$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json) Hash identifier: lU1g6g0441emJicjbv8o8S2NJTt1o1wH/xez+L+ihTU= Subject key identifier: 82:0D:23:02:B6:16:86:A7:20:89:36:BE:BA:33:4C:EE:F1:C1:22:01 Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Certificate serial: 0BE9FA98915AC59E7D34DD76B6353DF793FF054D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:27:58 +0000 Manifest this update: Tue 16 Jun 2026 15:22:58 +0000 Manifest next update: Wed 17 Jun 2026 16:10:58 +0000 Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=) 2: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: 02C8fpZ2QuLxuXnbsGehBCPxrxUH05iTS/eMRrWfHY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:fa:98:91:5a:c5:9e:7d:34:dd:76:b6:35:3d:f7:93:ff:05:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Validity Not Before: Jun 16 15:22:58 2026 GMT Not After : Jun 17 16:10:58 2026 GMT Subject: CN=820D2302B61686A7208936BEBA334CEEF1C12201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:ba:11:67:56:68:b2:d9:60:6b:84:02:53: 8b:cc:ec:33:15:2d:7a:bc:10:85:a1:35:26:b0:f1: 05:b7:f2:13:a1:92:8e:1e:ee:ab:19:be:07:d3:e6: 3e:95:d1:18:9f:aa:2d:a7:c1:af:e7:4f:d0:21:dd: 44:ba:47:95:00:aa:57:b1:e6:0c:ac:03:55:af:7c: 13:cd:72:43:58:a6:52:ab:17:1c:e3:83:3d:ce:63: 79:b2:56:cc:91:03:fb:b9:73:33:76:3c:28:d8:27: 39:0e:93:ff:4c:65:72:b1:c4:d1:71:96:48:90:85: 42:d9:c5:ee:b8:ef:ed:f4:ca:27:5d:0a:1b:2f:5a: 5d:8a:93:86:79:7f:c1:df:89:f3:b6:0c:0a:db:cc: 14:a2:6e:54:fc:e8:eb:42:50:bb:3d:c7:5a:46:a2: e5:6e:5d:ae:4e:00:2b:72:ae:32:91:f1:6c:a0:c5: 15:f1:78:4c:25:cc:c2:07:ba:f0:b0:ba:df:38:c7: ae:73:b6:f6:24:76:ea:d4:f0:0f:9a:69:dc:77:29: 0c:86:09:21:32:f8:58:d1:da:e9:1d:2b:89:9a:79: f0:15:8a:b0:a0:81:61:6c:c2:e5:e7:ea:58:bf:79: 7d:d7:ac:42:a7:97:4d:a3:a0:4f:8e:4f:89:fa:6a: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0D:23:02:B6:16:86:A7:20:89:36:BE:BA:33:4C:EE:F1:C1:22:01 X509v3 Authority Key Identifier: keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:85:63:d6:c2:2b:65:a8:04:fe:79:67:e8:67:a4:a4:72:86: 5c:eb:92:48:85:f9:f2:ee:9e:bd:3b:db:dc:c4:83:85:b7:0d: 0c:84:4b:52:5b:74:6f:a9:95:b4:a7:5b:56:2d:df:b2:c6:9c: 55:d0:3b:b0:55:32:84:5b:be:e6:59:c1:75:71:87:2a:7e:e6: 41:3d:77:e6:0a:39:13:94:27:8a:88:6a:4f:44:6b:70:07:99: ac:7e:7e:32:a2:7f:20:26:e1:dd:23:6c:b7:58:8d:e8:eb:62: 0e:28:12:36:cc:a5:08:22:d3:1a:e6:3d:db:7b:bc:16:6f:73: e6:66:27:02:75:26:61:7c:b9:01:20:57:b8:b2:9d:2f:32:ca: b5:b2:fa:01:d4:dc:4e:a1:52:38:af:d0:31:53:81:17:25:59: e0:62:0f:41:3c:b9:a4:8f:af:3e:33:0f:dc:b3:74:7c:97:dc: 4a:d5:ff:3d:ca:8d:93:16:73:ee:bc:62:94:d3:90:30:e8:32: 9e:5f:fb:e8:92:c0:ad:75:fe:80:fa:e6:d1:90:11:ea:21:47: ba:31:ce:e4:b0:43:6b:0c:88:90:a7:07:36:83:53:89:c1:29: b0:6b:68:c4:d6:11:f2:11:4f:48:d7:20:88:53:43:25:bd:63: c4:5d:cc:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+n6mJFaxZ59NN12tjU995P/BU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5 MEVGREY1MzAeFw0yNjA2MTYxNTIyNThaFw0yNjA2MTcxNjEwNThaMDMxMTAvBgNV BAMTKDgyMEQyMzAyQjYxNjg2QTcyMDg5MzZCRUJBMzM0Q0VFRjFDMTIyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ELoRZ1Zostlga4QCU4vM7DMV LXq8EIWhNSaw8QW38hOhko4e7qsZvgfT5j6V0Rifqi2nwa/nT9Ah3US6R5UAqlex 5gysA1WvfBPNckNYplKrFxzjgz3OY3myVsyRA/u5czN2PCjYJzkOk/9MZXKxxNFx lkiQhULZxe647+30yiddChsvWl2Kk4Z5f8HfifO2DArbzBSiblT86OtCULs9x1pG ouVuXa5OACtyrjKR8WygxRXxeEwlzMIHuvCwut84x65ztvYkdurU8A+aadx3KQyG CSEy+FjR2ukdK4maefAVirCggWFswuXn6li/eX3XrEKnl02joE+OT4n6al1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgg0jArYWhqcgiTa+ujNM7vHBIgEwHwYDVR0j BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWFY9bCK2WoBP55Z+hnpKRyhlzrkkiF+fLu nr0729zEg4W3DQyES1JbdG+plbSnW1Yt37LGnFXQO7BVMoRbvuZZwXVxhyp+5kE9 d+YKOROUJ4qIak9Ea3AHmax+fjKifyAm4d0jbLdYjejrYg4oEjbMpQgi0xrmPdt7 vBZvc+ZmJwJ1JmF8uQEgV7iynS8yyrWy+gHU3E6hUjiv0DFTgRclWeBiD0E8uaSP rz4zD9yzdHyX3ErV/z3KjZMWc+68YpTTkDDoMp5f++iSwK11/oD65tGQEeohR7ox zuSwQ2sMiJCnBzaDU4nBKbBraMTWEfIRT0jXIIhTQyW9Y8RdzPY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:26:52 2026 by rpki-client