$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft File: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft (raw, json) Hash identifier: xcRVrs05zVIKyWDAPlzyNeiU8GwlFXsuMiPOdL6giYs= Subject key identifier: 80:C0:E6:9D:26:95:A0:6A:C8:40:AA:47:8A:66:24:DE:12:66:8A:B3 Authority key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 Certificate issuer: /CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Certificate serial: 62255A616B83781495BA0BF6463730DEE273600F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft Manifest number: 1C Signing time: Sun 01 Mar 2026 16:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:55:03 +0000 Manifest next update: Wed 04 Mar 2026 22:11:03 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: qprBpEFsUmfzT7L8DfRHRiIYOBmZH2oG8ByFHZ6SCUo=) 2: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl (hash: TgAxR013CGtgrUwh2lpNfOkwdv9Pzkgq+gTEr/mfm2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:25:5a:61:6b:83:78:14:95:ba:0b:f6:46:37:30:de:e2:73:60:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Validity Not Before: Mar 1 15:55:03 2026 GMT Not After : Mar 4 22:11:03 2026 GMT Subject: CN=80C0E69D2695A06AC840AA478A6624DE12668AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:68:f0:b1:2c:09:39:b0:c4:56:06:30:7a: 20:30:08:20:c9:09:ce:85:3d:93:f6:a9:10:57:c4: 33:af:51:35:91:e4:be:55:25:4f:3a:c9:17:e3:c0: 18:84:bf:ae:76:0b:2b:f0:45:0e:b0:f2:e1:3a:39: 9e:0e:b2:c5:24:08:b9:ae:29:3e:4b:75:07:98:d7: db:03:d5:ae:a8:5d:22:9a:ce:b8:17:9a:e3:25:71: 10:71:43:10:74:4c:35:9a:6a:3b:7d:d6:e6:da:16: f6:d8:94:9e:53:e3:df:a9:90:cd:3a:26:a3:77:fa: 14:7d:0e:a7:5d:db:77:05:ce:f4:73:60:52:cb:50: 22:d5:f6:49:9a:72:1e:d3:99:e3:19:22:6e:98:bc: 3d:5f:98:30:a7:a6:74:8a:fa:dc:70:5b:82:d5:09: 87:6c:75:5e:a0:49:99:39:40:91:51:3f:8f:21:41: 54:24:95:b0:fa:35:88:b9:18:9e:00:67:15:4c:48: bb:f9:c2:71:90:60:23:79:e7:28:5e:94:c7:9d:84: cd:78:e2:da:08:55:9f:f7:35:64:6f:bb:3a:a5:7a: 50:cd:6e:0d:5c:97:4b:a7:ef:63:85:30:35:25:4a: d5:40:bc:03:67:32:a3:45:5a:5b:30:66:f4:53:9e: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C0:E6:9D:26:95:A0:6A:C8:40:AA:47:8A:66:24:DE:12:66:8A:B3 X509v3 Authority Key Identifier: keyid:88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:35:ce:1b:c2:82:69:2e:a8:91:6d:ff:31:fd:af:d1:bd:4a: 6b:33:55:47:24:d5:ee:6c:35:3d:e5:f6:a9:07:92:b2:d1:96: ea:9a:49:67:3c:78:a1:c2:45:95:cb:78:2f:e4:e3:d1:f8:06: 30:2f:ad:a7:39:f3:55:56:ef:8d:58:87:f4:8e:b0:81:49:ad: b1:db:08:7a:ad:5d:8f:41:61:9d:07:7b:9a:62:ea:3a:ee:0b: 2e:f5:a0:3a:ac:6a:03:c4:7d:41:af:51:3b:91:18:62:44:3a: e9:2c:20:79:10:6a:f3:59:ad:f4:f5:d2:7f:ee:02:02:80:4b: 97:3e:94:aa:6b:df:00:03:83:3f:3a:71:83:08:bb:58:e4:f4: 9b:46:ca:be:0b:23:3b:fe:ae:db:22:91:30:a4:92:fa:9f:45: d9:3d:2b:e0:84:12:ae:16:6f:4e:6e:c4:06:e5:28:95:79:6a: 9c:fd:33:50:57:65:74:63:11:a3:bf:2e:99:c6:1e:65:25:87: 63:f3:fb:27:39:5f:ef:1f:66:9d:de:98:56:d0:d9:28:8d:12: 4c:40:87:b8:8d:5f:1b:fd:3d:87:8f:ea:c2:a3:12:a6:4b:92: cc:90:5d:6c:f1:f3:31:11:e3:45:c2:f2:6e:9a:a9:9e:9c:7d: 07:59:ef:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYiVaYWuDeBSVugv2Rjcw3uJzYA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIx QzBBQjVGMjAeFw0yNjAzMDExNTU1MDNaFw0yNjAzMDQyMjExMDNaMDMxMTAvBgNV BAMTKDgwQzBFNjlEMjY5NUEwNkFDODQwQUE0NzhBNjYyNERFMTI2NjhBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DWjwsSwJObDEVgYweiAwCCDJ Cc6FPZP2qRBXxDOvUTWR5L5VJU86yRfjwBiEv652CyvwRQ6w8uE6OZ4OssUkCLmu KT5LdQeY19sD1a6oXSKazrgXmuMlcRBxQxB0TDWaajt91ubaFvbYlJ5T49+pkM06 JqN3+hR9Dqdd23cFzvRzYFLLUCLV9kmach7TmeMZIm6YvD1fmDCnpnSK+txwW4LV CYdsdV6gSZk5QJFRP48hQVQklbD6NYi5GJ4AZxVMSLv5wnGQYCN55yhelMedhM14 4toIVZ/3NWRvuzqlelDNbg1cl0un72OFMDUlStVAvANnMqNFWlswZvRTntRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgMDmnSaVoGrIQKpHimYk3hJmirMwHwYDVR0j BBgwFoAUiFt8AIzkQDbKBln9jhN5MhwKtfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMS84ODVCN0MwMDhD RTQ0MDM2Q0EwNjU5RkQ4RTEzNzkzMjFDMEFCNUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIxQzBB QjVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5 MzIxQzBBQjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD41zhvCgmkuqJFt/zH9r9G9SmszVUck1e5s NT3l9qkHkrLRluqaSWc8eKHCRZXLeC/k49H4BjAvrac581VW741Yh/SOsIFJrbHb CHqtXY9BYZ0He5pi6jruCy71oDqsagPEfUGvUTuRGGJEOuksIHkQavNZrfT10n/u AgKAS5c+lKpr3wADgz86cYMIu1jk9JtGyr4LIzv+rtsikTCkkvqfRdk9K+CEEq4W b05uxAblKJV5apz9M1BXZXRjEaO/LpnGHmUlh2Pz+yc5X+8fZp3emFbQ2SiNEkxA h7iNXxv9PYeP6sKjEqZLksyQXWzx8zER40XC8m6aqZ6cfQdZ7+k= -----END CERTIFICATE-----Generated at Mon Mar 2 19:38:41 2026 by rpki-client