$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: 0m7D2O3I2qbbJq340Zgt/g3Vu40IvBHCUcp+6EYsGQs= Subject key identifier: 1E:F7:A9:46:AC:8D:B3:11:4B:A4:7A:80:C8:01:C2:AC:65:82:8D:50 Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 091572EDF46D4347F8B739D09171A2EB2131F0D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:34:13 +0000 Manifest this update: Tue 16 Jun 2026 16:29:13 +0000 Manifest next update: Wed 17 Jun 2026 20:28:13 +0000 Files and hashes: 1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 2: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: bQN46oZGVGhHSQhCfOns+Y8hPxrp6RLSjxc1m1iVaR8=) 3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:15:72:ed:f4:6d:43:47:f8:b7:39:d0:91:71:a2:eb:21:31:f0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Jun 16 16:29:13 2026 GMT Not After : Jun 17 20:28:13 2026 GMT Subject: CN=1EF7A946AC8DB3114BA47A80C801C2AC65828D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:16:a9:50:26:30:dd:42:13:6d:3a:de:31: 0d:06:a6:fc:6a:90:14:31:35:7e:7e:60:3c:57:b8: fd:8b:91:7c:45:8f:ed:4b:7f:b6:2a:bd:53:31:51: be:04:fd:73:60:cb:11:97:a5:bd:36:e6:f3:59:d2: 77:95:d4:cd:52:a0:e0:04:a9:98:5a:92:01:f2:fe: 3b:b2:3b:e6:80:40:64:21:2b:2d:48:95:37:88:7e: c5:e5:33:fe:bb:4e:1e:58:f6:dc:68:ff:4f:41:6f: 49:8f:e7:cc:81:15:80:c8:b0:9d:b5:6c:52:43:85: c1:29:43:4a:78:c9:03:1d:39:da:7d:a8:2a:7c:16: fe:be:3a:2a:73:95:77:e7:25:70:e2:ca:fc:54:e5: ad:db:42:8c:2a:ae:8d:6e:b4:85:b7:49:55:a2:97: 40:67:d5:02:8e:0d:7f:6c:91:df:72:49:77:97:f5: f2:e1:f9:49:c5:95:4d:b7:e3:b0:f7:a6:90:19:89: f6:80:46:37:77:f6:12:88:4d:a4:a8:8c:ca:98:82: eb:4d:e4:88:c4:46:55:06:23:2c:6f:d4:d7:cf:70: 45:af:86:9a:3d:99:9b:da:14:20:51:64:bd:79:94: 1a:07:dd:c6:7c:c9:6d:04:ab:ff:64:04:6f:e7:b8: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F7:A9:46:AC:8D:B3:11:4B:A4:7A:80:C8:01:C2:AC:65:82:8D:50 X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:40:cf:b9:c4:88:95:95:39:f2:1a:9f:f4:d2:eb:34:2c:4c: ac:9c:1c:54:76:0b:fd:cf:37:ca:25:23:53:ed:68:41:c4:bd: aa:41:2a:4a:d3:8e:91:c7:b5:ab:f9:5f:31:1e:7d:e1:1c:58: 4f:37:4f:be:15:0e:bb:34:92:06:dc:14:e2:35:31:fe:c7:1a: b8:2d:73:99:c5:16:b4:cf:cc:53:2c:a1:04:83:e0:10:b9:71: bc:fd:a5:97:ac:41:b9:0c:8f:45:5c:73:6d:a3:61:f0:2d:cf: 09:90:1d:c6:d8:16:b9:05:e3:db:44:e8:4b:11:da:f5:83:7f: fb:39:df:e0:24:73:d3:e2:4c:78:c8:03:4b:bc:f3:6c:ec:d5: 01:ac:2b:9f:a0:f5:7e:92:f7:36:8c:5c:26:21:d7:16:79:87: 21:f5:65:69:2c:c1:f3:e0:05:4c:11:87:02:be:d1:20:5e:eb: c2:8b:70:b4:c2:4e:50:ea:05:cb:90:d8:69:7f:5a:bd:b2:83: 1b:77:3f:e7:58:d8:f9:34:c9:54:15:d0:33:eb:22:5d:fe:f0: 74:2f:1b:46:c9:1d:26:9f:1e:97:4c:36:b5:8b:be:af:05:9b: ad:f7:2a:db:f7:95:ce:76:fe:3b:ec:b9:1a:e1:06:24:8e:36: b4:b6:d9:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRVy7fRtQ0f4tznQkXGi6yEx8NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA2MTYxNjI5MTNaFw0yNjA2MTcyMDI4MTNaMDMxMTAvBgNV BAMTKDFFRjdBOTQ2QUM4REIzMTE0QkE0N0E4MEM4MDFDMkFDNjU4MjhENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPxapUCYw3UITbTreMQ0Gpvxq kBQxNX5+YDxXuP2LkXxFj+1Lf7YqvVMxUb4E/XNgyxGXpb025vNZ0neV1M1SoOAE qZhakgHy/juyO+aAQGQhKy1IlTeIfsXlM/67Th5Y9txo/09Bb0mP58yBFYDIsJ21 bFJDhcEpQ0p4yQMdOdp9qCp8Fv6+OipzlXfnJXDiyvxU5a3bQowqro1utIW3SVWi l0Bn1QKODX9skd9ySXeX9fLh+UnFlU2347D3ppAZifaARjd39hKITaSojMqYgutN 5IjERlUGIyxv1NfPcEWvhpo9mZvaFCBRZL15lBoH3cZ8yW0Eq/9kBG/nuFTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHvepRqyNsxFLpHqAyAHCrGWCjVAwHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1Az7nEiJWVOfIan/TS6zQsTKycHFR2C/3P N8olI1PtaEHEvapBKkrTjpHHtav5XzEefeEcWE83T74VDrs0kgbcFOI1Mf7HGrgt c5nFFrTPzFMsoQSD4BC5cbz9pZesQbkMj0Vcc22jYfAtzwmQHcbYFrkF49tE6EsR 2vWDf/s53+Akc9PiTHjIA0u882zs1QGsK5+g9X6S9zaMXCYh1xZ5hyH1ZWkswfPg BUwRhwK+0SBe68KLcLTCTlDqBcuQ2Gl/Wr2ygxt3P+dY2Pk0yVQV0DPrIl3+8HQv G0bJHSafHpdMNrWLvq8Fm633Ktv3lc52/jvsuRrhBiSONrS22SE= -----END CERTIFICATE-----Generated at Wed Jun 17 08:38:31 2026 by rpki-client