$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: /QdRChEWsem0Gv/iSw/c68gpXzJQzD8Nl5QyiAWqkFU= Subject key identifier: AF:D1:FA:DE:08:81:57:8B:55:C6:27:D8:B8:7C:B1:55:49:31:BF:6E Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 0719914E33D38A3AB800EDEDA19999FE20A3619C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 035A Signing time: Thu 16 Apr 2026 01:32:43 +0000 Manifest this update: Thu 16 Apr 2026 01:27:43 +0000 Manifest next update: Sun 19 Apr 2026 04:36:43 +0000 Files and hashes: 1: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 2: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 3: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 4: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 5: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 6: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 7: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 8: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: cnddR5Ym34Gfs3Tm8duj6u77tx2zzUqY6wd0mby4kW4=) 9: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 10: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) 11: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:19:91:4e:33:d3:8a:3a:b8:00:ed:ed:a1:99:99:fe:20:a3:61:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Apr 16 01:27:43 2026 GMT Not After : Apr 19 04:36:43 2026 GMT Subject: CN=AFD1FADE0881578B55C627D8B87CB1554931BF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:d2:d3:8b:cd:98:73:0a:4d:ca:73:bb:5b: f7:ab:d9:10:f6:3b:d9:f9:9c:8b:25:87:99:ce:2f: 6d:96:d8:97:66:8c:1b:10:7a:95:ba:aa:5a:2a:51: 27:cb:a8:d0:10:27:d9:bb:de:69:50:3a:d6:fd:91: af:60:1c:84:2f:5d:ed:32:1a:71:f5:11:44:39:09: 2c:4a:03:f7:f0:e5:82:9e:27:87:ec:a8:f8:3a:1b: 71:51:92:2b:d0:52:d9:20:e3:93:8b:ac:9e:d7:f1: 81:a5:f5:fb:2f:0a:f6:85:1b:a8:dc:60:51:63:7c: 81:37:e1:4a:66:01:e5:1b:4c:b4:4f:ba:fe:84:b3: 7f:22:f3:9c:6c:2d:b5:2b:2e:22:40:c2:a0:54:2c: 75:8a:89:c3:65:ad:d1:2c:53:ff:19:84:05:4c:1d: e5:18:2d:9b:a5:00:b3:a7:05:d7:9f:1a:3c:dc:f3: 1a:c4:4d:aa:5e:a1:c9:e2:4b:d2:01:d2:2b:e7:72: 72:4c:50:f8:4d:95:8a:e9:6e:b3:d1:c7:53:e3:0f: 2d:c4:72:dd:94:f3:62:02:e3:eb:c3:d5:23:b6:e7: a8:1a:4a:c6:82:e8:9b:27:b6:bb:ab:64:1b:74:02: 74:38:0f:b0:6b:27:9b:23:63:75:de:40:38:10:ae: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D1:FA:DE:08:81:57:8B:55:C6:27:D8:B8:7C:B1:55:49:31:BF:6E X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b8:2a:e9:f2:75:74:84:0d:95:34:e9:5a:36:eb:d3:99:30: 41:fd:82:92:79:d9:ad:1d:b4:e7:8e:50:73:49:ec:52:3f:b5: ff:ee:86:f9:f4:16:46:5d:d5:9c:b0:88:6d:63:51:58:a3:ef: 27:5c:17:f0:ec:50:c4:3d:33:4b:33:87:66:bf:00:70:0e:db: 7b:67:50:33:ec:47:cc:52:28:bb:64:5b:e3:5e:d6:9c:17:d5: e7:9a:c9:d6:9d:26:33:87:ae:52:74:53:76:ae:1d:a9:d2:8a: eb:f4:ba:cf:34:f2:16:12:4d:14:76:8e:f7:c0:f3:c4:ce:3a: 98:a3:12:0f:bd:a9:63:df:a3:9d:f1:11:1d:38:0f:d5:4c:f3: 42:53:61:1e:a9:ce:de:2e:4f:f3:06:be:b9:c7:e6:8a:ee:1a: e2:22:97:43:a5:1c:b4:fb:6a:00:ee:8f:ae:70:66:47:d5:b4: 44:b6:e0:1c:95:de:fa:4f:93:f1:40:fe:82:e6:b6:27:bb:bc: f2:f9:62:b8:ed:bf:bc:4e:ca:c5:c3:7a:f4:3b:f4:07:4f:05: 66:2b:10:5b:89:d3:e0:65:e0:93:03:ad:3f:cd:60:51:34:05: 8c:83:19:2d:51:01:be:a3:11:ef:7a:11:cc:4c:98:33:8b:50: fc:fe:34:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxmRTjPTijq4AO3toZmZ/iCjYZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNjA0MTYwMTI3NDNaFw0yNjA0MTkwNDM2NDNaMDMxMTAvBgNV BAMTKEFGRDFGQURFMDg4MTU3OEI1NUM2MjdEOEI4N0NCMTU1NDkzMUJGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKldLTi82YcwpNynO7W/er2RD2 O9n5nIslh5nOL22W2JdmjBsQepW6qloqUSfLqNAQJ9m73mlQOtb9ka9gHIQvXe0y GnH1EUQ5CSxKA/fw5YKeJ4fsqPg6G3FRkivQUtkg45OLrJ7X8YGl9fsvCvaFG6jc YFFjfIE34UpmAeUbTLRPuv6Es38i85xsLbUrLiJAwqBULHWKicNlrdEsU/8ZhAVM HeUYLZulALOnBdefGjzc8xrETapeocniS9IB0ivncnJMUPhNlYrpbrPRx1PjDy3E ct2U82IC4+vD1SO256gaSsaC6JsntrurZBt0AnQ4D7BrJ5sjY3XeQDgQriBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr9H63giBV4tVxifYuHyxVUkxv24wHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW4KunydXSEDZU06Vo269OZMEH9gpJ52a0d tOeOUHNJ7FI/tf/uhvn0FkZd1ZywiG1jUVij7ydcF/DsUMQ9M0szh2a/AHAO23tn UDPsR8xSKLtkW+Ne1pwX1eeaydadJjOHrlJ0U3auHanSiuv0us808hYSTRR2jvfA 88TOOpijEg+9qWPfo53xER04D9VM80JTYR6pzt4uT/MGvrnH5oruGuIil0OlHLT7 agDuj65wZkfVtES24ByV3vpPk/FA/oLmtie7vPL5Yrjtv7xOysXDevQ79AdPBWYr EFuJ0+Bl4JMDrT/NYFE0BYyDGS1RAb6jEe96EcxMmDOLUPz+NGY= -----END CERTIFICATE-----Generated at Sat Apr 18 00:33:45 2026 by rpki-client