$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: L6kRsszJYV541fQ0yQRgu9rc8TyNRemkPo3gbupbXAo= Subject key identifier: 43:10:25:08:E9:66:70:1D:05:5E:B8:33:BE:85:FA:13:BC:52:12:C1 Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 34685CA7BE5F7FA695A7A6EC265137345F6A9C25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 07:15:58 +0000 Manifest this update: Thu 18 Jun 2026 07:10:58 +0000 Manifest next update: Fri 19 Jun 2026 09:35:58 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: jbUy7X8ywDALPjKHaGk7ga3c7O1LNM1eG98SM9f//us=) 2: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) 3: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:68:5c:a7:be:5f:7f:a6:95:a7:a6:ec:26:51:37:34:5f:6a:9c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Jun 18 07:10:58 2026 GMT Not After : Jun 19 09:35:58 2026 GMT Subject: CN=43102508E966701D055EB833BE85FA13BC5212C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:ba:84:e2:61:52:b0:1b:d9:e3:be:7f:53: a8:93:d9:d3:a9:5c:32:e0:e4:60:32:7a:ef:92:6d: 16:1c:29:95:ae:41:4b:77:67:db:ec:89:c6:12:0c: c2:61:d6:3e:5a:1f:4a:24:57:33:e8:26:81:ff:89: fb:a3:a5:8f:43:40:56:45:cc:99:46:d6:6b:5e:78: 7d:22:af:36:0e:77:3b:ac:e8:08:a5:32:1d:b8:97: 1e:ae:04:53:77:e2:14:ca:82:4a:5d:19:b3:22:26: 94:50:ac:d5:a3:0c:3f:23:80:88:5a:28:1d:78:08: c5:fe:a4:dd:59:ba:b0:5b:af:95:9c:09:4c:bf:45: 48:53:e4:e4:d5:c6:56:95:2d:6d:a2:0f:07:30:f3: 6c:d1:eb:d0:fe:f6:fe:4c:c6:77:83:fa:bc:b0:f4: b8:00:fe:bd:6c:63:68:cd:8d:cf:32:80:6d:00:21: d5:02:2c:e0:e8:0c:40:63:ad:08:a9:d0:73:18:e1: ee:5e:90:fe:e9:91:16:91:f1:ef:20:11:c8:78:e8: 8b:29:8b:c9:ef:ec:95:21:9c:3d:60:92:6c:17:e3: 00:10:bd:4c:b1:9d:cb:ec:1c:d3:30:2b:4c:51:81: 78:f4:47:dc:04:41:b5:16:d4:5e:b9:7c:0b:80:54: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:10:25:08:E9:66:70:1D:05:5E:B8:33:BE:85:FA:13:BC:52:12:C1 X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3e:29:63:48:ae:7c:9c:d1:54:fe:c0:d6:82:3c:73:c6:38: 94:98:75:c2:5a:15:48:0e:5e:55:17:fb:fa:5f:41:7f:33:fa: 36:75:39:7c:db:f5:8c:81:48:2e:43:5d:16:c6:5b:e1:12:bf: 40:bd:5c:be:79:15:0b:aa:3d:01:d3:ce:5f:f0:eb:a5:9f:fc: a4:b4:ec:25:fc:0d:1a:73:31:c6:4d:da:ab:02:ac:8e:09:4a: ee:9f:20:e7:cb:e9:7f:c8:61:e8:de:f5:c9:15:21:6b:a7:38: 4d:fe:c9:86:2d:86:26:92:dc:f8:73:a7:23:ca:15:d3:fe:1b: 66:72:cd:4b:0a:f2:9b:81:10:5f:6d:ea:a7:24:a6:55:ac:8e: 17:75:6e:e4:04:80:d0:80:b9:30:b6:7f:7c:1a:6f:de:90:82: 75:3c:42:10:32:62:38:10:fe:92:5f:b5:b5:6d:93:ca:8c:f2: d7:9a:e3:2b:bd:9e:78:3e:f8:9b:17:9d:c6:66:0f:74:5f:7d: 92:5d:26:6f:c0:51:a3:d1:75:22:b2:47:40:61:e3:55:67:a7: 1d:b3:ce:7e:c0:fd:f1:8d:f7:cd:31:20:2c:9d:02:30:84:6d: 92:35:15:44:a5:28:bb:5e:03:c6:08:f6:d3:80:eb:e5:76:d1: a9:14:e8:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGhcp75ff6aVp6bsJlE3NF9qnCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA2MTgwNzEwNThaFw0yNjA2MTkwOTM1NThaMDMxMTAvBgNV BAMTKDQzMTAyNTA4RTk2NjcwMUQwNTVFQjgzM0JFODVGQTEzQkM1MjEyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSrqE4mFSsBvZ475/U6iT2dOp XDLg5GAyeu+SbRYcKZWuQUt3Z9vsicYSDMJh1j5aH0okVzPoJoH/ifujpY9DQFZF zJlG1mteeH0irzYOdzus6AilMh24lx6uBFN34hTKgkpdGbMiJpRQrNWjDD8jgIha KB14CMX+pN1ZurBbr5WcCUy/RUhT5OTVxlaVLW2iDwcw82zR69D+9v5MxneD+ryw 9LgA/r1sY2jNjc8ygG0AIdUCLODoDEBjrQip0HMY4e5ekP7pkRaR8e8gEch46Isp i8nv7JUhnD1gkmwX4wAQvUyxncvsHNMwK0xRgXj0R9wEQbUW1F65fAuAVP8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxAlCOlmcB0FXrgzvoX6E7xSEsEwHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY+KWNIrnyc0VT+wNaCPHPGOJSYdcJaFUgO XlUX+/pfQX8z+jZ1OXzb9YyBSC5DXRbGW+ESv0C9XL55FQuqPQHTzl/w66Wf/KS0 7CX8DRpzMcZN2qsCrI4JSu6fIOfL6X/IYeje9ckVIWunOE3+yYYthiaS3PhzpyPK FdP+G2ZyzUsK8puBEF9t6qckplWsjhd1buQEgNCAuTC2f3wab96QgnU8QhAyYjgQ /pJftbVtk8qM8tea4yu9nng++JsXncZmD3RffZJdJm/AUaPRdSKyR0Bh41Vnpx2z zn7A/fGN980xICydAjCEbZI1FUSlKLteA8YI9tOA6+V20akU6HA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:10:50 2026 by rpki-client