$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: 8pBAtzk3L8CC4Xch8D+ZwoiwBJFI7rp+uf99KBCGivU= Subject key identifier: 73:08:4F:11:2B:B9:D3:1B:8E:9C:A2:BA:B7:38:3A:C9:D1:A3:F6:7C Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 0B690AF2ED63984878BE95D261AA346D31CECEDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:19:44 +0000 Manifest this update: Fri 24 Jul 2026 04:14:44 +0000 Manifest next update: Sat 25 Jul 2026 05:48:44 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: LGgYEnFo7PhA8pPjyqfnCGlyek6wgxvlgHcvT1UHncA=) 2: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) 3: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:69:0a:f2:ed:63:98:48:78:be:95:d2:61:aa:34:6d:31:ce:ce:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Jul 24 04:14:44 2026 GMT Not After : Jul 25 05:48:44 2026 GMT Subject: CN=73084F112BB9D31B8E9CA2BAB7383AC9D1A3F67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:f6:57:64:ea:36:89:35:9f:11:c9:c1:02: 3a:9f:3f:cf:38:1d:b6:fc:81:f7:d3:59:98:0c:14: 6d:05:94:42:ff:f8:9b:9e:29:b1:ec:d1:9b:29:16: 98:f7:5e:d7:6b:79:35:57:01:9f:15:1d:c0:02:12: 9c:a7:ac:e0:b8:fe:25:41:36:b9:92:03:11:56:e9: 82:a1:28:a9:ab:cc:ac:37:57:d0:89:a8:a0:42:54: 8c:3f:5a:47:46:f6:71:9c:e3:e3:0e:c7:21:a3:25: 57:bc:5d:37:6d:4d:8c:a2:2c:3e:e6:54:f7:10:ae: ac:5e:92:41:f1:5e:02:57:b1:5c:64:73:9d:d8:79: e8:6a:45:ad:ab:52:9b:ef:3f:06:84:15:c7:3f:e6: 9d:cd:a0:d6:9d:10:f3:08:fc:2c:ac:72:8c:75:a8: d1:1c:5c:33:26:51:e8:f4:fd:6e:d7:62:a4:b4:b8: cf:90:0c:b0:e5:c2:c4:13:11:77:b1:89:05:f4:e9: c0:b7:79:b8:eb:24:45:9a:ed:c7:d2:99:13:8d:7e: 9a:5d:0d:f6:27:37:3d:4b:6e:01:8e:bc:65:7d:ec: 28:00:f2:66:62:20:92:e4:63:2c:72:4d:e8:8e:ca: 68:74:d0:13:22:a2:a4:ac:69:0b:b8:d1:9e:33:f1: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:08:4F:11:2B:B9:D3:1B:8E:9C:A2:BA:B7:38:3A:C9:D1:A3:F6:7C X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:78:c6:2d:05:54:61:5f:60:67:5b:e5:30:68:d8:68:30:5e: 72:40:75:da:cb:91:28:c2:eb:b5:89:36:2a:78:45:82:70:16: 83:67:50:41:97:1a:5f:30:9c:9e:a7:5f:9a:57:38:3f:d0:39: af:eb:bc:de:ba:07:d6:60:e7:31:dd:12:9d:76:70:66:0e:a9: 18:9f:55:27:d8:89:0a:7c:02:98:14:3b:76:4f:36:0c:b7:69: a1:9c:4f:32:1a:d6:a2:1d:2c:30:ec:51:0e:10:d4:f4:63:c8: 50:0a:e3:8e:ea:d0:d4:48:17:50:7e:fe:90:8f:43:c3:82:04: 6a:9e:34:b5:ef:26:e7:5a:f8:a6:af:66:3c:89:d4:29:61:e0: 31:f1:05:21:07:de:ce:95:57:45:e7:e4:4c:1e:e5:47:cc:b7: 6d:3f:33:2a:88:5f:72:a5:71:46:8b:84:9e:85:74:a3:e1:30: c1:1f:55:15:70:0e:d5:dd:e6:d2:8e:12:33:41:47:31:7c:f2: 09:33:1e:c7:20:fa:ed:68:40:fc:6d:ee:e6:fc:bc:e0:d5:a1: a7:e7:b2:35:8b:60:65:86:c3:41:bf:bb:86:51:e0:05:29:6f: 7a:37:8d:c2:70:31:a6:6d:27:bf:84:de:4a:ca:90:b6:9e:56: e4:30:95:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2kK8u1jmEh4vpXSYao0bTHOzt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA3MjQwNDE0NDRaFw0yNjA3MjUwNTQ4NDRaMDMxMTAvBgNV BAMTKDczMDg0RjExMkJCOUQzMUI4RTlDQTJCQUI3MzgzQUM5RDFBM0Y2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7APZXZOo2iTWfEcnBAjqfP884 Hbb8gffTWZgMFG0FlEL/+JueKbHs0ZspFpj3XtdreTVXAZ8VHcACEpynrOC4/iVB NrmSAxFW6YKhKKmrzKw3V9CJqKBCVIw/WkdG9nGc4+MOxyGjJVe8XTdtTYyiLD7m VPcQrqxekkHxXgJXsVxkc53YeehqRa2rUpvvPwaEFcc/5p3NoNadEPMI/Cyscox1 qNEcXDMmUej0/W7XYqS0uM+QDLDlwsQTEXexiQX06cC3ebjrJEWa7cfSmRONfppd DfYnNz1LbgGOvGV97CgA8mZiIJLkYyxyTeiOymh00BMioqSsaQu40Z4z8bepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcwhPESu50xuOnKK6tzg6ydGj9nwwHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE14xi0FVGFfYGdb5TBo2GgwXnJAddrLkSjC 67WJNip4RYJwFoNnUEGXGl8wnJ6nX5pXOD/QOa/rvN66B9Zg5zHdEp12cGYOqRif VSfYiQp8ApgUO3ZPNgy3aaGcTzIa1qIdLDDsUQ4Q1PRjyFAK447q0NRIF1B+/pCP Q8OCBGqeNLXvJuda+KavZjyJ1Clh4DHxBSEH3s6VV0Xn5Ewe5UfMt20/MyqIX3Kl cUaLhJ6FdKPhMMEfVRVwDtXd5tKOEjNBRzF88gkzHscg+u1oQPxt7ub8vODVoafn sjWLYGWGw0G/u4ZR4AUpb3o3jcJwMaZtJ7+E3krKkLaeVuQwlVY= -----END CERTIFICATE-----Generated at Fri Jul 24 09:51:28 2026 by rpki-client