$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: qS8vOeV6kWCN2FiM3JMtpaGuze7cGL4SHHvOpKRuAk8= Subject key identifier: 98:D0:16:E8:33:F6:71:41:A2:42:BE:E1:D6:BB:B5:72:E3:34:22:C2 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 0D1FA9F51F8BCD5355F4AA4D9BE4F711AAC4FF62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 015A Signing time: Sat 28 Feb 2026 15:52:16 +0000 Manifest this update: Sat 28 Feb 2026 15:47:16 +0000 Manifest next update: Wed 04 Mar 2026 02:34:16 +0000 Files and hashes: 1: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: /Dd3U5AkwcHDBZtjyS9uvkbKji4HX4V/JFp87ytEzf4=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: s65ULf3kYPzmHhD/eaw4xa7fxStyJaVV06ikaxq29vc=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: jBlPZ38x7fUq8L2OxFB/CipZgVFJBPwzL0K4wuU8V0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1f:a9:f5:1f:8b:cd:53:55:f4:aa:4d:9b:e4:f7:11:aa:c4:ff:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Feb 28 15:47:16 2026 GMT Not After : Mar 4 02:34:16 2026 GMT Subject: CN=98D016E833F67141A242BEE1D6BBB572E33422C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:26:81:18:6a:7a:96:6b:b6:24:dd:02:c6: f6:bd:1f:8b:30:b0:74:4e:03:71:58:1b:8c:9a:03: f5:29:fc:fb:92:e2:7c:24:5a:1a:35:d3:45:24:e5: a9:c4:0d:a2:be:d8:87:d1:57:74:20:f2:76:4f:99: 45:27:63:12:02:3b:22:69:a3:d6:bd:8d:72:20:a9: b8:4a:a8:fc:39:44:f5:3c:ba:8c:dc:ee:ae:4a:1b: 3a:70:a8:86:2f:1d:5a:aa:ac:ed:2b:4e:cc:34:94: 97:84:f7:6e:bf:42:90:02:d1:df:d0:a1:78:0d:e6: 9e:96:be:e9:e1:2a:08:d5:59:47:c2:7c:19:12:b2: 06:cc:16:2c:4a:c6:cd:02:83:b9:79:b4:f7:b4:a2: 24:8d:0e:36:2e:c9:8a:48:ce:9f:43:68:cf:fc:62: 1b:c6:49:f2:66:d1:49:eb:f4:d0:82:26:e6:4a:75: 1c:a0:24:b1:40:83:54:1b:47:af:0b:4f:32:ba:c3: 56:24:1e:d8:65:d6:9a:51:a3:83:29:53:d3:2d:02: 97:40:40:fa:1a:60:3a:2a:b2:88:d0:5d:e6:c1:7d: 95:bc:66:38:a9:a2:b3:4c:6e:c8:20:a7:7a:ee:65: 7f:d9:fe:ba:fb:0b:1f:4c:d5:f8:a6:ae:78:79:f1: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D0:16:E8:33:F6:71:41:A2:42:BE:E1:D6:BB:B5:72:E3:34:22:C2 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:7a:f3:b6:6d:e3:75:ef:4e:75:df:01:81:9f:ac:d4:c1:c1: fb:76:30:12:20:cf:eb:d6:a6:ed:9a:af:f2:65:5c:17:9e:f9: 45:9c:63:c9:9c:2c:ac:b8:79:6c:d3:d9:d6:c3:a9:6d:7e:57: 2a:41:e4:92:d2:b9:c5:16:ff:43:37:d9:ca:d9:12:ab:2c:4b: d7:f7:3c:0e:41:fe:a1:61:4c:06:00:56:ae:5c:e2:00:b1:79: f8:b3:4e:8a:82:76:47:83:b9:a9:b5:90:8a:73:07:91:20:18: 47:4a:c6:5b:1f:5d:25:72:4e:f9:92:24:ae:23:3a:68:2f:c4: 41:c5:77:84:47:8c:e3:bd:0b:98:c4:1a:35:f9:55:fd:f2:48: 5a:dc:b1:fd:02:e2:7d:f5:b8:1e:24:c1:fb:28:8e:e9:0d:61: ce:48:77:5d:57:34:ae:a3:42:c2:85:74:e5:76:cc:7e:26:c9: e9:49:9d:c0:5f:c3:00:40:fe:81:9a:54:ff:b5:6e:87:c7:93: 08:4a:52:51:d3:9b:ce:01:fd:de:2e:25:9c:53:1d:1f:fb:5c: cb:9e:ca:d8:af:d2:8a:4b:59:fa:dd:12:04:ec:3c:c0:38:b9: 11:f4:02:c9:75:1f:d4:fc:4f:ed:57:ea:5e:f0:83:fe:fc:bd: cb:4b:d0:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDR+p9R+LzVNV9KpNm+T3EarE/2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNjAyMjgxNTQ3MTZaFw0yNjAzMDQwMjM0MTZaMDMxMTAvBgNV BAMTKDk4RDAxNkU4MzNGNjcxNDFBMjQyQkVFMUQ2QkJCNTcyRTMzNDIyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGSaBGGp6lmu2JN0Cxva9H4sw sHROA3FYG4yaA/Up/PuS4nwkWho100Uk5anEDaK+2IfRV3Qg8nZPmUUnYxICOyJp o9a9jXIgqbhKqPw5RPU8uozc7q5KGzpwqIYvHVqqrO0rTsw0lJeE926/QpAC0d/Q oXgN5p6WvunhKgjVWUfCfBkSsgbMFixKxs0Cg7l5tPe0oiSNDjYuyYpIzp9DaM/8 YhvGSfJm0Unr9NCCJuZKdRygJLFAg1QbR68LTzK6w1YkHthl1ppRo4MpU9MtApdA QPoaYDoqsojQXebBfZW8ZjiporNMbsggp3ruZX/Z/rr7Cx9M1fimrnh58fvlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNAW6DP2cUGiQr7h1ru1cuM0IsIwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMR687Zt43XvTnXfAYGfrNTBwft2MBIgz+vW pu2ar/JlXBee+UWcY8mcLKy4eWzT2dbDqW1+VypB5JLSucUW/0M32crZEqssS9f3 PA5B/qFhTAYAVq5c4gCxefizToqCdkeDuam1kIpzB5EgGEdKxlsfXSVyTvmSJK4j OmgvxEHFd4RHjOO9C5jEGjX5Vf3ySFrcsf0C4n31uB4kwfsojukNYc5Id11XNK6j QsKFdOV2zH4myelJncBfwwBA/oGaVP+1bofHkwhKUlHTm84B/d4uJZxTHR/7XMue ytiv0opLWfrdEgTsPMA4uRH0Asl1H9T8T+1X6l7wg/78vctL0Iw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:33:05 2026 by rpki-client