$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: md6wMS6zqmUeDedfgIO4lc4yTsDiW+7cMupvpxFkuRY= Subject key identifier: 08:37:E6:29:DD:82:7A:A3:52:B7:FF:15:8E:3D:AB:3A:17:90:45:89 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 76D3D10334E15B1233F3D31FCC02920953D2D546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 0346 Signing time: Mon 02 Mar 2026 16:42:42 +0000 Manifest this update: Mon 02 Mar 2026 16:37:42 +0000 Manifest next update: Fri 06 Mar 2026 00:30:42 +0000 Files and hashes: 1: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: 9iKpBrj/kY6mZ3K6C/IxKV0egzQ+L287fmwf532+4bM=) 2: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 3: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 4: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 5: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 6: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) 7: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 8: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 9: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 10: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 11: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d3:d1:03:34:e1:5b:12:33:f3:d3:1f:cc:02:92:09:53:d2:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Mar 2 16:37:42 2026 GMT Not After : Mar 6 00:30:42 2026 GMT Subject: CN=0837E629DD827AA352B7FF158E3DAB3A17904589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:5c:82:3c:bb:57:eb:fb:56:fa:af:63:0a: de:d6:2d:51:8e:b3:4b:9c:d5:57:c3:33:3c:4f:cb: 60:19:bc:be:54:b4:93:7e:a8:6c:62:3b:86:06:15: b1:13:84:37:5b:b4:ea:d6:5b:86:80:02:9d:2c:51: 37:e0:9a:5a:60:ab:b7:56:9d:fd:3f:93:bc:ff:4a: 21:a5:59:18:a2:c4:c5:55:72:31:b8:6d:3e:1e:a0: 3d:67:7c:c6:33:a8:d9:51:14:e7:72:b4:9f:c1:4e: 3c:fe:c8:d3:a5:4e:8a:d1:0a:6c:41:1e:6f:01:56: 02:f7:4d:31:79:3e:1c:86:79:e0:0c:d7:9f:28:27: b8:af:05:d3:19:8b:d6:d8:9f:a7:75:45:25:20:e0: 0c:3d:ab:14:17:9f:41:89:60:e5:ed:fc:3c:98:58: da:66:67:e4:ca:53:80:b5:be:89:6b:11:1b:d6:71: 0b:1f:a7:8b:79:e3:e2:a1:96:b9:52:66:b0:61:c8: 07:27:4e:7c:c3:e2:89:26:18:44:75:7f:ec:2e:5b: fe:69:2a:1e:4d:de:3d:04:95:bf:fc:82:cb:64:9a: 99:22:f1:7e:2b:c7:ce:d4:1e:6a:4e:93:42:8f:09: b4:bc:19:3c:87:34:af:8b:43:e6:7f:bc:22:02:23: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:E6:29:DD:82:7A:A3:52:B7:FF:15:8E:3D:AB:3A:17:90:45:89 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:15:9d:80:cf:02:b4:13:c1:73:85:70:c8:85:f2:61:8d:69: 24:78:fa:55:af:74:a2:86:f3:ab:b4:e5:95:04:eb:5f:b5:9c: b1:3a:17:d1:6d:36:ea:c6:b2:2f:cc:7a:72:56:28:2a:18:50: be:eb:79:cd:96:81:2f:84:e0:2d:74:f5:65:eb:25:62:e2:63: c5:b5:3f:37:d6:3d:58:ff:e8:e8:fe:cb:62:27:04:12:77:75: 6d:05:f5:30:96:39:da:63:cf:f5:b8:55:bd:a5:f0:42:50:39: b1:be:ab:b4:53:68:a7:e3:91:a5:c6:c8:eb:8e:bb:ee:02:31: f3:91:4b:76:6d:10:00:96:e3:b7:6b:8f:4b:f5:9b:f9:b0:bb: fd:63:17:46:72:64:4c:f7:4a:95:15:15:4e:52:24:58:fe:9e: ba:ef:6d:f1:1d:51:d5:d0:fc:26:df:1d:a4:c9:d2:11:fa:0f: 94:0a:74:31:0e:45:70:9e:b0:a2:26:4f:7c:50:1a:28:8b:bb: be:a1:91:03:79:69:0a:92:eb:90:7a:b4:05:9e:21:2f:1e:5e: 0d:f8:38:1c:2c:b1:5c:e7:1f:1c:1e:4d:4a:62:d9:71:70:94: 2e:e6:59:00:ac:1d:83:b1:ee:a2:93:08:c2:dc:dd:2e:10:30: 1d:00:a5:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtPRAzThWxIz89MfzAKSCVPS1UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNjAzMDIxNjM3NDJaFw0yNjAzMDYwMDMwNDJaMDMxMTAvBgNV BAMTKDA4MzdFNjI5REQ4MjdBQTM1MkI3RkYxNThFM0RBQjNBMTc5MDQ1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSVyCPLtX6/tW+q9jCt7WLVGO s0uc1VfDMzxPy2AZvL5UtJN+qGxiO4YGFbEThDdbtOrWW4aAAp0sUTfgmlpgq7dW nf0/k7z/SiGlWRiixMVVcjG4bT4eoD1nfMYzqNlRFOdytJ/BTjz+yNOlTorRCmxB Hm8BVgL3TTF5PhyGeeAM158oJ7ivBdMZi9bYn6d1RSUg4Aw9qxQXn0GJYOXt/DyY WNpmZ+TKU4C1volrERvWcQsfp4t54+KhlrlSZrBhyAcnTnzD4okmGER1f+wuW/5p Kh5N3j0Elb/8gstkmpki8X4rx87UHmpOk0KPCbS8GTyHNK+LQ+Z/vCICI8Y9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDfmKd2CeqNSt/8Vjj2rOheQRYkwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOUVnYDPArQTwXOFcMiF8mGNaSR4+lWvdKKG 86u05ZUE61+1nLE6F9FtNurGsi/MenJWKCoYUL7rec2WgS+E4C109WXrJWLiY8W1 PzfWPVj/6Oj+y2InBBJ3dW0F9TCWOdpjz/W4Vb2l8EJQObG+q7RTaKfjkaXGyOuO u+4CMfORS3ZtEACW47drj0v1m/mwu/1jF0ZyZEz3SpUVFU5SJFj+nrrvbfEdUdXQ /CbfHaTJ0hH6D5QKdDEORXCesKImT3xQGiiLu76hkQN5aQqS65B6tAWeIS8eXg34 OBwssVznHxweTUpi2XFwlC7mWQCsHYOx7qKTCMLc3S4QMB0ApRM= -----END CERTIFICATE-----Generated at Mon Mar 2 20:21:57 2026 by rpki-client