$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: DspLgjvTa8pdouNrv7XyDS2G6rSNvVtrsN+waECTy50= Subject key identifier: 5B:FD:43:1B:C5:FC:86:52:50:C8:77:53:20:B9:D3:EA:4E:6E:17:D2 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 048723B225B242EA18861F74CA1968BA9C8159BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 012E Signing time: Thu 16 Apr 2026 20:51:34 +0000 Manifest this update: Thu 16 Apr 2026 20:46:34 +0000 Manifest next update: Mon 20 Apr 2026 02:19:34 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: X1Ys3ZegDiRPTcwrPXLigKpTG4Ek2SZgD0GvT6w2GbA=) 2: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:87:23:b2:25:b2:42:ea:18:86:1f:74:ca:19:68:ba:9c:81:59:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Apr 16 20:46:34 2026 GMT Not After : Apr 20 02:19:34 2026 GMT Subject: CN=5BFD431BC5FC865250C8775320B9D3EA4E6E17D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:fb:e5:84:37:2a:5f:ee:7f:00:d7:79:c2: 73:6d:98:10:d5:58:b8:9d:cf:b9:43:b6:7c:f5:38: a4:0c:cf:9a:69:35:ed:bf:cb:0c:d5:48:d7:62:29: 75:38:45:33:6f:bb:8d:c2:54:49:22:28:cf:9f:1e: f7:b7:4c:83:cf:f8:6b:a0:85:4e:10:37:6c:44:6c: 92:2b:21:fe:9d:1b:0a:39:51:31:a2:44:0e:fc:28: 08:4f:fb:33:40:ac:2c:c6:aa:01:90:3c:48:3a:0e: 0f:5b:7a:a2:97:69:47:02:23:18:ec:cc:ec:02:82: 00:40:38:59:09:9b:b2:5d:3c:c3:e5:c9:1f:06:a3: 1a:60:f9:50:c9:42:e4:94:f2:8c:f7:af:c5:66:f9: 56:fb:2e:c4:3f:c1:5f:31:4d:b1:56:6f:22:67:f0: 3e:c8:bb:94:93:60:07:17:db:74:81:c6:3a:30:b4: 48:9f:24:ab:0b:ed:aa:71:08:3e:69:dc:26:1d:0b: e6:47:cd:68:82:0b:12:48:aa:4b:1c:a9:9b:b2:a9: b4:52:a1:01:75:e1:a3:d0:cf:2e:14:9b:dc:60:84: 57:68:b0:f5:40:6e:cf:22:de:20:fa:46:19:fa:f4: 7a:22:3c:cb:cb:27:ab:4f:f8:ad:8d:cc:99:f8:f8: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FD:43:1B:C5:FC:86:52:50:C8:77:53:20:B9:D3:EA:4E:6E:17:D2 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:b3:5b:e0:31:72:97:74:b6:15:cb:69:78:18:63:92:ee: af:7a:56:09:63:1f:a4:1c:22:29:45:4e:d9:6d:e0:f4:57:a8: 23:ee:d3:a0:e0:bd:18:37:4d:d5:f5:32:9c:04:fe:b4:48:4c: 6a:36:2f:e6:2f:48:37:48:64:c8:98:53:50:10:00:f6:5e:96: aa:8c:f8:2c:78:47:d5:d7:b5:10:f9:62:dd:59:8b:dc:72:18: 2f:9b:1b:5c:60:03:2d:9d:b6:40:8f:5f:d8:95:93:b3:10:6a: 41:37:ca:87:11:98:a0:37:20:90:ef:e4:94:bb:4a:36:ef:f2: a7:12:4e:37:cb:6d:f2:ce:bd:a9:46:77:73:22:29:2a:e6:1f: a4:e0:44:23:42:d7:c9:d5:c1:f0:74:fa:67:cf:ac:49:12:e1: ef:71:6e:0d:c4:0d:99:05:4c:69:62:8b:fb:e5:54:bb:ca:ee: 1b:68:cc:1c:a8:7c:13:db:4a:fd:f3:b5:ea:06:91:a8:10:f2: d1:17:d2:70:1f:bb:79:54:68:04:61:1f:c0:9e:13:3b:f0:d6: fa:04:b3:24:93:ca:95:d2:ba:a7:81:5b:f0:73:05:72:90:ef: 09:b4:a9:7c:63:75:a8:73:4c:f1:f1:ee:79:97:a6:b3:7b:cc: 39:a9:32:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIcjsiWyQuoYhh90yhloupyBWb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNjA0MTYyMDQ2MzRaFw0yNjA0MjAwMjE5MzRaMDMxMTAvBgNV BAMTKDVCRkQ0MzFCQzVGQzg2NTI1MEM4Nzc1MzIwQjlEM0VBNEU2RTE3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq/vlhDcqX+5/ANd5wnNtmBDV WLidz7lDtnz1OKQMz5ppNe2/ywzVSNdiKXU4RTNvu43CVEkiKM+fHve3TIPP+Gug hU4QN2xEbJIrIf6dGwo5UTGiRA78KAhP+zNArCzGqgGQPEg6Dg9beqKXaUcCIxjs zOwCggBAOFkJm7JdPMPlyR8Goxpg+VDJQuSU8oz3r8Vm+Vb7LsQ/wV8xTbFWbyJn 8D7Iu5STYAcX23SBxjowtEifJKsL7apxCD5p3CYdC+ZHzWiCCxJIqkscqZuyqbRS oQF14aPQzy4Um9xghFdosPVAbs8i3iD6Rhn69HoiPMvLJ6tP+K2NzJn4+HgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW/1DG8X8hlJQyHdTILnT6k5uF9IwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYes1vgMXKXdLYVy2l4GGOS7q96VgljH6Qc IilFTtlt4PRXqCPu06DgvRg3TdX1MpwE/rRITGo2L+YvSDdIZMiYU1AQAPZelqqM +Cx4R9XXtRD5Yt1Zi9xyGC+bG1xgAy2dtkCPX9iVk7MQakE3yocRmKA3IJDv5JS7 Sjbv8qcSTjfLbfLOvalGd3MiKSrmH6TgRCNC18nVwfB0+mfPrEkS4e9xbg3EDZkF TGlii/vlVLvK7htozByofBPbSv3zteoGkagQ8tEX0nAfu3lUaARhH8CeEzvw1voE sySTypXSuqeBW/BzBXKQ7wm0qXxjdahzTPHx7nmXprN7zDmpMk4= -----END CERTIFICATE-----Generated at Sat Apr 18 01:45:06 2026 by rpki-client