$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft File: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft (raw, json) Hash identifier: 5rYYGb/eF3iPKR6A28nVboqUbe2NMvpPt2pqS/F6CJk= Subject key identifier: E9:7C:8C:F0:E3:39:88:AD:A4:5B:EB:9C:AB:4A:63:4C:AE:F5:FF:C3 Authority key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 Certificate issuer: /CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Certificate serial: 4742104ED0AFBFF4136FFD061CFA7718C181D1E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft Manifest number: 30 Signing time: Thu 16 Apr 2026 05:00:22 +0000 Manifest this update: Thu 16 Apr 2026 04:55:22 +0000 Manifest next update: Sun 19 Apr 2026 12:20:22 +0000 Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: qprBpEFsUmfzT7L8DfRHRiIYOBmZH2oG8ByFHZ6SCUo=) 2: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl (hash: WZybRJcx/m5QJukdiECS2e4VevqtErHicHepKayTS/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:42:10:4e:d0:af:bf:f4:13:6f:fd:06:1c:fa:77:18:c1:81:d1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Validity Not Before: Apr 16 04:55:22 2026 GMT Not After : Apr 19 12:20:22 2026 GMT Subject: CN=E97C8CF0E33988ADA45BEB9CAB4A634CAEF5FFC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c6:54:c1:73:61:81:e6:93:62:30:dc:02:f9: d5:1e:19:25:72:9d:72:a4:6d:6b:ef:5c:2c:62:8a: b7:2c:96:ed:07:39:a0:27:ab:3e:1f:c4:3d:63:64: 72:79:41:20:a0:90:88:1c:d2:37:3e:9c:bc:85:4e: 74:cf:ec:c7:4f:d6:dc:39:8b:c8:32:30:6c:92:d1: f5:92:b8:37:3e:b0:83:1f:d5:16:63:26:bd:17:ee: 81:2a:31:72:25:de:d4:3d:2c:d1:9a:62:ec:80:be: d1:e3:e4:da:bb:e1:9f:bd:cb:f7:c1:79:fe:1a:0e: 95:23:7e:77:cb:48:70:41:50:fd:3b:1f:b0:ca:d8: d3:f0:84:22:6f:93:af:d5:7e:d3:c4:7c:ab:73:6e: 3a:a1:50:ee:cd:5c:11:99:2f:bb:21:1e:05:c4:61: f8:0a:6d:a1:54:8c:20:cb:92:d8:80:d9:ac:62:38: 62:ce:bf:5a:a2:4e:40:b6:77:17:10:98:5a:fb:67: 5c:8b:c5:ca:ba:47:89:e0:1b:71:3a:c9:13:8f:fa: fc:22:f3:57:80:14:23:76:83:70:4c:f4:d6:dc:69: ba:ea:c2:17:17:ca:24:29:35:13:91:50:93:a9:b1: ed:f0:b0:a1:62:e6:8d:3f:28:a0:79:53:27:fd:bb: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7C:8C:F0:E3:39:88:AD:A4:5B:EB:9C:AB:4A:63:4C:AE:F5:FF:C3 X509v3 Authority Key Identifier: keyid:88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:73:6c:75:ba:3a:6d:f3:04:47:01:1f:3d:ee:de:27:fd:8f: e2:09:10:16:e7:28:3f:51:f2:7a:c2:53:cb:1f:b1:c5:75:d8: ed:73:30:b4:08:6a:ba:0d:e2:8f:40:23:d6:4e:0f:a4:a6:18: 94:20:a1:aa:c7:41:30:96:81:76:5b:1b:1b:05:16:a2:f2:ec: 84:34:ea:42:6a:70:cd:e2:2c:24:54:80:c9:05:77:db:db:d2: f7:91:ab:ce:1f:b3:e9:62:f8:18:dc:1c:be:3a:de:6e:84:c4: c8:e4:ae:ea:63:0e:13:c8:2b:9b:6a:b9:b4:da:85:fe:ea:30: a9:77:9a:53:c8:1d:52:42:0f:e2:6f:31:f3:e5:b3:1e:8b:58: db:91:01:1e:66:ab:53:f8:c3:d5:36:ea:b6:69:99:c4:e2:57: f4:51:97:24:f4:a9:ca:4d:e8:a7:dd:5b:11:bb:d6:d5:59:7a: f5:46:2c:ab:0f:98:c9:e5:05:46:3b:4a:7a:c6:99:2d:09:3f: 61:8f:c0:02:ac:d3:2b:f9:5a:f6:3b:16:13:20:f8:30:7c:e9: 59:01:ec:60:30:66:a8:cc:46:b4:08:d7:b5:6f:04:f6:08:8a: 95:93:9c:4f:fe:79:a9:a1:7c:3e:a5:f3:82:1d:56:ab:8f:a1: a5:28:5b:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0IQTtCvv/QTb/0GHPp3GMGB0eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIx QzBBQjVGMjAeFw0yNjA0MTYwNDU1MjJaFw0yNjA0MTkxMjIwMjJaMDMxMTAvBgNV BAMTKEU5N0M4Q0YwRTMzOTg4QURBNDVCRUI5Q0FCNEE2MzRDQUVGNUZGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuxlTBc2GB5pNiMNwC+dUeGSVy nXKkbWvvXCxiircslu0HOaAnqz4fxD1jZHJ5QSCgkIgc0jc+nLyFTnTP7MdP1tw5 i8gyMGyS0fWSuDc+sIMf1RZjJr0X7oEqMXIl3tQ9LNGaYuyAvtHj5Nq74Z+9y/fB ef4aDpUjfnfLSHBBUP07H7DK2NPwhCJvk6/VftPEfKtzbjqhUO7NXBGZL7shHgXE YfgKbaFUjCDLktiA2axiOGLOv1qiTkC2dxcQmFr7Z1yLxcq6R4ngG3E6yROP+vwi 81eAFCN2g3BM9NbcabrqwhcXyiQpNRORUJOpse3wsKFi5o0/KKB5Uyf9u7w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XyM8OM5iK2kW+ucq0pjTK71/8MwHwYDVR0j BBgwFoAUiFt8AIzkQDbKBln9jhN5MhwKtfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMS84ODVCN0MwMDhD RTQ0MDM2Q0EwNjU5RkQ4RTEzNzkzMjFDMEFCNUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIxQzBB QjVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1 MGQtZjIwODAzNzg5YjU4LzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5 MzIxQzBBQjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxzbHW6Om3zBEcBHz3u3if9j+IJEBbnKD9R 8nrCU8sfscV12O1zMLQIaroN4o9AI9ZOD6SmGJQgoarHQTCWgXZbGxsFFqLy7IQ0 6kJqcM3iLCRUgMkFd9vb0veRq84fs+li+BjcHL463m6ExMjkrupjDhPIK5tqubTa hf7qMKl3mlPIHVJCD+JvMfPlsx6LWNuRAR5mq1P4w9U26rZpmcTiV/RRlyT0qcpN 6KfdWxG71tVZevVGLKsPmMnlBUY7SnrGmS0JP2GPwAKs0yv5WvY7FhMg+DB86VkB 7GAwZqjMRrQI17VvBPYIipWTnE/+eamhfD6l84IdVquPoaUoW3c= -----END CERTIFICATE-----Generated at Fri Apr 17 20:20:59 2026 by rpki-client