$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: euqcioxqYTlLiOifggmDXhWwskdvmgw6oCXp4drLF/s= Subject key identifier: 55:8A:1F:DC:EF:D9:69:DC:70:F7:1A:F1:40:5C:C9:CF:F5:F7:90:74 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 673820ED88FD211DE88C637F3BA4729F1E8E716B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 016A Signing time: Thu 26 Mar 2026 17:01:59 +0000 Manifest this update: Thu 26 Mar 2026 16:56:59 +0000 Manifest next update: Sun 29 Mar 2026 18:01:59 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) 3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: Qe9tZkVudvrCX3e3Qhcy0fxl9R+cipYbkD5ZGegpewY=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 18:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:38:20:ed:88:fd:21:1d:e8:8c:63:7f:3b:a4:72:9f:1e:8e:71:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Mar 26 16:56:59 2026 GMT Not After : Mar 29 18:01:59 2026 GMT Subject: CN=558A1FDCEFD969DC70F71AF1405CC9CFF5F79074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:c1:b8:91:f1:8a:e9:b2:e6:ed:2a:e7:36: 8f:5d:f0:9e:61:fc:01:03:d5:99:14:82:eb:c1:05: 30:c0:9a:af:26:7f:4f:07:af:da:8a:ff:a5:6e:c9: 94:2d:de:82:95:00:79:71:cb:80:a4:f9:06:7b:83: 61:ed:d0:dc:20:ae:78:6f:10:83:20:71:6c:89:94: fb:04:57:19:eb:f0:fe:c3:f9:82:9c:df:92:bf:e8: e5:7d:35:64:9d:1d:7d:d2:cf:db:55:33:fe:8a:45: 3a:fa:a8:bc:3e:e0:23:99:11:85:e7:5d:49:6a:ab: 62:8a:c8:32:c4:88:f2:ca:13:48:d7:50:76:e3:37: 3b:90:b2:38:e4:f9:f9:52:a1:16:20:1f:00:62:cd: a5:c1:06:94:56:5f:eb:5d:5c:c6:5e:f3:c9:2d:73: cf:a7:5e:06:ec:e6:a0:0c:c5:31:7e:12:17:e7:0c: 75:fb:57:a3:63:13:34:2c:25:8c:4d:cf:f2:6a:f2: 58:c7:1c:24:4d:1d:8b:87:1c:75:7e:d1:64:7a:7d: e7:fe:c3:d6:7c:39:9d:7c:f6:69:49:22:c5:18:64: 21:7e:73:d5:43:12:2f:96:b2:3b:a6:6f:c7:f3:e8: a3:21:37:96:76:34:27:c9:67:10:31:d8:56:fe:a9: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8A:1F:DC:EF:D9:69:DC:70:F7:1A:F1:40:5C:C9:CF:F5:F7:90:74 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c5:07:af:cf:72:8b:b5:4f:4f:9d:64:b4:79:93:8b:82:40: 91:3b:90:83:17:b1:91:9f:af:3d:5f:76:36:9c:86:92:87:c1: 1e:df:82:8c:a2:76:48:85:0f:bf:32:2c:ee:da:9a:69:53:c5: 16:a1:79:e7:59:3a:df:28:b5:88:4a:91:ec:ab:12:4e:16:89: 39:71:5d:b2:0b:c1:60:41:f9:7a:66:b0:ee:eb:e9:08:84:75: 1f:af:05:40:e3:a6:73:1b:9f:08:6f:e2:b8:21:ff:8c:bb:1e: d7:18:a7:be:77:11:2a:1a:51:c3:00:c7:44:79:c2:51:fd:34: 23:aa:65:43:be:3f:ef:55:9e:15:d2:81:60:f8:5f:91:78:ca: 4f:f4:d2:08:b6:e8:ca:fc:a3:f1:31:70:77:81:7a:5e:cc:a0: 38:b1:49:17:53:6d:5c:bb:df:f4:21:e5:69:2f:8b:de:49:d4: 45:2a:47:66:fc:f4:98:3e:af:37:cb:b9:70:d3:96:0b:03:13: b4:40:77:70:35:62:f6:50:5d:31:03:e1:7f:0f:df:fb:a0:ca: 6a:a3:b3:f5:01:69:45:bf:3b:66:f7:e4:b0:a3:c0:67:3b:ed: 6e:b6:2b:e6:3e:ff:32:22:77:4b:c9:32:54:f8:a0:83:c1:15: c9:c2:1f:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzgg7Yj9IR3ojGN/O6Rynx6OcWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNjAzMjYxNjU2NTlaFw0yNjAzMjkxODAxNTlaMDMxMTAvBgNV BAMTKDU1OEExRkRDRUZEOTY5REM3MEY3MUFGMTQwNUNDOUNGRjVGNzkwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78sG4kfGK6bLm7SrnNo9d8J5h /AED1ZkUguvBBTDAmq8mf08Hr9qK/6VuyZQt3oKVAHlxy4Ck+QZ7g2Ht0Nwgrnhv EIMgcWyJlPsEVxnr8P7D+YKc35K/6OV9NWSdHX3Sz9tVM/6KRTr6qLw+4COZEYXn XUlqq2KKyDLEiPLKE0jXUHbjNzuQsjjk+flSoRYgHwBizaXBBpRWX+tdXMZe88kt c8+nXgbs5qAMxTF+EhfnDHX7V6NjEzQsJYxNz/Jq8ljHHCRNHYuHHHV+0WR6fef+ w9Z8OZ189mlJIsUYZCF+c9VDEi+Wsjumb8fz6KMhN5Z2NCfJZxAx2Fb+qSpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYof3O/Zadxw9xrxQFzJz/X3kHQwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfFB6/Pcou1T0+dZLR5k4uCQJE7kIMXsZGf rz1fdjachpKHwR7fgoyidkiFD78yLO7ammlTxRaheedZOt8otYhKkeyrEk4WiTlx XbILwWBB+XpmsO7r6QiEdR+vBUDjpnMbnwhv4rgh/4y7HtcYp753ESoaUcMAx0R5 wlH9NCOqZUO+P+9VnhXSgWD4X5F4yk/00gi26Mr8o/ExcHeBel7MoDixSRdTbVy7 3/Qh5Wkvi95J1EUqR2b89Jg+rzfLuXDTlgsDE7RAd3A1YvZQXTED4X8P3/ugymqj s/UBaUW/O2b35LCjwGc77W62K+Y+/zIid0vJMlT4oIPBFcnCH1Q= -----END CERTIFICATE-----Generated at Thu Mar 26 20:07:53 2026 by rpki-client