$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: e2CwWX7xOJ13XRrIad8cGPL8lwZpnER3lbYmIxM+lbE= Subject key identifier: 8C:34:95:4E:58:17:2F:63:B8:28:C9:23:23:86:35:AB:59:E9:09:99 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 4320575DD69FC5029DA2C332078B6016AF3BAC37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 01BC Signing time: Sat 28 Feb 2026 23:01:57 +0000 Manifest this update: Sat 28 Feb 2026 22:56:57 +0000 Manifest next update: Wed 04 Mar 2026 10:58:57 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: 6Y0SN5/PPYJjn6dUqhaYgTyE6/et793T11iPKwQPZ0o=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:20:57:5d:d6:9f:c5:02:9d:a2:c3:32:07:8b:60:16:af:3b:ac:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Feb 28 22:56:57 2026 GMT Not After : Mar 4 10:58:57 2026 GMT Subject: CN=8C34954E58172F63B828C923238635AB59E90999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:9e:fd:71:14:0c:32:a0:a5:d8:6a:ce:a2: ba:1d:f3:fa:27:a0:2f:fe:03:cf:b1:b0:a2:c0:d8: 8b:83:1c:9f:ee:cd:05:96:4d:c7:f1:e2:5f:fb:b1: 3f:b6:9d:93:28:00:0a:e6:66:c3:fa:dd:9a:ec:a9: 9c:6b:06:9c:d6:38:b9:81:e1:c5:30:71:b8:c6:2f: cd:d9:e1:bd:b6:8c:32:0b:9b:79:6a:bf:c4:a9:49: a7:b2:6e:2d:25:54:51:18:dd:65:37:b5:42:ac:dd: c4:18:bf:56:ce:f8:b7:c7:d8:a7:a5:8b:ae:c3:40: 09:28:8e:5e:a4:17:91:cf:10:a4:f4:22:19:d1:a5: bd:64:21:68:4e:11:bb:0a:59:d5:05:e2:d8:43:2a: a0:8f:84:cb:d5:60:93:1a:04:cc:b4:51:af:83:ac: 11:a4:50:7b:6d:b8:05:23:39:16:a5:fb:d8:fe:57: ae:73:ae:06:da:86:71:2a:76:93:d2:b1:fe:64:21: 5b:fc:87:bb:c4:e1:eb:18:4a:25:70:3c:91:58:95: 48:fc:f1:3a:e8:50:4a:a6:63:98:bd:c0:25:08:3d: 4b:8b:82:6d:d6:3e:75:35:a2:80:ad:ae:59:46:c1: 7b:83:ed:3a:84:3b:99:f1:23:67:14:23:76:11:6d: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:34:95:4E:58:17:2F:63:B8:28:C9:23:23:86:35:AB:59:E9:09:99 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:15:f9:e5:9f:a7:f9:69:57:c4:a3:38:69:cf:a1:81:c7:48: ff:af:68:33:ca:6c:c6:c9:73:7b:fe:44:89:e8:a6:c1:21:f9: 36:81:c0:ec:f2:7f:e5:08:76:29:75:47:ad:a5:3c:9b:d7:0c: 30:aa:59:e0:a8:f9:e7:7f:9e:5a:64:d9:39:ab:c7:82:d4:52: 03:62:44:2c:37:c7:cb:8c:c1:f5:1d:e6:0d:07:3e:55:94:71: 8a:73:de:b8:29:97:8e:6d:d0:38:4d:8d:a7:dc:8b:b3:c8:64: 46:ab:80:32:9d:ae:e4:e5:8f:6d:cd:62:76:0e:1b:e8:81:11: 89:e6:95:96:82:fb:65:18:37:15:58:b6:e1:b9:71:29:0c:61: cc:d8:6f:07:42:68:0b:9e:b0:77:99:13:a8:b4:89:23:b5:70: d8:fb:03:50:2c:d5:63:cb:d1:17:d8:73:9e:4d:83:3b:81:33: e5:8a:03:a4:fc:bb:64:eb:85:b5:eb:f2:fe:83:1e:fc:b2:1b: 5e:ca:31:d9:94:a4:d9:1d:cd:56:1d:57:12:b3:b0:80:8a:3b: b0:5d:b4:fc:0d:24:34:17:45:e5:ca:37:2c:80:25:ac:52:15: 6b:f3:50:ac:ab:72:79:d6:69:39:5f:de:16:16:49:c0:97:76: 84:49:8c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyBXXdafxQKdosMyB4tgFq87rDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNjAyMjgyMjU2NTdaFw0yNjAzMDQxMDU4NTdaMDMxMTAvBgNV BAMTKDhDMzQ5NTRFNTgxNzJGNjNCODI4QzkyMzIzODYzNUFCNTlFOTA5OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSZ79cRQMMqCl2GrOorod8/on oC/+A8+xsKLA2IuDHJ/uzQWWTcfx4l/7sT+2nZMoAArmZsP63ZrsqZxrBpzWOLmB 4cUwcbjGL83Z4b22jDILm3lqv8SpSaeybi0lVFEY3WU3tUKs3cQYv1bO+LfH2Kel i67DQAkojl6kF5HPEKT0IhnRpb1kIWhOEbsKWdUF4thDKqCPhMvVYJMaBMy0Ua+D rBGkUHttuAUjORal+9j+V65zrgbahnEqdpPSsf5kIVv8h7vE4esYSiVwPJFYlUj8 8TroUEqmY5i9wCUIPUuLgm3WPnU1ooCtrllGwXuD7TqEO5nxI2cUI3YRbVeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDSVTlgXL2O4KMkjI4Y1q1npCZkwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEV+eWfp/lpV8SjOGnPoYHHSP+vaDPKbMbJ c3v+RInopsEh+TaBwOzyf+UIdil1R62lPJvXDDCqWeCo+ed/nlpk2Tmrx4LUUgNi RCw3x8uMwfUd5g0HPlWUcYpz3rgpl45t0DhNjafci7PIZEargDKdruTlj23NYnYO G+iBEYnmlZaC+2UYNxVYtuG5cSkMYczYbwdCaAuesHeZE6i0iSO1cNj7A1As1WPL 0RfYc55NgzuBM+WKA6T8u2TrhbXr8v6DHvyyG17KMdmUpNkdzVYdVxKzsICKO7Bd tPwNJDQXReXKNyyAJaxSFWvzUKyrcnnWaTlf3hYWScCXdoRJjLY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:41:28 2026 by rpki-client