$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft File: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft (raw, json) Hash identifier: OLNOrcYxIP18IBapRnCK2oSnTeqtx/oV73HHvmE8hH0= Subject key identifier: 68:93:12:25:01:6F:DE:6D:0C:3B:15:9D:DF:99:77:3E:8F:FB:87:3D Authority key identifier: 88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB Certificate issuer: /CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Certificate serial: 7372FDECB2A768503F957E5AC2222C8F983476B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:30:32 +0000 Manifest this update: Tue 12 May 2026 19:25:32 +0000 Manifest next update: Wed 13 May 2026 22:06:32 +0000 Files and hashes: 1: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl (hash: WM8lkWlNLiF/sqMSNuMnl886fUyd6nMbc9VW+bvtLV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:72:fd:ec:b2:a7:68:50:3f:95:7e:5a:c2:22:2c:8f:98:34:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Validity Not Before: May 12 19:25:32 2026 GMT Not After : May 13 22:06:32 2026 GMT Subject: CN=68931225016FDE6D0C3B159DDF99773E8FFB873D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:10:b3:29:1d:00:2c:26:fd:b1:78:51:d7: 24:7e:0c:84:f7:4e:7e:37:1d:9d:6d:a4:e4:24:25: 58:6a:ec:b3:59:12:b9:6c:fd:4e:b9:9c:ab:66:36: 62:0e:20:90:23:b9:0e:c9:3d:84:38:ba:87:a8:d9: a3:88:50:89:f7:d8:92:60:70:e4:05:86:fe:58:66: 09:11:b7:7d:a4:22:00:2d:c0:4c:90:f5:21:2d:4c: 58:ef:e6:13:cd:c5:48:c9:c6:64:41:72:14:e6:ca: 84:d3:ec:ef:08:4d:fc:5d:6c:44:15:8f:23:ec:41: e1:b6:e5:4b:ec:a3:8c:1d:28:21:67:a6:c1:33:d6: 2d:aa:af:8b:d9:d3:d1:1d:72:f2:1d:c6:92:c4:39: 6b:d4:2d:0d:f3:c1:4d:dd:7c:e0:e0:43:c9:f3:66: 30:c5:aa:d1:9c:68:f3:d8:c7:a3:7f:28:62:0a:d8: bc:89:ba:26:10:80:8f:32:af:6c:21:10:93:10:57: 55:2c:9f:0a:52:14:4c:b8:bd:c1:c2:62:0b:e3:d3: 53:e1:10:e3:e3:7f:fb:1e:74:78:ab:b7:a4:88:fe: 3d:25:cf:d5:98:2d:45:86:0e:7f:81:d5:7a:f5:0a: 30:68:f9:c3:20:b8:fa:3b:bf:5f:f2:af:f0:44:76: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:93:12:25:01:6F:DE:6D:0C:3B:15:9D:DF:99:77:3E:8F:FB:87:3D X509v3 Authority Key Identifier: keyid:88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:52:e7:08:d2:2d:3d:6e:b3:e5:03:ed:80:94:6e:08:64: 65:c0:10:f3:67:b5:af:05:81:3d:06:e6:ba:db:d3:1f:ea:7c: a4:de:1f:4a:9d:f1:f8:02:cb:5a:e3:23:e6:57:f0:f6:b0:8b: ed:d9:cb:c5:02:e7:bd:9b:6d:96:1d:78:df:38:70:f7:e8:61: 0a:fa:50:e6:03:1b:a8:5d:53:55:7d:47:c2:f3:1d:f9:ed:6b: e4:0a:96:20:aa:f7:f5:88:19:42:89:6d:79:f6:a9:a6:6a:36: b3:97:c2:5d:cf:85:87:c7:94:c3:20:f8:01:55:ea:31:ed:9e: 14:71:52:e1:5c:16:67:18:9b:56:8e:7c:6f:ba:c7:16:a0:da: f5:59:26:20:07:38:d4:91:ba:03:e0:26:d7:2a:dc:98:70:e1: 9d:3c:ba:c7:dc:91:cd:c1:13:f4:74:1a:80:91:6c:cd:e0:18: 19:eb:24:b3:5e:08:2f:43:44:a8:ff:aa:8c:9c:92:6b:07:7b: 94:8e:48:6b:8c:94:3e:95:e8:7b:06:dc:0e:15:db:fe:0f:7e: 60:a0:e7:9e:92:8f:50:99:ad:68:97:7b:48:74:aa:0b:8f:82: 10:9e:03:ff:c3:d7:6c:54:0b:05:75:4a:4d:75:7b:93:74:f0: 11:26:84:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3L97LKnaFA/lX5awiIsj5g0drcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFF N0VBMTBFQjAeFw0yNjA1MTIxOTI1MzJaFw0yNjA1MTMyMjA2MzJaMDMxMTAvBgNV BAMTKDY4OTMxMjI1MDE2RkRFNkQwQzNCMTU5RERGOTk3NzNFOEZGQjg3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXBCzKR0ALCb9sXhR1yR+DIT3 Tn43HZ1tpOQkJVhq7LNZErls/U65nKtmNmIOIJAjuQ7JPYQ4uoeo2aOIUIn32JJg cOQFhv5YZgkRt32kIgAtwEyQ9SEtTFjv5hPNxUjJxmRBchTmyoTT7O8ITfxdbEQV jyPsQeG25Uvso4wdKCFnpsEz1i2qr4vZ09EdcvIdxpLEOWvULQ3zwU3dfODgQ8nz ZjDFqtGcaPPYx6N/KGIK2LyJuiYQgI8yr2whEJMQV1UsnwpSFEy4vcHCYgvj01Ph EOPjf/sedHirt6SI/j0lz9WYLUWGDn+B1Xr1CjBo+cMguPo7v1/yr/BEdt7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJMSJQFv3m0MOxWd35l3Po/7hz0wHwYDVR0j BBgwFoAUiN1+sJfj8e0dOU4z/inhUefqEOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0NGE3MjYtNzA3Yy00OWUyLWJmY2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5 N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFFN0VBMTBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OEREN0VCMDk3RTNGMUVEMUQzOTRFMzNGRTI5RTE1MUU3RUEx MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUx NTFFN0VBMTBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIXUucI0i09brPlA+2AlG4IZGXAEPNnta8F gT0G5rrb0x/qfKTeH0qd8fgCy1rjI+ZX8Pawi+3Zy8UC572bbZYdeN84cPfoYQr6 UOYDG6hdU1V9R8LzHfnta+QKliCq9/WIGUKJbXn2qaZqNrOXwl3PhYfHlMMg+AFV 6jHtnhRxUuFcFmcYm1aOfG+6xxag2vVZJiAHONSRugPgJtcq3Jhw4Z08usfckc3B E/R0GoCRbM3gGBnrJLNeCC9DRKj/qoyckmsHe5SOSGuMlD6V6HsG3A4V2/4PfmCg 556Sj1CZrWiXe0h0qguPghCeA//D12xUCwV1Sk11e5N08BEmhCk= -----END CERTIFICATE-----Generated at Tue May 12 22:13:29 2026 by rpki-client