$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: qwMsNri/JTfjeI5kqVT9kIzVzZuG0yFWWX0cGoQhhG4= Subject key identifier: 90:89:3B:E6:F0:05:94:89:83:10:1A:39:AD:B9:0C:86:93:3C:B1:E3 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 54193447F68B43315ECF516F2C235D50F7B1EC1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 022F Signing time: Wed 25 Mar 2026 01:11:33 +0000 Manifest this update: Wed 25 Mar 2026 01:06:33 +0000 Manifest next update: Sat 28 Mar 2026 10:40:33 +0000 Files and hashes: 1: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: dBa568UK/EDi0HlAgRz6Gr8t22rnoRAjxn7WiN8bCyc=) 2: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: ABwyTuY2MyWlwjgz/sEcRp8gLTYyYbH+NHiYrtaPur8=) 3: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: cE5GTYNlB3yeu6BJgWNNyA2V1Ddxooz4i3udaZzgT3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:19:34:47:f6:8b:43:31:5e:cf:51:6f:2c:23:5d:50:f7:b1:ec:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Mar 25 01:06:33 2026 GMT Not After : Mar 28 10:40:33 2026 GMT Subject: CN=90893BE6F005948983101A39ADB90C86933CB1E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:48:bd:5a:fc:d6:cf:66:99:af:5d:d8:b9: 39:8c:46:99:47:fb:fa:40:5b:e5:93:c5:b7:2f:91: 1f:b6:7a:4e:a8:52:a7:0f:ce:35:bc:79:0f:c2:56: 6b:1a:28:0d:c6:bb:1a:10:08:8b:90:eb:4f:91:9b: 2e:51:21:a4:07:b4:79:52:cd:1d:64:e1:21:72:34: 1d:61:5f:1e:5e:83:65:a8:c3:3c:de:86:f3:20:72: be:e3:e0:40:15:37:9b:d8:8e:ea:e9:df:69:92:7f: 41:7a:f9:d7:29:2b:5e:43:0f:dc:e6:cb:da:64:f6: 6a:d8:70:10:e9:67:e5:d1:46:cb:46:de:85:ea:78: 5a:cb:7d:e4:56:0f:96:42:63:ff:ec:62:11:fe:97: c5:4d:a4:ab:cb:cd:2b:03:58:ce:7f:2d:98:93:03: 0b:e6:e8:79:5d:78:f7:41:b0:e1:6b:9f:f0:9b:62: f2:45:33:75:85:a2:be:4b:a7:50:7d:77:2e:4b:7b: ff:49:37:fe:15:cc:00:54:ab:3a:60:91:b6:f3:ba: 2b:f2:05:77:b9:f7:69:ef:69:60:3e:06:28:98:f1: 4c:6a:74:91:a9:4c:0a:09:76:ee:0a:84:f8:6e:50: 91:bd:7d:85:9c:8a:ce:26:4f:7c:d3:3f:0c:ad:30: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:89:3B:E6:F0:05:94:89:83:10:1A:39:AD:B9:0C:86:93:3C:B1:E3 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:7c:84:0c:4c:8e:08:57:10:ba:d6:38:21:57:39:37:1f:dc: cc:33:be:3b:57:29:ae:85:fa:85:1a:42:49:94:ed:58:ad:94: 95:ee:b2:c2:06:46:19:50:ae:51:fe:6d:57:fa:7c:9c:bf:d9: cd:1d:a2:77:2e:e2:58:b1:d8:dc:e8:3b:14:5d:2f:c5:05:b9: 77:fe:ed:c4:d0:01:30:5d:b8:ac:99:58:14:f2:74:b2:7e:83: c3:e8:11:72:13:e6:a4:cf:33:06:a5:44:c0:3f:37:09:63:0a: 2f:d4:3b:1d:ac:06:3b:0c:e3:44:cd:8e:35:8c:38:33:bf:74: 2c:83:2a:20:75:91:a7:f7:98:e6:5d:2b:d5:96:98:dc:2d:11: 6e:5d:80:9a:09:c6:94:6a:57:1e:a5:66:9a:6c:67:39:ab:00: 34:7d:e4:da:7c:df:90:03:01:fc:80:75:f2:a2:bd:68:d5:53: d1:91:46:32:7d:8f:a7:fb:1f:98:b5:f1:9c:5b:e6:45:db:de: e2:cd:67:df:41:bc:a8:a3:10:3c:86:9e:e6:05:95:a5:e8:fc: 54:34:27:74:3d:cb:bc:bc:65:e6:ba:7b:50:31:ec:29:8c:85: 37:38:ed:6b:1e:ee:cd:73:28:0c:29:b1:5a:a1:98:6e:4a:f0: 0d:81:0c:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBk0R/aLQzFez1FvLCNdUPex7BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNjAzMjUwMTA2MzNaFw0yNjAzMjgxMDQwMzNaMDMxMTAvBgNV BAMTKDkwODkzQkU2RjAwNTk0ODk4MzEwMUEzOUFEQjkwQzg2OTMzQ0IxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C0i9WvzWz2aZr13YuTmMRplH +/pAW+WTxbcvkR+2ek6oUqcPzjW8eQ/CVmsaKA3GuxoQCIuQ60+Rmy5RIaQHtHlS zR1k4SFyNB1hXx5eg2WowzzehvMgcr7j4EAVN5vYjurp32mSf0F6+dcpK15DD9zm y9pk9mrYcBDpZ+XRRstG3oXqeFrLfeRWD5ZCY//sYhH+l8VNpKvLzSsDWM5/LZiT Awvm6HldePdBsOFrn/CbYvJFM3WFor5Lp1B9dy5Le/9JN/4VzABUqzpgkbbzuivy BXe592nvaWA+BiiY8UxqdJGpTAoJdu4KhPhuUJG9fYWcis4mT3zTPwytMPRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkIk75vAFlImDEBo5rbkMhpM8seMwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMx8hAxMjghXELrWOCFXOTcf3MwzvjtXKa6F +oUaQkmU7VitlJXussIGRhlQrlH+bVf6fJy/2c0doncu4lix2NzoOxRdL8UFuXf+ 7cTQATBduKyZWBTydLJ+g8PoEXIT5qTPMwalRMA/NwljCi/UOx2sBjsM40TNjjWM ODO/dCyDKiB1kaf3mOZdK9WWmNwtEW5dgJoJxpRqVx6lZppsZzmrADR95Np835AD AfyAdfKivWjVU9GRRjJ9j6f7H5i18Zxb5kXb3uLNZ99BvKijEDyGnuYFlaXo/FQ0 J3Q9y7y8Zea6e1Ax7CmMhTc47Wse7s1zKAwpsVqhmG5K8A2BDFc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:26 2026 by rpki-client