$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: x2ud3B3UVX94zpIpC1K6/IqNAM5szzpoBEOMDAPVJ8I= Subject key identifier: 89:E3:2D:32:61:49:DB:DC:67:F8:1F:36:4C:0D:67:9A:D9:73:64:2C Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 2449C973F7BC0BFD5756A73CEA7D3A23BE2CB26F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04D2 Signing time: Sun 01 Mar 2026 07:00:57 +0000 Manifest this update: Sun 01 Mar 2026 06:55:57 +0000 Manifest next update: Wed 04 Mar 2026 13:18:57 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: sTGC3pHSLEd6DrA7F2hiOf1LbppExpIpSDPyZ7UgxpA=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 3: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:49:c9:73:f7:bc:0b:fd:57:56:a7:3c:ea:7d:3a:23:be:2c:b2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Mar 1 06:55:57 2026 GMT Not After : Mar 4 13:18:57 2026 GMT Subject: CN=89E32D326149DBDC67F81F364C0D679AD973642C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:b1:d1:19:44:39:06:9f:85:1f:f1:e6:5a: 26:28:e4:44:64:4c:9c:68:14:48:86:4d:e6:0d:54: a5:0e:62:d4:08:d1:58:e9:2d:60:a7:d9:82:d5:86: 4e:f8:c4:c1:54:7f:a9:c3:b4:83:58:be:ec:11:ff: 93:44:e3:36:14:4a:11:81:5c:c5:44:1c:02:32:6f: ee:8d:5a:13:35:01:52:15:5d:24:b0:dd:02:05:b6: 80:04:46:88:4e:fa:ba:13:8a:13:82:53:dc:87:03: 26:5f:bc:81:54:bf:37:de:ae:fe:a9:20:1e:eb:df: 5a:84:c1:24:18:61:3c:39:d1:33:23:50:e5:3a:54: d7:bf:e9:e7:5c:e5:60:a9:ce:89:79:66:d2:97:be: 33:4a:f7:fd:ee:43:b3:40:83:63:e1:27:f1:fa:a5: 7f:2a:1f:e1:62:da:6c:45:71:32:f1:f0:be:c7:ab: 6e:13:e9:4c:9a:1b:af:ef:7c:65:fb:af:5f:e7:6e: 0f:30:5b:9b:b5:3d:d1:48:d3:3c:0b:c8:bb:69:b7: f2:8e:0a:c9:a4:e9:57:22:02:62:5e:89:a7:06:39: bd:a1:87:0d:dd:3a:73:0a:65:e9:07:85:63:02:66: 00:1a:fd:f8:0f:ef:47:10:52:ef:20:9c:77:f8:82: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E3:2D:32:61:49:DB:DC:67:F8:1F:36:4C:0D:67:9A:D9:73:64:2C X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:49:8b:6d:41:9c:25:31:2d:9f:2d:60:25:42:eb:3c:14:40: 59:7a:53:f9:97:d1:54:11:91:f2:a5:8d:81:b8:1f:9f:c6:f6: 61:83:ca:6a:b7:63:ca:d9:f3:1c:00:1e:64:5c:d3:5f:95:79: 76:3c:38:28:e2:6b:7d:62:78:da:aa:31:6d:8b:51:29:32:71: 62:55:16:59:ec:a9:5d:54:55:ab:19:c2:a9:26:68:2d:d6:e5: 4d:81:0a:b9:14:3d:fc:ae:a6:dc:d4:6d:c9:33:7c:94:bd:81: 44:4c:dd:fc:32:4b:40:cf:82:6d:15:2c:27:db:af:d1:3f:6b: 77:14:13:75:b5:86:08:37:c8:d4:aa:2a:f8:9c:ef:cf:9b:3e: 5c:22:7a:b5:df:1f:8b:29:7c:dc:16:fa:e5:d3:d5:07:fd:e8: 30:21:1a:86:af:9e:f9:df:72:80:93:8a:89:81:db:1f:82:58: 00:d5:0d:9b:14:d1:10:07:bf:22:17:a6:1b:97:06:b9:9e:23: f2:fa:62:c1:23:56:1b:80:81:eb:6a:86:e4:6f:da:70:d8:09: 29:70:55:2c:6a:cf:83:26:1d:89:2f:72:df:6e:9c:a5:e6:67: 4b:f9:f1:f9:ed:4f:de:10:28:83:f5:42:00:e4:b1:70:67:96: c4:a0:56:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEnJc/e8C/1XVqc86n06I74ssm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNjAzMDEwNjU1NTdaFw0yNjAzMDQxMzE4NTdaMDMxMTAvBgNV BAMTKDg5RTMyRDMyNjE0OURCREM2N0Y4MUYzNjRDMEQ2NzlBRDk3MzY0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ALHRGUQ5Bp+FH/HmWiYo5ERk TJxoFEiGTeYNVKUOYtQI0VjpLWCn2YLVhk74xMFUf6nDtINYvuwR/5NE4zYUShGB XMVEHAIyb+6NWhM1AVIVXSSw3QIFtoAERohO+roTihOCU9yHAyZfvIFUvzferv6p IB7r31qEwSQYYTw50TMjUOU6VNe/6edc5WCpzol5ZtKXvjNK9/3uQ7NAg2PhJ/H6 pX8qH+Fi2mxFcTLx8L7Hq24T6UyaG6/vfGX7r1/nbg8wW5u1PdFI0zwLyLtpt/KO Csmk6VciAmJeiacGOb2hhw3dOnMKZekHhWMCZgAa/fgP70cQUu8gnHf4glabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUieMtMmFJ29xn+B82TA1nmtlzZCwwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdJi21BnCUxLZ8tYCVC6zwUQFl6U/mX0VQR kfKljYG4H5/G9mGDymq3Y8rZ8xwAHmRc01+VeXY8OCjia31ieNqqMW2LUSkycWJV FlnsqV1UVasZwqkmaC3W5U2BCrkUPfyuptzUbckzfJS9gURM3fwyS0DPgm0VLCfb r9E/a3cUE3W1hgg3yNSqKvic78+bPlwierXfH4spfNwW+uXT1Qf96DAhGoavnvnf coCTiomB2x+CWADVDZsU0RAHvyIXphuXBrmeI/L6YsEjVhuAgetqhuRv2nDYCSlw VSxqz4MmHYkvct9unKXmZ0v58fntT94QKIP1QgDksXBnlsSgVoY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:17 2026 by rpki-client