$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: CvtpvZxp+liYCTpAKxrCUm2ZUnveoKhGbegjMHMpTJM= Subject key identifier: 0A:32:EC:5A:CC:EE:18:01:8B:06:E3:E3:3C:06:72:E2:2E:47:3F:FC Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 3C62FB19272D69EF73F53D19B0C78C24DC31F592 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: F8 Signing time: Sat 28 Feb 2026 21:31:16 +0000 Manifest this update: Sat 28 Feb 2026 21:26:16 +0000 Manifest next update: Wed 04 Mar 2026 08:07:16 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: kOIeqUzeWTM8X7uh2C0ZOPfEDaxDDuKLKrFu+KhJEPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:62:fb:19:27:2d:69:ef:73:f5:3d:19:b0:c7:8c:24:dc:31:f5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Feb 28 21:26:16 2026 GMT Not After : Mar 4 08:07:16 2026 GMT Subject: CN=0A32EC5ACCEE18018B06E3E33C0672E22E473FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:f9:62:02:20:25:8d:ea:d7:69:2c:a0:af: e5:81:83:6c:36:f5:ac:8c:bb:20:3d:73:66:f1:b2: f5:a0:86:ad:36:df:3a:a3:cc:ef:48:f8:fe:b3:cc: 5e:e0:d4:09:c6:f3:3e:4a:93:5a:4b:74:53:b2:ca: ca:e6:9f:91:2f:15:22:e3:b2:d2:0c:82:5e:29:b1: 84:eb:a5:76:2d:d8:05:e0:d4:19:a3:c7:d9:cc:6d: 19:e3:be:54:24:48:95:75:7d:40:ce:9e:cc:d3:37: c8:b6:f3:20:53:31:ab:70:96:50:95:4b:0e:78:e3: f9:93:ab:72:a8:bf:f2:bd:13:34:a4:1e:3e:f4:31: ce:05:c6:6e:8f:6a:54:89:7e:39:a4:db:a4:f0:47: 03:b0:c1:d3:05:5e:f3:62:29:63:71:e1:61:6d:71: be:3c:7d:10:1e:86:fc:e7:19:b7:60:66:14:cf:ea: ae:ac:52:1b:5e:ec:ba:4f:a8:52:2a:69:52:b5:23: 23:03:83:2e:50:f9:1e:c9:d7:41:24:88:75:87:2d: 8b:40:1d:c3:bc:91:70:d4:5f:18:75:a7:bb:0d:34: 87:8e:c2:ac:c5:e8:fa:d5:86:b4:b8:bb:b5:23:04: d4:f0:c5:a0:07:47:6d:33:7b:72:3a:a0:56:6d:69: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:EC:5A:CC:EE:18:01:8B:06:E3:E3:3C:06:72:E2:2E:47:3F:FC X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0e:a7:db:ff:63:8e:be:c0:94:13:82:73:e7:cb:ca:93:08: 5f:de:7d:68:2b:62:98:60:57:62:82:d0:b1:96:07:f0:ba:b5: 1f:2b:ab:b5:c3:2f:ff:aa:56:c1:5a:04:90:0a:e8:cd:a3:84: a9:13:ec:79:57:08:80:92:94:5a:78:cf:f1:b4:d0:38:b9:08: 7c:c0:25:33:65:83:77:bf:45:40:8e:4e:56:b9:88:10:39:a3: d1:93:75:c1:20:7a:1a:1f:c4:8b:df:fd:9c:de:76:0b:e1:7b: ea:2e:18:c7:3f:ec:1e:db:11:80:8c:4d:90:85:14:6b:58:db: a2:69:a0:00:9f:7d:5d:f6:55:39:13:be:47:ac:d4:a2:53:77: 03:2a:23:21:64:45:20:97:2b:5b:3c:b0:17:c7:93:a3:76:0a: 57:b9:ec:c5:84:67:c0:5a:a5:9e:63:e0:b7:2e:c0:c4:e4:3a: 3c:b9:6f:ce:e9:48:c0:ce:92:86:7d:35:20:33:8e:4b:22:3c: 77:a6:7a:23:de:d5:03:7f:eb:d5:89:dc:ce:78:5e:8d:c7:db: eb:0b:03:3d:8c:c3:fc:17:50:c3:94:c3:73:01:49:d9:88:fc: 68:89:15:b4:2f:23:0a:c4:aa:4f:17:17:e2:ba:3f:93:eb:90: c3:64:d1:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGL7GSctae9z9T0ZsMeMJNwx9ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNjAyMjgyMTI2MTZaFw0yNjAzMDQwODA3MTZaMDMxMTAvBgNV BAMTKDBBMzJFQzVBQ0NFRTE4MDE4QjA2RTNFMzNDMDY3MkUyMkU0NzNGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtfliAiAljerXaSygr+WBg2w2 9ayMuyA9c2bxsvWghq023zqjzO9I+P6zzF7g1AnG8z5Kk1pLdFOyysrmn5EvFSLj stIMgl4psYTrpXYt2AXg1Bmjx9nMbRnjvlQkSJV1fUDOnszTN8i28yBTMatwllCV Sw544/mTq3Kov/K9EzSkHj70Mc4Fxm6PalSJfjmk26TwRwOwwdMFXvNiKWNx4WFt cb48fRAehvznGbdgZhTP6q6sUhte7LpPqFIqaVK1IyMDgy5Q+R7J10EkiHWHLYtA HcO8kXDUXxh1p7sNNIeOwqzF6PrVhrS4u7UjBNTwxaAHR20ze3I6oFZtaWAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCjLsWszuGAGLBuPjPAZy4i5HP/wwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0Op9v/Y46+wJQTgnPny8qTCF/efWgrYphg V2KC0LGWB/C6tR8rq7XDL/+qVsFaBJAK6M2jhKkT7HlXCICSlFp4z/G00Di5CHzA JTNlg3e/RUCOTla5iBA5o9GTdcEgehofxIvf/Zzedgvhe+ouGMc/7B7bEYCMTZCF FGtY26JpoACffV32VTkTvkes1KJTdwMqIyFkRSCXK1s8sBfHk6N2Cle57MWEZ8Ba pZ5j4LcuwMTkOjy5b87pSMDOkoZ9NSAzjksiPHemeiPe1QN/69WJ3M54Xo3H2+sL Az2Mw/wXUMOUw3MBSdmI/GiJFbQvIwrEqk8XF+K6P5PrkMNk0Vs= -----END CERTIFICATE-----Generated at Tue Mar 3 00:41:21 2026 by rpki-client