$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: znt0ow+xTEXiewkpfJpISoIe/1nH1MXZrL9UZzcvumo= Subject key identifier: 4D:C7:E4:A9:34:67:E8:83:CC:C1:08:08:FF:1C:91:C7:A7:22:00:CB Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 750323051B15320C7698CC6BA8972AF10F670FED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 05:27:14 +0000 Manifest this update: Mon 09 Nov 2026 05:22:14 +0000 Manifest next update: Tue 10 Nov 2026 05:58:14 +0000 Files and hashes: 1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 2: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: auB3M29zVQVqK0kTRhhatvCwDRLGUVX7l/Cl7W6BLGM=) 3: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 1+JTfYoEqYG8HL8IOwRwwtz6yQl8cWQuH4yZNj+/L1Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 05:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:03:23:05:1b:15:32:0c:76:98:cc:6b:a8:97:2a:f1:0f:67:0f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Nov 9 05:22:14 2026 GMT Not After : Nov 10 05:58:14 2026 GMT Subject: CN=4DC7E4A93467E883CCC10808FF1C91C7A72200CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:90:7e:ff:61:bc:01:e2:64:60:a6:fe:33: ff:b3:a5:6a:72:c8:d9:f1:4a:c2:c4:60:5b:60:ce: 80:4f:d4:9b:4c:92:0e:13:46:70:52:14:69:6f:c8: fb:dc:bd:7b:66:c5:92:f4:ce:83:20:46:96:f1:29: 53:ea:56:c1:47:94:c2:ff:33:d9:49:e8:13:f7:0d: 1b:65:2f:80:d5:a0:6f:d4:8d:b8:2d:2d:06:03:a4: 05:0c:4d:80:19:ef:f3:c9:4e:75:5f:3a:48:41:c8: 1f:1a:52:dd:76:02:cd:cb:12:8a:4e:64:58:a9:6d: 9e:36:d5:69:8b:ff:a9:ab:d4:95:56:2c:08:83:1b: b6:e2:9d:d2:5a:41:6a:52:f9:61:ce:89:45:16:87: 2d:ae:39:3b:fe:a0:0e:d4:69:92:10:95:92:6c:07: 48:ed:45:6a:c4:4b:7f:31:34:ae:54:6d:82:b5:bf: 7a:c3:e0:cc:c4:57:d9:56:ee:fd:66:88:56:62:15: 25:9b:0a:a1:85:17:24:5e:1b:ee:e7:2f:c9:e7:10: aa:b4:30:e5:81:47:a1:b3:a0:f3:1c:73:27:49:4e: fc:f8:67:09:34:89:e6:8a:18:72:59:7f:b3:5b:e7: 20:eb:e0:b7:35:a7:7c:81:ce:40:25:cd:2c:ae:4e: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C7:E4:A9:34:67:E8:83:CC:C1:08:08:FF:1C:91:C7:A7:22:00:CB X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e0:3c:a5:67:a2:5c:5b:3d:fc:a2:38:c3:8f:7e:00:b0:3f: 31:65:9f:f9:c6:eb:b9:e6:32:a0:5d:91:10:fb:b5:f5:6a:df: c9:11:1c:0b:72:b4:21:55:17:67:e5:a9:5e:21:5e:49:83:34: e2:45:4c:15:89:80:4a:75:d5:f5:36:bc:0a:29:05:b7:51:22: c8:84:ac:6c:9a:5a:84:9a:c2:12:00:73:7e:cf:d2:d5:b9:88: dc:06:da:fd:ea:6b:53:8b:72:6e:66:dd:aa:7d:40:89:db:51: b1:1e:2e:35:75:eb:e7:bc:bd:3f:9a:a2:94:2c:29:1b:40:3b: 49:29:42:a5:f9:e2:48:c5:0c:a5:d1:1f:ec:5d:fe:6b:3d:d1: 59:79:ce:9e:25:4a:fe:1f:4a:fe:5e:39:14:1b:16:54:d1:1e: 23:c8:b1:c2:ea:c2:38:e2:76:84:d5:95:46:e9:fb:90:27:38: aa:52:33:0a:92:6f:f4:83:93:4f:ef:02:46:f3:09:4a:a1:22: 5e:e4:bf:fb:f6:97:fd:66:fd:37:92:8d:78:b4:c1:c3:6a:24: 48:db:89:b3:4d:09:5c:1e:48:19:6d:5f:0d:47:bb:d5:9e:81: 3d:3a:22:3f:e2:3b:c1:f5:e4:68:a2:f3:72:a2:b4:34:71:0a: 51:f0:5c:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQMjBRsVMgx2mMxrqJcq8Q9nD+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjExMDkwNTIyMTRaFw0yNjExMTAwNTU4MTRaMDMxMTAvBgNV BAMTKDREQzdFNEE5MzQ2N0U4ODNDQ0MxMDgwOEZGMUM5MUM3QTcyMjAwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuJB+/2G8AeJkYKb+M/+zpWpy yNnxSsLEYFtgzoBP1JtMkg4TRnBSFGlvyPvcvXtmxZL0zoMgRpbxKVPqVsFHlML/ M9lJ6BP3DRtlL4DVoG/UjbgtLQYDpAUMTYAZ7/PJTnVfOkhByB8aUt12As3LEopO ZFipbZ421WmL/6mr1JVWLAiDG7bindJaQWpS+WHOiUUWhy2uOTv+oA7UaZIQlZJs B0jtRWrES38xNK5UbYK1v3rD4MzEV9lW7v1miFZiFSWbCqGFFyReG+7nL8nnEKq0 MOWBR6GzoPMccydJTvz4Zwk0ieaKGHJZf7Nb5yDr4Lc1p3yBzkAlzSyuTpxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcfkqTRn6IPMwQgI/xyRx6ciAMswHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbgPKVnolxbPfyiOMOPfgCwPzFln/nG67nm MqBdkRD7tfVq38kRHAtytCFVF2flqV4hXkmDNOJFTBWJgEp11fU2vAopBbdRIsiE rGyaWoSawhIAc37P0tW5iNwG2v3qa1OLcm5m3ap9QInbUbEeLjV16+e8vT+aopQs KRtAO0kpQqX54kjFDKXRH+xd/ms90Vl5zp4lSv4fSv5eORQbFlTRHiPIscLqwjji doTVlUbp+5AnOKpSMwqSb/SDk0/vAkbzCUqhIl7kv/v2l/1m/TeSjXi0wcNqJEjb ibNNCVweSBltXw1Hu9WegT06Ij/iO8H15Gii83KitDRxClHwXPg= -----END CERTIFICATE-----Generated at Mon Nov 9 21:09:21 2026 by rpki-client