$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: vdt/cEHxkNVildbuZk8/I8Mf7ZpcEJ8hFzRdtPqzUso= Subject key identifier: CD:2B:79:11:6F:BF:76:04:E3:21:DA:00:A7:F6:89:59:1D:9C:B1:16 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 19685AE777B2DA9107498862D8CB1CF9BEE24187 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04EB Signing time: Sat 28 Feb 2026 16:11:48 +0000 Manifest this update: Sat 28 Feb 2026 16:06:48 +0000 Manifest next update: Tue 03 Mar 2026 23:30:48 +0000 Files and hashes: 1: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 2: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 4: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: ykq98iNsDk/fmJrH/wLODcABiu3nZr18GVCUFlMASJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:68:5a:e7:77:b2:da:91:07:49:88:62:d8:cb:1c:f9:be:e2:41:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Feb 28 16:06:48 2026 GMT Not After : Mar 3 23:30:48 2026 GMT Subject: CN=CD2B79116FBF7604E321DA00A7F689591D9CB116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:59:30:66:17:6c:1c:43:ca:16:42:a2:fe: 15:e9:35:c1:14:14:b7:30:27:37:3d:84:22:94:84: b7:d8:30:77:d8:c5:07:b5:23:8e:50:12:00:0f:a3: 3f:d4:72:26:fb:49:d7:32:7f:96:82:64:4b:45:b1: de:13:75:bf:91:f6:e2:6f:b7:ec:43:7b:d2:1c:eb: d5:6d:d2:5b:fd:b4:7b:dc:29:4c:99:76:46:ad:35: 5c:eb:8b:a8:bf:5b:2e:6c:8b:8c:26:a5:d2:49:a8: 55:33:50:15:6c:6c:9e:6f:be:00:cd:e1:ef:85:b9: 6d:0c:a8:b1:a0:98:0d:1b:cc:99:69:88:17:4f:ba: f7:49:62:f9:95:67:89:8a:30:03:0a:33:74:28:a5: d9:a8:ee:59:2b:27:6d:10:2f:8b:ed:89:c9:92:47: f4:41:ed:29:a9:be:db:99:cc:1f:c6:27:cd:76:5f: 90:71:b9:f0:b6:d5:90:27:e0:1c:cf:bc:eb:25:95: ed:99:f6:da:2b:f2:42:55:c4:d9:4d:f8:e2:68:1d: fe:7f:ea:3f:cb:ac:45:7e:09:8b:3e:08:50:b9:bd: f1:25:d8:52:b8:06:23:7e:b8:03:74:dc:54:77:ca: 94:c6:bd:3a:52:92:24:ed:3e:e8:ea:12:35:6e:b8: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:79:11:6F:BF:76:04:E3:21:DA:00:A7:F6:89:59:1D:9C:B1:16 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:14:4d:66:1b:d8:10:19:97:e5:ae:48:d7:64:60:47:b6:4d: df:c2:ef:eb:6c:e2:00:c4:3c:f2:32:b9:46:a1:2a:6c:d7:e2: 78:c7:e1:00:08:82:5c:6d:eb:f6:f7:41:7e:d8:04:c0:f0:1f: f3:28:cc:6c:c0:42:15:f4:a1:f3:8a:eb:64:48:c3:26:8e:bf: 28:02:5d:58:2a:8c:22:af:80:fe:76:e7:e5:5d:8d:2f:88:c4: 01:c8:6f:32:eb:99:46:fa:95:d6:53:02:74:8f:0c:c2:23:ce: af:17:3f:86:50:5f:22:b9:16:c1:95:65:25:88:6a:df:e2:68: 6b:3a:d7:34:07:4d:7a:96:3f:12:e8:2e:0a:3b:45:89:d6:ce: af:7b:42:45:58:fb:aa:d2:b9:e3:d1:d8:4d:39:20:82:a4:23: 08:e0:bc:73:a2:23:d1:af:15:03:18:1d:b9:76:29:f0:99:ba: e0:c3:87:cb:70:a0:8a:4e:8d:22:05:35:c1:0a:55:99:64:62: 29:23:40:bf:e1:16:f4:07:05:f5:5c:6a:26:d6:38:52:6a:59: f2:37:93:bf:a1:d6:a4:54:d5:95:80:cd:cd:c1:ab:cc:9a:0b: f6:21:83:3f:10:99:36:2c:cb:79:ca:71:7b:97:6d:9a:1c:63: d5:9e:a0:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWha53ey2pEHSYhi2Msc+b7iQYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNjAyMjgxNjA2NDhaFw0yNjAzMDMyMzMwNDhaMDMxMTAvBgNV BAMTKENEMkI3OTExNkZCRjc2MDRFMzIxREEwMEE3RjY4OTU5MUQ5Q0IxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EFkwZhdsHEPKFkKi/hXpNcEU FLcwJzc9hCKUhLfYMHfYxQe1I45QEgAPoz/Ucib7Sdcyf5aCZEtFsd4Tdb+R9uJv t+xDe9Ic69Vt0lv9tHvcKUyZdkatNVzri6i/Wy5si4wmpdJJqFUzUBVsbJ5vvgDN 4e+FuW0MqLGgmA0bzJlpiBdPuvdJYvmVZ4mKMAMKM3Qopdmo7lkrJ20QL4vticmS R/RB7SmpvtuZzB/GJ812X5BxufC21ZAn4BzPvOslle2Z9tor8kJVxNlN+OJoHf5/ 6j/LrEV+CYs+CFC5vfEl2FK4BiN+uAN03FR3ypTGvTpSkiTtPujqEjVuuJMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSt5EW+/dgTjIdoAp/aJWR2csRYwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANsUTWYb2BAZl+WuSNdkYEe2Td/C7+ts4gDE PPIyuUahKmzX4njH4QAIglxt6/b3QX7YBMDwH/MozGzAQhX0ofOK62RIwyaOvygC XVgqjCKvgP525+VdjS+IxAHIbzLrmUb6ldZTAnSPDMIjzq8XP4ZQXyK5FsGVZSWI at/iaGs61zQHTXqWPxLoLgo7RYnWzq97QkVY+6rSuePR2E05IIKkIwjgvHOiI9Gv FQMYHbl2KfCZuuDDh8twoIpOjSIFNcEKVZlkYikjQL/hFvQHBfVcaibWOFJqWfI3 k7+h1qRU1ZWAzc3Bq8yaC/Yhgz8QmTYsy3nKcXuXbZocY9WeoHY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:16 2026 by rpki-client