$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: KJ3GCm6/6ig5Wif3lt/wAVDch4XRGHZhvyHmbKDQ+Zk= Subject key identifier: 2C:8A:EC:BB:2D:40:FB:E9:96:90:3D:5A:91:27:C9:F1:22:FE:2C:4F Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 7CAF3FAE7F702226AA2C3655E5CF96DFE6665B14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 052B Signing time: Mon 02 Mar 2026 15:42:09 +0000 Manifest this update: Mon 02 Mar 2026 15:37:09 +0000 Manifest next update: Thu 05 Mar 2026 20:46:09 +0000 Files and hashes: 1: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 2: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: LCi1weYpsHjqbHjmDdoyI35l96+t96YsB4f16htlxbU=) 3: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 4: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: yGL3fbWOIllDC9oHJQkNdksHzZhbjFnlidL2PiJcAmY=) 5: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 6: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:af:3f:ae:7f:70:22:26:aa:2c:36:55:e5:cf:96:df:e6:66:5b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Mar 2 15:37:09 2026 GMT Not After : Mar 5 20:46:09 2026 GMT Subject: CN=2C8AECBB2D40FBE996903D5A9127C9F122FE2C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:a5:95:19:79:ee:46:fd:68:7d:f5:10:fe: 87:cc:81:7c:c9:59:1b:d3:94:18:c9:37:95:01:86: 89:c9:68:fe:ab:88:25:b1:1e:1f:98:ee:b7:15:a1: 03:87:28:f8:a0:81:ec:69:c1:0f:68:3e:2a:88:04: e8:9d:d9:99:b4:a5:e9:42:37:ae:00:79:f8:b1:de: 53:34:33:79:8a:2d:c9:08:fc:ff:c7:a3:68:34:c3: d6:20:0c:90:58:ed:fd:3f:09:87:e7:0f:7b:24:8c: 17:d6:2f:d4:5a:9c:fd:0c:e7:12:92:6f:7b:06:6d: cf:fb:1d:70:c9:e8:10:87:0a:d4:d3:a0:f4:2e:3f: ba:52:c8:0c:1e:db:b5:69:58:ee:b1:9c:01:d7:cc: d1:f0:c1:83:11:04:8a:21:69:66:e2:5a:bd:2e:e7: 7e:ef:32:dd:fb:10:64:e5:bc:b0:4d:62:2e:a5:c7: ac:4c:e7:22:b5:1c:ac:c9:da:19:85:a3:4b:70:af: a3:d4:73:23:f7:92:7d:08:c8:7d:2e:7a:c1:67:bf: 91:73:e6:5b:33:70:83:1e:d8:4c:c5:2b:a3:23:da: 91:96:fe:2d:a1:ca:c8:79:f6:36:55:ac:5d:2d:2e: c0:ea:35:c9:20:c5:3e:ca:62:9c:00:06:6a:cd:1c: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:EC:BB:2D:40:FB:E9:96:90:3D:5A:91:27:C9:F1:22:FE:2C:4F X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a5:20:ac:f9:01:96:44:76:a3:64:2a:ed:a4:e6:df:3e:a8: db:8d:b0:b3:3b:f8:7a:20:6f:2c:e3:c4:d0:5b:8b:11:bf:d7: 23:1d:91:41:f0:51:f4:f0:12:a4:a1:82:4e:e3:90:69:c4:75: f9:98:ee:8d:bb:33:f4:a3:20:0e:ba:51:7e:77:9c:c7:ff:d8: 64:94:bc:c3:d7:e0:d6:99:05:f3:67:44:37:df:7d:81:00:77: 4f:70:da:d0:49:cc:8a:12:13:f0:2c:cc:53:6b:7c:a4:6a:aa: df:37:08:b0:21:81:1f:a4:20:92:ef:fe:18:de:2c:72:47:7f: 55:b3:41:cd:5d:4c:c1:ef:58:81:f2:2b:e5:31:49:4d:dc:f3: d6:12:c5:de:91:36:35:62:96:e7:0a:b8:5a:d4:45:9b:b5:d5: f3:b0:d6:7d:d0:5f:61:cb:1b:ec:6f:b1:60:95:b5:78:91:01: b7:94:27:ae:5d:47:d2:d6:fa:9a:8c:4b:0b:e6:a8:b2:8d:af: c7:42:72:0b:0d:aa:34:a8:af:4c:05:cc:fe:41:da:05:63:45: 70:20:88:53:7a:8e:d0:3f:ed:98:a4:68:90:aa:dd:7c:3a:b8: d2:e7:26:83:c0:9a:38:b6:7b:17:cf:7b:92:c4:06:c9:4d:e4: fa:50:ea:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfK8/rn9wIiaqLDZV5c+W3+ZmWxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNjAzMDIxNTM3MDlaFw0yNjAzMDUyMDQ2MDlaMDMxMTAvBgNV BAMTKDJDOEFFQ0JCMkQ0MEZCRTk5NjkwM0Q1QTkxMjdDOUYxMjJGRTJDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyqWVGXnuRv1offUQ/ofMgXzJ WRvTlBjJN5UBhonJaP6riCWxHh+Y7rcVoQOHKPiggexpwQ9oPiqIBOid2Zm0pelC N64Aefix3lM0M3mKLckI/P/Ho2g0w9YgDJBY7f0/CYfnD3skjBfWL9RanP0M5xKS b3sGbc/7HXDJ6BCHCtTToPQuP7pSyAwe27VpWO6xnAHXzNHwwYMRBIohaWbiWr0u 537vMt37EGTlvLBNYi6lx6xM5yK1HKzJ2hmFo0twr6PUcyP3kn0IyH0uesFnv5Fz 5lszcIMe2EzFK6Mj2pGW/i2hysh59jZVrF0tLsDqNckgxT7KYpwABmrNHK+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIrsuy1A++mWkD1akSfJ8SL+LE8wHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+lIKz5AZZEdqNkKu2k5t8+qNuNsLM7+Hog byzjxNBbixG/1yMdkUHwUfTwEqShgk7jkGnEdfmY7o27M/SjIA66UX53nMf/2GSU vMPX4NaZBfNnRDfffYEAd09w2tBJzIoSE/AszFNrfKRqqt83CLAhgR+kIJLv/hje LHJHf1WzQc1dTMHvWIHyK+UxSU3c89YSxd6RNjVilucKuFrURZu11fOw1n3QX2HL G+xvsWCVtXiRAbeUJ65dR9LW+pqMSwvmqLKNr8dCcgsNqjSor0wFzP5B2gVjRXAg iFN6jtA/7ZikaJCq3Xw6uNLnJoPAmji2exfPe5LEBslN5PpQ6kc= -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:14 2026 by rpki-client