$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: kHBrxmNb4E5CzIuncRdfLhlseGipJXwoIghPe3uqUGQ= Subject key identifier: 67:AF:12:C3:2D:3F:C3:AA:C6:1C:57:88:06:BF:71:15:91:B6:11:69 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 658E4CE5C12149C0507FD4A1E1C33EFF8D12CCD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 0211 Signing time: Sat 28 Feb 2026 01:31:50 +0000 Manifest this update: Sat 28 Feb 2026 01:26:50 +0000 Manifest next update: Tue 03 Mar 2026 12:31:50 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: 5WgbxdTGLhDQRE3EOcZMsPSCYYff8NoefjPMOUxhknI=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8e:4c:e5:c1:21:49:c0:50:7f:d4:a1:e1:c3:3e:ff:8d:12:cc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Feb 28 01:26:50 2026 GMT Not After : Mar 3 12:31:50 2026 GMT Subject: CN=67AF12C32D3FC3AAC61C578806BF711591B61169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:02:d3:b6:23:fb:48:2c:47:93:6a:a8:6c: f4:2d:aa:e4:f3:6a:02:27:d1:84:25:e5:5d:e4:ec: 9c:e0:ed:2b:c7:db:b6:94:44:7d:c2:9c:5b:56:80: 4a:ac:4b:67:e3:8e:e6:c4:55:98:ca:14:60:5b:20: 91:f6:26:df:be:b1:0e:63:e3:65:21:d5:aa:31:ef: 4c:46:a5:87:65:c8:f6:a2:5c:e1:25:37:81:6a:19: bf:b7:a7:fd:5d:57:9e:7f:af:e7:4a:1a:99:6a:35: c0:90:e8:c0:63:dc:61:dc:76:c4:d4:75:05:f4:6e: 5b:48:a9:f7:70:eb:83:a2:f6:6e:2e:ed:eb:bb:59: 7a:e3:b7:ff:f8:77:1c:bb:8a:c4:cb:ac:f3:71:80: 12:de:68:fb:7b:95:a6:1a:a8:9d:15:99:a5:cb:5b: 4f:9a:ba:d9:82:69:97:8f:0d:ec:c0:0f:68:23:a5: 89:0c:fc:6d:be:96:bb:8c:9a:97:0a:ec:d2:af:2f: a4:05:57:45:f7:d2:cd:43:79:81:8e:06:7d:e2:67: 26:55:72:d5:21:5f:4f:a7:77:db:c3:73:8f:2d:4a: 59:f3:76:0a:ad:8d:56:43:90:a4:3b:b6:f2:2b:76: 7b:97:ee:71:3d:0e:3c:70:52:a7:22:e6:5d:df:c0: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:12:C3:2D:3F:C3:AA:C6:1C:57:88:06:BF:71:15:91:B6:11:69 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:2f:b5:9f:00:a2:e3:74:ba:d0:43:00:4e:0c:b4:0a:be: 2d:b7:36:f6:39:5f:50:97:9b:4e:e2:4a:be:2c:a2:11:d7:d3: 36:6b:24:48:cc:a9:31:91:a9:50:f5:24:78:ba:b9:7c:a7:29: 24:6c:53:0c:f7:83:ea:06:2e:35:27:ee:7b:07:a0:42:1a:21: 54:82:65:93:80:bb:ef:87:0f:b2:3c:e2:e9:b1:ac:1c:88:8a: de:e5:9e:54:ea:44:9c:6e:3c:fb:6c:43:cb:e6:99:d8:78:98: 62:2c:d0:b9:b3:d1:28:06:90:11:42:dd:8b:01:cb:c3:8c:c7: 71:9e:0d:79:7e:25:e0:3f:f7:e4:f6:ab:30:92:af:d9:40:97: 72:1b:1d:8d:47:c2:db:01:15:5f:03:c9:9b:26:25:69:c7:d5: 1f:f3:01:b0:d0:c5:61:6b:bb:7e:77:ad:d1:e1:58:e9:d3:09: 6d:e7:67:ed:04:88:df:8c:68:bc:53:10:a4:93:24:f4:2d:0a: fd:8a:ad:9a:90:41:6d:0b:01:79:b4:c2:7d:53:60:f3:21:14: 38:f5:d5:c2:49:56:98:f4:03:7e:d1:a8:99:91:aa:c2:3a:74: 60:f8:27:77:ca:e3:a6:2f:84:b7:3a:1d:83:45:2c:bc:a8:2f: 97:95:36:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY5M5cEhScBQf9Sh4cM+/40SzNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNjAyMjgwMTI2NTBaFw0yNjAzMDMxMjMxNTBaMDMxMTAvBgNV BAMTKDY3QUYxMkMzMkQzRkMzQUFDNjFDNTc4ODA2QkY3MTE1OTFCNjExNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dQLTtiP7SCxHk2qobPQtquTz agIn0YQl5V3k7Jzg7SvH27aURH3CnFtWgEqsS2fjjubEVZjKFGBbIJH2Jt++sQ5j 42Uh1aox70xGpYdlyPaiXOElN4FqGb+3p/1dV55/r+dKGplqNcCQ6MBj3GHcdsTU dQX0bltIqfdw64Oi9m4u7eu7WXrjt//4dxy7isTLrPNxgBLeaPt7laYaqJ0VmaXL W0+autmCaZePDezAD2gjpYkM/G2+lruMmpcK7NKvL6QFV0X30s1DeYGOBn3iZyZV ctUhX0+nd9vDc48tSlnzdgqtjVZDkKQ7tvIrdnuX7nE9DjxwUqci5l3fwKPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ68Swy0/w6rGHFeIBr9xFZG2EWkwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaBL7WfAKLjdLrQQwBODLQKvi23NvY5X1CX m07iSr4sohHX0zZrJEjMqTGRqVD1JHi6uXynKSRsUwz3g+oGLjUn7nsHoEIaIVSC ZZOAu++HD7I84umxrByIit7lnlTqRJxuPPtsQ8vmmdh4mGIs0Lmz0SgGkBFC3YsB y8OMx3GeDXl+JeA/9+T2qzCSr9lAl3IbHY1HwtsBFV8DyZsmJWnH1R/zAbDQxWFr u353rdHhWOnTCW3nZ+0EiN+MaLxTEKSTJPQtCv2KrZqQQW0LAXm0wn1TYPMhFDj1 1cJJVpj0A37RqJmRqsI6dGD4J3fK46YvhLc6HYNFLLyoL5eVNkA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:43:31 2026 by rpki-client