$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: QKJRs+RijJM4cEIHTBzoWhS1qFBQdrWMyO8tt8sJfes= Subject key identifier: 98:06:E7:EC:19:FD:FA:C7:D2:D2:50:D0:21:42:23:44:AB:1B:DA:A7 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 2C556CE1C5D4E57A58DEC0E3BD12BB33C02DCC41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: DD Signing time: Sun 01 Mar 2026 08:41:25 +0000 Manifest this update: Sun 01 Mar 2026 08:36:25 +0000 Manifest next update: Wed 04 Mar 2026 09:55:25 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) 2: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) 4: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: 7A4i3kFRKAghhe8tjqc1XbYL6zIhqnljx7QxV5ONjSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:55:6c:e1:c5:d4:e5:7a:58:de:c0:e3:bd:12:bb:33:c0:2d:cc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Mar 1 08:36:25 2026 GMT Not After : Mar 4 09:55:25 2026 GMT Subject: CN=9806E7EC19FDFAC7D2D250D021422344AB1BDAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:eb:4f:1b:5b:00:9a:e3:f1:f6:59:7f:01: 94:a4:5e:46:90:9d:43:bb:ac:9a:6c:8d:ca:a3:e0: 7d:17:69:63:eb:ed:9e:31:34:f0:4e:70:c8:3f:1d: 49:7b:c4:93:29:2d:9a:e8:ea:f6:e9:22:58:62:1e: ed:c1:cb:cb:9a:f4:ad:be:ca:f0:a2:4f:ab:3f:f4: 42:36:70:af:d5:2f:fa:0e:a9:c6:29:40:00:2a:38: d3:66:32:70:00:24:5f:0d:bf:43:b2:6b:e3:c9:06: a5:17:e7:f0:a6:76:75:a3:08:3e:ea:75:58:d8:63: 27:09:7c:09:2a:16:60:b4:3d:95:07:cc:6f:70:aa: e7:a8:bd:56:93:81:7c:f7:1e:03:02:04:00:7f:26: 37:e8:b6:12:53:0a:83:59:b3:f3:e8:da:06:f6:ee: 67:ae:f5:da:42:67:85:8c:bd:01:bf:e7:c4:d9:4d: 10:28:f7:da:91:72:53:29:1e:4d:25:df:bf:0f:9b: 30:85:ed:09:92:f6:41:fb:f7:c1:23:5d:59:ff:b9: 2c:81:eb:39:35:22:75:d6:d5:34:53:13:9a:6f:4b: 1d:fe:a7:9d:88:e2:84:e1:20:da:ad:02:31:6e:42: 86:5c:14:4d:9a:53:4d:92:2f:b8:54:6e:f6:24:42: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:06:E7:EC:19:FD:FA:C7:D2:D2:50:D0:21:42:23:44:AB:1B:DA:A7 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2d:14:9f:28:71:67:cb:2e:f3:fd:16:86:c2:95:db:ad:c1: 21:7d:e3:ed:07:a7:2a:25:24:cd:82:a5:bf:a6:18:f9:66:5d: 04:c0:4b:6f:c4:d9:fc:6a:eb:28:89:3f:69:64:d4:33:18:8d: d8:18:4a:f4:9b:87:ac:0e:8c:9b:63:4f:54:52:bc:c8:49:00: 74:90:b9:73:7f:3a:d4:ab:4a:de:46:e3:49:bd:1c:40:d9:3d: 7b:04:60:81:b0:2e:41:4e:16:8e:b4:f1:18:af:3a:0c:aa:15: e2:c8:51:6d:fc:55:ad:cc:a0:5c:2f:a6:83:4b:5b:90:27:4b: f3:0b:74:1d:67:6c:62:d9:67:f5:96:12:66:f5:72:d8:9e:6a: e8:d9:4b:86:67:d8:3d:3b:9a:64:c6:c5:98:35:00:46:ef:69: cd:b0:2e:cb:2f:77:49:e3:61:09:da:ac:d3:d6:61:69:f9:9f: 9c:46:1a:4a:3e:e0:b9:49:a0:1b:66:07:1a:53:c9:85:d0:8d: cc:b0:a3:e9:d2:e0:7e:fc:9b:f1:32:4f:32:e0:c1:92:82:c7: f2:9d:9c:69:af:80:ae:7e:f2:85:79:fa:5c:57:55:a7:38:f2: ba:57:67:42:d3:47:44:a0:63:0d:b3:ea:6f:1c:f5:cb:5b:d6: 86:24:bd:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFVs4cXU5XpY3sDjvRK7M8AtzEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNjAzMDEwODM2MjVaFw0yNjAzMDQwOTU1MjVaMDMxMTAvBgNV BAMTKDk4MDZFN0VDMTlGREZBQzdEMkQyNTBEMDIxNDIyMzQ0QUIxQkRBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOOtPG1sAmuPx9ll/AZSkXkaQ nUO7rJpsjcqj4H0XaWPr7Z4xNPBOcMg/HUl7xJMpLZro6vbpIlhiHu3By8ua9K2+ yvCiT6s/9EI2cK/VL/oOqcYpQAAqONNmMnAAJF8Nv0Oya+PJBqUX5/CmdnWjCD7q dVjYYycJfAkqFmC0PZUHzG9wqueovVaTgXz3HgMCBAB/JjfothJTCoNZs/Po2gb2 7meu9dpCZ4WMvQG/58TZTRAo99qRclMpHk0l378PmzCF7QmS9kH798EjXVn/uSyB 6zk1InXW1TRTE5pvSx3+p52I4oThINqtAjFuQoZcFE2aU02SL7hUbvYkQlkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmAbn7Bn9+sfS0lDQIUIjRKsb2qcwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwtFJ8ocWfLLvP9FobCldutwSF94+0Hpyol JM2Cpb+mGPlmXQTAS2/E2fxq6yiJP2lk1DMYjdgYSvSbh6wOjJtjT1RSvMhJAHSQ uXN/OtSrSt5G40m9HEDZPXsEYIGwLkFOFo608RivOgyqFeLIUW38Va3MoFwvpoNL W5AnS/MLdB1nbGLZZ/WWEmb1ctieaujZS4Zn2D07mmTGxZg1AEbvac2wLssvd0nj YQnarNPWYWn5n5xGGko+4LlJoBtmBxpTyYXQjcywo+nS4H78m/EyTzLgwZKCx/Kd nGmvgK5+8oV5+lxXVac48rpXZ0LTR0SgYw2z6m8c9ctb1oYkvSc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:49 2026 by rpki-client