$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: NED2i9NUVhLdjlOMO7y094pXvUSWuploUlz5G+X8gq0= Subject key identifier: E2:B1:C0:18:59:A7:14:C0:22:ED:BC:01:BC:1A:A3:0B:97:DA:18:F2 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 4A385ED50ADDC745DBD1394E7C83E57D8DB5D4AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0155 Signing time: Sat 28 Feb 2026 08:30:04 +0000 Manifest this update: Sat 28 Feb 2026 08:25:04 +0000 Manifest next update: Tue 03 Mar 2026 12:08:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: VM6w95dNrIfcygzc4QkurrwBj9IUOlrYb6VVp2oS4Dg=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:38:5e:d5:0a:dd:c7:45:db:d1:39:4e:7c:83:e5:7d:8d:b5:d4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Feb 28 08:25:04 2026 GMT Not After : Mar 3 12:08:04 2026 GMT Subject: CN=E2B1C01859A714C022EDBC01BC1AA30B97DA18F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:22:f9:ca:f6:93:4e:ff:4d:b4:d6:3a:7c:69: 8b:b5:0e:64:c8:42:80:31:e5:37:9c:69:64:5f:7a: bd:8b:a3:0a:fc:0d:0a:f1:80:62:a1:ba:e0:67:dc: fb:7d:da:88:4f:44:7f:a4:cb:c7:49:37:8d:75:35: ce:db:5c:75:37:1d:56:d7:c5:a8:a3:04:dd:b7:ed: a9:72:37:50:96:df:7a:97:06:2e:9d:db:30:9a:18: 1c:63:9c:1e:31:e3:0c:f0:db:dc:cb:f8:26:29:07: 5c:61:48:1e:21:c6:d8:a4:1a:69:d6:32:de:10:7f: 2c:68:1b:46:44:e0:b2:3d:33:04:b9:13:bf:98:75: ac:40:6d:b1:39:22:9b:da:1f:12:d7:68:31:1e:cc: 5b:db:e0:76:07:28:a9:8d:f6:b8:82:78:1d:c9:1a: 53:2f:6b:39:5e:b5:e9:d4:57:be:96:39:74:5e:cd: 98:c7:5d:d5:51:aa:14:a2:2f:a5:bc:9b:55:2e:33: b1:75:85:c4:93:18:0b:6d:be:c4:79:90:cc:6e:46: 9b:14:43:75:c2:0a:ce:0f:34:c0:8c:4f:ea:17:1b: 5b:ad:53:7e:5e:ac:c2:23:76:30:b5:84:03:e8:1e: fd:60:39:a0:de:3c:4a:dd:91:5f:44:f9:48:a8:07: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:C0:18:59:A7:14:C0:22:ED:BC:01:BC:1A:A3:0B:97:DA:18:F2 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:48:17:95:ec:10:c3:fe:9d:8d:da:73:0d:22:b0:84:db:aa: 3c:3b:65:b0:f9:44:6a:77:4e:c0:71:b0:7c:78:82:06:1c:e5: 28:e6:ea:59:b8:ec:45:d5:24:72:ac:5d:b2:a2:f7:37:a4:6f: 79:0c:b8:4d:7f:10:b0:c0:40:72:6a:53:22:95:86:3b:d3:c2: 98:17:07:fd:c2:c7:7c:e6:d4:26:6e:20:11:d7:39:0e:1f:05: cb:1b:08:d4:07:f2:c9:51:8b:29:36:1f:9d:a6:b6:33:16:3a: bc:7b:9b:8f:76:82:e6:40:72:26:65:3c:00:2a:4a:79:19:30: 40:9f:9e:24:01:21:44:d2:14:63:5b:91:92:84:48:f7:2f:1b: 6f:93:89:95:2b:af:21:93:1a:a6:72:fd:04:3b:d8:4c:90:5b: ba:de:4c:ed:40:5f:93:da:de:d3:90:d7:f7:03:a1:a2:22:9e: 5b:e6:13:55:dd:89:cd:fa:ae:d8:98:da:0e:c6:5c:e7:f2:8d: 5f:f9:7a:0f:ce:53:94:d6:6a:c1:fe:a1:62:f7:af:95:3f:5a: 70:56:dd:f5:1d:25:e1:33:39:09:bd:ae:b7:f6:8c:22:39:40: 35:5d:ff:96:a4:88:a7:d7:19:5f:43:84:17:4d:60:51:eb:48: 7c:76:90:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjhe1Qrdx0Xb0TlOfIPlfY211KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNjAyMjgwODI1MDRaFw0yNjAzMDMxMjA4MDRaMDMxMTAvBgNV BAMTKEUyQjFDMDE4NTlBNzE0QzAyMkVEQkMwMUJDMUFBMzBCOTdEQTE4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0IvnK9pNO/0201jp8aYu1DmTI QoAx5TecaWRfer2Lowr8DQrxgGKhuuBn3Pt92ohPRH+ky8dJN411Nc7bXHU3HVbX xaijBN237alyN1CW33qXBi6d2zCaGBxjnB4x4wzw29zL+CYpB1xhSB4hxtikGmnW Mt4QfyxoG0ZE4LI9MwS5E7+YdaxAbbE5IpvaHxLXaDEezFvb4HYHKKmN9riCeB3J GlMvazletenUV76WOXRezZjHXdVRqhSiL6W8m1UuM7F1hcSTGAttvsR5kMxuRpsU Q3XCCs4PNMCMT+oXG1utU35erMIjdjC1hAPoHv1gOaDePErdkV9E+UioB5bxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4rHAGFmnFMAi7bwBvBqjC5faGPIwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFIF5XsEMP+nY3acw0isITbqjw7ZbD5RGp3 TsBxsHx4ggYc5Sjm6lm47EXVJHKsXbKi9zekb3kMuE1/ELDAQHJqUyKVhjvTwpgX B/3Cx3zm1CZuIBHXOQ4fBcsbCNQH8slRiyk2H52mtjMWOrx7m492guZAciZlPAAq SnkZMECfniQBIUTSFGNbkZKESPcvG2+TiZUrryGTGqZy/QQ72EyQW7reTO1AX5Pa 3tOQ1/cDoaIinlvmE1Xdic36rtiY2g7GXOfyjV/5eg/OU5TWasH+oWL3r5U/WnBW 3fUdJeEzOQm9rrf2jCI5QDVd/5akiKfXGV9DhBdNYFHrSHx2kP0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:28 2026 by rpki-client