$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: bJCwfqacYlPztkzUa2p+gU5GKgaqAp2cx5rAFJNt8Sk= Subject key identifier: A2:9D:74:0A:DC:B5:47:6F:42:D7:69:E9:B7:93:DC:9A:A4:C9:D2:F6 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 6537071B04F4ED68FEE674568C69DE993585D1BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 0556 Signing time: Sat 28 Feb 2026 23:52:28 +0000 Manifest this update: Sat 28 Feb 2026 23:47:28 +0000 Manifest next update: Wed 04 Mar 2026 06:43:28 +0000 Files and hashes: 1: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 2: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 3: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 4: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: zvQHDUl6PpaEuCfZrYlQDwtBvQ68mEnTJSk1SiP+k50=) 5: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:37:07:1b:04:f4:ed:68:fe:e6:74:56:8c:69:de:99:35:85:d1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Feb 28 23:47:28 2026 GMT Not After : Mar 4 06:43:28 2026 GMT Subject: CN=A29D740ADCB5476F42D769E9B793DC9AA4C9D2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:f6:98:87:4e:be:e1:89:ad:ee:88:fe:8d: a9:ad:a0:1b:17:d3:46:c9:29:8c:27:65:99:0c:13: 4f:17:78:cd:0c:a2:f6:7b:96:a7:fe:f1:0d:62:ea: 80:6a:df:7f:6d:46:be:73:19:28:9a:cd:27:15:98: e5:6e:02:8f:b9:39:ef:be:70:2c:14:37:52:21:0f: 15:35:ae:d9:97:f7:61:89:55:4f:a7:55:1b:f0:40: 89:8c:1a:5e:ce:0f:f6:bd:c4:0b:dc:b9:24:8d:73: 8b:0f:f1:1d:55:b4:cd:de:62:2e:ae:96:91:b3:8c: 61:af:4c:56:65:8b:f4:55:e3:a4:47:e4:c6:5b:8f: 12:6f:e6:fe:f1:fb:b3:01:39:7f:58:a8:51:9e:5c: 11:ba:ca:79:ac:30:43:02:8d:37:f7:6d:5c:4f:d8: 3e:5c:25:8c:22:b5:51:9a:8b:cf:20:35:1e:42:47: de:2e:77:9d:fd:5e:d5:5b:9e:7d:b9:4f:07:1f:9f: 40:7f:5b:53:c2:b7:4a:a2:68:d8:a4:d4:75:66:33: e5:aa:5f:0a:70:4c:04:a2:e6:ec:17:83:3e:a8:8f: 77:20:b7:c9:e9:b3:98:30:c4:f9:a9:11:ca:f6:c0: 3b:58:c9:c5:91:c2:3f:88:7c:25:76:b2:0f:6b:da: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:74:0A:DC:B5:47:6F:42:D7:69:E9:B7:93:DC:9A:A4:C9:D2:F6 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:c2:66:f2:40:c7:9c:7f:c6:c2:fb:75:f5:96:ea:51:b4:d2: c2:57:26:a8:e0:dd:f9:98:f1:fb:89:ee:8f:f7:71:cc:7e:aa: e3:66:a3:ca:92:df:44:12:41:db:89:da:26:02:a2:8c:b1:ad: 0c:1d:e8:8b:db:5d:0a:71:c6:f2:57:c3:b6:f4:e8:d0:67:4f: 9f:c4:e7:e3:6e:29:c1:a2:69:d3:d2:ba:60:61:d8:b5:c5:c1: 3f:65:c2:db:c5:ec:1d:6b:ab:92:ff:56:15:17:b7:22:38:b2: d5:b2:9c:9e:88:9e:82:3a:6b:0d:d1:97:3c:3a:a4:f9:9e:62: 2e:7b:b8:7b:2d:3d:0d:af:b7:bc:22:ca:51:2c:1d:b0:92:90: cb:73:10:59:3e:17:20:39:bf:6b:7e:92:fc:94:c8:6d:fc:b4: 46:09:9f:80:6f:c1:5f:1f:fb:44:d7:f0:a5:4d:4b:a0:ef:1d: 61:02:56:a2:10:0e:06:63:4e:d3:5a:d1:f8:74:d8:23:b0:a6: 4b:99:27:39:90:44:ee:d9:4d:5f:31:2e:71:b2:6d:88:b9:4d: 7d:aa:ab:7c:05:cc:95:05:af:43:c2:46:9b:81:58:a7:0c:23: 49:26:90:6b:61:33:69:86:62:26:c3:01:a2:16:81:84:26:ee: a5:fe:da:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTcHGwT07Wj+5nRWjGnemTWF0b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNjAyMjgyMzQ3MjhaFw0yNjAzMDQwNjQzMjhaMDMxMTAvBgNV BAMTKEEyOUQ3NDBBRENCNTQ3NkY0MkQ3NjlFOUI3OTNEQzlBQTRDOUQyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRvaYh06+4Ymt7oj+jamtoBsX 00bJKYwnZZkME08XeM0MovZ7lqf+8Q1i6oBq339tRr5zGSiazScVmOVuAo+5Oe++ cCwUN1IhDxU1rtmX92GJVU+nVRvwQImMGl7OD/a9xAvcuSSNc4sP8R1VtM3eYi6u lpGzjGGvTFZli/RV46RH5MZbjxJv5v7x+7MBOX9YqFGeXBG6ynmsMEMCjTf3bVxP 2D5cJYwitVGai88gNR5CR94ud539XtVbnn25Twcfn0B/W1PCt0qiaNik1HVmM+Wq XwpwTASi5uwXgz6oj3cgt8nps5gwxPmpEcr2wDtYycWRwj+IfCV2sg9r2m3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUop10Cty1R29C12npt5PcmqTJ0vYwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/CZvJAx5x/xsL7dfWW6lG00sJXJqjg3fmY 8fuJ7o/3ccx+quNmo8qS30QSQduJ2iYCooyxrQwd6IvbXQpxxvJXw7b06NBnT5/E 5+NuKcGiadPSumBh2LXFwT9lwtvF7B1rq5L/VhUXtyI4stWynJ6InoI6aw3Rlzw6 pPmeYi57uHstPQ2vt7wiylEsHbCSkMtzEFk+FyA5v2t+kvyUyG38tEYJn4BvwV8f +0TX8KVNS6DvHWECVqIQDgZjTtNa0fh02COwpkuZJzmQRO7ZTV8xLnGybYi5TX2q q3wFzJUFr0PCRpuBWKcMI0kmkGthM2mGYibDAaIWgYQm7qX+2lI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:10:33 2026 by rpki-client