$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: RwjmyYVZvh7pi0bMQ13bOM/ihS7CcqSUKv63eN0MTjQ= Subject key identifier: FF:C5:F8:56:31:12:2B:09:8B:26:86:DF:56:CA:B0:D8:36:14:97:76 Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 775FDAF1408AA92DD65D3F952C266B9C4D8C9D47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 10:20:05 +0000 Manifest this update: Sun 02 Aug 2026 10:15:05 +0000 Manifest next update: Mon 03 Aug 2026 11:36:05 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: txsD+iryeVJG73DekcwEh5fr/Im6pKrWcKPWolKG7F8=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5f:da:f1:40:8a:a9:2d:d6:5d:3f:95:2c:26:6b:9c:4d:8c:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Aug 2 10:15:05 2026 GMT Not After : Aug 3 11:36:05 2026 GMT Subject: CN=FFC5F85631122B098B2686DF56CAB0D836149776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:29:70:49:c7:87:56:a2:80:48:23:65:8d: 32:d1:45:3a:69:c4:f7:0c:24:1a:6a:46:0e:a4:8d: a1:f8:75:d3:78:8c:81:b6:be:a8:5c:7c:44:a2:fc: be:fe:a0:3b:31:d1:6a:c3:5a:a8:96:02:00:3a:79: d4:8c:e8:9c:bb:4a:68:97:4b:71:2e:73:e2:24:cf: bb:70:04:e7:d7:c8:6c:cd:a9:b7:c3:d3:b8:f0:d6: 2b:a3:5c:f2:6f:c0:5f:c0:f1:ae:66:6f:6c:87:b6: b1:0d:71:28:d1:bb:bd:69:0a:03:1b:73:9b:db:9e: b3:f4:df:73:de:18:e6:63:79:3a:6c:3a:af:cd:53: 80:d0:8d:ed:f1:b2:17:8c:fe:43:f1:f8:59:0e:73: 42:12:fa:6f:57:88:32:e1:84:45:fe:b8:73:ec:ba: 3f:c5:5a:52:c2:49:65:0a:29:4d:b3:bc:c9:c8:76: 1d:4d:d3:04:17:73:e8:64:87:85:1f:08:19:13:c3: a9:01:85:6e:c4:d9:30:27:df:ee:7f:87:05:b8:b0: a1:44:08:e9:a5:8a:56:bb:e6:ad:0d:b2:4e:d5:29: f2:99:94:87:52:ac:1e:b3:80:9b:de:fb:58:6a:c7: 2f:91:0c:2f:3e:1e:8a:5f:fc:b4:7d:77:0e:d4:b0: d0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C5:F8:56:31:12:2B:09:8B:26:86:DF:56:CA:B0:D8:36:14:97:76 X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:05:7d:4d:6b:f4:22:77:c4:00:33:58:3f:d4:b1:36:40:ee: 79:b2:22:43:a0:9b:7b:24:e5:14:83:62:d8:29:63:56:80:f6: 30:c0:00:ba:b5:5c:d3:8f:fd:ea:44:5d:7b:5d:65:35:fa:65: 06:30:1a:d8:be:ba:82:a5:08:2a:15:7d:3b:a8:f5:a7:65:e3: fa:20:79:4a:82:bb:c0:1e:c0:94:6d:63:3f:ff:fa:5e:98:51: ac:70:17:a8:f2:5c:f8:cc:06:9d:58:11:f7:5f:1f:1e:d9:34: 45:9f:63:e4:b3:d8:dd:37:56:11:fa:35:89:74:ac:f9:6d:e1: fe:2c:b0:2a:de:2f:09:fa:f6:51:55:e1:e0:1b:3b:89:83:06: 68:54:74:b8:da:b5:7c:ad:29:18:a0:00:66:10:ea:68:e7:8a: 57:1d:44:79:98:4c:8e:d1:9d:02:90:2f:59:a9:f6:11:f2:b4: cc:6c:ec:de:93:09:96:e4:f9:d6:50:ec:90:24:ae:7d:ad:a8: c4:fb:b3:47:df:07:14:71:6c:6b:d2:e9:c7:30:3c:1d:6a:cc: 44:45:21:a1:d8:1a:4e:6d:85:35:94:3d:a3:ff:eb:e2:5b:c9: b5:4d:0c:61:47:c2:b2:53:12:13:c6:59:c0:5d:cc:8b:f7:6b: af:94:43:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1/a8UCKqS3WXT+VLCZrnE2MnUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA4MDIxMDE1MDVaFw0yNjA4MDMxMTM2MDVaMDMxMTAvBgNV BAMTKEZGQzVGODU2MzExMjJCMDk4QjI2ODZERjU2Q0FCMEQ4MzYxNDk3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4USlwSceHVqKASCNljTLRRTpp xPcMJBpqRg6kjaH4ddN4jIG2vqhcfESi/L7+oDsx0WrDWqiWAgA6edSM6Jy7SmiX S3Euc+Ikz7twBOfXyGzNqbfD07jw1iujXPJvwF/A8a5mb2yHtrENcSjRu71pCgMb c5vbnrP033PeGOZjeTpsOq/NU4DQje3xsheM/kPx+FkOc0IS+m9XiDLhhEX+uHPs uj/FWlLCSWUKKU2zvMnIdh1N0wQXc+hkh4UfCBkTw6kBhW7E2TAn3+5/hwW4sKFE COmlila75q0Nsk7VKfKZlIdSrB6zgJve+1hqxy+RDC8+Hopf/LR9dw7UsNCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/8X4VjESKwmLJobfVsqw2DYUl3YwHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMFfU1r9CJ3xAAzWD/UsTZA7nmyIkOgm3sk 5RSDYtgpY1aA9jDAALq1XNOP/epEXXtdZTX6ZQYwGti+uoKlCCoVfTuo9adl4/og eUqCu8AewJRtYz//+l6YUaxwF6jyXPjMBp1YEfdfHx7ZNEWfY+Sz2N03VhH6NYl0 rPlt4f4ssCreLwn69lFV4eAbO4mDBmhUdLjatXytKRigAGYQ6mjnilcdRHmYTI7R nQKQL1mp9hHytMxs7N6TCZbk+dZQ7JAkrn2tqMT7s0ffBxRxbGvS6ccwPB1qzERF IaHYGk5thTWUPaP/6+JbybVNDGFHwrJTEhPGWcBdzIv3a6+UQw4= -----END CERTIFICATE-----Generated at Sun Aug 2 20:32:49 2026 by rpki-client