$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: KJApEj5SAwc9us/46NEg5BqcX+2kignegTn1tRPYl68= Subject key identifier: 06:B8:B5:83:0B:E1:3A:E3:67:FA:AA:FC:AB:42:FD:EB:D5:02:B1:30 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 4EEBEFA8547BD06DB1D4B9D5DEDABBC2892EA0DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01DD Signing time: Sun 01 Mar 2026 04:11:54 +0000 Manifest this update: Sun 01 Mar 2026 04:06:54 +0000 Manifest next update: Wed 04 Mar 2026 08:31:54 +0000 Files and hashes: 1: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: EBe/sD7Hx7pr5/YWkt08WDKKjv5m3Lt29e6U74SEC58=) 2: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: 2+rMUTRr6geT36w1LGs/+72amdtzbZ4S57uwVaFP0y0=) 3: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: ct+DOZjTg6HlumxD8dP014jWapOHq8Dy/EadsYOLkOI=) 4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: JbsU6wwYGkCof1Bi7HjS1vBbLGm7iyh5iGfgHGG7xPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:eb:ef:a8:54:7b:d0:6d:b1:d4:b9:d5:de:da:bb:c2:89:2e:a0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Mar 1 04:06:54 2026 GMT Not After : Mar 4 08:31:54 2026 GMT Subject: CN=06B8B5830BE13AE367FAAAFCAB42FDEBD502B130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:fe:0e:f9:6d:cf:60:31:38:c5:22:f4:f8: 39:bc:e1:e6:bc:53:a9:01:e6:d0:59:33:12:88:18: c4:e1:66:ea:65:e4:64:7e:4f:c3:2a:9d:45:39:96: 2b:4c:26:cc:55:12:24:87:d1:53:28:96:73:53:45: c6:da:71:23:0d:b6:9e:f6:09:71:dc:94:d2:6c:bb: 66:fa:49:09:c7:e8:53:0a:f4:91:9c:2e:d7:da:65: 74:15:e5:1f:3e:40:e0:83:29:a9:c7:c4:95:56:2d: 8f:ab:0e:12:6b:cd:db:7e:92:0d:25:96:70:a8:bd: 64:3a:74:5e:56:d0:03:ee:eb:8d:93:50:fa:79:f6: 33:ec:e4:b6:c7:72:24:1d:fb:4a:64:99:40:c3:73: 9b:bc:53:3b:83:85:65:67:c4:d2:b5:2b:11:90:00: 9e:a9:8a:5b:7e:45:e3:4f:c4:a4:d8:4d:9a:18:59: 91:43:a0:cb:a6:13:df:4b:e2:f0:5d:4b:69:8d:1f: 2c:b5:51:2e:73:c4:69:64:19:e1:d6:6e:d5:d8:5c: e8:6d:ad:4c:74:7a:81:f0:11:d6:8b:cf:85:31:2d: 8f:76:6f:e7:f3:23:92:e2:f1:14:1e:22:84:5d:12: 1b:fe:44:11:a3:2f:90:72:c6:0e:cc:34:7c:a4:89: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B8:B5:83:0B:E1:3A:E3:67:FA:AA:FC:AB:42:FD:EB:D5:02:B1:30 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:93:d3:0b:e0:14:3d:5e:63:bd:ba:47:59:e6:eb:c4:51:fc: 76:c0:ff:5c:19:56:7a:8d:d4:07:e7:81:18:96:aa:d3:ea:9c: 43:87:69:ed:4c:99:a9:f0:48:fd:15:17:01:38:36:fe:00:6d: 27:ec:34:cf:4b:79:a8:e6:53:d7:a0:00:36:fc:b7:07:b9:36: 9b:de:eb:ba:22:b9:bf:f5:6e:d5:e6:69:07:ca:1f:4d:ee:d1: d0:a1:c3:0a:84:97:24:72:31:1a:27:b3:c1:84:5a:a9:77:eb: c9:3b:56:2a:c8:fe:29:8d:4f:93:1f:1e:3e:f6:0c:e0:78:b1: a5:87:5e:b6:31:d7:aa:a6:3e:40:78:15:36:f3:fd:f0:41:03: 99:5a:7e:8a:ba:7f:5d:10:82:b2:d9:1f:ff:c8:29:36:d6:08: 7c:00:42:f6:39:63:96:2f:a2:58:5f:f4:06:46:f1:7f:29:df: 0e:38:ef:f2:6d:c8:41:b0:1e:bb:47:b5:e5:6d:e7:77:39:6d: 74:66:63:d0:4d:41:62:7a:59:16:cf:bc:7d:d6:0d:6c:a5:8e: ac:16:75:a7:a7:60:15:26:a3:d1:21:13:ca:21:26:4d:ca:14: 6f:87:a6:d9:a0:c2:ef:54:2b:cf:62:5b:7a:3b:a3:c0:70:77: 3f:64:4e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuvvqFR70G2x1LnV3tq7wokuoNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNjAzMDEwNDA2NTRaFw0yNjAzMDQwODMxNTRaMDMxMTAvBgNV BAMTKDA2QjhCNTgzMEJFMTNBRTM2N0ZBQUFGQ0FCNDJGREVCRDUwMkIxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3av4O+W3PYDE4xSL0+Dm84ea8 U6kB5tBZMxKIGMThZupl5GR+T8MqnUU5litMJsxVEiSH0VMolnNTRcbacSMNtp72 CXHclNJsu2b6SQnH6FMK9JGcLtfaZXQV5R8+QOCDKanHxJVWLY+rDhJrzdt+kg0l lnCovWQ6dF5W0APu642TUPp59jPs5LbHciQd+0pkmUDDc5u8UzuDhWVnxNK1KxGQ AJ6pilt+ReNPxKTYTZoYWZFDoMumE99L4vBdS2mNHyy1US5zxGlkGeHWbtXYXOht rUx0eoHwEdaLz4UxLY92b+fzI5Li8RQeIoRdEhv+RBGjL5Byxg7MNHykif3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBri1gwvhOuNn+qr8q0L969UCsTAwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeT0wvgFD1eY726R1nm68RR/HbA/1wZVnqN 1AfngRiWqtPqnEOHae1MmanwSP0VFwE4Nv4AbSfsNM9LeajmU9egADb8twe5Npve 67oiub/1btXmaQfKH03u0dChwwqElyRyMRons8GEWql368k7VirI/imNT5MfHj72 DOB4saWHXrYx16qmPkB4FTbz/fBBA5lafoq6f10QgrLZH//IKTbWCHwAQvY5Y5Yv olhf9AZG8X8p3w447/JtyEGwHrtHteVt53c5bXRmY9BNQWJ6WRbPvH3WDWyljqwW daenYBUmo9EhE8ohJk3KFG+Hptmgwu9UK89iW3o7o8Bwdz9kToU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:11:17 2026 by rpki-client