$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft File: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft (raw, json) Hash identifier: gxUqdlFKE+shO8+Grcp52/nTu3e1epm0B+J//ROb10A= Subject key identifier: 2B:22:9C:5B:A9:4D:E6:3E:E8:BD:7B:5E:B2:6E:D2:4F:6E:76:41:79 Authority key identifier: 88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB Certificate issuer: /CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Certificate serial: 5F63BF0094327AE7C0F6934FF307D5E76DA3491E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 14:57:19 +0000 Manifest this update: Tue 16 Jun 2026 14:52:19 +0000 Manifest next update: Wed 17 Jun 2026 17:16:19 +0000 Files and hashes: 1: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl (hash: 98sRJS3ywZfXJqLkXudReBuN70XXYmzE75jB2D1H+Ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:63:bf:00:94:32:7a:e7:c0:f6:93:4f:f3:07:d5:e7:6d:a3:49:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Validity Not Before: Jun 16 14:52:19 2026 GMT Not After : Jun 17 17:16:19 2026 GMT Subject: CN=2B229C5BA94DE63EE8BD7B5EB26ED24F6E764179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:6f:57:4f:f6:66:7e:29:21:01:39:a3:37: 2f:89:22:c5:54:91:4b:7e:fc:3e:53:3d:90:40:b6: 25:74:d6:e3:33:3c:ad:84:5b:45:7e:01:89:53:90: 9d:8f:73:24:6f:e8:ba:7d:99:d3:39:ef:69:3e:ba: 6f:f7:a8:f8:47:b1:aa:db:ed:e3:18:6f:93:0f:ff: 6c:aa:79:2e:48:3b:ac:20:5e:bb:f6:fb:03:d2:02: 62:ae:5b:fd:1d:0a:06:33:5b:a2:9c:d7:d7:2a:57: a3:b9:74:cb:2f:b9:65:41:12:4c:c3:e5:5c:91:8b: dd:82:f6:00:d6:16:26:82:64:50:ca:93:83:fc:f0: 54:98:5c:06:a0:a4:41:38:e9:47:13:74:25:33:5f: f5:eb:4a:dc:77:e0:f4:95:68:96:df:55:10:1b:ba: 3e:f9:f4:01:6d:79:65:ba:71:0b:95:9f:b0:a4:b1: 96:91:07:46:35:a7:75:4a:05:d7:58:a9:8a:7b:9d: 17:e2:63:b7:03:15:f6:ac:53:4f:e5:a0:55:af:c7: ec:9e:42:18:ed:78:9d:ae:94:d5:7b:55:4a:9a:5a: ef:29:5d:a6:b1:95:59:06:5f:0a:03:fa:6f:b4:42: 72:05:af:e4:a5:cc:55:a7:04:70:46:7c:dc:05:0f: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:9C:5B:A9:4D:E6:3E:E8:BD:7B:5E:B2:6E:D2:4F:6E:76:41:79 X509v3 Authority Key Identifier: keyid:88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f1:d3:00:4c:e7:48:83:c1:7e:86:07:a1:f6:d7:bd:b3:67: e0:eb:b3:84:7d:34:34:a1:d1:6c:6d:d6:e1:2a:1b:84:6c:a4: 1f:15:dd:8b:f5:67:26:56:64:d7:4b:0f:cb:f8:49:ae:0b:8f: b0:af:25:4c:42:2c:96:10:a0:2c:14:21:3a:19:0a:eb:17:18: 45:91:2a:ed:b5:5c:25:e6:e1:ef:61:0a:6e:61:61:9d:08:91: 40:83:d2:47:4b:d9:a9:0b:07:e7:3f:af:c1:df:8f:ea:a4:48: 06:ba:8b:b4:17:c5:56:c4:6d:ce:a4:c3:17:85:ba:ab:9b:10: 75:3d:68:84:b7:f3:db:9c:5c:c6:8c:0d:55:f9:33:8f:23:de: 2e:9c:10:ae:81:67:82:3a:ee:de:57:14:b0:ad:9f:df:96:6a: ee:e8:e3:29:cc:cd:f0:e4:77:07:20:1a:62:c7:3f:57:56:99: 5c:9b:e7:c7:91:86:2b:4b:b7:c6:64:c1:de:97:8a:ec:76:73: 87:44:cf:4b:bb:7d:37:49:e2:46:7a:05:bf:dc:c6:62:2d:76: bb:97:22:42:38:39:e5:8a:21:d2:88:20:c1:56:64:d4:6b:68: 30:38:44:c6:a7:2b:29:b0:41:40:67:96:85:22:4a:ae:5a:79: bb:1d:2f:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2O/AJQyeufA9pNP8wfV522jSR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFF N0VBMTBFQjAeFw0yNjA2MTYxNDUyMTlaFw0yNjA2MTcxNzE2MTlaMDMxMTAvBgNV BAMTKDJCMjI5QzVCQTk0REU2M0VFOEJEN0I1RUIyNkVEMjRGNkU3NjQxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDW9XT/ZmfikhATmjNy+JIsVU kUt+/D5TPZBAtiV01uMzPK2EW0V+AYlTkJ2PcyRv6Lp9mdM572k+um/3qPhHsarb 7eMYb5MP/2yqeS5IO6wgXrv2+wPSAmKuW/0dCgYzW6Kc19cqV6O5dMsvuWVBEkzD 5VyRi92C9gDWFiaCZFDKk4P88FSYXAagpEE46UcTdCUzX/XrStx34PSVaJbfVRAb uj759AFteWW6cQuVn7CksZaRB0Y1p3VKBddYqYp7nRfiY7cDFfasU0/loFWvx+ye QhjteJ2ulNV7VUqaWu8pXaaxlVkGXwoD+m+0QnIFr+SlzFWnBHBGfNwFDxdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKyKcW6lN5j7ovXtesm7ST252QXkwHwYDVR0j BBgwFoAUiN1+sJfj8e0dOU4z/inhUefqEOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0NGE3MjYtNzA3Yy00OWUyLWJmY2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5 N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFFN0VBMTBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OEREN0VCMDk3RTNGMUVEMUQzOTRFMzNGRTI5RTE1MUU3RUEx MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUx NTFFN0VBMTBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjx0wBM50iDwX6GB6H2172zZ+Drs4R9NDSh 0Wxt1uEqG4RspB8V3Yv1ZyZWZNdLD8v4Sa4Lj7CvJUxCLJYQoCwUIToZCusXGEWR Ku21XCXm4e9hCm5hYZ0IkUCD0kdL2akLB+c/r8Hfj+qkSAa6i7QXxVbEbc6kwxeF uqubEHU9aIS389ucXMaMDVX5M48j3i6cEK6BZ4I67t5XFLCtn9+Wau7o4ynMzfDk dwcgGmLHP1dWmVyb58eRhitLt8Zkwd6Xiux2c4dEz0u7fTdJ4kZ6Bb/cxmItdruX IkI4OeWKIdKIIMFWZNRraDA4RManKymwQUBnloUiSq5aebsdL4U= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:31 2026 by rpki-client