$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: hGfptVZsl7P9adxmQJnjGMeIdSd+Q99aSOoelXcEY4U= Subject key identifier: 8A:8D:CC:02:2D:BB:4F:F8:B4:C3:BC:5D:54:B6:D3:D0:49:AD:8F:77 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 18B562C6808948EEC044A97F4162B269131972CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: 0165 Signing time: Wed 25 Mar 2026 12:42:20 +0000 Manifest this update: Wed 25 Mar 2026 12:37:20 +0000 Manifest next update: Sat 28 Mar 2026 15:13:20 +0000 Files and hashes: 1: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: oz0VoifCMNP228VdCKnW1ps+VP8OJmpffYuz+r53ctY=) 2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: jBlPZ38x7fUq8L2OxFB/CipZgVFJBPwzL0K4wuU8V0I=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: s65ULf3kYPzmHhD/eaw4xa7fxStyJaVV06ikaxq29vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b5:62:c6:80:89:48:ee:c0:44:a9:7f:41:62:b2:69:13:19:72:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Mar 25 12:37:20 2026 GMT Not After : Mar 28 15:13:20 2026 GMT Subject: CN=8A8DCC022DBB4FF8B4C3BC5D54B6D3D049AD8F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:70:a4:c0:d1:09:9e:ad:31:1f:43:5c:9c: 01:cc:1c:a6:98:0f:74:74:f1:2d:68:df:ab:e4:56: 11:76:97:bc:dd:d5:73:17:c1:07:eb:ce:a6:05:cf: 8c:37:bd:02:b8:ba:51:7b:a3:cb:15:38:7d:10:4c: 5f:c6:0d:de:ce:74:9a:e0:6c:8c:35:13:62:6a:08: 19:c1:06:be:f3:a3:bb:fe:a1:ee:6e:b1:b8:0f:21: 3c:b0:bc:bf:a7:b1:3a:f8:0b:e7:09:f5:19:15:40: 88:8e:e1:99:c2:44:6b:ee:4c:de:77:10:e1:ef:5c: d9:b5:5d:6c:67:a9:ea:e2:ca:09:22:12:f7:23:d5: 47:e8:26:fa:2f:c4:52:f3:2f:c5:38:86:4f:36:0f: ba:37:50:f2:7d:99:da:4d:73:cc:a7:69:fe:0a:17: 85:c1:1b:05:cd:f3:5a:93:d7:a4:79:4e:45:be:31: 24:bc:57:ce:27:f9:85:89:94:c4:f6:85:02:c6:6b: 98:0c:0d:71:69:62:46:9d:ee:d6:06:30:06:1e:06: bd:3a:12:81:25:a8:bf:35:7b:b1:d6:fa:4c:85:d5: 6b:24:9c:49:20:63:8f:68:f8:4e:fb:a1:ca:d4:0f: ae:bb:58:ff:34:be:8f:a5:60:f9:82:ae:9f:09:2e: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:CC:02:2D:BB:4F:F8:B4:C3:BC:5D:54:B6:D3:D0:49:AD:8F:77 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ba:6d:76:49:ce:bf:28:39:71:43:e0:51:92:29:59:67:57: 93:f7:69:80:9c:4c:71:cb:7f:28:56:7b:d1:a8:cd:6f:9a:5f: c9:87:71:77:03:70:08:78:9c:9f:0f:a4:66:50:f4:92:17:02: 36:4b:47:21:fd:09:13:f3:56:46:20:8e:cf:e8:d0:8e:42:a2: 3f:00:67:16:7f:07:2d:fd:5e:10:31:c6:8b:5b:72:de:12:43: 52:bb:21:96:00:48:e5:43:fb:50:20:67:5d:d8:0c:62:ee:63: 94:01:47:0e:f0:6b:2a:28:c7:e3:0b:d0:86:6e:01:41:4c:00: b2:a1:96:1d:47:ab:28:44:df:22:09:da:4c:f5:f2:e1:c1:a9: ea:19:76:bc:cd:79:be:30:6f:ee:b9:35:9c:b0:ce:05:d2:10: 2f:48:cb:27:25:31:a3:bd:a5:e2:05:b8:12:d6:69:f1:34:41: e4:0b:29:ef:ee:5a:d8:1c:6d:25:f1:fa:01:a6:ee:05:17:1f: 34:1b:92:d2:6f:c1:7c:e7:a6:4b:4a:41:98:ec:2e:b2:9e:c6: 59:6e:8b:cc:96:ec:a7:1d:d0:12:a1:ba:fd:df:c2:84:4c:9a: ba:3a:9c:46:f1:f4:3f:ed:32:45:df:3b:a0:fd:c7:b9:e3:20: ec:88:7c:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLVixoCJSO7ARKl/QWKyaRMZcs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNjAzMjUxMjM3MjBaFw0yNjAzMjgxNTEzMjBaMDMxMTAvBgNV BAMTKDhBOERDQzAyMkRCQjRGRjhCNEMzQkM1RDU0QjZEM0QwNDlBRDhGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6G3CkwNEJnq0xH0NcnAHMHKaY D3R08S1o36vkVhF2l7zd1XMXwQfrzqYFz4w3vQK4ulF7o8sVOH0QTF/GDd7OdJrg bIw1E2JqCBnBBr7zo7v+oe5usbgPITywvL+nsTr4C+cJ9RkVQIiO4ZnCRGvuTN53 EOHvXNm1XWxnqeriygkiEvcj1UfoJvovxFLzL8U4hk82D7o3UPJ9mdpNc8ynaf4K F4XBGwXN81qT16R5TkW+MSS8V84n+YWJlMT2hQLGa5gMDXFpYkad7tYGMAYeBr06 EoElqL81e7HW+kyF1WsknEkgY49o+E77ocrUD667WP80vo+lYPmCrp8JLgXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUio3MAi27T/i0w7xdVLbT0Emtj3cwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW6bXZJzr8oOXFD4FGSKVlnV5P3aYCcTHHL fyhWe9GozW+aX8mHcXcDcAh4nJ8PpGZQ9JIXAjZLRyH9CRPzVkYgjs/o0I5Coj8A ZxZ/By39XhAxxotbct4SQ1K7IZYASOVD+1AgZ13YDGLuY5QBRw7wayoox+ML0IZu AUFMALKhlh1HqyhE3yIJ2kz18uHBqeoZdrzNeb4wb+65NZywzgXSEC9IyyclMaO9 peIFuBLWafE0QeQLKe/uWtgcbSXx+gGm7gUXHzQbktJvwXznpktKQZjsLrKexllu i8yW7Kcd0BKhuv3fwoRMmro6nEbx9D/tMkXfO6D9x7njIOyIfH0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:54 2026 by rpki-client