$ rpki-client -vvf rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft File: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft (raw, json) Hash identifier: aNHkjS1+iFmIyhFliKey3UGMNWy7r6PEFVayASJDE6E= Subject key identifier: 6A:AC:10:50:BC:64:03:3D:53:15:10:DF:0B:7A:F9:1B:81:32:3C:29 Authority key identifier: 88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB Certificate issuer: /CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Certificate serial: 2F013979B3765733603047D6FD2786C930D1E9B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 18:48:36 +0000 Manifest this update: Fri 19 Jun 2026 18:43:36 +0000 Manifest next update: Sat 20 Jun 2026 19:03:36 +0000 Files and hashes: 1: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl (hash: EoC0aDKj45IgY3+up0bhSsdpxOVRLShtu1P4lz8t6sQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:01:39:79:b3:76:57:33:60:30:47:d6:fd:27:86:c9:30:d1:e9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Validity Not Before: Jun 19 18:43:36 2026 GMT Not After : Jun 20 19:03:36 2026 GMT Subject: CN=6AAC1050BC64033D531510DF0B7AF91B81323C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:93:17:ad:e9:89:72:5e:3e:3b:2c:2a:c0: 16:ea:45:34:cf:71:5f:0a:b3:65:00:95:ae:59:86: 5a:3d:b5:a4:74:09:56:50:c1:d2:87:47:23:fa:f4: ed:21:0a:5f:30:b4:75:94:5f:f3:f2:4f:92:d0:3b: 04:42:24:48:aa:59:fb:87:6d:43:ba:05:5f:c8:f1: e6:1c:03:78:d6:03:6c:d6:4c:78:73:b4:6f:47:f5: be:a8:f1:b8:e5:8d:12:3c:29:07:26:85:da:90:21: 57:a1:c2:7c:0c:71:09:70:5e:43:1a:61:86:28:5e: 12:3b:62:d5:42:c9:82:38:19:19:97:b4:ab:35:ae: b4:f2:35:79:a6:5e:de:47:bf:30:e7:69:13:80:7b: 8d:54:2c:0e:23:b9:a9:00:a4:97:c6:51:8b:6d:8c: 4f:42:c4:12:fa:94:f8:75:9d:fd:fd:e7:8e:68:08: 8d:c4:18:c7:8f:ae:96:60:8a:5a:01:5e:01:59:2e: 36:04:2f:17:49:d8:32:87:7d:68:a8:4f:95:cf:f4: 3d:68:12:1e:99:06:7f:48:92:1c:9c:5d:ef:f3:b5: 07:37:5a:a2:09:33:e6:3a:5b:a9:af:b7:85:1f:f7: 7a:ca:d2:9e:83:e7:3f:55:c7:8c:08:72:19:87:60: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AC:10:50:BC:64:03:3D:53:15:10:DF:0B:7A:F9:1B:81:32:3C:29 X509v3 Authority Key Identifier: keyid:88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a7:5d:6e:7e:25:5f:44:c3:cf:b6:66:25:f7:ea:55:89:f2: d6:76:c8:a0:f2:01:bc:27:69:55:4b:ff:6f:24:f5:26:b8:6e: c1:17:31:83:9a:b7:3c:3b:ea:da:be:b2:e2:e2:e6:dd:6b:7d: 65:d6:75:6d:71:34:e4:dd:52:1f:fa:ef:b8:e4:45:76:63:df: 52:38:f1:61:73:f1:c0:9b:e0:70:8e:4a:c6:17:3d:6c:05:a3: 8f:4e:37:5b:8c:5e:8b:d6:22:93:ea:d0:3c:fa:f7:d7:80:c9: c3:05:3a:e0:64:39:67:a0:c9:fe:ca:7b:a3:53:4c:0b:40:63: fe:ff:f9:7c:fd:4a:ce:90:df:a7:88:0c:ab:60:e5:cd:64:17: cd:c7:00:23:05:39:fd:01:57:c4:a9:63:45:21:30:4a:a9:ae: 7d:aa:ea:d2:11:57:89:9b:e9:19:2f:a3:05:7b:11:93:c3:75: e3:5c:53:e9:64:b6:46:f1:fb:5e:2c:d3:f6:85:48:0a:a3:3a: a1:25:dd:b0:a2:37:54:f2:43:21:9f:60:e0:19:5c:fe:db:7b: 3a:3b:b2:0e:74:b1:15:80:6d:f5:66:58:3e:66:3b:ef:31:7d: 7f:44:b1:55:35:6b:17:e4:ec:5f:f4:22:94:27:d5:33:4f:fb: bb:ef:10:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwE5ebN2VzNgMEfW/SeGyTDR6bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFF N0VBMTBFQjAeFw0yNjA2MTkxODQzMzZaFw0yNjA2MjAxOTAzMzZaMDMxMTAvBgNV BAMTKDZBQUMxMDUwQkM2NDAzM0Q1MzE1MTBERjBCN0FGOTFCODEzMjNDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFapMXremJcl4+OywqwBbqRTTP cV8Ks2UAla5Zhlo9taR0CVZQwdKHRyP69O0hCl8wtHWUX/PyT5LQOwRCJEiqWfuH bUO6BV/I8eYcA3jWA2zWTHhztG9H9b6o8bjljRI8KQcmhdqQIVehwnwMcQlwXkMa YYYoXhI7YtVCyYI4GRmXtKs1rrTyNXmmXt5HvzDnaROAe41ULA4juakApJfGUYtt jE9CxBL6lPh1nf39545oCI3EGMePrpZgiloBXgFZLjYELxdJ2DKHfWioT5XP9D1o Eh6ZBn9IkhycXe/ztQc3WqIJM+Y6W6mvt4Uf93rK0p6D5z9Vx4wIchmHYOl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaqwQULxkAz1TFRDfC3r5G4EyPCkwHwYDVR0j BBgwFoAUiN1+sJfj8e0dOU4z/inhUefqEOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0NGE3MjYtNzA3Yy00OWUyLWJmY2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5 N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFFN0VBMTBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OEREN0VCMDk3RTNGMUVEMUQzOTRFMzNGRTI5RTE1MUU3RUEx MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUx NTFFN0VBMTBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6nXW5+JV9Ew8+2ZiX36lWJ8tZ2yKDyAbwn aVVL/28k9Sa4bsEXMYOatzw76tq+suLi5t1rfWXWdW1xNOTdUh/677jkRXZj31I4 8WFz8cCb4HCOSsYXPWwFo49ON1uMXovWIpPq0Dz699eAycMFOuBkOWegyf7Ke6NT TAtAY/7/+Xz9Ss6Q36eIDKtg5c1kF83HACMFOf0BV8SpY0UhMEqprn2q6tIRV4mb 6RkvowV7EZPDdeNcU+lktkbx+14s0/aFSAqjOqEl3bCiN1TyQyGfYOAZXP7bezo7 sg50sRWAbfVmWD5mO+8xfX9EsVU1axfk7F/0IpQn1TNP+7vvECo= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:48 2026 by rpki-client