$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: omRi+lhillANJRjHpJtZZsoEx9qCVV+HMwUfUdcZTp8= Subject key identifier: AD:77:20:66:B3:F6:51:13:A1:0C:53:4F:5E:70:62:5E:09:E2:07:5D Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 3FFCF3627D9AB77477C1BFEE9EF7C2918017D4B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: E8 Signing time: Fri 27 Feb 2026 20:11:00 +0000 Manifest this update: Fri 27 Feb 2026 20:06:00 +0000 Manifest next update: Tue 03 Mar 2026 06:17:00 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: uyY9/eIZJO7nMB9cM4rq998q+ak8bMhtGSuRSl6NNPM=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fc:f3:62:7d:9a:b7:74:77:c1:bf:ee:9e:f7:c2:91:80:17:d4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Feb 27 20:06:00 2026 GMT Not After : Mar 3 06:17:00 2026 GMT Subject: CN=AD772066B3F65113A10C534F5E70625E09E2075D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:fa:60:e0:0a:cf:c2:54:50:a0:04:20:e2: 44:24:e4:81:70:de:6b:1b:ae:54:b2:a4:2c:3f:c7: f0:03:02:bc:85:91:62:1d:ea:c4:f3:05:3b:10:6b: 01:ac:53:b2:a6:55:cd:d3:8c:34:fe:0e:2b:1b:7d: d8:bd:f5:b7:07:d1:da:91:f5:97:9c:be:a5:d4:c4: 50:9e:4b:1d:30:6e:a3:e7:6b:c3:bb:57:a0:8e:4a: be:e6:e8:17:18:99:5d:15:5d:c1:f5:61:bf:ef:20: c9:eb:05:64:0b:93:72:b7:f5:1a:59:21:7f:ba:2f: 03:82:16:2b:c0:8d:8b:0c:b4:be:7d:ff:b9:7d:77: 9b:fe:9d:22:06:06:92:68:52:bf:b6:d7:79:3e:aa: cd:96:e0:67:f4:e6:1e:d0:f8:9c:28:6f:21:0c:01: 15:a1:2a:3e:8d:25:82:34:77:0f:af:c3:98:71:d8: d1:4b:18:b4:68:d8:fe:98:e6:ca:ee:a4:06:6d:8e: 90:34:a8:b8:cf:55:fb:02:79:66:8a:d1:0a:7e:34: 92:e2:d2:87:91:ca:f2:8c:da:1b:eb:42:45:aa:cd: 62:25:c2:f9:aa:2b:f2:1e:b4:34:19:ff:fb:2c:0d: 0d:ec:31:3f:d8:2b:7a:c4:24:ec:84:f3:c7:bb:76: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:77:20:66:B3:F6:51:13:A1:0C:53:4F:5E:70:62:5E:09:E2:07:5D X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:48:c8:59:15:1b:3c:b6:0a:0a:10:ef:2e:73:3e:51:df: fc:b0:ee:55:ac:4a:52:dd:e0:17:97:07:56:ee:78:1a:e8:af: 7d:d4:a7:a9:8f:7f:32:53:fb:e9:e7:18:f6:91:30:00:f9:f5: 9f:e5:77:b9:6e:15:be:56:1a:6f:d5:87:9c:c4:3b:7d:57:89: bf:30:46:b3:95:5f:bb:db:73:d7:82:e5:5a:b2:ca:4f:9a:ff: 4b:07:8b:84:4b:4a:0b:0d:b5:0c:40:09:0b:24:83:12:e6:bb: 2f:ca:8b:f8:11:e6:37:69:ce:fe:33:74:85:18:52:bb:98:9c: 00:16:c3:c0:01:47:6f:b7:f8:27:f9:90:b4:7b:9e:8b:bb:c1: f4:f7:3b:56:fe:24:d3:82:eb:e2:73:ea:4e:ad:32:57:72:bf: cb:4a:61:fc:48:f8:c8:e9:34:17:92:1b:aa:f7:a7:af:f8:fd: 90:d1:64:f7:e6:08:96:09:79:5e:b8:2c:43:14:6c:84:b7:f6: ae:a2:2d:20:52:6a:44:8f:98:6e:69:49:63:62:69:4e:c8:4e: fe:03:94:7c:63:fe:f2:c6:66:28:ac:e4:65:78:52:7a:b5:1d: a5:e1:ce:6a:d7:0f:5c:e9:7b:5e:b8:ba:c8:4c:02:a5:a2:a3: 62:c1:f7:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/zzYn2at3R3wb/unvfCkYAX1LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNjAyMjcyMDA2MDBaFw0yNjAzMDMwNjE3MDBaMDMxMTAvBgNV BAMTKEFENzcyMDY2QjNGNjUxMTNBMTBDNTM0RjVFNzA2MjVFMDlFMjA3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGH/pg4ArPwlRQoAQg4kQk5IFw 3msbrlSypCw/x/ADAryFkWId6sTzBTsQawGsU7KmVc3TjDT+Disbfdi99bcH0dqR 9ZecvqXUxFCeSx0wbqPna8O7V6COSr7m6BcYmV0VXcH1Yb/vIMnrBWQLk3K39RpZ IX+6LwOCFivAjYsMtL59/7l9d5v+nSIGBpJoUr+213k+qs2W4Gf05h7Q+JwobyEM ARWhKj6NJYI0dw+vw5hx2NFLGLRo2P6Y5srupAZtjpA0qLjPVfsCeWaK0Qp+NJLi 0oeRyvKM2hvrQkWqzWIlwvmqK/IetDQZ//ssDQ3sMT/YK3rEJOyE88e7dhLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXcgZrP2UROhDFNPXnBiXgniB10wHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0PSMhZFRs8tgoKEO8ucz5R3/yw7lWsSlLd 4BeXB1bueBror33Up6mPfzJT++nnGPaRMAD59Z/ld7luFb5WGm/Vh5zEO31Xib8w RrOVX7vbc9eC5Vqyyk+a/0sHi4RLSgsNtQxACQskgxLmuy/Ki/gR5jdpzv4zdIUY UruYnAAWw8ABR2+3+Cf5kLR7nou7wfT3O1b+JNOC6+Jz6k6tMldyv8tKYfxI+Mjp NBeSG6r3p6/4/ZDRZPfmCJYJeV64LEMUbIS39q6iLSBSakSPmG5pSWNiaU7ITv4D lHxj/vLGZiis5GV4Unq1HaXhzmrXD1zpe164ushMAqWio2LB91Q= -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:40 2026 by rpki-client