$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft File: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft (raw, json) Hash identifier: kqdPLnoqtfHUObJhaUCoFAtt0kXpuOBSV8DN9XjuuGQ= Subject key identifier: 9D:89:A7:1A:25:F4:0C:03:15:EF:D7:56:83:9B:0D:BC:9A:74:EF:1E Authority key identifier: 88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB Certificate issuer: /CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Certificate serial: 37C1AA75644A0A27AB38F3828555811CD3ECA818 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 06:57:06 +0000 Manifest this update: Thu 17 Sep 2026 06:52:06 +0000 Manifest next update: Fri 18 Sep 2026 08:25:06 +0000 Files and hashes: 1: 88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl (hash: zeWjlK+dBVSVLX44nKlYr37T2o+Txm0dAQxV2bti5+I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c1:aa:75:64:4a:0a:27:ab:38:f3:82:85:55:81:1c:d3:ec:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB Validity Not Before: Sep 17 06:52:06 2026 GMT Not After : Sep 18 08:25:06 2026 GMT Subject: CN=9D89A71A25F40C0315EFD756839B0DBC9A74EF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:e0:73:e2:1a:eb:26:77:20:5b:00:e6:f9: f1:af:27:26:33:54:64:fd:7b:44:03:21:06:12:24: da:4a:72:8e:f6:5c:82:13:3c:6d:f6:1f:8c:a8:16: 41:5b:37:29:9e:f4:0f:7d:a5:bb:6f:6e:58:40:8e: 5b:9f:ab:ae:31:e4:46:47:52:37:35:be:12:ed:3f: ce:37:9b:90:37:06:b9:c9:94:08:29:d5:33:95:1f: 8e:7f:94:1f:2d:0d:ed:9f:c3:96:a7:a3:e4:74:84: e8:e5:d1:0a:71:cb:b3:aa:d8:fb:63:7d:53:05:e0: c3:9e:ab:8d:4f:5d:3c:80:98:86:7c:b1:64:26:2f: 35:cb:2f:53:71:dc:57:f9:cd:01:03:53:17:48:1d: 5e:1a:29:26:3e:50:19:71:cf:e2:d9:bf:2a:46:30: 9d:84:4b:ec:00:8a:6b:9c:16:02:bf:70:7f:af:4f: 79:fd:0a:12:fe:b8:a6:4c:33:95:23:99:df:7e:63: e9:e4:24:18:90:93:66:43:d4:8a:54:e0:d3:e5:60: 9e:b3:c9:79:2f:00:6c:53:ad:48:6a:8c:2f:a5:73: b5:a6:6b:ea:e5:7b:f5:bf:b2:6b:64:7f:ea:a1:8e: 84:97:1b:51:ea:55:4f:75:82:4a:5e:d8:a0:33:6a: 52:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:A7:1A:25:F4:0C:03:15:EF:D7:56:83:9B:0D:BC:9A:74:EF:1E X509v3 Authority Key Identifier: keyid:88:DD:7E:B0:97:E3:F1:ED:1D:39:4E:33:FE:29:E1:51:E7:EA:10:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e44a726-707c-49e2-bfce-9b5eef1eed4e/0/88DD7EB097E3F1ED1D394E33FE29E151E7EA10EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:90:a7:ea:cd:b4:7a:d5:ff:c1:7b:f1:22:c4:c4:53:5b:d7: df:8d:b4:35:f4:5e:20:36:34:e7:14:f3:93:ba:1e:89:56:6f: 63:a1:5f:fe:b8:da:d5:1f:5d:d7:6b:60:e3:0c:54:63:13:19: 20:81:73:e0:14:b6:b8:6b:ee:27:af:e8:c9:a6:6b:12:59:14: c7:55:90:97:f5:86:9b:61:dc:d4:9e:25:06:ae:fe:35:aa:ba: 49:21:51:11:7b:e3:5a:64:8d:b4:4f:ac:21:6e:79:67:04:6c: 67:4a:32:ec:c6:66:b4:02:f1:d7:33:c7:42:43:f3:d9:73:16: 35:c9:1f:70:4f:25:a4:62:29:b0:af:32:d7:45:b7:53:4d:e9: 51:0a:14:3d:e9:d4:ff:d1:10:86:34:e8:2f:7c:11:16:8c:52: 68:dc:1e:8e:57:50:6a:5b:33:07:7a:2e:6b:f1:78:18:37:bd: bd:a0:6f:a9:ae:11:71:d7:4e:c8:b8:00:72:bf:1b:a6:e3:22: e7:d3:32:17:e4:d7:f5:66:29:ea:3f:a8:06:85:5f:fb:d7:f6: 81:5c:ba:4c:c0:26:74:a3:7b:13:34:1d:a0:ae:9b:6f:e0:f0: 8a:a3:a4:22:84:89:2c:23:17:e9:cb:13:ac:73:fc:01:d1:33: c7:1d:1f:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8GqdWRKCierOPOChVWBHNPsqBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFF N0VBMTBFQjAeFw0yNjA5MTcwNjUyMDZaFw0yNjA5MTgwODI1MDZaMDMxMTAvBgNV BAMTKDlEODlBNzFBMjVGNDBDMDMxNUVGRDc1NjgzOUIwREJDOUE3NEVGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgaeBz4hrrJncgWwDm+fGvJyYz VGT9e0QDIQYSJNpKco72XIITPG32H4yoFkFbNyme9A99pbtvblhAjlufq64x5EZH Ujc1vhLtP843m5A3BrnJlAgp1TOVH45/lB8tDe2fw5ano+R0hOjl0Qpxy7Oq2Ptj fVMF4MOeq41PXTyAmIZ8sWQmLzXLL1Nx3Ff5zQEDUxdIHV4aKSY+UBlxz+LZvypG MJ2ES+wAimucFgK/cH+vT3n9ChL+uKZMM5Ujmd9+Y+nkJBiQk2ZD1IpU4NPlYJ6z yXkvAGxTrUhqjC+lc7Wma+rle/W/smtkf+qhjoSXG1HqVU91gkpe2KAzalJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnYmnGiX0DAMV79dWg5sNvJp07x4wHwYDVR0j BBgwFoAUiN1+sJfj8e0dOU4z/inhUefqEOswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWU0NGE3MjYtNzA3Yy00OWUyLWJmY2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5 N0UzRjFFRDFEMzk0RTMzRkUyOUUxNTFFN0VBMTBFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84OEREN0VCMDk3RTNGMUVEMUQzOTRFMzNGRTI5RTE1MUU3RUEx MEVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWU0NGE3MjYtNzA3Yy00OWUyLWJm Y2UtOWI1ZWVmMWVlZDRlLzAvODhERDdFQjA5N0UzRjFFRDFEMzk0RTMzRkUyOUUx NTFFN0VBMTBFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaQp+rNtHrV/8F78SLExFNb19+NtDX0XiA2 NOcU85O6HolWb2OhX/642tUfXddrYOMMVGMTGSCBc+AUtrhr7iev6MmmaxJZFMdV kJf1hpth3NSeJQau/jWqukkhURF741pkjbRPrCFueWcEbGdKMuzGZrQC8dczx0JD 89lzFjXJH3BPJaRiKbCvMtdFt1NN6VEKFD3p1P/REIY06C98ERaMUmjcHo5XUGpb Mwd6LmvxeBg3vb2gb6muEXHXTsi4AHK/G6bjIufTMhfk1/VmKeo/qAaFX/vX9oFc ukzAJnSjexM0HaCum2/g8IqjpCKEiSwjF+nLE6xz/AHRM8cdH7c= -----END CERTIFICATE-----Generated at Thu Sep 17 12:18:59 2026 by rpki-client