$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: yrY5rYFhcs9z9PtevzzTLS7/NlE/KDpBATkDLuM/A9U= Subject key identifier: 17:8C:43:71:82:31:1F:D2:30:46:4F:DE:41:B3:B4:61:E0:8A:DC:7C Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 1BCDCB4FB4FD6FA1331DC700312D933EE2379F4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 0268 Signing time: Fri 17 Apr 2026 16:20:03 +0000 Manifest this update: Fri 17 Apr 2026 16:15:03 +0000 Manifest next update: Tue 21 Apr 2026 00:58:03 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: fy9WiHoxpn1m4+zWsKjl+V+ti9JAlS+i3CHndi8dQxs=) 2: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: gMUmsfmmNczaAd+9ZeeQYOcgGDct+Ydmufmg2U5oVEk=) 3: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cd:cb:4f:b4:fd:6f:a1:33:1d:c7:00:31:2d:93:3e:e2:37:9f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Apr 17 16:15:03 2026 GMT Not After : Apr 21 00:58:03 2026 GMT Subject: CN=178C437182311FD230464FDE41B3B461E08ADC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:60:b4:10:34:c9:87:ad:91:8e:22:77:b1: 31:b2:72:8a:b5:c8:a9:89:cb:6e:69:2c:99:66:de: 1e:bb:02:41:2e:f5:87:c0:b3:72:e2:0b:9f:44:18: 9a:29:23:90:ea:ff:49:74:25:52:d2:5f:ba:84:f6: f7:d7:70:8a:b6:c0:5b:5c:8d:3a:5d:b0:80:f0:fd: 3e:09:2e:66:92:f4:02:2f:21:68:a8:e8:08:e8:8c: da:44:50:82:e3:98:14:d9:2c:b2:cc:7b:82:69:65: 88:7d:11:ba:2d:b3:83:e9:f9:dc:92:57:01:aa:c7: c6:6b:28:56:a8:72:17:6a:b8:64:d4:0d:dc:58:f7: 4a:be:91:53:9c:aa:be:2d:13:80:cc:15:e6:fd:9a: c2:12:b6:af:0d:4a:32:37:35:8c:94:1a:5e:03:26: 58:15:dd:ed:6c:4a:7a:2e:7b:bf:fd:88:62:fd:b0: 49:3d:ef:b7:8b:e7:86:e1:ee:c6:0c:34:e6:02:53: 70:9c:b8:0c:bd:27:99:b6:f8:b8:40:b4:e4:d2:ea: d5:49:fc:cb:e2:f5:fb:d5:d1:f9:d9:7b:23:e6:31: 1d:5f:ba:bc:51:3b:ac:01:62:71:b6:34:61:d1:d7: 04:8e:28:c4:b4:75:08:92:d1:f0:a1:1d:6f:0d:63: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:43:71:82:31:1F:D2:30:46:4F:DE:41:B3:B4:61:E0:8A:DC:7C X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:14:2d:fc:fb:50:5d:78:a5:9e:4e:0c:f0:dd:89:14:74:5d: 9f:f1:a4:10:76:17:07:87:c1:af:e2:2a:27:21:0a:50:88:01: 2d:88:78:50:de:a8:b6:e1:23:11:ec:97:54:0f:6b:e1:c0:9c: 3c:59:df:3b:e9:29:0d:6e:09:e5:e4:c9:fc:bf:47:d4:4f:31: 0b:9a:de:09:47:bf:f9:69:a9:fe:49:50:d6:60:d1:26:0f:ae: 0f:f7:fc:98:b7:10:54:e5:2a:f2:53:d4:2a:5c:eb:dc:78:db: 55:cf:c9:af:ff:47:56:f3:59:55:73:ed:0e:85:5b:e4:7a:e9: 1a:3f:34:17:98:8d:68:2e:c7:bb:d6:b3:7f:8e:24:4c:7f:e6: e1:12:f5:b2:59:e3:5a:70:e8:81:c6:82:3c:0b:9d:01:9c:72: bc:6d:ce:6f:3f:ea:5b:b2:4a:f5:dc:c4:9c:af:1d:cb:b8:8f: 96:4a:21:a6:25:64:ca:ec:05:7f:f3:b0:59:6f:98:6d:e3:a7: a8:c3:8b:53:40:bf:be:bc:93:9e:d9:65:8f:e6:64:7a:d6:cb: f9:90:7c:ff:a8:ef:0d:2c:df:cf:1f:97:a1:a9:c3:cf:12:ea: 2f:10:09:68:50:58:5a:5d:f5:7a:30:4a:57:8f:8d:6d:a2:6a: 44:14:59:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG83LT7T9b6EzHccAMS2TPuI3n00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNjA0MTcxNjE1MDNaFw0yNjA0MjEwMDU4MDNaMDMxMTAvBgNV BAMTKDE3OEM0MzcxODIzMTFGRDIzMDQ2NEZERTQxQjNCNDYxRTA4QURDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRGC0EDTJh62RjiJ3sTGycoq1 yKmJy25pLJlm3h67AkEu9YfAs3LiC59EGJopI5Dq/0l0JVLSX7qE9vfXcIq2wFtc jTpdsIDw/T4JLmaS9AIvIWio6AjojNpEUILjmBTZLLLMe4JpZYh9Ebots4Pp+dyS VwGqx8ZrKFaochdquGTUDdxY90q+kVOcqr4tE4DMFeb9msIStq8NSjI3NYyUGl4D JlgV3e1sSnoue7/9iGL9sEk977eL54bh7sYMNOYCU3CcuAy9J5m2+LhAtOTS6tVJ /Mvi9fvV0fnZeyPmMR1furxRO6wBYnG2NGHR1wSOKMS0dQiS0fChHW8NY3sdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4xDcYIxH9IwRk/eQbO0YeCK3HwwHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgULfz7UF14pZ5ODPDdiRR0XZ/xpBB2FweH wa/iKichClCIAS2IeFDeqLbhIxHsl1QPa+HAnDxZ3zvpKQ1uCeXkyfy/R9RPMQua 3glHv/lpqf5JUNZg0SYPrg/3/Ji3EFTlKvJT1Cpc69x421XPya//R1bzWVVz7Q6F W+R66Ro/NBeYjWgux7vWs3+OJEx/5uES9bJZ41pw6IHGgjwLnQGccrxtzm8/6luy SvXcxJyvHcu4j5ZKIaYlZMrsBX/zsFlvmG3jp6jDi1NAv768k57ZZY/mZHrWy/mQ fP+o7w0s388fl6Gpw88S6i8QCWhQWFpd9XowSlePjW2iakQUWbo= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:49 2026 by rpki-client