$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: Yea8NqMc75i9+XkuEYbSuxpaSpWdeOIo71lXjJ0TzdI= Subject key identifier: 51:C9:30:F4:B3:2F:9D:7F:2B:C3:D7:DA:26:B6:EE:A8:F1:F5:72:9B Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 12C5FEBB55C23A93762C732D12E12DD1F8206CEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 07:57:22 +0000 Manifest this update: Mon 02 Nov 2026 07:52:21 +0000 Manifest next update: Tue 03 Nov 2026 08:04:21 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: lOZp/Eo/mka8vvcJ1bAl7JmpsWQTLGSUPHkKxuctJyw=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 3: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 1+JTfYoEqYG8HL8IOwRwwtz6yQl8cWQuH4yZNj+/L1Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:fe:bb:55:c2:3a:93:76:2c:73:2d:12:e1:2d:d1:f8:20:6c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Nov 2 07:52:21 2026 GMT Not After : Nov 3 08:04:21 2026 GMT Subject: CN=51C930F4B32F9D7F2BC3D7DA26B6EEA8F1F5729B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:f5:63:2b:10:58:0b:6b:68:90:2c:86:42: 83:b5:9e:c6:9a:02:0c:1c:c6:1c:61:fc:7e:95:5e: 08:a4:a2:44:a1:09:c7:32:dc:54:b7:38:cd:23:f1: 8e:88:40:0f:17:23:07:4f:f7:d2:b3:5d:23:46:a4: 81:2c:41:aa:7f:72:bc:85:83:5b:0c:39:22:8f:42: 94:1e:5e:54:de:27:28:bd:17:7c:51:6a:2d:7e:46: 81:be:5a:72:6d:f4:0f:33:16:b9:44:26:76:0d:7c: 58:82:f7:a6:ff:cc:3a:71:d2:2a:81:2c:5e:27:75: b0:c7:3d:d0:31:e2:5c:2f:4a:e8:40:b3:60:ac:4b: bd:3e:b7:17:24:15:4e:d7:a4:7d:1a:3e:7d:7c:9e: 25:19:e4:ad:8d:69:8d:21:65:34:8b:ff:da:aa:66: c8:19:ab:d8:0a:52:1f:54:f3:2c:08:1a:8d:4b:2e: a1:a5:d2:a8:e5:d4:5f:3c:64:f4:fa:bb:bb:86:e6: f6:8b:81:44:5c:92:ff:75:08:a5:4f:40:53:96:4e: e1:14:dd:0a:df:e8:c3:d5:f3:e5:ab:e2:e5:e4:61: 7a:e2:57:50:5c:32:17:83:56:7c:81:75:2a:14:12: ad:0b:a0:33:1b:2c:31:35:8e:1a:a9:ba:ff:ea:56: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C9:30:F4:B3:2F:9D:7F:2B:C3:D7:DA:26:B6:EE:A8:F1:F5:72:9B X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:4e:86:24:f1:46:81:b6:9f:dc:ab:6a:2e:2d:a4:80:97: bf:45:d9:d0:fc:e7:57:65:8a:9a:0f:49:a4:a5:72:47:c3:93: c0:e3:cb:a7:8f:82:e7:ba:d2:d2:f5:15:e7:15:b5:0e:59:ed: 22:06:f8:3e:7b:13:d0:e2:a5:ee:ea:f2:bf:32:be:48:12:5e: ae:56:a1:db:cf:43:05:71:ab:70:1e:ba:5c:13:5b:2b:29:54: a6:9c:2a:da:1e:2a:94:30:e9:f8:28:06:2e:5a:f9:ed:16:3d: 47:e0:e4:ea:6a:54:27:d7:a2:67:28:d7:35:81:46:8e:03:a3: be:15:63:53:dc:f9:18:76:b9:73:23:d4:03:6f:e5:0c:19:e5: 5b:8e:85:ac:34:ad:9d:bd:1f:cd:4b:29:3d:c4:25:e1:a9:b7: f7:a7:e3:26:ea:2a:b4:65:ec:e1:37:13:c5:df:c6:ba:70:b2: f8:27:2a:cf:0c:56:28:21:ee:c1:fe:8d:51:62:bc:a2:dc:9b: d6:15:95:a9:9d:b6:0c:da:07:46:27:f3:c1:0b:27:f7:58:df: 75:eb:ab:c4:99:77:2c:79:ad:31:b0:d1:38:de:78:a7:e7:70: f4:be:97:26:d6:34:bc:98:5a:70:14:b1:ff:4a:66:26:3f:fb: 61:f2:66:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsX+u1XCOpN2LHMtEuEt0fggbOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjExMDIwNzUyMjFaFw0yNjExMDMwODA0MjFaMDMxMTAvBgNV BAMTKDUxQzkzMEY0QjMyRjlEN0YyQkMzRDdEQTI2QjZFRUE4RjFGNTcyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gPVjKxBYC2tokCyGQoO1nsaa Agwcxhxh/H6VXgikokShCccy3FS3OM0j8Y6IQA8XIwdP99KzXSNGpIEsQap/cryF g1sMOSKPQpQeXlTeJyi9F3xRai1+RoG+WnJt9A8zFrlEJnYNfFiC96b/zDpx0iqB LF4ndbDHPdAx4lwvSuhAs2CsS70+txckFU7XpH0aPn18niUZ5K2NaY0hZTSL/9qq ZsgZq9gKUh9U8ywIGo1LLqGl0qjl1F88ZPT6u7uG5vaLgURckv91CKVPQFOWTuEU 3Qrf6MPV8+Wr4uXkYXriV1BcMheDVnyBdSoUEq0LoDMbLDE1jhqpuv/qVhydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUckw9LMvnX8rw9faJrbuqPH1cpswHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq6ToYk8UaBtp/cq2ouLaSAl79F2dD851dl ipoPSaSlckfDk8Djy6ePgue60tL1FecVtQ5Z7SIG+D57E9Dipe7q8r8yvkgSXq5W odvPQwVxq3AeulwTWyspVKacKtoeKpQw6fgoBi5a+e0WPUfg5OpqVCfXomco1zWB Ro4Do74VY1Pc+Rh2uXMj1ANv5QwZ5VuOhaw0rZ29H81LKT3EJeGpt/en4ybqKrRl 7OE3E8XfxrpwsvgnKs8MVigh7sH+jVFivKLcm9YVlamdtgzaB0Yn88ELJ/dY33Xr q8SZdyx5rTGw0TjeeKfncPS+lybWNLyYWnAUsf9KZiY/+2HyZpM= -----END CERTIFICATE-----Generated at Mon Nov 2 22:10:57 2026 by rpki-client