$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: Tda99UbuZXfykXrTKG6gIK6VYBmbMUmXFvFiMn5xeBs= Subject key identifier: C0:02:BB:5B:47:14:30:E9:11:E5:0B:90:8E:F2:73:2D:D4:D1:77:E4 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 4CC3C75C7D84F30E5983D6E3B68AA0181A2A8C67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 0130 Signing time: Tue 21 Apr 2026 07:21:36 +0000 Manifest this update: Tue 21 Apr 2026 07:16:36 +0000 Manifest next update: Fri 24 Apr 2026 10:50:36 +0000 Files and hashes: 1: 3130332e3137322e3137322e302f32342d3234203d3e20313437303838.roa (hash: JKkCiBj1Ft4d/bxCb4U2iXHDOP8sJDEhV8ZeubcbaQE=) 2: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: EMukZD96zb+q3Dlm4RQqbp5AdT9MmsCBMvdsr3nivbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 10:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c3:c7:5c:7d:84:f3:0e:59:83:d6:e3:b6:8a:a0:18:1a:2a:8c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Apr 21 07:16:36 2026 GMT Not After : Apr 24 10:50:36 2026 GMT Subject: CN=C002BB5B471430E911E50B908EF2732DD4D177E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e0:14:45:f8:48:e6:a9:09:9a:51:5a:5b:1f: 0b:5d:42:52:7c:ec:3e:44:69:33:7c:d3:ad:7d:14: d6:5e:3f:f6:73:73:bc:9c:db:d7:41:96:04:a6:37: 2d:d7:a9:0c:3b:21:91:cc:c4:48:cf:f3:ee:1c:6f: ea:74:c7:da:00:d8:a9:79:83:b5:4b:cf:3d:ba:b5: 96:87:53:82:7c:97:9a:2f:f8:5a:fd:c9:18:de:ab: ef:47:ca:af:ce:6f:68:30:5c:12:be:f5:68:a8:68: 09:3e:9d:fd:09:c3:6f:a5:39:c3:bd:71:a5:43:eb: 96:b3:46:d3:2e:c0:3c:c3:3d:1a:d6:b7:d0:a5:37: 1a:55:be:f9:25:bc:0a:27:24:2d:c0:4a:14:f2:0d: bd:a5:f4:0b:36:2d:18:42:38:9a:03:7d:a6:b5:26: 89:79:07:cf:30:c6:f5:db:9c:42:dc:bd:9c:36:b9: a8:d6:44:a9:70:b0:89:08:b6:61:21:89:36:1b:3c: de:88:2a:23:f3:36:b2:a4:86:f0:df:22:f1:03:c9: c2:f3:a7:19:59:31:64:b8:67:b7:1a:1f:03:4f:f6: 60:02:55:7a:09:85:b8:68:16:8e:5a:ca:94:a7:92: a4:ca:37:86:1b:fb:06:8b:3d:2a:13:2a:a1:a7:d1: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:02:BB:5B:47:14:30:E9:11:E5:0B:90:8E:F2:73:2D:D4:D1:77:E4 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:0b:1f:47:72:d9:ca:25:9b:3c:f3:05:84:34:11:f7:e5: 00:4b:d5:21:64:ee:60:a8:3d:8c:89:30:02:61:11:db:b1:c9: 48:3b:a3:3a:43:8c:b9:08:3f:cb:4b:1e:de:67:96:63:00:af: c4:84:81:89:98:57:8b:d3:78:c4:d3:bb:1e:77:9b:5b:d7:98: c4:e1:ea:c4:33:33:15:c6:d1:15:fa:20:26:cc:ec:05:33:6a: ae:55:e0:21:a4:34:5e:82:56:3f:50:2b:0b:c7:6b:ca:78:39: 86:8e:ea:6f:58:af:de:4b:82:52:18:b6:08:6a:0a:16:6d:ca: 53:a8:ca:ec:7e:e0:1e:8d:28:c5:af:fd:9c:ba:6a:24:99:79: 2b:47:50:dd:96:66:4a:13:af:2c:34:46:b4:01:b2:e4:ec:c2: 50:31:74:e2:47:fb:37:ab:30:5d:8a:fa:50:b4:60:24:98:e0: 96:02:71:93:01:c4:6c:48:0b:8f:e2:55:18:59:f5:1e:35:18: 17:88:41:cf:04:38:d9:1d:b8:56:86:7e:0b:e2:00:19:79:71: ea:73:2e:e1:99:6c:bd:29:bb:aa:af:96:d9:fe:40:3d:9e:d6: ef:5e:8f:b8:cc:ab:ae:5f:92:cd:94:75:a8:3b:48:51:c2:7e: 80:fe:11:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMPHXH2E8w5Zg9bjtoqgGBoqjGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNjA0MjEwNzE2MzZaFw0yNjA0MjQxMDUwMzZaMDMxMTAvBgNV BAMTKEMwMDJCQjVCNDcxNDMwRTkxMUU1MEI5MDhFRjI3MzJERDREMTc3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy4BRF+EjmqQmaUVpbHwtdQlJ8 7D5EaTN80619FNZeP/Zzc7yc29dBlgSmNy3XqQw7IZHMxEjP8+4cb+p0x9oA2Kl5 g7VLzz26tZaHU4J8l5ov+Fr9yRjeq+9Hyq/Ob2gwXBK+9WioaAk+nf0Jw2+lOcO9 caVD65azRtMuwDzDPRrWt9ClNxpVvvklvAonJC3AShTyDb2l9As2LRhCOJoDfaa1 Jol5B88wxvXbnELcvZw2uajWRKlwsIkItmEhiTYbPN6IKiPzNrKkhvDfIvEDycLz pxlZMWS4Z7caHwNP9mACVXoJhbhoFo5aypSnkqTKN4Yb+waLPSoTKqGn0UMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwAK7W0cUMOkR5QuQjvJzLdTRd+QwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyLCx9HctnKJZs88wWENBH35QBL1SFk7mCo PYyJMAJhEduxyUg7ozpDjLkIP8tLHt5nlmMAr8SEgYmYV4vTeMTTux53m1vXmMTh 6sQzMxXG0RX6ICbM7AUzaq5V4CGkNF6CVj9QKwvHa8p4OYaO6m9Yr95LglIYtghq ChZtylOoyux+4B6NKMWv/Zy6aiSZeStHUN2WZkoTryw0RrQBsuTswlAxdOJH+zer MF2K+lC0YCSY4JYCcZMBxGxIC4/iVRhZ9R41GBeIQc8EONkduFaGfgviABl5cepz LuGZbL0pu6qvltn+QD2e1u9ej7jMq65fks2Udag7SFHCfoD+Efs= -----END CERTIFICATE-----Generated at Wed Apr 22 10:03:10 2026 by rpki-client