$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: MyuGC1NIG3HjlG1hz1vUUdNINJQ7Xqoe1tfJsAOzU+0= Subject key identifier: 5F:14:D0:5D:E0:8B:EB:5C:5B:A0:0E:63:9A:0A:C7:9D:10:CD:28:50 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 1720C66CB4E96F859B66974F601486EAF83E20B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 024F Signing time: Sun 01 Mar 2026 16:50:40 +0000 Manifest this update: Sun 01 Mar 2026 16:45:40 +0000 Manifest next update: Wed 04 Mar 2026 22:42:40 +0000 Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 9kP7WVETfnZHl6QQOMrTEyNc8lFnH2hWuQfhVnmA8rg=) 2: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: aIHG4awR04myJpMXo0ICCNzjEjIkbEidS0kXvAQfECY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:20:c6:6c:b4:e9:6f:85:9b:66:97:4f:60:14:86:ea:f8:3e:20:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Mar 1 16:45:40 2026 GMT Not After : Mar 4 22:42:40 2026 GMT Subject: CN=5F14D05DE08BEB5C5BA00E639A0AC79D10CD2850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:a8:6a:13:13:d6:8b:1a:59:f2:a6:29:31: e3:90:de:e8:cd:26:b3:7d:1e:e1:4f:e4:14:97:79: 69:e1:1d:35:f5:16:4c:e9:a1:3b:7d:d4:68:20:bf: a3:c7:8b:90:35:74:bf:4a:43:61:4b:d8:6d:7a:8e: 87:b9:d0:f9:b1:42:27:b8:12:f3:b1:aa:27:0b:b5: e4:bd:b9:07:e3:58:88:16:24:a3:54:f6:6a:32:32: fb:14:3a:dd:a2:7e:e0:14:e2:02:81:3c:e0:2b:5c: fb:c7:2f:e1:be:0a:fa:6b:59:5d:dd:dd:36:b4:95: 86:1f:4e:31:b8:ec:52:8e:36:72:be:b3:d9:3c:04: 81:8a:04:7d:d7:fb:b8:d8:f3:d2:9e:95:30:24:bc: de:e5:07:53:3c:af:c8:b2:62:7f:7a:61:c9:ae:ed: 86:e4:6f:51:5e:d4:3a:b5:92:dc:a6:7a:d5:cd:a9: 9a:29:81:d5:49:ed:78:94:c3:f0:d0:1f:cc:c5:1c: 78:40:81:b7:c4:23:0f:e9:01:62:c2:e1:c7:d6:8a: 11:b5:53:e7:8b:28:a3:62:5a:6a:e9:aa:d6:96:c3: 85:b9:28:e7:09:0a:74:2c:59:29:9b:35:2d:a8:c7: 62:4e:d3:94:ca:88:71:2e:d9:4f:f5:b7:11:ce:a1: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:14:D0:5D:E0:8B:EB:5C:5B:A0:0E:63:9A:0A:C7:9D:10:CD:28:50 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:b2:fe:8d:6e:c0:c3:6c:c8:60:5c:a0:4f:4c:40:c7:00:24: da:69:43:30:84:71:ac:81:92:ac:aa:bc:64:50:b9:c8:c2:60: 51:03:ac:0f:49:06:da:9a:c3:02:a2:f0:86:01:d6:e4:05:e8: 3b:30:c3:e5:b9:a7:b5:67:3e:c5:4c:37:74:10:25:98:74:d1: 47:9f:5a:70:e5:4e:da:0f:c7:df:34:78:ab:c4:e2:28:68:bd: e5:a6:46:3e:b8:d9:26:f0:7e:0b:f4:2d:7b:25:60:e6:9c:9b: 79:0b:a1:f4:b1:a9:2b:77:5c:0d:e9:9d:68:22:e4:c1:1f:a9: bb:d0:7c:c6:51:6c:fb:4d:62:a9:eb:cf:67:90:99:2d:1b:6f: 2b:59:66:86:54:86:e5:8e:56:16:c3:11:3b:74:a0:c8:a2:1b: 49:88:9a:21:0a:4d:74:6b:1d:35:32:57:3b:c2:47:d3:e1:16: b1:f1:37:f9:35:e7:05:65:25:4c:19:45:68:ee:8c:27:89:23: 99:7b:39:4a:6c:e8:1b:9b:71:4e:ee:44:21:01:6e:a1:0e:d8: 0c:c7:cc:a7:97:0c:02:8e:52:9a:0b:b1:7c:f7:c7:44:78:e5: f2:fe:e4:b1:51:f5:2f:45:02:6d:f8:d1:72:1a:1b:7f:03:83: c0:75:35:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyDGbLTpb4WbZpdPYBSG6vg+ILIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNjAzMDExNjQ1NDBaFw0yNjAzMDQyMjQyNDBaMDMxMTAvBgNV BAMTKDVGMTREMDVERTA4QkVCNUM1QkEwMEU2MzlBMEFDNzlEMTBDRDI4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrahqExPWixpZ8qYpMeOQ3ujN JrN9HuFP5BSXeWnhHTX1FkzpoTt91Gggv6PHi5A1dL9KQ2FL2G16joe50PmxQie4 EvOxqicLteS9uQfjWIgWJKNU9moyMvsUOt2ifuAU4gKBPOArXPvHL+G+CvprWV3d 3Ta0lYYfTjG47FKONnK+s9k8BIGKBH3X+7jY89KelTAkvN7lB1M8r8iyYn96Ycmu 7Ybkb1Fe1Dq1ktymetXNqZopgdVJ7XiUw/DQH8zFHHhAgbfEIw/pAWLC4cfWihG1 U+eLKKNiWmrpqtaWw4W5KOcJCnQsWSmbNS2ox2JO05TKiHEu2U/1txHOocWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXxTQXeCL61xboA5jmgrHnRDNKFAwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANWy/o1uwMNsyGBcoE9MQMcAJNppQzCEcayB kqyqvGRQucjCYFEDrA9JBtqawwKi8IYB1uQF6Dsww+W5p7VnPsVMN3QQJZh00Uef WnDlTtoPx980eKvE4ihoveWmRj642Sbwfgv0LXslYOacm3kLofSxqSt3XA3pnWgi 5MEfqbvQfMZRbPtNYqnrz2eQmS0bbytZZoZUhuWOVhbDETt0oMiiG0mImiEKTXRr HTUyVzvCR9PhFrHxN/k15wVlJUwZRWjujCeJI5l7OUps6BubcU7uRCEBbqEO2AzH zKeXDAKOUpoLsXz3x0R45fL+5LFR9S9FAm340XIaG38Dg8B1Nb0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:58 2026 by rpki-client