$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: 07Dfc55dV7BKILZsZm1+ZKyk4ygCCsxojpYqNxkWl/k= Subject key identifier: CA:50:EC:30:48:57:FE:12:A4:72:64:AE:2B:22:F7:A4:3A:EC:31:7B Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 1162647063DE886C8964CD6F239DF87BDAF4C6B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04FF Signing time: Sun 01 Mar 2026 17:21:35 +0000 Manifest this update: Sun 01 Mar 2026 17:16:35 +0000 Manifest next update: Thu 05 Mar 2026 03:33:35 +0000 Files and hashes: 1: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: 1WXMKPK5nYeTKTcGaE+bK5lTZhh62Og1UN1//4DEVh4=) 2: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: shtmTa57+pxWxFUP615U/s617hiWKy/m/Dpc5lxTH4w=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: yZdB1+Hb4ph9w/wvrnMAOAc9P831jd2qxlkZfuEjv8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:62:64:70:63:de:88:6c:89:64:cd:6f:23:9d:f8:7b:da:f4:c6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Mar 1 17:16:35 2026 GMT Not After : Mar 5 03:33:35 2026 GMT Subject: CN=CA50EC304857FE12A47264AE2B22F7A43AEC317B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:76:a2:fe:8b:92:71:75:9d:f2:22:fc:e6: be:37:7a:ad:95:22:94:70:7a:dc:e4:2d:77:9a:11: 50:75:4c:fd:34:30:03:69:a7:0b:90:b3:e8:0d:ac: 06:71:05:d4:83:ab:da:8c:48:ab:ae:65:89:6d:44: 07:30:61:70:dd:3b:87:e7:95:78:09:a1:a2:8e:63: ad:3b:21:de:08:69:46:7c:51:3b:ad:eb:03:4a:5f: 7e:47:7e:1c:9e:3a:4d:2a:a1:ff:bc:7f:c6:e0:fc: c1:c6:bb:49:ac:6b:f3:ae:a4:a0:f3:0d:1a:e5:f2: f3:5c:07:08:73:55:2a:48:7b:e0:86:78:fe:48:bf: ef:8f:e3:e8:d5:c2:65:44:72:1e:f0:a1:db:39:eb: 6b:78:cf:be:7b:1b:18:bd:76:52:e3:99:cf:2d:9d: b3:89:82:06:ff:1f:c0:25:f8:7e:e6:ca:a5:d2:fe: b0:2c:f0:e6:f9:6b:6c:e1:b6:bb:d8:96:52:00:4b: e6:9c:fc:33:7b:d5:ed:c1:6f:d0:40:6d:e8:34:a0: 1f:5e:77:a3:a5:c3:1c:87:3f:63:50:bd:90:78:2c: e4:56:e1:34:e4:da:95:64:8f:95:b2:f8:cc:c4:8b: c6:83:e4:e8:45:b3:69:ff:fa:f6:8d:4f:79:67:aa: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:50:EC:30:48:57:FE:12:A4:72:64:AE:2B:22:F7:A4:3A:EC:31:7B X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:82:a8:54:c4:ce:fc:26:b1:b8:c5:d0:a1:13:16:48:6d:5d: fd:a2:b4:f9:3f:fd:b0:6b:d8:35:2e:42:63:92:4d:ed:0d:fb: 60:10:d9:11:8a:54:6f:c3:84:3e:84:71:79:35:7e:41:cc:70: 59:e1:0c:74:ce:e1:da:f7:6f:f9:d0:1f:0c:c1:9e:44:11:4a: e1:4a:16:0d:66:53:a2:72:5c:af:ff:f9:f5:75:dc:f7:3f:75: e8:bf:27:c7:d7:fb:e4:54:c8:36:0d:e5:1f:b0:f1:33:6a:7d: b3:23:b4:b0:24:04:78:3a:e5:4f:b3:85:35:1b:1d:8a:8b:22: 57:f6:e4:9f:b6:bd:19:7e:56:40:76:df:95:b1:24:23:04:b3: d9:b0:ed:4e:e0:35:15:2f:e2:49:31:e2:3c:0c:10:86:e9:7e: 6e:da:57:76:f1:b0:c1:74:64:06:02:e4:aa:5a:d8:95:30:c6: 23:4e:a0:50:d0:75:62:a9:f0:7b:79:3c:55:33:b2:7d:a0:a0: 62:62:a9:5b:07:a2:1d:ac:18:1a:c0:85:6d:14:30:4c:02:25: 60:e2:49:2a:d4:21:4e:14:73:68:54:76:59:9e:84:2f:68:9a: 04:f6:86:9a:3a:0d:35:06:bb:ba:ff:0e:1c:fa:38:2f:d1:52: fb:50:2a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWJkcGPeiGyJZM1vI534e9r0xrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNjAzMDExNzE2MzVaFw0yNjAzMDUwMzMzMzVaMDMxMTAvBgNV BAMTKENBNTBFQzMwNDg1N0ZFMTJBNDcyNjRBRTJCMjJGN0E0M0FFQzMxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhXai/ouScXWd8iL85r43eq2V IpRwetzkLXeaEVB1TP00MANppwuQs+gNrAZxBdSDq9qMSKuuZYltRAcwYXDdO4fn lXgJoaKOY607Id4IaUZ8UTut6wNKX35HfhyeOk0qof+8f8bg/MHGu0msa/OupKDz DRrl8vNcBwhzVSpIe+CGeP5Iv++P4+jVwmVEch7wods562t4z757Gxi9dlLjmc8t nbOJggb/H8Al+H7myqXS/rAs8Ob5a2zhtrvYllIAS+ac/DN71e3Bb9BAbeg0oB9e d6OlwxyHP2NQvZB4LORW4TTk2pVkj5Wy+MzEi8aD5OhFs2n/+vaNT3lnqqnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylDsMEhX/hKkcmSuKyL3pDrsMXswHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2CqFTEzvwmsbjF0KETFkhtXf2itPk//bBr 2DUuQmOSTe0N+2AQ2RGKVG/DhD6EcXk1fkHMcFnhDHTO4dr3b/nQHwzBnkQRSuFK Fg1mU6JyXK//+fV13Pc/dei/J8fX++RUyDYN5R+w8TNqfbMjtLAkBHg65U+zhTUb HYqLIlf25J+2vRl+VkB235WxJCMEs9mw7U7gNRUv4kkx4jwMEIbpfm7aV3bxsMF0 ZAYC5Kpa2JUwxiNOoFDQdWKp8Ht5PFUzsn2goGJiqVsHoh2sGBrAhW0UMEwCJWDi SSrUIU4Uc2hUdlmehC9omgT2hpo6DTUGu7r/Dhz6OC/RUvtQKsE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:32 2026 by rpki-client