$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft File: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft (raw, json) Hash identifier: E7RmNhE11rUaulz1JDUe1lW7Gai/Ub5r/m1iBj1DP58= Subject key identifier: 7A:3E:3A:0E:B4:A7:52:F2:16:1E:E4:94:D9:AD:50:E2:8E:2D:B1:5D Authority key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 Certificate issuer: /CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Certificate serial: 1929AED18886DAAF77B4BBBE5F4531C1406C4DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft Manifest number: 27 Signing time: Thu 26 Mar 2026 15:30:03 +0000 Manifest this update: Thu 26 Mar 2026 15:25:03 +0000 Manifest next update: Sun 29 Mar 2026 16:04:03 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: qprBpEFsUmfzT7L8DfRHRiIYOBmZH2oG8ByFHZ6SCUo=) 2: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl (hash: NxKNFfV2uACJPSd6fEOR/0ZS9lWA13jxJvmrnB3boGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:29:ae:d1:88:86:da:af:77:b4:bb:be:5f:45:31:c1:40:6c:4d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Validity Not Before: Mar 26 15:25:03 2026 GMT Not After : Mar 29 16:04:03 2026 GMT Subject: CN=7A3E3A0EB4A752F2161EE494D9AD50E28E2DB15D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:da:1b:02:dc:fe:0b:0d:4c:c0:a3:ff:10: 6d:0a:60:83:fe:80:91:72:04:72:ef:06:99:71:ed: 8f:e4:d4:0f:3c:24:fb:85:c9:6b:eb:6c:cf:53:48: 04:51:68:9e:cf:5c:92:f0:f6:5b:be:6c:d9:72:0c: 49:f6:7b:79:fb:fa:a6:dc:9e:3c:29:3a:42:a8:fb: 54:28:81:54:30:eb:c2:e5:84:98:50:9c:8c:ce:36: 36:fb:7d:3e:01:80:65:d5:f1:df:a7:69:1a:35:dd: 99:c7:eb:be:d8:ee:7c:9a:96:65:07:0b:91:52:69: 39:15:4d:da:a3:b6:3d:22:97:54:a1:4f:28:8b:10: 36:da:c8:cd:62:a1:49:b5:49:ab:a8:ac:8e:f5:0b: 4b:42:9e:65:78:49:81:62:59:fd:0a:ae:a3:22:87: ce:7d:d6:8d:35:fc:d5:75:3a:5a:26:b8:89:38:ad: fc:09:07:99:fd:fd:7c:0a:83:1d:84:b6:8b:a6:33: 9a:74:2f:a9:0d:c7:b2:50:1f:d2:f7:87:8c:a7:a0: 4a:44:a4:62:87:6a:f0:bb:c0:d3:90:9d:4e:f5:a1: b5:21:cc:2d:75:88:59:56:7a:00:b1:1f:5d:cf:f6: 7c:c1:fb:be:f6:b5:c7:0a:d7:b6:78:da:93:5f:11: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3E:3A:0E:B4:A7:52:F2:16:1E:E4:94:D9:AD:50:E2:8E:2D:B1:5D X509v3 Authority Key Identifier: keyid:88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:42:05:53:b7:1d:78:ab:68:74:64:46:24:34:2d:d0:a2:51: 0b:2b:19:8e:01:6c:8d:19:16:4d:cd:32:a0:9d:93:f9:e1:ff: 40:0c:7e:3d:ef:fc:2e:a1:10:56:94:aa:4d:fd:cc:75:d9:ab: 60:0f:2a:46:d9:65:ef:ac:f3:67:e5:a8:e5:f9:62:a4:71:c0: d5:28:6e:d5:c0:41:8f:c9:45:8e:99:45:86:e4:e4:d6:6e:45: 86:c5:d2:d0:63:81:5d:f9:c9:8b:a6:cb:06:eb:ca:ca:8e:09: f5:82:e6:1d:06:56:34:81:f6:bf:f5:9b:64:d1:be:0b:f2:9e: df:df:af:63:7e:17:e8:28:fe:8f:6d:92:5e:0d:cd:af:25:7a: c1:0b:c5:29:c5:d3:39:5f:24:8d:91:77:1d:3f:01:17:f9:45: cd:ef:ff:42:06:67:bb:95:2b:0b:46:94:dc:08:e3:5e:cd:e9: a3:cb:f5:50:f3:3d:11:39:03:3f:4d:19:2d:f8:f3:e7:95:08: 0d:6b:29:e5:25:f2:cb:bd:45:72:6c:a3:86:3c:bd:a6:d0:95: 7c:44:dd:f0:03:04:b7:dc:29:a5:43:5c:b8:88:e9:08:5e:cf: c1:55:7f:53:ed:2c:47:01:b6:3f:00:b0:7a:12:96:eb:67:b1: 54:11:e1:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSmu0YiG2q93tLu+X0UxwUBsTb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIx QzBBQjVGMjAeFw0yNjAzMjYxNTI1MDNaFw0yNjAzMjkxNjA0MDNaMDMxMTAvBgNV BAMTKDdBM0UzQTBFQjRBNzUyRjIxNjFFRTQ5NEQ5QUQ1MEUyOEUyREIxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzdobAtz+Cw1MwKP/EG0KYIP+ gJFyBHLvBplx7Y/k1A88JPuFyWvrbM9TSARRaJ7PXJLw9lu+bNlyDEn2e3n7+qbc njwpOkKo+1QogVQw68LlhJhQnIzONjb7fT4BgGXV8d+naRo13ZnH677Y7nyalmUH C5FSaTkVTdqjtj0il1ShTyiLEDbayM1ioUm1SauorI71C0tCnmV4SYFiWf0KrqMi h8591o01/NV1OlomuIk4rfwJB5n9/XwKgx2EtoumM5p0L6kNx7JQH9L3h4ynoEpE pGKHavC7wNOQnU71obUhzC11iFlWegCxH13P9nzB+772tccK17Z42pNfERLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUej46DrSnUvIWHuSU2a1Q4o4tsV0wHwYDVR0j BBgwFoAUiFt8AIzkQDbKBln9jhN5MhwKtfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMS84ODVCN0MwMDhD RTQ0MDM2Q0EwNjU5RkQ4RTEzNzkzMjFDMEFCNUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIxQzBB QjVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5 MzIxQzBBQjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZCBVO3HXiraHRkRiQ0LdCiUQsrGY4BbI0Z Fk3NMqCdk/nh/0AMfj3v/C6hEFaUqk39zHXZq2APKkbZZe+s82flqOX5YqRxwNUo btXAQY/JRY6ZRYbk5NZuRYbF0tBjgV35yYumywbrysqOCfWC5h0GVjSB9r/1m2TR vgvynt/fr2N+F+go/o9tkl4Nza8lesELxSnF0zlfJI2Rdx0/ARf5Rc3v/0IGZ7uV KwtGlNwI417N6aPL9VDzPRE5Az9NGS348+eVCA1rKeUl8su9RXJso4Y8vabQlXxE 3fADBLfcKaVDXLiI6Qhez8FVf1PtLEcBtj8AsHoSlutnsVQR4SQ= -----END CERTIFICATE-----Generated at Thu Mar 26 22:24:17 2026 by rpki-client