$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: WzBca9daFTEPK3WHVsdDj1tSRIzP7/IWDB+I8yhfVv4= Subject key identifier: 00:9F:39:8A:62:EF:8B:76:22:C6:8E:0A:35:80:CD:9C:0B:C5:2B:F1 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 1F571747C26775444D1E43B16EECC7C5E5C1CA3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 0175 Signing time: Mon 20 Apr 2026 06:51:57 +0000 Manifest this update: Mon 20 Apr 2026 06:46:57 +0000 Manifest next update: Thu 23 Apr 2026 12:00:57 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) 2: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: yVLddGTkmB7aPd0bR/qN9gBoc+GjNMwQ7ZQDVCKrDak=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:57:17:47:c2:67:75:44:4d:1e:43:b1:6e:ec:c7:c5:e5:c1:ca:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Apr 20 06:46:57 2026 GMT Not After : Apr 23 12:00:57 2026 GMT Subject: CN=009F398A62EF8B7622C68E0A3580CD9C0BC52BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:04:5a:c2:a2:b7:38:9d:2a:9b:fa:a1:cf: 08:4d:ab:83:51:64:09:a7:05:3f:f8:1e:d0:4f:34: 3c:e5:c1:7a:99:f9:12:67:7b:6c:18:df:17:80:7f: 06:67:f5:02:ca:3e:85:37:c5:06:d1:d1:bd:c5:cc: 43:d8:d8:9b:e6:e6:b2:9d:e9:2e:bb:28:df:fd:9c: 5a:76:f6:07:50:ed:c6:4a:ed:27:b3:75:e8:7d:59: 0a:f0:ed:e2:71:59:9a:5c:7c:07:64:48:78:cd:b5: f4:6f:87:d8:2e:f6:44:0b:fa:fc:0c:4f:99:18:5b: d1:fe:31:d9:e6:8e:13:24:bf:15:13:90:a1:fe:b0: cc:20:76:12:48:ba:2f:a0:c5:75:8d:86:cf:01:09: f1:8b:2f:7d:a0:49:2f:c0:94:3c:d8:4f:6a:22:ec: 86:6a:7f:33:d4:7d:67:af:90:0f:35:70:59:df:f1: f0:17:f1:6e:7a:35:da:3c:5e:a5:ae:6c:77:b6:75: e9:a1:d5:4a:f8:f5:be:01:e7:e7:de:af:9b:f0:ab: 80:16:83:23:e0:8b:eb:fd:0b:a9:77:13:87:90:f6: f3:bf:6e:37:cf:c3:4c:f9:fb:fa:a5:b6:07:b7:ea: f2:a9:ee:e9:0a:5a:6d:ad:48:cf:80:ba:2b:98:5f: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:39:8A:62:EF:8B:76:22:C6:8E:0A:35:80:CD:9C:0B:C5:2B:F1 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:70:13:f9:cb:6b:23:f1:72:13:0b:01:1b:45:ac:3b:c3:2e: 18:27:80:e0:4d:39:8d:07:78:1d:db:d7:2b:fb:35:fe:14:fb: b3:3f:3c:1c:7a:b7:14:80:f6:84:46:f8:2f:24:10:32:1b:88: 14:1a:73:97:f7:c0:43:b7:ea:6e:6b:58:b8:af:cb:8e:96:ef: 12:d5:73:57:9b:e4:0e:53:cc:3a:43:f4:22:1c:7d:89:e7:31: fb:a0:e0:ca:8e:6f:36:82:54:59:d7:75:4d:59:13:59:58:c9: 35:18:9d:a6:c9:11:3d:6f:5a:c6:ad:7f:cb:76:51:3b:18:91: 18:25:e9:e2:ff:1f:03:5b:98:21:2f:d0:71:89:b4:a3:0f:3d: 70:6d:d2:33:7e:e9:4b:a3:6a:30:ee:07:75:38:ee:59:37:70: c1:b5:18:f8:5f:b6:43:15:6c:36:ec:e2:75:3e:c5:ed:3d:32: a7:73:7e:7e:9b:2b:50:ac:13:8b:b1:50:c5:c3:6a:2a:7e:01: da:e6:eb:77:bc:ad:a4:6f:7e:23:2a:f7:72:35:93:f4:c4:f7: 3e:2b:91:ab:50:10:ed:6c:ee:10:d3:6c:57:09:69:4b:1e:7d: 54:94:33:49:60:cd:25:b5:fa:c0:ce:37:01:17:7e:ab:3c:14: f4:ff:29:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1cXR8JndURNHkOxbuzHxeXByj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNjA0MjAwNjQ2NTdaFw0yNjA0MjMxMjAwNTdaMDMxMTAvBgNV BAMTKDAwOUYzOThBNjJFRjhCNzYyMkM2OEUwQTM1ODBDRDlDMEJDNTJCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJggRawqK3OJ0qm/qhzwhNq4NR ZAmnBT/4HtBPNDzlwXqZ+RJne2wY3xeAfwZn9QLKPoU3xQbR0b3FzEPY2Jvm5rKd 6S67KN/9nFp29gdQ7cZK7Sezdeh9WQrw7eJxWZpcfAdkSHjNtfRvh9gu9kQL+vwM T5kYW9H+MdnmjhMkvxUTkKH+sMwgdhJIui+gxXWNhs8BCfGLL32gSS/AlDzYT2oi 7IZqfzPUfWevkA81cFnf8fAX8W56Ndo8XqWubHe2demh1Ur49b4B5+fer5vwq4AW gyPgi+v9C6l3E4eQ9vO/bjfPw0z5+/qltge36vKp7ukKWm2tSM+AuiuYX13/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJ85imLvi3Yixo4KNYDNnAvFK/EwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdwE/nLayPxchMLARtFrDvDLhgngOBNOY0H eB3b1yv7Nf4U+7M/PBx6txSA9oRG+C8kEDIbiBQac5f3wEO36m5rWLivy46W7xLV c1eb5A5TzDpD9CIcfYnnMfug4MqObzaCVFnXdU1ZE1lYyTUYnabJET1vWsatf8t2 UTsYkRgl6eL/HwNbmCEv0HGJtKMPPXBt0jN+6UujajDuB3U47lk3cMG1GPhftkMV bDbs4nU+xe09Mqdzfn6bK1CsE4uxUMXDaip+Adrm63e8raRvfiMq93I1k/TE9z4r katQEO1s7hDTbFcJaUsefVSUM0lgzSW1+sDONwEXfqs8FPT/KUI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client