$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft File: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft (raw, json) Hash identifier: HNH9eTl53KGqL8tHT6NvKRYUcpOHDThhoqRFIp/iT5w= Subject key identifier: A2:6E:78:E6:C6:26:A4:69:2D:34:A4:09:D2:12:87:BC:9E:1E:88:FE Authority key identifier: 88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB Certificate issuer: /CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Certificate serial: 32D4F304472978DFF00F2C4C439414774BFBD452 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 09:05:59 +0000 Manifest this update: Thu 23 Jul 2026 09:00:59 +0000 Manifest next update: Fri 24 Jul 2026 12:27:59 +0000 Files and hashes: 1: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl (hash: q3rcKplo1XISW1h96L7GMg9xnXubv7wpnHAPfbapLMA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d4:f3:04:47:29:78:df:f0:0f:2c:4c:43:94:14:77:4b:fb:d4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Validity Not Before: Jul 23 09:00:59 2026 GMT Not After : Jul 24 12:27:59 2026 GMT Subject: CN=A26E78E6C626A4692D34A409D21287BC9E1E88FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:29:5a:8a:75:cc:8f:46:6a:82:14:95:4c: f0:b4:2a:54:b7:92:0c:c1:5f:68:ea:21:86:40:86: 64:b6:e6:27:7b:39:f0:7d:bd:6e:8a:e1:c6:6a:1b: b9:26:2a:7b:19:7a:f6:2a:4a:24:e9:18:75:3e:89: 9d:fc:d7:22:a3:3d:c6:d9:fc:0c:e2:8c:68:5d:d3: b8:c3:a5:f1:86:d0:c3:de:5f:3a:e7:86:36:85:7c: e3:4f:98:a2:3e:f5:a4:a1:f8:b8:81:79:32:29:84: fe:53:d1:31:31:f2:f6:dd:58:fb:09:04:e3:9d:bb: c4:12:37:14:97:18:63:78:a5:b5:e3:5f:31:49:e4: f2:1f:1f:a6:75:6a:6e:d4:b6:87:14:11:f3:21:6c: 06:fb:90:f5:22:7e:dd:40:c5:89:07:d7:dd:26:2c: e5:8b:74:26:2b:8e:3b:68:8b:40:9d:88:1e:89:7c: 57:0b:fa:0b:1e:c2:46:30:bc:3e:b6:99:43:c2:64: d9:b2:a8:36:3f:9d:4b:e4:93:23:63:3d:13:55:6a: 4a:f9:4b:74:d4:65:bf:df:e4:d0:b0:68:1e:2a:14: f8:ba:93:f1:98:d8:3c:05:c9:36:0c:f4:78:74:c7: b5:46:00:e7:45:44:cc:33:65:07:d0:2f:91:85:48: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:78:E6:C6:26:A4:69:2D:34:A4:09:D2:12:87:BC:9E:1E:88:FE X509v3 Authority Key Identifier: keyid:88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:88:5c:4f:96:a1:6c:e4:d7:16:cd:f5:cb:21:ab:0d:1a:42: 9f:b6:23:39:61:e6:08:fe:a8:47:73:2e:34:9d:96:1b:10:7c: 5c:af:1d:0c:28:73:c6:c1:b0:81:49:d5:1f:e6:11:1c:b0:e6: c3:50:ce:cf:5f:49:f6:39:1e:24:ba:b9:d3:84:62:b4:3e:08: bd:8a:90:17:5a:e7:51:31:3a:f9:5e:77:14:13:d4:6d:3f:38: 61:e9:8e:bc:18:4b:61:41:32:44:a6:42:40:fa:35:b9:20:53: 17:2b:42:2d:f7:bd:8d:91:1c:2c:0b:d2:f1:a1:a5:73:8d:5a: 34:10:cc:f2:81:ac:7b:6a:d2:c6:43:e6:9c:c9:d8:92:0a:84: 1b:19:75:24:30:5c:32:58:61:97:f3:7f:83:19:58:83:45:27: b3:77:9c:07:78:56:f1:23:c4:29:0a:dc:df:a7:6a:ea:6a:df: c0:48:e8:4d:5c:8e:7b:fa:a5:dd:46:3d:97:73:7a:ff:db:c9: fa:4a:cb:97:06:f9:c5:1f:2c:9e:b8:ca:5c:26:b2:86:93:e9: 5a:b4:3f:e9:2a:84:bb:ab:7c:7e:58:71:93:58:50:19:b5:a8: 83:5b:1f:d5:5e:c6:18:9b:05:15:27:68:c3:10:bd:c9:97:82: dc:0d:92:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtTzBEcpeN/wDyxMQ5QUd0v71FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFF N0VBMTBFQjAeFw0yNjA3MjMwOTAwNTlaFw0yNjA3MjQxMjI3NTlaMDMxMTAvBgNV BAMTKEEyNkU3OEU2QzYyNkE0NjkyRDM0QTQwOUQyMTI4N0JDOUUxRTg4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXylainXMj0ZqghSVTPC0KlS3 kgzBX2jqIYZAhmS25id7OfB9vW6K4cZqG7kmKnsZevYqSiTpGHU+iZ381yKjPcbZ /AzijGhd07jDpfGG0MPeXzrnhjaFfONPmKI+9aSh+LiBeTIphP5T0TEx8vbdWPsJ BOOdu8QSNxSXGGN4pbXjXzFJ5PIfH6Z1am7UtocUEfMhbAb7kPUift1AxYkH190m LOWLdCYrjjtoi0CdiB6JfFcL+gsewkYwvD62mUPCZNmyqDY/nUvkkyNjPRNVakr5 S3TUZb/f5NCwaB4qFPi6k/GY2DwFyTYM9Hh0x7VGAOdFRMwzZQfQL5GFSOgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUom545sYmpGktNKQJ0hKHvJ4eiP4wHwYDVR0j BBgwFoAUiN1+sJfj8e0dOU4z/inhUefqEOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0NGE3MjYtNzA3Yy00OWUyLWJmY2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5 N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFFN0VBMTBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OEREN0VCMDk3RTNGMUVEMUQzOTRFMzNGRTI5RTE1MUU3RUEx MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUx NTFFN0VBMTBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuIXE+WoWzk1xbN9cshqw0aQp+2Izlh5gj+ qEdzLjSdlhsQfFyvHQwoc8bBsIFJ1R/mERyw5sNQzs9fSfY5HiS6udOEYrQ+CL2K kBda51ExOvledxQT1G0/OGHpjrwYS2FBMkSmQkD6NbkgUxcrQi33vY2RHCwL0vGh pXONWjQQzPKBrHtq0sZD5pzJ2JIKhBsZdSQwXDJYYZfzf4MZWINFJ7N3nAd4VvEj xCkK3N+naupq38BI6E1cjnv6pd1GPZdzev/byfpKy5cG+cUfLJ64ylwmsoaT6Vq0 P+kqhLurfH5YcZNYUBm1qINbH9VexhibBRUnaMMQvcmXgtwNknQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:04 2026 by rpki-client