$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: RMi4z4rrQdagh2gM4tAdWvrSXb8PIbmfp7G3yGDH6C8= Subject key identifier: DB:BB:10:7C:6E:B0:07:85:6D:62:1A:74:A3:0E:04:5A:E5:8E:89:B2 Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 3D5535998BE856F0A982FFC194D588D3A6D5B309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 0224 Signing time: Sat 28 Feb 2026 13:41:32 +0000 Manifest this update: Sat 28 Feb 2026 13:36:32 +0000 Manifest next update: Tue 03 Mar 2026 17:20:32 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: cE5GTYNlB3yeu6BJgWNNyA2V1Ddxooz4i3udaZzgT3w=) 2: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: ND7v+FnLpWT45ns63EQF+cwimBx4NwuQlYsueToMPQY=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: dBa568UK/EDi0HlAgRz6Gr8t22rnoRAjxn7WiN8bCyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:55:35:99:8b:e8:56:f0:a9:82:ff:c1:94:d5:88:d3:a6:d5:b3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Feb 28 13:36:32 2026 GMT Not After : Mar 3 17:20:32 2026 GMT Subject: CN=DBBB107C6EB007856D621A74A30E045AE58E89B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:72:74:b9:f4:f9:09:d5:27:8f:6d:8f:4e: f4:86:b8:d3:c9:65:ce:fc:2e:e3:15:b7:c1:cc:b7: b4:7a:64:5e:69:9f:16:b5:2a:3c:f2:0e:ce:d2:36: f8:13:2d:89:bd:ce:68:77:f3:84:a7:48:06:92:d1: 7b:a7:ad:16:b3:d8:a6:49:c0:d3:4c:b4:1f:df:e8: 8f:91:eb:70:c9:de:77:19:a5:7c:69:53:4d:c9:41: 98:cf:79:68:6f:04:81:0f:56:3f:6c:c9:67:3e:77: ee:ea:43:1e:4b:27:9d:6d:10:ba:b5:cc:71:37:b1: 0a:8d:66:1c:cf:23:e1:a0:b0:19:f7:38:69:fb:48: d6:27:c9:1f:ca:41:1f:24:ce:37:bb:00:e0:07:9e: 96:26:28:a2:fb:b2:89:66:10:67:64:1f:5b:3c:5b: a9:38:f7:c9:16:b0:f4:ea:e0:5b:4e:2a:c6:4f:2a: b7:c6:7d:ef:0e:bf:07:bd:dd:2c:da:4f:a8:b9:a8: 3f:74:40:81:d9:99:96:8a:83:af:43:04:bf:13:77: 84:43:a0:c9:a5:75:41:d1:21:03:f8:ce:77:94:95: 7c:fc:dd:05:a1:93:95:7e:df:dd:8b:83:bc:d3:d6: 5d:51:4a:52:d0:72:0c:3b:c7:1f:5f:f1:8e:fd:f0: 46:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BB:10:7C:6E:B0:07:85:6D:62:1A:74:A3:0E:04:5A:E5:8E:89:B2 X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a7:91:f4:5b:c0:4c:90:27:90:88:e5:56:ec:d4:38:31:f5: b3:83:8c:e8:ae:0c:cb:63:77:cb:dd:d4:eb:92:a6:95:10:42: 6a:17:ef:dd:9f:2e:cc:f4:f6:6d:ac:a9:dd:41:fc:68:1d:b5: 18:03:fa:7b:e8:5d:16:e7:75:13:f0:74:a6:2b:5a:e9:31:57: 89:d9:82:5b:7b:cb:89:b6:d1:b9:d2:ff:48:2a:4a:34:0c:53: ed:78:6b:3d:24:08:07:3c:41:f2:82:9f:3b:c3:12:6a:cf:59: 38:ca:ea:d0:60:a1:5b:a9:38:26:16:d4:f5:ea:a6:47:e6:04: d2:b3:e8:0f:37:04:d7:c4:e2:d3:75:ff:84:d5:41:ca:49:76: 9d:14:a1:a3:d8:0b:15:98:c6:2b:6f:72:df:e4:22:18:dc:db: 01:e0:f1:35:73:fe:ff:5e:fb:11:98:41:7c:bc:56:1c:33:af: d8:39:24:67:e3:bd:2e:b3:94:1a:1b:06:22:26:ed:e4:16:0b: 44:ad:c3:4e:09:2b:a9:19:66:39:7d:c6:66:af:e4:17:39:ec: 76:34:13:38:d8:2e:80:df:9c:aa:cd:d8:13:ea:b4:30:27:72: ee:49:ad:54:7d:9d:ad:f6:d0:54:19:5b:be:50:9c:55:8e:d5: 43:17:0a:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVU1mYvoVvCpgv/BlNWI06bVswkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNjAyMjgxMzM2MzJaFw0yNjAzMDMxNzIwMzJaMDMxMTAvBgNV BAMTKERCQkIxMDdDNkVCMDA3ODU2RDYyMUE3NEEzMEUwNDVBRTU4RTg5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGz3J0ufT5CdUnj22PTvSGuNPJ Zc78LuMVt8HMt7R6ZF5pnxa1KjzyDs7SNvgTLYm9zmh384SnSAaS0XunrRaz2KZJ wNNMtB/f6I+R63DJ3ncZpXxpU03JQZjPeWhvBIEPVj9syWc+d+7qQx5LJ51tELq1 zHE3sQqNZhzPI+GgsBn3OGn7SNYnyR/KQR8kzje7AOAHnpYmKKL7solmEGdkH1s8 W6k498kWsPTq4FtOKsZPKrfGfe8Ovwe93SzaT6i5qD90QIHZmZaKg69DBL8Td4RD oMmldUHRIQP4zneUlXz83QWhk5V+392Lg7zT1l1RSlLQcgw7xx9f8Y798Eb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27sQfG6wB4VtYhp0ow4EWuWOibIwHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJynkfRbwEyQJ5CI5Vbs1Dgx9bODjOiuDMtj d8vd1OuSppUQQmoX792fLsz09m2sqd1B/GgdtRgD+nvoXRbndRPwdKYrWukxV4nZ glt7y4m20bnS/0gqSjQMU+14az0kCAc8QfKCnzvDEmrPWTjK6tBgoVupOCYW1PXq pkfmBNKz6A83BNfE4tN1/4TVQcpJdp0UoaPYCxWYxitvct/kIhjc2wHg8TVz/v9e +xGYQXy8Vhwzr9g5JGfjvS6zlBobBiIm7eQWC0Stw04JK6kZZjl9xmav5Bc57HY0 EzjYLoDfnKrN2BPqtDAncu5JrVR9na320FQZW75QnFWO1UMXCuI= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:33 2026 by rpki-client