$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft File: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft (raw, json) Hash identifier: ZtpUiVThUPxe6gG/aRzXlZDG3dEFS5f50qp9z66b35s= Subject key identifier: 03:A9:E9:8D:7A:36:4E:C7:21:5F:40:50:E7:45:F5:3B:BD:68:E5:7A Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Certificate serial: 70729109A410DF69174DBA7FAC096694B3EB4731 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:37:54 +0000 Manifest this update: Thu 17 Sep 2026 07:32:54 +0000 Manifest next update: Fri 18 Sep 2026 07:48:54 +0000 Files and hashes: 1: 88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl (hash: DJRB+RjB5lDaOc44fQbGO4TYUF5pyCOOe/4JZ78l+ps=) 2: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 76jX1EQLJLemOan59z7L47xBchgtO5SRGL4XXupWKtc=) 3: 3136302e32352e36392e302f32342d3234203d3e20313532383430.roa (hash: EWMwL60vzqC7F/OnWAuKboStk3XuPspVW+rLMqOb4lI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:72:91:09:a4:10:df:69:17:4d:ba:7f:ac:09:66:94:b3:eb:47:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55 Validity Not Before: Sep 17 07:32:54 2026 GMT Not After : Sep 18 07:48:54 2026 GMT Subject: CN=03A9E98D7A364EC7215F4050E745F53BBD68E57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:ea:f1:8e:31:6e:63:4d:76:13:7d:33:ad: ee:5c:8f:22:17:d6:4e:55:2b:62:b2:2a:db:a0:f0: b8:0d:6d:ff:6c:cb:46:0c:a6:71:58:42:a0:99:f3: ca:03:57:be:bb:d4:2f:af:4b:00:50:77:7a:f8:23: 33:76:27:14:a7:52:b1:c5:3e:cf:77:9d:73:69:1c: f5:68:2d:5c:b2:a8:8a:2a:38:2d:de:7e:7e:a4:e2: f4:a2:82:9c:87:b3:8d:b2:80:e9:80:f8:7e:7f:fe: 01:89:64:5f:e6:f7:4a:87:a6:18:4f:86:59:cf:cd: 22:11:61:74:85:53:96:3d:01:56:b2:ab:fc:d5:0c: cd:fa:08:8f:de:f2:0d:6d:ac:65:4a:7c:4c:b7:90: b0:43:c4:56:74:9f:73:2b:6b:d6:99:eb:87:08:55: d3:a2:0f:bd:d4:c8:93:f5:0c:10:47:9a:0d:76:01: da:01:a1:e2:d4:46:4b:d3:4c:d2:fe:1d:bb:1a:ce: 15:ca:01:28:fe:5c:de:e0:21:26:ab:4e:0e:71:b9: 89:31:e1:df:d2:4d:bd:e3:ae:5d:b2:7b:f5:a5:ec: 64:68:ab:a2:e3:f5:bc:5c:8d:92:ee:49:17:fa:e8: 7a:f9:27:4b:2f:00:e1:42:72:d5:49:cb:d6:93:c5: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A9:E9:8D:7A:36:4E:C7:21:5F:40:50:E7:45:F5:3B:BD:68:E5:7A X509v3 Authority Key Identifier: keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:53:5a:8c:47:5d:5e:b3:2d:6f:c4:78:aa:27:3e:ee:73: 2f:cc:d9:8b:82:8e:8d:f8:72:08:64:bf:7e:ee:0b:46:8b:5c: f2:97:7c:1e:57:5a:de:3b:2f:3f:25:2c:48:4a:5f:a8:83:e0: 82:a5:4f:ce:9b:f4:00:56:03:a5:f6:39:28:4a:ca:db:a6:dc: 23:40:bf:5b:47:a3:16:50:b8:81:4a:a7:66:e5:a2:b3:76:af: 7b:ca:03:36:39:f1:b8:fa:f2:2b:e1:0f:1a:d7:1a:b9:7a:97: b4:eb:7b:bf:62:4d:24:17:7c:47:62:02:b0:d7:45:e2:a4:e2: 6a:6f:30:d0:00:ce:e1:2a:57:e3:4d:8b:52:22:c5:33:01:93: 39:f7:dc:cb:a9:0b:be:7a:5d:1f:02:49:45:08:86:bd:62:3d: d7:d4:e6:06:0f:c9:17:3a:09:f3:5a:58:b7:1e:39:39:05:1b: 77:52:e3:23:cd:c4:88:a9:10:42:88:64:c6:74:a5:ce:67:3c: ae:df:06:f5:07:36:b4:5b:09:33:f1:3f:dc:76:9d:42:a0:62: c3:12:35:ec:5a:6e:43:ea:6b:32:0b:69:4a:75:ba:b2:ee:13: 54:0f:c6:e8:c6:d3:46:45:98:a3:13:83:84:9d:83:fd:6c:1e: 49:7b:77:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHKRCaQQ32kXTbp/rAlmlLPrRzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2 RUM1NEU1NTAeFw0yNjA5MTcwNzMyNTRaFw0yNjA5MTgwNzQ4NTRaMDMxMTAvBgNV BAMTKDAzQTlFOThEN0EzNjRFQzcyMTVGNDA1MEU3NDVGNTNCQkQ2OEU1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3urxjjFuY012E30zre5cjyIX 1k5VK2KyKtug8LgNbf9sy0YMpnFYQqCZ88oDV7671C+vSwBQd3r4IzN2JxSnUrHF Ps93nXNpHPVoLVyyqIoqOC3efn6k4vSigpyHs42ygOmA+H5//gGJZF/m90qHphhP hlnPzSIRYXSFU5Y9AVayq/zVDM36CI/e8g1trGVKfEy3kLBDxFZ0n3Mra9aZ64cI VdOiD73UyJP1DBBHmg12AdoBoeLURkvTTNL+HbsazhXKASj+XN7gISarTg5xuYkx 4d/STb3jrl2ye/Wl7GRoq6Lj9bxcjZLuSRf66Hr5J0svAOFCctVJy9aTxQa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6npjXo2TschX0BQ50X1O71o5XowHwYDVR0j BBgwFoAUiNT0/fUb8QMIwBWy/IRE9m7FTlUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJmYmFhZmMtNGRiMi00ZmM0LWExYTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRG NTFCRjEwMzA4QzAxNUIyRkM4NDQ0RjY2RUM1NEU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84OEQ0RjRGREY1MUJGMTAzMDhDMDE1QjJGQzg0NDRGNjZFQzU0 RTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvODhENEY0RkRGNTFCRjEwMzA4QzAxNUIyRkM4NDQ0 RjY2RUM1NEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvOU1qMR11esy1vxHiqJz7ucy/M2YuCjo34 cghkv37uC0aLXPKXfB5XWt47Lz8lLEhKX6iD4IKlT86b9ABWA6X2OShKytum3CNA v1tHoxZQuIFKp2blorN2r3vKAzY58bj68ivhDxrXGrl6l7Tre79iTSQXfEdiArDX ReKk4mpvMNAAzuEqV+NNi1IixTMBkzn33MupC756XR8CSUUIhr1iPdfU5gYPyRc6 CfNaWLceOTkFG3dS4yPNxIipEEKIZMZ0pc5nPK7fBvUHNrRbCTPxP9x2nUKgYsMS NexabkPqazILaUp1urLuE1QPxujG00ZFmKMTg4Sdg/1sHkl7d2c= -----END CERTIFICATE-----Generated at Thu Sep 17 11:26:33 2026 by rpki-client