$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: o2J0cvwuXh+1Y0u6Sb0rjx/OW6tfKUXhvgFS6xeY1Q8= Subject key identifier: 2C:CE:05:D0:CE:84:01:CE:06:A6:C5:57:26:80:D4:C5:3E:01:9D:D0 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 60055748E3B758CD4444FE0199620DB13C0A1CEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 0239 Signing time: Fri 17 Apr 2026 02:31:35 +0000 Manifest this update: Fri 17 Apr 2026 02:26:35 +0000 Manifest next update: Mon 20 Apr 2026 07:12:35 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: cE5GTYNlB3yeu6BJgWNNyA2V1Ddxooz4i3udaZzgT3w=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: dBa568UK/EDi0HlAgRz6Gr8t22rnoRAjxn7WiN8bCyc=) 3: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: Eg3tKv178XX8mryitkWu6I29cg8bIPnwif4faw2AtiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 07:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:05:57:48:e3:b7:58:cd:44:44:fe:01:99:62:0d:b1:3c:0a:1c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Apr 17 02:26:35 2026 GMT Not After : Apr 20 07:12:35 2026 GMT Subject: CN=2CCE05D0CE8401CE06A6C5572680D4C53E019DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:3d:b6:53:5b:1a:83:79:c9:64:3e:d8:83: 85:e9:29:6a:11:38:83:28:2d:48:73:9a:b1:71:c5: 90:74:37:55:43:48:8b:04:ee:1f:00:d8:80:a6:74: f6:bd:fd:98:15:7d:bb:e8:21:e5:94:cc:e0:ee:7b: 42:63:34:a8:4a:35:09:e9:6f:42:fa:ae:f4:c9:59: 96:b1:77:db:2f:49:ac:ac:68:f4:22:d1:80:7b:2b: bc:2d:ef:32:05:5e:6f:82:f2:28:90:85:e9:46:05: 33:dd:3e:54:cc:77:24:d0:e6:1f:b8:25:f3:0c:07: 09:44:2c:ea:ab:00:6a:d6:0f:7f:7f:ba:1e:56:f2: fd:ac:53:e1:02:4d:00:5b:8f:48:d6:1f:cf:bd:6b: 5e:b2:4f:48:48:06:bb:16:43:3d:91:20:98:33:92: 23:60:31:02:5b:43:92:91:0c:5a:1e:fd:25:2b:ca: 5f:eb:c3:7a:3e:8d:01:59:4b:83:43:eb:cf:83:01: 5a:e9:ff:99:a1:60:2f:38:fa:b0:2c:5e:20:34:c7: cf:40:9f:34:e3:d7:e3:91:79:8c:23:3d:d1:88:c0: 24:e9:31:29:12:c6:89:04:40:d7:99:96:28:2a:c1: 73:49:74:5b:22:88:e4:3b:6a:64:6f:1e:7a:b7:eb: 07:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CE:05:D0:CE:84:01:CE:06:A6:C5:57:26:80:D4:C5:3E:01:9D:D0 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:98:8d:45:e7:14:72:41:46:37:ef:31:78:03:1d:18:4e:ba: 2d:5e:61:b5:bf:0c:75:dc:e5:23:2a:d8:4b:4d:b4:ab:b4:50: 64:2a:ff:3b:0b:33:46:b0:4d:41:e2:f7:f1:14:0b:a4:2f:8a: 27:ab:ab:77:54:03:97:c0:4a:e4:7a:8e:66:e1:8f:96:b2:ba: a4:41:5c:59:ce:7c:6d:7f:08:71:61:34:27:04:d8:f5:49:34: 7f:fe:5f:f4:18:02:5e:ab:10:06:3e:fb:b5:4a:d3:81:76:42: 0e:be:02:a9:4e:52:15:e1:90:1e:56:fa:9c:9b:41:6d:85:e5: 08:df:e2:cd:bb:ca:f9:a2:7c:9d:79:18:e0:21:eb:46:96:96: a3:a6:7e:55:ab:03:cb:34:52:3d:f7:e7:99:30:1d:b7:10:ef: 9f:33:bb:e2:37:e2:a3:d6:4f:e8:55:9d:40:ed:99:5f:96:b5: 13:65:fc:5c:be:25:47:f3:29:59:41:8a:71:a5:dd:89:9d:4e: ca:6c:5d:25:a5:4b:64:99:18:65:97:fd:4f:a3:1a:af:14:ea: 03:db:cc:91:3f:f7:15:75:cf:b3:4f:96:ba:94:0d:3f:5a:53: 04:4e:87:96:e0:24:f1:2a:a2:c8:6c:ed:09:13:2a:d3:8b:27: c5:76:b3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAVXSOO3WM1ERP4BmWINsTwKHOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNjA0MTcwMjI2MzVaFw0yNjA0MjAwNzEyMzVaMDMxMTAvBgNV BAMTKDJDQ0UwNUQwQ0U4NDAxQ0UwNkE2QzU1NzI2ODBENEM1M0UwMTlERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUT22U1sag3nJZD7Yg4XpKWoR OIMoLUhzmrFxxZB0N1VDSIsE7h8A2ICmdPa9/ZgVfbvoIeWUzODue0JjNKhKNQnp b0L6rvTJWZaxd9svSaysaPQi0YB7K7wt7zIFXm+C8iiQhelGBTPdPlTMdyTQ5h+4 JfMMBwlELOqrAGrWD39/uh5W8v2sU+ECTQBbj0jWH8+9a16yT0hIBrsWQz2RIJgz kiNgMQJbQ5KRDFoe/SUryl/rw3o+jQFZS4ND68+DAVrp/5mhYC84+rAsXiA0x89A nzTj1+OReYwjPdGIwCTpMSkSxokEQNeZligqwXNJdFsiiOQ7amRvHnq36wcTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULM4F0M6EAc4GpsVXJoDUxT4BndAwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiYjUXnFHJBRjfvMXgDHRhOui1eYbW/DHXc 5SMq2EtNtKu0UGQq/zsLM0awTUHi9/EUC6Qviierq3dUA5fASuR6jmbhj5ayuqRB XFnOfG1/CHFhNCcE2PVJNH/+X/QYAl6rEAY++7VK04F2Qg6+AqlOUhXhkB5W+pyb QW2F5Qjf4s27yvmifJ15GOAh60aWlqOmflWrA8s0Uj3355kwHbcQ758zu+I34qPW T+hVnUDtmV+WtRNl/Fy+JUfzKVlBinGl3YmdTspsXSWlS2SZGGWX/U+jGq8U6gPb zJE/9xV1z7NPlrqUDT9aUwROh5bgJPEqoshs7QkTKtOLJ8V2s8w= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:12 2026 by rpki-client