$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: tB5C6tM++mwKiXvzIazvR7Q6qAyZZtD5IYos4bbE5nU= Subject key identifier: 8D:38:69:CB:5C:9A:D4:7A:8A:96:9A:1B:F7:0E:55:14:CE:11:66:8B Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 5E998635469E1AD936C87C924617EE60083B7EC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0380 Signing time: Sat 28 Feb 2026 07:10:03 +0000 Manifest this update: Sat 28 Feb 2026 07:05:03 +0000 Manifest next update: Tue 03 Mar 2026 09:51:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: Bul9phWtbI6NC7AandT2Me11uVUE0zeEWVYZZ53fm4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:99:86:35:46:9e:1a:d9:36:c8:7c:92:46:17:ee:60:08:3b:7e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Feb 28 07:05:03 2026 GMT Not After : Mar 3 09:51:03 2026 GMT Subject: CN=8D3869CB5C9AD47A8A969A1BF70E5514CE11668B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:55:46:a1:9f:05:60:14:c3:ce:f9:06:aa: d7:56:0a:f4:c1:a1:11:b5:8b:35:cb:32:4a:59:67: ae:6a:43:b1:77:ee:b8:a6:41:1f:4d:f1:a4:24:5b: 48:ab:c9:1d:53:0f:42:1f:9b:55:1f:78:dd:66:9e: 34:5b:a4:99:19:e2:bf:2d:3e:6c:2a:98:cd:fb:48: be:0c:8e:b2:65:a5:34:e9:df:f4:71:d2:e1:88:02: 59:28:bc:25:4f:1a:63:b6:c9:fc:41:94:62:8b:39: 66:a5:de:f6:d8:d5:99:fe:76:fe:d7:74:bf:54:ea: ba:ae:d0:cf:ae:7e:2b:84:25:3b:77:b0:a4:45:76: 9a:e7:94:d2:58:28:e0:84:77:9b:e9:29:e4:0c:11: 67:ca:17:6f:69:72:9c:96:bb:36:86:25:c2:5f:2f: e9:68:12:d7:94:68:f6:8c:c6:0b:f8:74:d7:a5:11: f3:eb:20:ae:b3:82:a6:97:1e:8c:11:aa:d8:41:af: 49:a1:80:4c:78:16:d3:c6:0f:33:6e:ea:a4:ca:8c: fd:23:90:07:88:ae:c4:e9:3f:c5:51:db:3b:09:fe: 96:47:d0:4f:68:b2:54:34:18:87:f5:6f:8e:9b:df: b7:f9:6b:19:b8:35:ca:4a:ac:7b:be:f0:38:8d:10: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:69:CB:5C:9A:D4:7A:8A:96:9A:1B:F7:0E:55:14:CE:11:66:8B X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:73:08:ab:32:02:25:d5:38:c0:06:e3:10:b6:2d:72:54:ac: 82:2c:b7:e6:48:38:9d:38:bc:05:07:a2:46:b8:b0:6e:d6:d6: 14:c0:fd:66:c9:6d:b9:74:f6:de:71:cf:7b:de:42:0b:22:9b: a6:da:7c:0a:6b:52:a3:d8:d7:b4:e8:99:98:02:41:6e:8a:e4: bb:0a:10:ff:ed:e8:7c:27:6e:aa:66:16:84:40:ea:3b:9f:52: 5f:58:c2:02:8b:0b:ee:44:6d:a2:0a:6b:bc:ea:34:9b:ea:c2: d4:8c:3e:1b:b0:a2:8f:bd:01:3e:b7:63:73:e8:c4:09:db:48: f5:5f:7d:52:e1:01:11:62:0b:14:d6:2e:e1:24:3d:09:07:2c: 21:d8:fb:fb:c3:61:a6:69:46:d7:e9:6c:ed:4c:9a:be:b0:9b: a7:59:31:b3:1d:b1:a5:1d:8f:9d:77:07:20:9b:2b:a4:04:8b: 37:b9:98:ea:ae:97:8e:1c:9b:9f:e2:17:c1:a2:75:42:ee:0a: 9b:21:15:11:d7:70:6a:2b:50:00:18:d7:1b:c0:d5:79:33:9c: 7d:07:6f:7c:0f:a0:04:50:a6:a4:c4:a2:50:8f:bd:0c:bb:ba: 49:07:ec:61:14:f4:12:28:a9:6c:27:96:ad:ee:85:d2:41:67: 95:97:5b:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpmGNUaeGtk2yHySRhfuYAg7fscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNjAyMjgwNzA1MDNaFw0yNjAzMDMwOTUxMDNaMDMxMTAvBgNV BAMTKDhEMzg2OUNCNUM5QUQ0N0E4QTk2OUExQkY3MEU1NTE0Q0UxMTY2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSFVGoZ8FYBTDzvkGqtdWCvTB oRG1izXLMkpZZ65qQ7F37rimQR9N8aQkW0iryR1TD0Ifm1UfeN1mnjRbpJkZ4r8t PmwqmM37SL4MjrJlpTTp3/Rx0uGIAlkovCVPGmO2yfxBlGKLOWal3vbY1Zn+dv7X dL9U6rqu0M+ufiuEJTt3sKRFdprnlNJYKOCEd5vpKeQMEWfKF29pcpyWuzaGJcJf L+loEteUaPaMxgv4dNelEfPrIK6zgqaXHowRqthBr0mhgEx4FtPGDzNu6qTKjP0j kAeIrsTpP8VR2zsJ/pZH0E9oslQ0GIf1b46b37f5axm4NcpKrHu+8DiNEN+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjThpy1ya1HqKlpob9w5VFM4RZoswHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABzCKsyAiXVOMAG4xC2LXJUrIIst+ZIOJ04 vAUHoka4sG7W1hTA/WbJbbl09t5xz3veQgsim6bafAprUqPY17TomZgCQW6K5LsK EP/t6HwnbqpmFoRA6jufUl9YwgKLC+5EbaIKa7zqNJvqwtSMPhuwoo+9AT63Y3Po xAnbSPVffVLhARFiCxTWLuEkPQkHLCHY+/vDYaZpRtfpbO1Mmr6wm6dZMbMdsaUd j513ByCbK6QEize5mOqul44cm5/iF8GidULuCpshFRHXcGorUAAY1xvA1XkznH0H b3wPoARQpqTEolCPvQy7ukkH7GEU9BIoqWwnlq3uhdJBZ5WXW5Q= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:08 2026 by rpki-client