$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: u88vnfkvZwXw8aT4q2uwJGH7Rtec68hcVIZLQwk5ors= Subject key identifier: CF:F1:1D:F5:51:89:17:00:02:46:88:E3:04:10:0F:3C:DB:6E:A1:7B Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 32812CEA936EDD662A9B9E25E31017F7585E6878 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 11:44:11 +0000 Manifest this update: Sat 14 Nov 2026 11:39:11 +0000 Manifest next update: Sun 15 Nov 2026 11:56:11 +0000 Files and hashes: 1: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 1+JTfYoEqYG8HL8IOwRwwtz6yQl8cWQuH4yZNj+/L1Y=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 3: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: kBReW5LQuagUTIDCHNbGkRsobeKuZld5XEAudYsdE4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 11:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:81:2c:ea:93:6e:dd:66:2a:9b:9e:25:e3:10:17:f7:58:5e:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Nov 14 11:39:11 2026 GMT Not After : Nov 15 11:56:11 2026 GMT Subject: CN=CFF11DF551891700024688E304100F3CDB6EA17B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:74:bb:ca:94:ad:e5:21:ea:6f:e3:89:ea: 2e:f2:74:f9:41:b3:30:20:b5:6f:12:21:b4:40:53: bb:0c:cb:c6:f9:24:05:a5:78:89:1e:2a:65:47:eb: 19:94:31:6f:5c:4e:3c:9b:67:08:7f:55:36:b8:78: f5:82:b2:7c:7e:c8:a6:e0:56:c9:61:fa:52:25:50: 14:7c:75:9a:8c:f8:17:30:3c:c8:bc:7c:b3:30:cd: 01:cc:4e:ed:77:5a:7e:c1:44:a1:5e:50:3a:fe:39: 5f:df:e1:54:78:67:62:17:25:a7:65:df:11:c0:ba: b7:d1:dc:89:e7:2e:dd:5f:a1:71:38:7d:b6:f8:d3: ba:eb:83:1c:d7:f9:39:e8:b3:b8:33:b7:a0:38:6e: 9d:03:d9:d7:a5:22:e3:de:33:10:43:06:ab:23:43: 8a:01:f9:f6:da:83:ae:b7:96:31:2e:bb:7a:51:e9: 57:45:ba:f4:56:43:ca:bd:97:02:a9:f1:bd:7a:29: 3d:75:31:0d:d9:1f:60:82:16:6c:3a:a6:bc:78:8d: 98:30:9d:37:10:94:97:cc:b5:53:0e:ab:80:08:b7: e1:7b:4d:57:a7:e0:42:93:ff:46:47:eb:1a:d4:c1: 83:b7:f7:18:50:0c:ae:d1:c6:49:52:9a:e8:ca:b4: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:1D:F5:51:89:17:00:02:46:88:E3:04:10:0F:3C:DB:6E:A1:7B X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bd:1b:8c:8c:d5:97:87:4b:83:5b:a6:f3:53:34:16:25:7c: 90:0a:35:3b:ac:b7:98:9e:07:73:98:15:13:fa:71:04:4d:d3: 64:18:bc:44:3f:42:b3:69:1b:e7:b8:2b:a6:19:5a:c6:fa:56: 73:d5:11:cc:a2:30:2a:19:98:9f:d1:8b:e0:63:f3:f7:08:4c: e7:93:46:a7:f7:f3:30:41:d4:af:1d:67:68:70:f1:15:e3:70: 62:a2:90:af:8e:1a:69:d5:80:3e:25:2d:a8:04:53:96:12:17: 6e:3d:70:e7:01:6d:fe:fe:fb:3d:66:5e:3a:a9:d6:78:9d:0c: 7d:90:e0:4c:55:f6:83:3a:43:7b:4c:f0:fe:37:d7:21:95:ee: da:53:37:e7:7d:e4:61:0a:15:2e:92:4e:d6:c4:8f:7d:44:3d: 17:85:4b:fe:33:78:71:6a:ad:05:0c:b8:0c:0d:65:75:8b:ee: a3:c3:6d:23:23:5d:3d:95:2e:9f:d3:f1:3f:0a:06:81:70:50: fc:9c:0b:4b:f8:06:76:ae:4b:4a:eb:50:56:93:8e:74:1d:e8: 58:9f:69:92:03:7a:89:eb:e7:2d:17:6c:e6:d6:11:55:0b:33: a6:ad:79:0f:4d:d5:8b:9d:32:ca:7e:ce:27:0e:b4:13:5c:46: de:1c:19:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoEs6pNu3WYqm54l4xAX91heaHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjExMTQxMTM5MTFaFw0yNjExMTUxMTU2MTFaMDMxMTAvBgNV BAMTKENGRjExREY1NTE4OTE3MDAwMjQ2ODhFMzA0MTAwRjNDREI2RUExN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXHS7ypSt5SHqb+OJ6i7ydPlB szAgtW8SIbRAU7sMy8b5JAWleIkeKmVH6xmUMW9cTjybZwh/VTa4ePWCsnx+yKbg Vslh+lIlUBR8dZqM+BcwPMi8fLMwzQHMTu13Wn7BRKFeUDr+OV/f4VR4Z2IXJadl 3xHAurfR3InnLt1foXE4fbb407rrgxzX+Tnos7gzt6A4bp0D2delIuPeMxBDBqsj Q4oB+fbag663ljEuu3pR6VdFuvRWQ8q9lwKp8b16KT11MQ3ZH2CCFmw6prx4jZgw nTcQlJfMtVMOq4AIt+F7TVen4EKT/0ZH6xrUwYO39xhQDK7RxklSmujKtGlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/Ed9VGJFwACRojjBBAPPNtuoXswHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK9G4yM1ZeHS4NbpvNTNBYlfJAKNTust5ie B3OYFRP6cQRN02QYvEQ/QrNpG+e4K6YZWsb6VnPVEcyiMCoZmJ/Ri+Bj8/cITOeT Rqf38zBB1K8dZ2hw8RXjcGKikK+OGmnVgD4lLagEU5YSF249cOcBbf7++z1mXjqp 1nidDH2Q4ExV9oM6Q3tM8P431yGV7tpTN+d95GEKFS6STtbEj31EPReFS/4zeHFq rQUMuAwNZXWL7qPDbSMjXT2VLp/T8T8KBoFwUPycC0v4BnauS0rrUFaTjnQd6Fif aZIDeonr5y0XbObWEVULM6ateQ9N1YudMsp+zicOtBNcRt4cGQY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:20:28 2026 by rpki-client