$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: a3jf7tUbz966jtq8QtgxiEzq7BDikTAZ1cQF71CJczw= Subject key identifier: C2:DD:2B:F7:EF:DB:8C:F3:00:A1:A0:6E:68:FD:99:EA:FA:31:2A:50 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 55558A72948100AFF5AF2027DCAB484AC4F8D0EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 0124 Signing time: Wed 25 Mar 2026 16:01:35 +0000 Manifest this update: Wed 25 Mar 2026 15:56:35 +0000 Manifest next update: Sat 28 Mar 2026 19:30:35 +0000 Files and hashes: 1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) 2: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: fAlm9H97gE6wTDKWzTDsGFJkXFefxLG5iCejj29eljs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:55:8a:72:94:81:00:af:f5:af:20:27:dc:ab:48:4a:c4:f8:d0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Mar 25 15:56:35 2026 GMT Not After : Mar 28 19:30:35 2026 GMT Subject: CN=C2DD2BF7EFDB8CF300A1A06E68FD99EAFA312A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:8f:a5:8d:3c:2b:ae:c8:24:a3:0e:21:51: 09:8f:ac:04:12:82:cd:2f:9c:3a:f6:31:15:20:cd: 63:a5:ce:50:c7:f1:3b:fd:1f:94:90:ee:9b:30:47: b6:62:dc:90:59:ec:14:31:9d:05:5b:6b:d2:c9:d6: 6c:e9:a1:d3:7b:1d:ea:c6:78:b1:29:28:fb:92:4c: b1:7b:12:59:7b:16:54:f3:45:e4:5d:7a:91:75:a9: 43:56:fa:e3:ba:4c:c7:b8:4e:95:03:d1:14:3c:e3: 1c:05:c5:2f:13:a9:98:18:90:ad:5b:f0:eb:9b:b5: 89:1d:46:75:a3:8d:79:af:c3:3c:f5:06:60:28:15: 3a:93:a1:db:04:a3:52:ce:86:fc:3d:fd:73:8d:ec: 26:64:70:d3:0c:f5:76:15:66:e8:74:75:d7:e4:25: f3:83:18:5c:a8:2e:15:75:c1:2b:12:c2:f3:ef:7f: 39:38:d0:b7:cc:2d:28:eb:0b:fc:9d:37:d7:d8:1e: 74:59:d8:dc:8f:aa:cb:71:ba:e8:8a:65:b9:8a:93: 0c:8c:6c:62:1a:9b:87:25:7f:35:b8:44:f1:e6:fe: 01:d0:0d:26:8e:bf:16:cb:05:4c:cd:21:e6:df:a1: 46:62:66:93:93:2f:91:dd:8d:1e:36:4c:91:dc:e2: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:2B:F7:EF:DB:8C:F3:00:A1:A0:6E:68:FD:99:EA:FA:31:2A:50 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e0:4a:f3:c8:46:a9:85:22:ab:2f:e5:4a:5b:d0:fc:34:5e: 8e:7b:73:9a:21:62:be:71:42:08:0a:10:08:4a:f6:00:ab:f1: 3b:88:92:9b:3a:ef:3d:d1:94:bc:ad:8a:e7:b0:6a:70:fd:e3: 36:80:d1:cf:8d:64:69:f6:b5:d1:4f:d8:e7:f3:7a:0c:48:66: a2:c7:88:3b:0c:69:20:4a:d0:cc:2a:d2:04:d0:92:b5:3c:97: b1:ac:80:a0:73:4a:46:80:49:8a:96:b3:07:54:87:53:f7:10: 93:e3:59:42:8a:9f:30:7f:d1:98:47:d2:86:4c:31:60:74:b3: 8c:81:24:29:eb:ff:28:65:f1:ab:6d:f4:bd:ee:5d:7b:13:cf: 9f:63:0b:74:fb:e4:81:0b:80:c0:85:b0:7a:4d:2f:81:71:ae: 05:5e:c8:84:f9:5e:82:48:53:92:8f:5a:75:98:43:23:63:ba: 29:1e:29:da:a3:3d:84:0c:0f:8f:e7:70:a7:45:48:58:89:35: 84:78:6d:e3:91:2e:da:69:17:00:56:ac:50:f6:41:66:c2:5c: d9:f8:db:ca:d3:5e:a5:b7:bf:b8:fd:8c:1c:54:0c:2b:4c:0c: 6c:f3:bc:50:f1:89:e8:ad:4f:af:d0:68:f3:2d:03:c1:82:76: ff:57:bb:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVWKcpSBAK/1ryAn3KtISsT40OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNjAzMjUxNTU2MzVaFw0yNjAzMjgxOTMwMzVaMDMxMTAvBgNV BAMTKEMyREQyQkY3RUZEQjhDRjMwMEExQTA2RTY4RkQ5OUVBRkEzMTJBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gI+ljTwrrsgkow4hUQmPrAQS gs0vnDr2MRUgzWOlzlDH8Tv9H5SQ7pswR7Zi3JBZ7BQxnQVba9LJ1mzpodN7HerG eLEpKPuSTLF7Ell7FlTzReRdepF1qUNW+uO6TMe4TpUD0RQ84xwFxS8TqZgYkK1b 8OubtYkdRnWjjXmvwzz1BmAoFTqTodsEo1LOhvw9/XON7CZkcNMM9XYVZuh0ddfk JfODGFyoLhV1wSsSwvPvfzk40LfMLSjrC/ydN9fYHnRZ2NyPqstxuuiKZbmKkwyM bGIam4clfzW4RPHm/gHQDSaOvxbLBUzNIebfoUZiZpOTL5HdjR42TJHc4oC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwt0r9+/bjPMAoaBuaP2Z6voxKlAwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3gSvPIRqmFIqsv5Upb0Pw0Xo57c5ohYr5x QggKEAhK9gCr8TuIkps67z3RlLytiuewanD94zaA0c+NZGn2tdFP2OfzegxIZqLH iDsMaSBK0Mwq0gTQkrU8l7GsgKBzSkaASYqWswdUh1P3EJPjWUKKnzB/0ZhH0oZM MWB0s4yBJCnr/yhl8att9L3uXXsTz59jC3T75IELgMCFsHpNL4FxrgVeyIT5XoJI U5KPWnWYQyNjuikeKdqjPYQMD4/ncKdFSFiJNYR4beORLtppFwBWrFD2QWbCXNn4 28rTXqW3v7j9jBxUDCtMDGzzvFDxieitT6/QaPMtA8GCdv9Xuzs= -----END CERTIFICATE-----Generated at Fri Mar 27 02:15:05 2026 by rpki-client