49:f5:99:d0:31:42:19:29: 06:cb:0b:2a:cb:e3:43:e3:05:3b:4a:89:c0:ae:b3: 9f:57:34:51:92:d3:87:0e:65:9f:6c:7f:7e:00:bd: 8f:f0:57:04:a4:6f:83:4f:ad:33:8c:1f:a8:05:c0: d6:d6:b0:a9:56:37:ca:9a:25:61:70:2b:f4:e7:8b: bd:00:a9:bc:ef:4c:40:37:a0:d5:81:df:e7:e0:55: 18:85:18:ce:48:7c:e2:95:fd:06:13:ed:04:1c:ca: 2c:28:46:af:23:ca:59:f0:9f:45:73:99:a3:0c:91: b4:ff:d9:83:27:78:1b:5d:1c:d4:06:0c:19:c2:42: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:CC:94:7E:88:F0:6E:B7:2D:C9:49:C6:82:9A:3F:F7:FA:D5:87 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b4:f0:ca:19:1c:27:0a:e8:72:42:04:e4:29:a8:12:82:d3: 55:4d:47:d1:37:90:58:26:97:c6:03:e9:5c:b0:8d:89:80:49: 7d:67:d5:31:99:11:75:47:5b:2a:c6:ed:f1:f2:a0:4e:d9:ee: 1d:a0:34:c8:31:97:43:e3:80:cd:ff:ff:d1:5c:25:cd:3d:1b: 28:0b:76:9e:8d:80:50:b6:5b:8b:10:07:ba:e1:9e:21:9f:f5: 3d:03:e2:91:85:10:ae:f3:42:b1:d7:da:5b:5d:58:50:db:59: 10:10:b1:d8:6e:ed:02:c1:b3:4e:53:50:2a:2f:f4:35:46:00: 32:ca:4c:38:25:4b:4e:ca:a1:94:bd:4c:f7:c0:11:7e:e7:5f: 92:a4:a2:6d:aa:75:f7:93:42:6f:36:69:e0:9e:86:5c:50:d4: 3f:72:d5:78:51:b5:b6:0d:c6:85:17:c3:41:0e:e9:1d:ed:58: 97:54:2c:11:bb:d4:3b:c0:fc:ff:24:31:1f:eb:f5:32:6e:4d: d6:23:78:ea:8a:25:97:bc:82:a8:66:cf:a3:6a:ce:3b:23:9c: 68:95:00:d9:6a:53:17:3a:2f:58:e2:fc:4b:11:9e:c9:76:ca: c7:d6:85:0c:af:d4:27:e0:f4:b0:c1:c3:a7:a9:e7:a7:89:46: b0:92:a4:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzwBmgpEr19qSaWBk/e3hWGK8h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNTA4MjEwNjQ3MjNaFw0yNTA4MjQxNjQ5MjNaMDMxMTAvBgNV BAMTKDU5MkJDQzk0N0U4OEYwNkVCNzJEQzk0OUM2ODI5QTNGRjdGQUQ1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS151QsjIUiTVR0O6gQpcXzFKL HR9ivU5ZhkeVBKwWfeRcQiG0NpS7KAceH9mxg1YTtNk2RiVn6+pdmXVDHa2n1N0C dOnouMbpJMU7YfIDLwIL/cvDuZ2F18NQiWnopaoCr4QuO3429MbuESJC/O7u/EXl jCUraLi6tyhd0r5J9ZnQMUIZKQbLCyrL40PjBTtKicCus59XNFGS04cOZZ9sf34A vY/wVwSkb4NPrTOMH6gFwNbWsKlWN8qaJWFwK/Tni70AqbzvTEA3oNWB3+fgVRiF GM5IfOKV/QYT7QQcyiwoRq8jylnwn0VzmaMMkbT/2YMneBtdHNQGDBnCQqyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSvMlH6I8G63LclJxoKaP/f61YcwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK08MoZHCcK6HJCBOQpqBKC01VNR9E3kFgm l8YD6VywjYmASX1n1TGZEXVHWyrG7fHyoE7Z7h2gNMgxl0PjgM3//9FcJc09GygL dp6NgFC2W4sQB7rhniGf9T0D4pGFEK7zQrHX2ltdWFDbWRAQsdhu7QLBs05TUCov 9DVGADLKTDglS07KoZS9TPfAEX7nX5Kkom2qdfeTQm82aeCehlxQ1D9y1XhRtbYN xoUXw0EO6R3tWJdULBG71DvA/P8kMR/r9TJuTdYjeOqKJZe8gqhmz6NqzjsjnGiV ANlqUxc6L1ji/EsRnsl2ysfWhQyv1Cfg9LDBw6ep56eJRrCSpH8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:12 2025 by rpki-client