$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: pbkyIbgwEluOfiNKDpYrLCp6TpB0tfE3bPw6GZUrOsE= Subject key identifier: AD:94:07:65:CB:87:21:FA:DB:83:AD:8B:91:9F:18:72:BC:23:C4:02 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 6C93A49BF134E0FDBF4B1A9D523A14EBE26D8971 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 035C Signing time: Mon 20 Apr 2026 05:32:46 +0000 Manifest this update: Mon 20 Apr 2026 05:27:46 +0000 Manifest next update: Thu 23 Apr 2026 12:41:46 +0000 Files and hashes: 1: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: DcgpR3dumYc3Eoce65U1RiuqJ3FJu3j4JD+CZ1GSu4U=) 2: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: fYqB3hAfKrlAMalkQPBsDTPyMiJqV+nU7PcLz8QhSAc=) 3: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: 7RaKUkFBeMAENsKDT1lo2zKa045TKNeXWhBxokU48NQ=) 4: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: 8AOTqJ8wKe1VrrD+kHmDVYLYfYVsdRhBzkd1nXnFves=) 5: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: Svxu0NqHa+wHzLIVUZs9pIJtQr2JGvA1Prp0dp6pQO8=) 6: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: mYfivmVNMZkSKS5f//MOpqu5W6sJTOzHS+hT2p7JxYA=) 7: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: Qn8e6r99j+EuTQtrHbDbOQqJz+jY/ebvh6ZX3n1vOEk=) 8: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: Y5QaBXK/Lu/qym2uqPJsRL5ONo2Cq+L5YI+KATzLWJk=) 9: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: k0M2XXKfU9k9Nif7dWEUq5fC7OBAzB0Ygp6xrywPUqs=) 10: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: m0iy4uxEorD8+ndIDexanwH0s76m+P4rdZZH08lw8gk=) 11: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: 0oC6hCIX4duxQdOJVzVwn+akSK/l98G+66CJXryC3ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 12:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:93:a4:9b:f1:34:e0:fd:bf:4b:1a:9d:52:3a:14:eb:e2:6d:89:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: Apr 20 05:27:46 2026 GMT Not After : Apr 23 12:41:46 2026 GMT Subject: CN=AD940765CB8721FADB83AD8B919F1872BC23C402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:2a:0a:0a:3d:11:e0:0b:57:14:c2:34:99: 63:7c:05:7c:87:96:19:d8:a7:e9:62:74:76:2e:33: 7f:5d:0b:70:18:eb:8b:f7:4c:00:ce:2b:60:34:12: f3:2e:94:f1:84:e9:40:c3:83:c7:bb:ba:62:de:8b: 89:f7:b8:97:a1:10:7f:54:5f:27:08:e9:01:f2:cb: d3:84:f3:27:24:18:9d:04:5d:57:cf:07:e6:c8:34: 78:35:a3:d0:9c:ba:c5:1d:c6:5d:30:ff:65:0d:66: a0:32:65:bf:6b:fa:fe:fb:73:96:74:a6:49:43:7c: 06:23:fe:a2:6c:98:37:84:7b:b9:c8:40:2a:c7:c7: 92:13:25:6c:e8:8a:0a:45:7f:bc:24:04:4b:91:1d: 26:a3:53:60:2a:22:05:3c:77:8a:97:83:79:4b:ec: a1:4b:5e:ad:56:69:d4:26:f8:e5:02:8f:3d:d6:64: ab:22:07:07:c8:5d:fa:0e:0f:3f:ce:b9:de:77:3b: cb:d2:24:97:8d:22:8c:8f:9a:9e:d2:98:1d:50:71: 68:9a:71:23:1e:57:f8:e0:df:89:ff:fb:26:83:91: d6:49:39:b8:b3:7e:83:5a:a5:57:5f:0a:a0:ea:62: b5:96:f9:9e:86:67:6c:f5:6d:d6:b5:d5:32:10:f9: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:94:07:65:CB:87:21:FA:DB:83:AD:8B:91:9F:18:72:BC:23:C4:02 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:3d:a8:25:9c:d8:ee:c2:e1:ac:7c:3c:3a:98:5c:20:31:3b: 1f:16:d2:9d:61:81:b9:20:5b:ba:28:32:d7:e4:4d:36:e9:6b: 0e:97:fc:ff:6a:97:d6:6c:11:53:a4:c7:c7:ba:93:81:30:f0: ab:c9:a0:22:e2:7f:21:ce:da:ac:ff:12:ff:fb:ff:2a:e6:c0: f7:f7:a3:61:9b:3d:49:ac:c8:5c:5a:22:44:c1:2c:02:6f:c8: fc:f2:3f:0d:63:cb:58:08:92:eb:72:26:cd:86:8b:10:7b:c8: 33:8b:cc:d0:fe:e1:0a:74:36:37:ad:0c:75:3c:0f:dc:b0:fc: 87:56:5a:c9:00:93:f4:b7:e8:b3:77:70:29:1a:9d:f6:3a:3a: 68:e6:31:da:d1:e3:80:8b:55:c5:04:3b:84:bf:86:62:fa:7f: 77:0b:7d:76:d7:8d:36:ce:ca:cc:be:ea:06:8d:5b:63:e0:d1: 9f:9a:49:e0:16:d7:1a:9d:ad:ad:d2:49:30:d6:aa:62:f7:30: e1:7a:62:d6:37:a6:f4:61:d5:dc:03:8e:0a:43:9c:65:2b:c3: 93:fd:b0:26:aa:4a:44:9d:ad:ad:67:4c:62:fa:ea:b8:bf:1f: 02:9f:db:bb:44:b2:4b:a4:d0:db:a3:26:e6:75:ee:ac:9b:43: 05:50:67:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJOkm/E04P2/SxqdUjoU6+JtiXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNjA0MjAwNTI3NDZaFw0yNjA0MjMxMjQxNDZaMDMxMTAvBgNV BAMTKEFEOTQwNzY1Q0I4NzIxRkFEQjgzQUQ4QjkxOUYxODcyQkMyM0M0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjCoKCj0R4AtXFMI0mWN8BXyH lhnYp+lidHYuM39dC3AY64v3TADOK2A0EvMulPGE6UDDg8e7umLei4n3uJehEH9U XycI6QHyy9OE8yckGJ0EXVfPB+bINHg1o9CcusUdxl0w/2UNZqAyZb9r+v77c5Z0 pklDfAYj/qJsmDeEe7nIQCrHx5ITJWzoigpFf7wkBEuRHSajU2AqIgU8d4qXg3lL 7KFLXq1WadQm+OUCjz3WZKsiBwfIXfoODz/Oud53O8vSJJeNIoyPmp7SmB1QcWia cSMeV/jg34n/+yaDkdZJObizfoNapVdfCqDqYrWW+Z6GZ2z1bda11TIQ+bhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZQHZcuHIfrbg62LkZ8YcrwjxAIwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM09qCWc2O7C4ax8PDqYXCAxOx8W0p1hgbkg W7ooMtfkTTbpaw6X/P9ql9ZsEVOkx8e6k4Ew8KvJoCLifyHO2qz/Ev/7/yrmwPf3 o2GbPUmsyFxaIkTBLAJvyPzyPw1jy1gIkutyJs2GixB7yDOLzND+4Qp0NjetDHU8 D9yw/IdWWskAk/S36LN3cCkanfY6OmjmMdrR44CLVcUEO4S/hmL6f3cLfXbXjTbO ysy+6gaNW2Pg0Z+aSeAW1xqdra3SSTDWqmL3MOF6YtY3pvRh1dwDjgpDnGUrw5P9 sCaqSkSdra1nTGL66ri/HwKf27tEskuk0NujJuZ17qybQwVQZ54= -----END CERTIFICATE-----Generated at Wed Apr 22 12:55:35 2026 by rpki-client