$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: /r+Rm+g/TYOgKv81EP2Dtbo3M/GEiREhZEiDEPQ7k8k= Subject key identifier: 6A:40:BF:3E:A7:B0:68:34:90:C9:F4:45:1B:11:FB:E7:7B:48:45:78 Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 1EE3917DF36465A9CAA63F0404192A328818B7BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:54:11 +0000 Manifest this update: Thu 24 Sep 2026 14:49:11 +0000 Manifest next update: Fri 25 Sep 2026 18:12:11 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: iIYAfWqtAvXwd1S0Z/EyZ0OHtu2lpRiwS3PHhtI0I6M=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e3:91:7d:f3:64:65:a9:ca:a6:3f:04:04:19:2a:32:88:18:b7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Sep 24 14:49:11 2026 GMT Not After : Sep 25 18:12:11 2026 GMT Subject: CN=6A40BF3EA7B0683490C9F4451B11FBE77B484578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9f:80:96:c0:60:d1:73:d7:7d:b6:71:57:65: 8c:a8:07:75:af:b3:a7:51:ab:96:03:8a:9f:51:f0: be:cc:2e:9e:75:3d:c6:10:ea:ab:88:43:52:1c:c1: 54:72:b9:d5:85:86:86:87:87:ce:f4:74:ba:54:d4: bc:40:43:80:3a:32:21:1f:7e:60:8c:49:8d:5e:85: d2:b5:c0:0a:14:fb:5e:61:77:07:35:6b:1e:d9:93: a0:ae:1a:4b:e9:42:bc:2e:83:00:b7:f6:27:88:8d: f7:de:71:90:ce:e8:d8:03:c6:ce:2d:62:44:22:28: bf:a6:bb:58:64:d9:fc:08:c6:06:49:d7:75:22:0f: 77:80:2b:a0:00:39:3b:ed:ea:a5:ed:ee:ce:ef:d1: 87:3d:af:78:27:e0:f8:15:c5:ed:95:c1:86:fb:c4: ae:14:ec:24:22:15:a6:4e:57:6a:c7:4a:06:92:1e: 61:6e:00:69:b8:02:b2:21:63:8c:5a:d7:4d:13:8c: 69:86:9a:5e:20:aa:fa:77:ed:c2:56:ea:a9:d1:cc: 55:62:47:3a:b9:6a:de:0f:1d:f7:e0:e5:c0:7b:f8: 1b:11:7a:e8:72:29:41:2d:b8:6a:1a:64:6c:3e:a8: 06:77:4a:8a:7d:99:0b:1c:f3:da:51:fb:71:cd:49: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:40:BF:3E:A7:B0:68:34:90:C9:F4:45:1B:11:FB:E7:7B:48:45:78 X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:03:48:5f:22:ad:ea:d9:e1:72:f1:8d:cb:8a:ed:15:c1:ee: e2:47:4e:f3:f3:3a:12:d1:57:2b:c3:43:a0:06:44:c8:2b:a5: ba:86:b7:be:49:e5:a0:12:6c:11:b4:cd:c3:da:32:54:3e:4b: b5:f4:f9:b1:11:b2:4d:75:61:b4:e7:dd:af:62:ad:d5:c2:53: e6:e7:fa:8b:65:28:cf:be:3c:1b:b4:06:8b:71:75:c3:96:65: e2:70:74:5a:d1:71:78:84:e4:38:4d:9c:c0:2a:a5:cc:3f:4b: 9a:ce:be:7e:fe:df:d0:cb:13:07:5b:5b:7e:0f:88:e7:a6:a5: 7e:98:94:39:db:b2:f0:2f:11:19:de:49:0b:3e:8f:58:66:70: f5:dc:d0:0d:fb:d6:d3:68:65:8f:23:2d:c5:63:bc:f6:e9:fc: ba:fd:c5:50:10:c9:ff:ae:c4:b8:28:ab:e6:e3:4f:4e:22:5f: 69:0e:52:db:a7:6e:b4:51:be:39:56:31:00:a7:75:07:ca:12: da:9a:f5:d2:44:91:a2:4c:26:21:49:f4:c0:98:fa:76:3c:ac: 2e:3d:5f:9c:2e:ca:95:24:33:1f:f7:dc:33:84:97:e1:ce:89: 7d:c4:f0:31:ef:48:a7:db:dc:d3:98:87:a0:89:e9:b7:be:9f: 1c:db:9c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuORffNkZanKpj8EBBkqMogYt74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA5MjQxNDQ5MTFaFw0yNjA5MjUxODEyMTFaMDMxMTAvBgNV BAMTKDZBNDBCRjNFQTdCMDY4MzQ5MEM5RjQ0NTFCMTFGQkU3N0I0ODQ1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwn4CWwGDRc9d9tnFXZYyoB3Wv s6dRq5YDip9R8L7MLp51PcYQ6quIQ1IcwVRyudWFhoaHh870dLpU1LxAQ4A6MiEf fmCMSY1ehdK1wAoU+15hdwc1ax7Zk6CuGkvpQrwugwC39ieIjffecZDO6NgDxs4t YkQiKL+mu1hk2fwIxgZJ13UiD3eAK6AAOTvt6qXt7s7v0Yc9r3gn4PgVxe2VwYb7 xK4U7CQiFaZOV2rHSgaSHmFuAGm4ArIhY4xa100TjGmGml4gqvp37cJW6qnRzFVi Rzq5at4PHffg5cB7+BsReuhyKUEtuGoaZGw+qAZ3Sop9mQsc89pR+3HNSXWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakC/PqewaDSQyfRFGxH753tIRXgwHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUDSF8irerZ4XLxjcuK7RXB7uJHTvPzOhLR VyvDQ6AGRMgrpbqGt75J5aASbBG0zcPaMlQ+S7X0+bERsk11YbTn3a9irdXCU+bn +otlKM++PBu0BotxdcOWZeJwdFrRcXiE5DhNnMAqpcw/S5rOvn7+39DLEwdbW34P iOempX6YlDnbsvAvERneSQs+j1hmcPXc0A371tNoZY8jLcVjvPbp/Lr9xVAQyf+u xLgoq+bjT04iX2kOUtunbrRRvjlWMQCndQfKEtqa9dJEkaJMJiFJ9MCY+nY8rC49 X5wuypUkMx/33DOEl+HOiX3E8DHvSKfb3NOYh6CJ6be+nxzbnJU= -----END CERTIFICATE-----Generated at Fri Sep 25 00:15:24 2026 by rpki-client