$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: vhOt1lhzY9QCEVIdjg2ZuHxI9Y5Z5S1sZEQqfaKaXCw= Subject key identifier: 81:8E:B4:10:96:B0:45:33:8F:2E:7A:F2:C5:39:24:54:6B:FF:38:15 Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 09B983FA385B1A1DEB417F3D5D532A8817D4B7E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:00:26 +0000 Manifest this update: Tue 12 May 2026 08:55:26 +0000 Manifest next update: Wed 13 May 2026 12:14:26 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: MMCIMI7DTq6x1f/OJlaKxPqtXiQYaRf+6UtKmPAA/D8=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b9:83:fa:38:5b:1a:1d:eb:41:7f:3d:5d:53:2a:88:17:d4:b7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: May 12 08:55:26 2026 GMT Not After : May 13 12:14:26 2026 GMT Subject: CN=818EB41096B045338F2E7AF2C53924546BFF3815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:e5:fb:57:86:b7:52:a2:72:0d:f7:0b:42: 4c:5c:77:70:19:86:a1:27:b0:83:52:be:1a:a5:0f: 95:68:df:0d:2c:b7:8f:0c:78:52:64:2e:96:eb:7f: b3:65:4b:2c:e3:c2:51:99:5f:ec:14:05:e7:8a:05: 48:f5:b8:a1:53:e2:2c:f9:9c:15:c8:f0:25:2f:bd: 68:f6:9c:61:2f:ac:d3:41:b3:cd:2e:f0:b9:f3:a8: 75:c6:32:92:ee:37:f3:26:7a:56:01:45:ee:41:ca: 80:6f:65:b8:86:48:f7:bc:31:bf:57:3f:62:f6:30: d2:5d:a3:81:c3:bc:f6:2c:37:75:6a:e2:b1:27:e5: ac:ec:55:a6:19:79:52:e6:c7:eb:ea:93:a7:b4:d1: 3e:2b:ba:ef:93:b5:b2:a9:4c:89:77:10:7a:1a:01: 05:8c:46:5b:e5:8f:09:c4:e0:bc:fa:41:3f:c7:53: 96:f8:16:de:b4:d7:5a:bb:80:31:f6:86:a0:df:e4: 6b:39:c8:53:80:ce:17:8f:42:ff:11:95:b2:a6:84: 2f:6a:d9:d5:18:16:0f:3c:59:7f:e1:79:3e:92:5d: cc:b0:d8:ba:0a:af:0b:99:9d:79:70:da:db:07:af: 69:6d:d6:84:4d:43:a3:e1:bc:7f:9c:aa:3e:af:26: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8E:B4:10:96:B0:45:33:8F:2E:7A:F2:C5:39:24:54:6B:FF:38:15 X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e3:8d:9e:35:30:af:87:ab:23:a4:d5:de:35:0d:e2:3a:75: a0:25:de:fc:13:9d:51:ae:18:ee:84:63:f4:d0:44:4c:82:8b: 7b:bc:0d:df:05:b5:03:95:8c:a8:d4:e1:45:93:e4:59:ab:d8: 69:f5:25:fb:91:c4:e4:5f:06:d3:f4:da:59:46:aa:de:c0:02: 0a:e6:90:86:29:64:68:67:b2:2e:38:8a:77:f9:25:bc:04:4f: 30:3e:a0:31:77:63:9e:5f:fd:b9:2d:9e:33:4c:c9:2a:d5:55: 30:a4:2a:4b:00:b6:dd:89:e2:14:ff:2a:d7:e6:57:9f:ea:be: 4d:ac:ac:bf:8f:c7:9b:c4:1b:2b:d5:2e:45:32:21:ec:bf:b8: c9:99:fc:62:6e:97:e3:03:bc:15:b8:38:d2:a8:77:a4:07:ea: 95:5e:9b:ee:60:f1:44:17:14:8d:da:bc:7d:2f:a0:19:0e:cf: 1b:8a:fd:eb:e6:f8:43:f7:04:ac:4d:f7:ac:01:84:de:79:3a: b9:34:f3:2c:88:0d:6b:c8:2b:ed:04:33:4a:d2:77:30:95:e4: d9:bd:88:ab:f0:35:88:a9:03:4f:a7:22:4a:2e:3f:77:a1:6f: a6:e1:3d:f4:58:5e:68:ad:9f:c5:3f:26:c5:1b:01:f9:ec:62: 36:2f:ee:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbmD+jhbGh3rQX89XVMqiBfUt+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA1MTIwODU1MjZaFw0yNjA1MTMxMjE0MjZaMDMxMTAvBgNV BAMTKDgxOEVCNDEwOTZCMDQ1MzM4RjJFN0FGMkM1MzkyNDU0NkJGRjM4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCuX7V4a3UqJyDfcLQkxcd3AZ hqEnsINSvhqlD5Vo3w0st48MeFJkLpbrf7NlSyzjwlGZX+wUBeeKBUj1uKFT4iz5 nBXI8CUvvWj2nGEvrNNBs80u8LnzqHXGMpLuN/MmelYBRe5ByoBvZbiGSPe8Mb9X P2L2MNJdo4HDvPYsN3Vq4rEn5azsVaYZeVLmx+vqk6e00T4ruu+TtbKpTIl3EHoa AQWMRlvljwnE4Lz6QT/HU5b4Ft6011q7gDH2hqDf5Gs5yFOAzhePQv8RlbKmhC9q 2dUYFg88WX/heT6SXcyw2LoKrwuZnXlw2tsHr2lt1oRNQ6PhvH+cqj6vJj0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgY60EJawRTOPLnryxTkkVGv/OBUwHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7jjZ41MK+HqyOk1d41DeI6daAl3vwTnVGu GO6EY/TQREyCi3u8Dd8FtQOVjKjU4UWT5Fmr2Gn1JfuRxORfBtP02llGqt7AAgrm kIYpZGhnsi44inf5JbwETzA+oDF3Y55f/bktnjNMySrVVTCkKksAtt2J4hT/Ktfm V5/qvk2srL+Px5vEGyvVLkUyIey/uMmZ/GJul+MDvBW4ONKod6QH6pVem+5g8UQX FI3avH0voBkOzxuK/evm+EP3BKxN96wBhN55Ork08yyIDWvIK+0EM0rSdzCV5Nm9 iKvwNYipA0+nIkouP3ehb6bhPfRYXmitn8U/JsUbAfnsYjYv7rw= -----END CERTIFICATE-----Generated at Tue May 12 22:59:50 2026 by rpki-client