$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: vCphReZwujlXKhXsgxBuP2QIOnkfBYPbg5CvaizWPFE= Subject key identifier: FA:7E:11:5C:81:31:7F:53:53:7E:61:34:58:3F:38:3A:16:C5:B9:F1 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 43B334C291DE1DD407D87665D043E4D23C3ACCF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 02B7 Signing time: Wed 25 Mar 2026 02:50:51 +0000 Manifest this update: Wed 25 Mar 2026 02:45:51 +0000 Manifest next update: Sat 28 Mar 2026 14:06:51 +0000 Files and hashes: 1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: j5OQAuRtuXFrDX84I0Pc809SixFRWsXw21iqVChuXjY=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b3:34:c2:91:de:1d:d4:07:d8:76:65:d0:43:e4:d2:3c:3a:cc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Mar 25 02:45:51 2026 GMT Not After : Mar 28 14:06:51 2026 GMT Subject: CN=FA7E115C81317F53537E6134583F383A16C5B9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:43:82:0e:f6:bd:39:22:ba:be:63:67:e4:05: 27:09:ed:e4:02:4a:c3:0b:44:ba:7b:43:fe:bd:c0: 79:77:d8:b0:6e:0a:ff:74:83:2c:9e:41:47:12:a6: a9:94:35:5b:80:fe:5e:cb:ec:fc:c7:d6:4a:cf:a7: ce:97:23:a5:06:6d:23:f4:8e:fa:b6:24:3d:0d:49: 8e:d7:0f:3e:3e:4b:15:33:97:26:1d:eb:a5:ef:b3: 93:b0:f5:e4:ab:8c:1b:d1:ff:99:ef:7e:23:5a:b0: 0e:da:32:39:c4:97:1c:eb:1c:61:e3:9b:09:29:5f: 8f:82:cc:b1:65:a7:7b:d2:82:4d:63:f6:1c:6e:47: 61:91:a1:2e:b9:2b:92:40:99:1c:90:7e:ac:0e:3d: 5c:f2:4c:ce:6a:3a:49:b1:86:c2:9e:f5:16:41:09: 14:ca:6d:ee:51:a1:77:b0:e9:1f:79:a6:06:7a:fa: 2a:77:9f:c2:14:e9:dd:0c:70:a7:6f:23:95:55:7c: e0:60:16:ca:30:46:ba:dc:52:61:6b:83:bb:ef:ef: 75:73:fb:6f:8d:08:07:4e:c7:c2:e1:88:f8:5f:93: 22:f2:35:92:7d:23:70:bf:da:19:f6:dd:bf:26:52: a7:21:fb:f3:bc:d0:0e:fc:d0:7d:de:fc:99:39:eb: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7E:11:5C:81:31:7F:53:53:7E:61:34:58:3F:38:3A:16:C5:B9:F1 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f6:d4:03:55:0a:1a:07:65:fd:23:69:3e:18:47:80:78:96: 6b:d5:7d:db:64:23:cf:1b:d7:0b:75:fe:1b:8d:ac:b0:59:13: a3:36:af:35:27:17:77:74:42:9e:69:45:81:55:fe:62:c9:23: e9:7e:cf:df:9d:2b:9f:cd:f2:62:2f:d6:1e:1b:52:4f:db:8c: 3b:48:16:df:7f:cc:cc:a5:ac:8c:2c:7a:0e:96:ed:c4:33:16: c5:c4:07:92:d1:98:3f:65:89:ef:39:13:72:e9:24:ad:0c:08: e1:cf:43:56:39:d0:29:94:b9:06:01:4c:e8:7f:3a:0d:1c:fb: 16:85:82:71:89:9d:e7:bf:4e:d4:45:2d:be:db:4a:60:26:6b: 00:56:2c:91:5c:8d:3e:b3:0a:70:81:5b:21:91:96:9d:5c:98: d5:66:d7:35:ca:de:37:4c:64:bb:68:0d:9a:0f:17:16:5b:b8: f5:45:a1:ef:69:41:43:b4:f2:53:d1:b6:f1:21:42:5b:92:36: 98:ef:28:e0:56:12:5a:f9:e7:b5:5a:b4:05:ab:16:ba:41:83: 3b:44:80:62:9e:40:46:2f:b4:06:93:c2:1b:f6:02:a2:1a:1e: 7b:9b:76:a0:99:01:43:bc:bf:36:1d:e1:77:40:35:20:78:71: a7:ab:f0:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7M0wpHeHdQH2HZl0EPk0jw6zPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNjAzMjUwMjQ1NTFaFw0yNjAzMjgxNDA2NTFaMDMxMTAvBgNV BAMTKEZBN0UxMTVDODEzMTdGNTM1MzdFNjEzNDU4M0YzODNBMTZDNUI5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5Q4IO9r05Irq+Y2fkBScJ7eQC SsMLRLp7Q/69wHl32LBuCv90gyyeQUcSpqmUNVuA/l7L7PzH1krPp86XI6UGbSP0 jvq2JD0NSY7XDz4+SxUzlyYd66Xvs5Ow9eSrjBvR/5nvfiNasA7aMjnElxzrHGHj mwkpX4+CzLFlp3vSgk1j9hxuR2GRoS65K5JAmRyQfqwOPVzyTM5qOkmxhsKe9RZB CRTKbe5RoXew6R95pgZ6+ip3n8IU6d0McKdvI5VVfOBgFsowRrrcUmFrg7vv73Vz +2+NCAdOx8LhiPhfkyLyNZJ9I3C/2hn23b8mUqch+/O80A780H3e/Jk56/z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+n4RXIExf1NTfmE0WD84OhbFufEwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj21ANVChoHZf0jaT4YR4B4lmvVfdtkI88b 1wt1/huNrLBZE6M2rzUnF3d0Qp5pRYFV/mLJI+l+z9+dK5/N8mIv1h4bUk/bjDtI Ft9/zMylrIwseg6W7cQzFsXEB5LRmD9lie85E3LpJK0MCOHPQ1Y50CmUuQYBTOh/ Og0c+xaFgnGJnee/TtRFLb7bSmAmawBWLJFcjT6zCnCBWyGRlp1cmNVm1zXK3jdM ZLtoDZoPFxZbuPVFoe9pQUO08lPRtvEhQluSNpjvKOBWElr557VatAWrFrpBgztE gGKeQEYvtAaTwhv2AqIaHnubdqCZAUO8vzYd4XdANSB4caer8NI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:36 2026 by rpki-client