$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft File: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft (raw, json) Hash identifier: jTpf7DYwG+bmKEHie/EbvW1aUI8rt0/dUpFEvdjneOU= Subject key identifier: 64:90:52:F3:AF:95:C8:6F:9B:C8:79:0A:50:F9:C7:8F:08:E3:93:06 Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Certificate serial: 5FD51AAA41F31612190CB3C4B67764B288126A16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 06:09:51 +0000 Manifest this update: Sun 02 Aug 2026 06:04:51 +0000 Manifest next update: Mon 03 Aug 2026 07:45:51 +0000 Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8=) 2: 88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl (hash: /Y/QetRZkiX/m4xE8Ge56iIvvUHgbh3kaQF2DbMdU60=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d5:1a:aa:41:f3:16:12:19:0c:b3:c4:b6:77:64:b2:88:12:6a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Validity Not Before: Aug 2 06:04:51 2026 GMT Not After : Aug 3 07:45:51 2026 GMT Subject: CN=649052F3AF95C86F9BC8790A50F9C78F08E39306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:ec:75:d6:ae:ee:ca:f5:81:23:98:df:82: c5:d2:ed:53:bf:c7:28:97:e7:04:04:31:dd:0a:67: 35:c8:f6:b2:d3:a3:c9:7f:41:bd:d9:7f:9a:04:4c: 90:4d:8f:c8:9a:69:ae:ab:17:f0:c2:da:80:f1:94: b6:bb:64:a0:7e:f3:83:5e:f2:38:d2:b8:d2:25:1a: 4d:c8:3e:01:04:26:33:85:0f:7b:0d:a8:99:0a:5f: 8f:66:b4:a2:f4:07:9e:b5:8e:10:8e:e0:93:c2:3b: 59:49:f6:25:b3:7a:d1:c3:40:cb:0d:87:91:d0:92: e9:7f:bd:19:8b:6f:6a:0c:19:c0:ae:ba:2e:5e:f6: be:9e:18:a5:b9:b8:e0:a0:c2:95:28:f6:ff:f6:37: e6:9a:ae:f9:92:03:bd:39:01:da:53:07:1d:0c:62: 27:99:45:f0:27:91:99:11:77:00:5d:61:1b:61:74: 24:2e:a6:4e:66:a9:41:9e:6a:28:56:8c:eb:7d:d1: 59:f9:8f:59:e3:fe:af:84:26:9c:b1:be:4c:8a:54: 60:f8:f0:f4:76:52:84:f6:9b:b5:14:ea:db:7d:47: e7:9b:0c:dd:37:56:42:83:3d:40:a7:36:52:e4:5b: ed:92:46:c8:93:81:ec:fb:a4:c7:fa:c1:7e:35:6b: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:90:52:F3:AF:95:C8:6F:9B:C8:79:0A:50:F9:C7:8F:08:E3:93:06 X509v3 Authority Key Identifier: keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:23:b7:c3:c3:f8:10:be:d0:f0:5d:f9:42:52:5d:45:55:b4: 42:23:c4:c1:a4:9d:f0:a2:f5:f1:69:f9:af:99:43:3b:0d:90: a6:5f:31:94:f9:59:f7:1b:07:e3:80:f1:9f:03:42:60:19:76: a5:e4:6b:62:2b:c0:84:36:19:20:4a:67:d7:8a:2b:de:74:3b: 88:d3:33:9e:bc:7f:ec:77:a2:9a:bb:89:0c:5c:5b:72:0e:21: f6:8e:e7:7d:7d:78:c3:6e:7d:83:2a:a6:37:57:94:20:8d:11: e9:97:70:01:70:d4:7a:29:a4:65:cb:58:1d:89:c3:3b:dc:6e: 75:9b:e9:bd:3b:e5:a6:e7:98:a5:44:66:1e:37:da:17:0f:55: 66:fc:f0:a3:df:72:5b:a6:77:24:29:b3:a3:6d:ff:49:6f:da: 63:f7:70:d3:bd:b4:ff:e3:c1:0d:33:83:a5:2b:ba:8f:77:7c: e9:74:0c:98:c5:f5:71:a8:f2:e8:d2:ff:4d:85:f9:75:4c:4f: fb:94:6c:b4:24:e4:4f:c2:6d:03:51:9b:b5:ba:bd:55:45:3d: 5a:ef:86:9b:99:46:e6:1f:cf:93:cc:4a:a7:3f:9b:9a:8d:23: 58:91:b2:09:f8:62:f8:ff:66:65:bf:59:bb:53:df:df:3e:03: 2d:3f:44:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9UaqkHzFhIZDLPEtndksogSahYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5 MEVGREY1MzAeFw0yNjA4MDIwNjA0NTFaFw0yNjA4MDMwNzQ1NTFaMDMxMTAvBgNV BAMTKDY0OTA1MkYzQUY5NUM4NkY5QkM4NzkwQTUwRjlDNzhGMDhFMzkzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZeOx11q7uyvWBI5jfgsXS7VO/ xyiX5wQEMd0KZzXI9rLTo8l/Qb3Zf5oETJBNj8iaaa6rF/DC2oDxlLa7ZKB+84Ne 8jjSuNIlGk3IPgEEJjOFD3sNqJkKX49mtKL0B561jhCO4JPCO1lJ9iWzetHDQMsN h5HQkul/vRmLb2oMGcCuui5e9r6eGKW5uOCgwpUo9v/2N+aarvmSA705AdpTBx0M YieZRfAnkZkRdwBdYRthdCQupk5mqUGeaihWjOt90Vn5j1nj/q+EJpyxvkyKVGD4 8PR2UoT2m7UU6tt9R+ebDN03VkKDPUCnNlLkW+2SRsiTgez7pMf6wX41axMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJBS86+VyG+byHkKUPnHjwjjkwYwHwYDVR0j BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE RjUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFE ODA5MEVGREY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcjt8PD+BC+0PBd+UJSXUVVtEIjxMGknfCi 9fFp+a+ZQzsNkKZfMZT5WfcbB+OA8Z8DQmAZdqXka2IrwIQ2GSBKZ9eKK950O4jT M568f+x3opq7iQxcW3IOIfaO5319eMNufYMqpjdXlCCNEemXcAFw1HoppGXLWB2J wzvcbnWb6b075abnmKVEZh432hcPVWb88KPfclumdyQps6Nt/0lv2mP3cNO9tP/j wQ0zg6Uruo93fOl0DJjF9XGo8ujS/02F+XVMT/uUbLQk5E/CbQNRm7W6vVVFPVrv hpuZRuYfz5PMSqc/m5qNI1iRsgn4Yvj/ZmW/WbtT398+Ay0/RIw= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:43 2026 by rpki-client