$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: egcoFyaIDgOBOTGqQKM2nOMN9f7aHfb9kKMc2Qqc9ZQ= Subject key identifier: B2:D8:51:F9:2B:F7:53:E0:FA:01:2F:02:04:CB:DD:1B:FB:B5:65:7B Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 0F3B0CF0A913198BA4ED81CCF2671E96A7C9663D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 022D Signing time: Sat 28 Feb 2026 11:21:31 +0000 Manifest this update: Sat 28 Feb 2026 11:16:31 +0000 Manifest next update: Tue 03 Mar 2026 17:59:31 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: icotqE8ptK3UxuTfyvtQOKS5kzjux264RzgkwDsf7Zk=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3b:0c:f0:a9:13:19:8b:a4:ed:81:cc:f2:67:1e:96:a7:c9:66:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Feb 28 11:16:31 2026 GMT Not After : Mar 3 17:59:31 2026 GMT Subject: CN=B2D851F92BF753E0FA012F0204CBDD1BFBB5657B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:44:4c:8f:20:f6:ba:5f:a9:93:37:cb:ec: c7:57:4d:a6:dd:dd:82:af:30:c5:8d:95:15:7e:ad: 20:d8:27:7a:cd:94:26:6d:90:33:8d:88:74:4d:68: 64:94:23:f8:21:e5:01:86:f7:64:82:91:24:01:ff: 78:d3:af:89:24:68:ef:8f:3c:4a:d7:34:fc:1d:1a: 40:04:85:91:e2:eb:86:ed:45:0c:8b:ef:ff:d4:39: 45:ea:07:6f:ce:88:22:ec:ed:60:7b:52:cd:83:73: 7f:ef:c6:dc:d4:c5:6c:7d:67:17:d1:f6:a6:2f:a2: 26:ca:c2:d1:f4:3f:05:f4:6a:3d:e5:f1:cb:25:c6: 73:c0:ab:08:8f:13:b3:30:7c:8c:3f:fb:f2:21:74: 02:ac:c5:8a:b8:0f:4d:80:b7:18:79:ac:94:35:75: a2:8c:0c:57:4d:8f:58:c6:9c:27:33:07:4f:ab:c6: 57:c1:4e:07:1b:b1:85:37:54:5a:cb:64:b7:a1:02: ef:ae:8e:92:e6:73:2b:1b:42:ab:0d:4b:45:c1:fe: 88:6f:c5:b8:a8:5a:55:8c:21:16:66:d8:41:a4:6e: 18:d3:e9:97:e5:12:e2:9c:9c:28:2d:f0:e4:07:af: 1b:32:d6:28:e7:83:10:be:21:fb:53:dd:b1:a5:33: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:51:F9:2B:F7:53:E0:FA:01:2F:02:04:CB:DD:1B:FB:B5:65:7B X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:16:7e:47:a0:7d:a8:96:4c:42:05:26:a7:72:a0:ab:07: d9:98:5d:0c:11:b5:36:a7:20:30:37:25:d6:ef:c4:bf:a3:b5: a0:2b:4a:b1:f9:1f:44:5a:11:89:cb:c7:9b:f2:57:27:2e:e3: 4d:24:f5:f8:eb:3b:1c:60:8a:83:80:06:76:97:ce:97:e3:48: 0c:64:52:d0:a5:43:f2:de:8f:e5:40:bc:24:43:ca:0c:17:d2: e3:3c:68:07:67:be:67:03:78:3f:e2:ab:5b:ca:31:c8:95:44: 1d:78:b3:d0:93:a5:a7:c0:87:b0:95:e6:6a:29:ec:3b:e5:d3: b6:78:d5:16:57:18:6a:13:6b:79:59:01:62:7d:2a:f5:6f:15: d8:bc:e6:60:2e:fa:66:95:cc:48:8a:6d:1e:bb:62:31:1f:48: bc:65:ac:5c:f7:b8:84:0b:8d:a9:6b:23:0c:cb:f0:70:fd:ce: 0f:a1:f9:02:fd:d9:ea:99:da:f4:18:18:79:ef:ba:c3:47:e9: 4f:15:ce:45:7e:b8:ab:1c:5d:78:c4:6e:12:32:3b:34:e6:de: c1:1d:61:e5:6b:38:92:36:22:b9:eb:87:d7:92:aa:dc:4b:21: f5:6a:2e:f0:fd:24:37:94:6d:fb:42:8b:e8:57:cf:a8:95:a6: bf:4e:33:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzsM8KkTGYuk7YHM8mcelqfJZj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNjAyMjgxMTE2MzFaFw0yNjAzMDMxNzU5MzFaMDMxMTAvBgNV BAMTKEIyRDg1MUY5MkJGNzUzRTBGQTAxMkYwMjA0Q0JERDFCRkJCNTY1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg20RMjyD2ul+pkzfL7MdXTabd 3YKvMMWNlRV+rSDYJ3rNlCZtkDONiHRNaGSUI/gh5QGG92SCkSQB/3jTr4kkaO+P PErXNPwdGkAEhZHi64btRQyL7//UOUXqB2/OiCLs7WB7Us2Dc3/vxtzUxWx9ZxfR 9qYvoibKwtH0PwX0aj3l8cslxnPAqwiPE7MwfIw/+/IhdAKsxYq4D02Atxh5rJQ1 daKMDFdNj1jGnCczB0+rxlfBTgcbsYU3VFrLZLehAu+ujpLmcysbQqsNS0XB/ohv xbioWlWMIRZm2EGkbhjT6ZflEuKcnCgt8OQHrxsy1ijngxC+IftT3bGlM13TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsthR+Sv3U+D6AS8CBMvdG/u1ZXswHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI2Fn5HoH2olkxCBSancqCrB9mYXQwRtTan IDA3JdbvxL+jtaArSrH5H0RaEYnLx5vyVycu400k9fjrOxxgioOABnaXzpfjSAxk UtClQ/Lej+VAvCRDygwX0uM8aAdnvmcDeD/iq1vKMciVRB14s9CTpafAh7CV5mop 7Dvl07Z41RZXGGoTa3lZAWJ9KvVvFdi85mAu+maVzEiKbR67YjEfSLxlrFz3uIQL jalrIwzL8HD9zg+h+QL92eqZ2vQYGHnvusNH6U8VzkV+uKscXXjEbhIyOzTm3sEd YeVrOJI2Irnrh9eSqtxLIfVqLvD9JDeUbftCi+hXz6iVpr9OM8E= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:19 2026 by rpki-client