$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: CTaMt7AkvWXU5BMxLkxgHaxVKJh8aiv7waQ82idvlRI= Subject key identifier: 89:D1:0B:DD:76:0D:98:D3:D6:87:74:21:D1:CE:86:6D:34:3B:68:78 Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 7875305F8B96ED2DD402405EFE865E6D1E949C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 0253 Signing time: Sun 01 Mar 2026 15:40:03 +0000 Manifest this update: Sun 01 Mar 2026 15:35:03 +0000 Manifest next update: Wed 04 Mar 2026 17:09:03 +0000 Files and hashes: 1: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: gMUmsfmmNczaAd+9ZeeQYOcgGDct+Ydmufmg2U5oVEk=) 2: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: WvCpDLW85W4fa+5HDWOqJ21ZLBkzmCJ0RIRZHrtaXts=) 3: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:75:30:5f:8b:96:ed:2d:d4:02:40:5e:fe:86:5e:6d:1e:94:9c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Mar 1 15:35:03 2026 GMT Not After : Mar 4 17:09:03 2026 GMT Subject: CN=89D10BDD760D98D3D6877421D1CE866D343B6878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:9d:09:3c:5c:e1:91:43:e5:b1:20:d5:e8: c3:ef:c7:d4:05:43:09:95:da:21:2e:d3:0a:e9:37: 7f:64:e9:fc:a2:0f:9c:7d:a4:34:b9:64:54:e4:60: c2:c1:61:9f:17:d7:b4:e4:35:8f:81:e4:db:aa:9f: 47:a4:1a:33:74:85:cc:0a:0b:de:46:19:3d:b8:1e: 1f:1d:d8:54:a0:06:2b:34:05:84:66:36:8b:01:ad: a8:60:1e:cf:69:8d:ff:37:b0:4d:78:13:dc:56:6c: 22:cd:2e:a1:01:1d:43:4c:d3:56:b7:31:6f:52:8c: d6:e8:97:52:63:6e:28:06:85:3b:c0:f5:79:60:7f: 33:62:6a:2c:57:42:84:94:c7:2f:76:76:0b:a0:95: 2d:ac:27:1a:fc:82:c9:0d:5d:9b:94:09:73:c3:a1: a9:24:a3:a8:c6:55:51:82:57:b5:d7:80:d6:fa:e3: 4f:3b:21:b3:a7:a4:99:8a:6b:2e:3d:7a:33:75:3b: 19:46:96:e3:bc:b0:63:28:ca:ab:98:64:26:69:6e: b9:36:35:98:8a:07:fa:75:5c:b8:4a:c2:e4:a1:ea: 69:71:29:d5:ca:fe:6e:8a:27:a6:3f:90:8c:4c:91: f7:14:59:77:f4:b8:44:ae:81:7d:9d:f8:b8:5d:63: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D1:0B:DD:76:0D:98:D3:D6:87:74:21:D1:CE:86:6D:34:3B:68:78 X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:72:fa:e0:e3:6b:48:ed:42:1a:45:2d:84:fc:e3:33:06:c2: c6:aa:55:4e:58:2b:9a:fd:21:7c:25:44:8f:ff:5a:b2:98:09: 77:05:96:0d:c4:9c:df:b9:de:a4:46:1c:0a:20:79:18:a2:2f: 06:d7:99:71:6e:66:46:39:ca:de:a2:5f:c2:66:08:ae:13:f1: 44:9f:2b:2f:e3:e1:bb:62:0b:50:7c:86:3b:76:b5:26:c2:eb: c1:68:27:08:7d:28:06:a7:78:c1:45:9f:e4:f6:39:6d:bc:b6: 3a:39:06:72:1f:79:58:cb:be:5d:5a:77:1e:d4:84:4c:94:db: 0e:31:3a:46:0c:6e:79:f0:4c:52:0d:40:ed:01:81:ab:2d:aa: e9:a6:83:24:be:85:9d:96:53:d2:54:65:d0:5b:7b:4f:7f:7f: 66:ad:82:60:79:d2:a7:92:ba:0d:03:41:f9:7e:bf:b7:2d:44: 6c:b5:d9:8b:db:fe:ba:a5:d8:07:3c:c4:e6:6a:d2:62:54:01: 11:08:67:e9:7b:d1:8d:e6:91:3a:67:99:3b:45:9b:5e:5a:ac: 43:1b:c3:cd:ce:0e:7f:5b:d3:fe:6d:41:22:6d:45:22:a9:46: e1:66:7a:89:96:1e:c1:54:6c:a8:28:d7:f5:52:5f:ce:f4:b5: c7:0b:74:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHUwX4uW7S3UAkBe/oZebR6UnEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNjAzMDExNTM1MDNaFw0yNjAzMDQxNzA5MDNaMDMxMTAvBgNV BAMTKDg5RDEwQkRENzYwRDk4RDNENjg3NzQyMUQxQ0U4NjZEMzQzQjY4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUA50JPFzhkUPlsSDV6MPvx9QF QwmV2iEu0wrpN39k6fyiD5x9pDS5ZFTkYMLBYZ8X17TkNY+B5Nuqn0ekGjN0hcwK C95GGT24Hh8d2FSgBis0BYRmNosBrahgHs9pjf83sE14E9xWbCLNLqEBHUNM01a3 MW9SjNbol1JjbigGhTvA9XlgfzNiaixXQoSUxy92dguglS2sJxr8gskNXZuUCXPD oakko6jGVVGCV7XXgNb64087IbOnpJmKay49ejN1OxlGluO8sGMoyquYZCZpbrk2 NZiKB/p1XLhKwuSh6mlxKdXK/m6KJ6Y/kIxMkfcUWXf0uESugX2d+LhdY9DZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUidEL3XYNmNPWh3Qh0c6GbTQ7aHgwHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGly+uDja0jtQhpFLYT84zMGwsaqVU5YK5r9 IXwlRI//WrKYCXcFlg3EnN+53qRGHAogeRiiLwbXmXFuZkY5yt6iX8JmCK4T8USf Ky/j4btiC1B8hjt2tSbC68FoJwh9KAaneMFFn+T2OW28tjo5BnIfeVjLvl1adx7U hEyU2w4xOkYMbnnwTFINQO0BgastqummgyS+hZ2WU9JUZdBbe09/f2atgmB50qeS ug0DQfl+v7ctRGy12Yvb/rql2Ac8xOZq0mJUAREIZ+l70Y3mkTpnmTtFm15arEMb w83ODn9b0/5tQSJtRSKpRuFmeomWHsFUbKgo1/VSX870tccLdE0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:37 2026 by rpki-client