$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: p5B/dypfWcunff0JsIoWzwJmnp859BfwVhHUUngac6g= Subject key identifier: 69:A8:F7:04:77:4A:0B:41:81:39:BD:20:C1:FA:EE:81:9F:79:62:B2 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 1BAAC99C6ADE519F843A7EE672D5C34FDCE45BFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0554 Signing time: Mon 02 Mar 2026 03:31:14 +0000 Manifest this update: Mon 02 Mar 2026 03:26:14 +0000 Manifest next update: Thu 05 Mar 2026 06:19:14 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 3: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: tc659KVH83K7vTOkcxewN/atsRtHO3SXsEdyKWauT+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:aa:c9:9c:6a:de:51:9f:84:3a:7e:e6:72:d5:c3:4f:dc:e4:5b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Mar 2 03:26:14 2026 GMT Not After : Mar 5 06:19:14 2026 GMT Subject: CN=69A8F704774A0B418139BD20C1FAEE819F7962B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:8f:a5:7e:20:b2:1c:40:bd:5e:3d:b8:b0: 9b:6a:2b:a7:f7:e6:36:6e:82:0e:88:8b:5e:a8:e8: ea:f4:37:ff:99:1e:1d:ea:b7:c2:09:ba:0b:2b:a7: 84:96:af:fb:3d:57:15:bd:a8:63:33:e6:7b:51:72: d9:53:f3:44:91:34:42:e8:c8:57:28:59:c0:62:2a: 81:f9:31:33:14:31:ce:3c:04:b8:ff:49:06:61:a7: c0:36:44:60:cf:3c:3e:a9:5e:ac:ca:72:f8:5e:50: 5d:d4:aa:9b:45:b8:c9:f3:64:42:fd:d7:ba:48:33: 34:5d:79:5b:80:b5:cd:64:1e:68:a4:4e:ce:98:5d: 15:2d:0c:6a:e6:d5:8f:19:de:7e:95:37:05:c5:33: 9c:e7:a1:96:14:b4:a2:e3:31:55:88:0c:66:f9:c2: b6:fd:9b:32:b6:bf:bc:56:55:e7:91:49:d3:bd:97: 82:99:ad:54:2c:fe:56:27:68:1b:49:dc:c8:41:39: e4:2b:1c:31:b6:eb:91:c5:8d:87:f4:9a:d0:d9:9a: 4a:0e:38:1b:7b:99:38:f7:02:5b:7f:37:14:be:7a: 9f:77:9d:de:df:8a:0d:5b:91:9b:c8:91:62:0d:a5: 28:2e:e7:75:32:78:a0:19:d2:f4:37:78:18:70:67: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:F7:04:77:4A:0B:41:81:39:BD:20:C1:FA:EE:81:9F:79:62:B2 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b3:c5:6f:0a:95:65:16:bb:cf:8f:67:6d:13:e1:3e:34:27: 64:9f:bd:bf:07:93:84:5a:eb:99:99:5c:98:57:0a:5a:ab:8e: d5:6b:c0:c2:9f:a0:95:06:1c:a6:1a:2a:b0:72:b9:5a:e1:bf: b4:18:97:bb:42:82:e1:e5:88:f1:b6:5d:6e:2b:74:7f:bb:92: 3f:95:16:78:f1:67:c8:ff:78:fb:73:7b:57:8a:20:b8:11:79: 41:e4:85:e5:0d:6c:7b:4a:7d:88:51:3c:b0:be:73:e4:9c:3d: ab:30:a3:38:18:c6:69:eb:8a:8e:f8:fb:27:07:66:47:91:2e: d4:09:0e:dd:2d:52:9a:62:42:10:35:c4:29:26:04:99:bc:9a: ce:85:02:29:1a:b1:cf:f1:c9:2e:38:dc:74:b0:36:cc:f1:6f: 66:f5:53:13:90:03:e7:96:4e:80:3c:ee:bf:4b:a0:75:18:52: f3:d6:b3:20:82:34:00:0c:b2:a9:9b:ab:81:ad:68:f6:cf:2a: 6d:c4:32:67:2b:dd:b4:f3:65:a6:9c:f5:f7:76:9d:81:8b:42: 1d:f3:38:4a:e1:07:cd:64:05:47:f0:fe:fc:c7:08:75:1a:94: 5b:89:03:12:ce:18:93:c8:bb:5d:fb:29:b8:89:46:76:3b:33: 93:36:e0:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6rJnGreUZ+EOn7mctXDT9zkW/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNjAzMDIwMzI2MTRaFw0yNjAzMDUwNjE5MTRaMDMxMTAvBgNV BAMTKDY5QThGNzA0Nzc0QTBCNDE4MTM5QkQyMEMxRkFFRTgxOUY3OTYyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlI+lfiCyHEC9Xj24sJtqK6f3 5jZugg6Ii16o6Or0N/+ZHh3qt8IJugsrp4SWr/s9VxW9qGMz5ntRctlT80SRNELo yFcoWcBiKoH5MTMUMc48BLj/SQZhp8A2RGDPPD6pXqzKcvheUF3UqptFuMnzZEL9 17pIMzRdeVuAtc1kHmikTs6YXRUtDGrm1Y8Z3n6VNwXFM5znoZYUtKLjMVWIDGb5 wrb9mzK2v7xWVeeRSdO9l4KZrVQs/lYnaBtJ3MhBOeQrHDG265HFjYf0mtDZmkoO OBt7mTj3Alt/NxS+ep93nd7fig1bkZvIkWINpSgu53UyeKAZ0vQ3eBhwZ41DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaaj3BHdKC0GBOb0gwfrugZ95YrIwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCzxW8KlWUWu8+PZ20T4T40J2Sfvb8Hk4Ra 65mZXJhXClqrjtVrwMKfoJUGHKYaKrByuVrhv7QYl7tCguHliPG2XW4rdH+7kj+V FnjxZ8j/ePtze1eKILgReUHkheUNbHtKfYhRPLC+c+ScPaswozgYxmnrio74+ycH ZkeRLtQJDt0tUppiQhA1xCkmBJm8ms6FAikasc/xyS443HSwNszxb2b1UxOQA+eW ToA87r9LoHUYUvPWsyCCNAAMsqmbq4GtaPbPKm3EMmcr3bTzZaac9fd2nYGLQh3z OErhB81kBUfw/vzHCHUalFuJAxLOGJPIu137KbiJRnY7M5M24OU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:31 2026 by rpki-client