$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: v/FQoe+hFTux6GVg+WzGt+tGbqg3SJxi1lok/JMH5Zg= Subject key identifier: 33:8E:0D:49:D4:5D:36:0A:71:BA:F7:10:E1:4D:84:37:12:E9:3C:CD Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 5B0BF5DCAE4AFD67A7D215E59983D0FC20E0B5A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0271 Signing time: Sun 01 Mar 2026 06:21:45 +0000 Manifest this update: Sun 01 Mar 2026 06:16:45 +0000 Manifest next update: Wed 04 Mar 2026 10:37:45 +0000 Files and hashes: 1: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: d3HjfIySnCosCtkHRrSAssYsXxDOLN3ucp2WcnsqVbs=) 2: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 3: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 4: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 5: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 6: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0b:f5:dc:ae:4a:fd:67:a7:d2:15:e5:99:83:d0:fc:20:e0:b5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Mar 1 06:16:45 2026 GMT Not After : Mar 4 10:37:45 2026 GMT Subject: CN=338E0D49D45D360A71BAF710E14D843712E93CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:3a:92:d7:e7:49:6f:5a:39:ec:fa:bc:81: ce:70:88:b1:6b:ac:00:d1:67:6d:44:95:aa:6a:84: e1:7a:93:4f:dc:1a:62:fd:80:f3:a2:44:e8:60:90: 1f:c5:33:dd:99:1f:bd:cd:40:38:e5:55:a6:e7:48: e9:a0:35:43:51:61:db:52:54:53:19:1f:7b:7d:7f: 1b:2b:3d:40:ed:b1:c3:40:7d:20:41:4c:67:0e:04: 9c:0b:0a:29:f8:9d:ba:9d:2c:51:77:af:ea:39:1c: 88:14:46:ee:fd:42:4d:5c:a0:21:e2:6b:bc:e3:9b: a5:61:94:66:90:f7:e7:3a:7a:13:eb:a5:7a:d0:63: 72:23:35:7b:a2:d9:f9:22:eb:2f:2f:f7:b5:a3:4f: cf:b7:68:3a:55:f1:0f:27:b8:90:c3:ea:a5:2f:3d: ff:7f:a7:05:00:aa:2e:1d:2c:bd:57:d8:f8:79:e9: 1e:64:ca:55:cb:16:67:ca:97:21:e2:9b:90:b5:e6: 94:42:42:cd:bd:ac:5a:fb:8f:99:9c:59:e3:b1:ad: 1a:47:9b:84:1c:2b:05:94:b2:48:18:06:5e:a6:ef: be:cb:02:23:13:5b:8e:76:3d:46:45:5f:08:27:d2: 99:1b:4b:37:1c:e5:1c:36:d1:b4:7a:aa:33:4f:02: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8E:0D:49:D4:5D:36:0A:71:BA:F7:10:E1:4D:84:37:12:E9:3C:CD X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:67:9f:d5:e1:49:e6:52:99:97:5b:51:5d:7b:55:08:fb:fa: 79:d3:27:b0:27:ab:8a:23:71:e5:39:12:fa:01:a0:83:a0:a1: 76:05:ba:e4:4e:db:b1:72:8f:3b:b0:67:57:7d:e0:9c:a1:c4: af:b0:e1:5a:4a:df:35:30:fb:b8:a5:db:f5:e1:78:71:5d:26: 5c:77:de:ca:e4:7f:af:cf:1f:cc:c9:82:0a:a3:87:37:cf:7e: 11:d1:11:43:5b:e9:20:5e:e9:41:14:f2:f5:f8:7a:9a:fc:f5: dd:9c:ee:3d:77:1f:49:ba:19:52:10:ce:b7:d3:c4:42:c2:4c: ef:03:50:08:36:09:a5:82:0c:38:65:a6:4a:61:bf:70:11:f5: c7:b1:1e:e7:c2:79:e0:44:ed:bd:e7:f4:ab:db:e7:7f:f9:8c: a4:8b:d0:df:d8:e1:77:7d:e5:8f:9b:3e:f7:7d:6b:f0:eb:9a: 65:a8:54:33:11:46:15:69:52:3d:d9:fe:ca:67:d9:5d:f1:85: 28:9f:ea:86:4f:8d:84:9e:f9:a0:30:75:21:17:8a:ba:a2:76: d2:fb:72:35:c8:98:40:28:b1:c6:2b:a3:cc:fb:35:18:e8:88: f9:0e:5c:67:8f:62:01:ad:1a:c2:90:b6:71:f1:78:61:05:71: 77:63:e4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwv13K5K/Wen0hXlmYPQ/CDgtaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNjAzMDEwNjE2NDVaFw0yNjAzMDQxMDM3NDVaMDMxMTAvBgNV BAMTKDMzOEUwRDQ5RDQ1RDM2MEE3MUJBRjcxMEUxNEQ4NDM3MTJFOTNDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMzqS1+dJb1o57Pq8gc5wiLFr rADRZ21ElapqhOF6k0/cGmL9gPOiROhgkB/FM92ZH73NQDjlVabnSOmgNUNRYdtS VFMZH3t9fxsrPUDtscNAfSBBTGcOBJwLCin4nbqdLFF3r+o5HIgURu79Qk1coCHi a7zjm6VhlGaQ9+c6ehPrpXrQY3IjNXui2fki6y8v97WjT8+3aDpV8Q8nuJDD6qUv Pf9/pwUAqi4dLL1X2Ph56R5kylXLFmfKlyHim5C15pRCQs29rFr7j5mcWeOxrRpH m4QcKwWUskgYBl6m777LAiMTW452PUZFXwgn0pkbSzcc5Rw20bR6qjNPAntPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM44NSdRdNgpxuvcQ4U2ENxLpPM0wHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJnn9XhSeZSmZdbUV17VQj7+nnTJ7Anq4oj ceU5EvoBoIOgoXYFuuRO27FyjzuwZ1d94JyhxK+w4VpK3zUw+7il2/XheHFdJlx3 3srkf6/PH8zJggqjhzfPfhHREUNb6SBe6UEU8vX4epr89d2c7j13H0m6GVIQzrfT xELCTO8DUAg2CaWCDDhlpkphv3AR9cexHufCeeBE7b3n9Kvb53/5jKSL0N/Y4Xd9 5Y+bPvd9a/DrmmWoVDMRRhVpUj3Z/spn2V3xhSif6oZPjYSe+aAwdSEXirqidtL7 cjXImEAoscYro8z7NRjoiPkOXGePYgGtGsKQtnHxeGEFcXdj5Nk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:43:20 2026 by rpki-client