$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: uZLnyS28Zi4i7Y3jgQXI9dybIEaGGEjr+KgEPNrJWN8= Subject key identifier: 16:ED:69:EE:D8:8F:5A:EF:E8:E5:D4:0F:ED:B5:15:41:F4:4C:DE:44 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 6E4F2BCBE07DC867146D1733658A808ED32D68D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 0350 Signing time: Wed 25 Mar 2026 06:52:46 +0000 Manifest this update: Wed 25 Mar 2026 06:47:46 +0000 Manifest next update: Sat 28 Mar 2026 08:29:46 +0000 Files and hashes: 1: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 2: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: BHRxBcyTVx5QSivfeVetB9dghEKE0QdD++fUrS6/oZg=) 3: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 4: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 5: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 6: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 7: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) 8: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 9: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 10: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 11: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4f:2b:cb:e0:7d:c8:67:14:6d:17:33:65:8a:80:8e:d3:2d:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Mar 25 06:47:46 2026 GMT Not After : Mar 28 08:29:46 2026 GMT Subject: CN=16ED69EED88F5AEFE8E5D40FEDB51541F44CDE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:ac:bb:6e:0c:3e:6b:66:71:17:81:a9:a7: 98:7c:70:65:71:e6:d6:7d:26:95:9f:04:74:70:d8: ec:1f:5b:9c:88:4e:4f:42:2c:01:81:db:9a:f0:bd: 58:f2:0b:eb:a9:93:d3:13:01:74:62:6e:99:c1:d9: 5a:9e:86:41:9a:b5:b9:a4:b7:cd:c0:94:78:80:d0: 98:bf:8d:15:2d:11:68:64:bf:54:38:25:4f:55:55: 35:54:59:bd:a8:01:c4:e7:8a:92:c9:7d:9c:62:ad: 48:bd:cf:78:d5:d6:f0:4e:c5:62:d3:07:51:99:df: b0:df:c9:b3:e6:92:cb:62:f4:05:ea:8c:48:d7:79: d1:5c:6b:c3:ac:16:56:63:21:e5:3d:71:9b:55:fe: 7e:aa:d4:2a:c2:4b:55:65:28:a2:b0:a2:bd:a0:53: 47:36:ff:b5:68:a4:f4:de:cc:7a:d8:b6:fa:b3:30: 3c:74:72:ae:d7:2f:4d:2d:25:5f:ef:43:a4:bf:a9: cc:67:98:11:43:30:a5:7a:9e:93:4d:a3:e5:f1:01: 97:4f:fd:82:71:53:a0:d8:74:23:b2:b8:1b:f5:46: ef:2e:03:db:70:fd:8e:dd:76:00:b7:2d:86:f5:03: 48:b7:8b:91:df:e4:73:fb:16:a7:d0:c6:55:54:92: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:ED:69:EE:D8:8F:5A:EF:E8:E5:D4:0F:ED:B5:15:41:F4:4C:DE:44 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:16:c4:52:ad:33:77:58:86:5a:10:0b:21:7b:69:27:63:96: 04:38:95:ba:38:60:95:86:c9:b1:9a:38:39:82:05:ac:8f:7c: 45:3a:eb:a7:2f:83:8c:13:6a:7b:21:c2:f0:5e:98:a6:19:5f: 77:bf:dd:06:e0:e3:f1:ac:59:8f:fb:f7:14:f2:7d:4c:4e:88: f7:4b:3d:a7:ee:99:7b:c0:c6:c1:fa:b0:46:f3:81:7e:ef:9f: dc:55:81:02:ee:da:30:28:65:0a:0b:b0:26:e5:13:85:2b:c9: 4e:8a:2f:6c:6b:98:05:28:16:25:13:34:fd:e8:5e:b6:08:16: 26:8e:af:0f:86:61:df:50:9f:48:f4:8b:75:86:ac:08:34:56: 0e:fb:31:0b:91:3a:eb:e5:bf:dd:cd:17:89:5b:7e:3d:3f:4c: 17:38:56:05:fc:39:1c:a8:b3:b6:ad:83:a1:e4:8a:a6:83:23: ec:42:d6:bc:73:e7:08:59:c4:1b:49:70:35:ed:3a:04:95:13: 8e:ed:11:48:e7:3d:95:5b:b2:e6:6d:aa:f1:93:ac:98:ba:65: 36:c8:8a:25:e6:21:96:61:12:12:55:d8:8d:25:94:68:c6:0c: 30:10:56:62:8e:03:cf:0e:76:64:2d:4b:2a:46:d6:7e:b4:7d: a5:ff:87:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbk8ry+B9yGcUbRczZYqAjtMtaNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNjAzMjUwNjQ3NDZaFw0yNjAzMjgwODI5NDZaMDMxMTAvBgNV BAMTKDE2RUQ2OUVFRDg4RjVBRUZFOEU1RDQwRkVEQjUxNTQxRjQ0Q0RFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Dqy7bgw+a2ZxF4Gpp5h8cGVx 5tZ9JpWfBHRw2OwfW5yITk9CLAGB25rwvVjyC+upk9MTAXRibpnB2VqehkGatbmk t83AlHiA0Ji/jRUtEWhkv1Q4JU9VVTVUWb2oAcTnipLJfZxirUi9z3jV1vBOxWLT B1GZ37DfybPmksti9AXqjEjXedFca8OsFlZjIeU9cZtV/n6q1CrCS1VlKKKwor2g U0c2/7VopPTezHrYtvqzMDx0cq7XL00tJV/vQ6S/qcxnmBFDMKV6npNNo+XxAZdP /YJxU6DYdCOyuBv1Ru8uA9tw/Y7ddgC3LYb1A0i3i5Hf5HP7FqfQxlVUkrNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFu1p7tiPWu/o5dQP7bUVQfRM3kQwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOEWxFKtM3dYhloQCyF7aSdjlgQ4lbo4YJWG ybGaODmCBayPfEU666cvg4wTanshwvBemKYZX3e/3Qbg4/GsWY/79xTyfUxOiPdL PafumXvAxsH6sEbzgX7vn9xVgQLu2jAoZQoLsCblE4UryU6KL2xrmAUoFiUTNP3o XrYIFiaOrw+GYd9Qn0j0i3WGrAg0Vg77MQuROuvlv93NF4lbfj0/TBc4VgX8ORyo s7atg6HkiqaDI+xC1rxz5whZxBtJcDXtOgSVE47tEUjnPZVbsuZtqvGTrJi6ZTbI iiXmIZZhEhJV2I0llGjGDDAQVmKOA88OdmQtSypG1n60faX/h2c= -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:41 2026 by rpki-client