$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft File: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft (raw, json) Hash identifier: +9reMzox+f38kxS+ejrmQrv49hLT5EA150FXVQE58fY= Subject key identifier: 0A:2C:80:84:F9:A6:DD:AE:11:FF:E7:B4:BD:F1:24:B7:6C:82:BB:91 Authority key identifier: 88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB Certificate issuer: /CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Certificate serial: 325A7CA9F2EAFEA86D61AD056BF394ABEF703FD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft Manifest number: FF Signing time: Tue 10 Nov 2026 07:04:53 +0000 Manifest this update: Tue 10 Nov 2026 06:59:53 +0000 Manifest next update: Wed 11 Nov 2026 09:20:53 +0000 Files and hashes: 1: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl (hash: aczUarYTlxEs4Hmy3jm+HAzf5NRfDEUR2Hpw4ykjV5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5a:7c:a9:f2:ea:fe:a8:6d:61:ad:05:6b:f3:94:ab:ef:70:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Validity Not Before: Nov 10 06:59:53 2026 GMT Not After : Nov 11 09:20:53 2026 GMT Subject: CN=0A2C8084F9A6DDAE11FFE7B4BDF124B76C82BB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:b8:71:48:54:2b:58:af:4b:e9:bd:a4:61: 40:18:f6:0f:51:66:a6:54:af:d1:04:dc:d1:50:c8: a8:05:ad:64:d6:50:3c:8d:cb:df:fb:53:dc:20:d6: de:3d:85:9e:81:60:fb:8a:a0:35:f2:3c:7f:51:70: 2f:18:63:72:18:64:b2:fe:95:a5:a1:6e:94:dc:85: 38:49:80:73:6f:4c:20:24:28:b3:e7:f0:3f:70:02: 4b:85:e5:01:5f:55:e2:88:c6:3d:32:96:4f:f6:50: 2e:f6:31:de:f4:2d:4c:0c:89:53:2a:65:8d:6f:f4: 87:aa:90:dc:42:aa:76:b2:0b:b4:87:7e:4e:c3:1e: 4c:7a:24:47:fb:72:0d:03:99:fc:f9:5a:01:a5:de: f2:90:52:7d:b2:81:33:ce:96:08:6c:38:74:da:48: d0:6f:b5:cf:4b:a5:d4:f0:c9:35:88:18:ba:4a:73: 83:fc:f1:1e:28:d2:d0:75:3e:fb:34:cc:a4:71:48: be:81:f9:51:a9:b8:c7:3d:34:b7:3f:1f:59:22:91: 3a:28:7a:f1:d2:53:9e:0a:be:42:59:7b:09:9a:e1: 5b:0b:7a:4e:5b:c1:6f:e8:65:e4:89:05:2c:46:b1: c5:3a:c8:31:7f:34:41:d1:3e:16:49:d0:ce:7f:37: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:80:84:F9:A6:DD:AE:11:FF:E7:B4:BD:F1:24:B7:6C:82:BB:91 X509v3 Authority Key Identifier: keyid:88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1e:b4:0d:a7:06:10:18:b5:e8:0e:af:1c:a7:26:31:d7:ff: 90:83:8b:43:27:88:73:2d:08:75:a0:bd:9a:88:82:d8:15:17: 66:3d:be:1e:6e:68:18:4e:b3:b0:48:ce:95:aa:f8:4c:b5:90: 28:2a:79:c7:d7:b3:be:58:3f:19:a8:a4:ea:c4:11:2a:f9:c6: 3d:95:64:82:a4:f5:c0:27:65:d5:f3:39:19:9b:af:1a:36:95: 90:c8:2f:a5:2e:61:c7:f9:47:d3:ea:0a:e2:1d:09:d7:ad:ca: 26:66:11:6b:88:24:79:45:2e:2d:64:e4:7c:81:48:e0:d0:3b: f0:50:a1:bc:b3:c3:70:6a:9e:ba:ba:ee:c8:57:ad:e9:82:54: 5a:01:2e:e8:c5:84:0b:22:96:b5:ab:ba:d7:f0:a0:3f:f1:e5: bd:e3:68:34:08:7e:75:f5:10:d4:b6:f4:1e:d9:23:12:a3:57: 89:5c:48:1e:14:e4:29:70:31:ed:72:de:31:0c:1a:27:2d:61: fc:fd:9f:f6:b1:5a:4e:52:15:18:a5:f1:9a:10:b6:d0:ad:4d: 7e:7c:50:f8:33:6f:02:fa:cb:ea:6a:e4:d8:d1:b3:7a:9d:1d: a2:84:b3:36:84:bd:a2:3a:b8:c6:ec:42:3f:b9:44:32:1c:63: 3c:73:45:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlp8qfLq/qhtYa0Fa/OUq+9wP9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFF N0VBMTBFQjAeFw0yNjExMTAwNjU5NTNaFw0yNjExMTEwOTIwNTNaMDMxMTAvBgNV BAMTKDBBMkM4MDg0RjlBNkREQUUxMUZGRTdCNEJERjEyNEI3NkM4MkJCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdrhxSFQrWK9L6b2kYUAY9g9R ZqZUr9EE3NFQyKgFrWTWUDyNy9/7U9wg1t49hZ6BYPuKoDXyPH9RcC8YY3IYZLL+ laWhbpTchThJgHNvTCAkKLPn8D9wAkuF5QFfVeKIxj0ylk/2UC72Md70LUwMiVMq ZY1v9IeqkNxCqnayC7SHfk7DHkx6JEf7cg0Dmfz5WgGl3vKQUn2ygTPOlghsOHTa SNBvtc9LpdTwyTWIGLpKc4P88R4o0tB1Pvs0zKRxSL6B+VGpuMc9NLc/H1kikToo evHSU54KvkJZewma4VsLek5bwW/oZeSJBSxGscU6yDF/NEHRPhZJ0M5/N2yfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCiyAhPmm3a4R/+e0vfEkt2yCu5EwHwYDVR0j BBgwFoAUiN1+sJfj8e0dOU4z/inhUefqEOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0NGE3MjYtNzA3Yy00OWUyLWJmY2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5 N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFFN0VBMTBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OEREN0VCMDk3RTNGMUVEMUQzOTRFMzNGRTI5RTE1MUU3RUEx MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUx NTFFN0VBMTBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgetA2nBhAYtegOrxynJjHX/5CDi0MniHMt CHWgvZqIgtgVF2Y9vh5uaBhOs7BIzpWq+Ey1kCgqecfXs75YPxmopOrEESr5xj2V ZIKk9cAnZdXzORmbrxo2lZDIL6UuYcf5R9PqCuIdCdetyiZmEWuIJHlFLi1k5HyB SODQO/BQobyzw3Bqnrq67shXremCVFoBLujFhAsilrWrutfwoD/x5b3jaDQIfnX1 ENS29B7ZIxKjV4lcSB4U5ClwMe1y3jEMGictYfz9n/axWk5SFRil8ZoQttCtTX58 UPgzbwL6y+pq5NjRs3qdHaKEszaEvaI6uMbsQj+5RDIcYzxzRXw= -----END CERTIFICATE-----Generated at Tue Nov 10 14:11:24 2026 by rpki-client