$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: Np+GCv5Yut/PJDFA+TMW9HDatloEIJ9lenZQ0O4pgr4= Subject key identifier: 61:F5:42:17:D9:AA:E2:56:AB:0D:54:E3:41:DD:D2:3C:4B:3F:81:EB Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 65D2CE8757CE91FAF8C57D082F2304343068475A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 023D Signing time: Sun 01 Mar 2026 02:52:40 +0000 Manifest this update: Sun 01 Mar 2026 02:47:40 +0000 Manifest next update: Wed 04 Mar 2026 06:34:40 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: +ggiOfxEwhN7S4eScziqBdJamhHRiHcmaQlPvvEl8AM=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d2:ce:87:57:ce:91:fa:f8:c5:7d:08:2f:23:04:34:30:68:47:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Mar 1 02:47:40 2026 GMT Not After : Mar 4 06:34:40 2026 GMT Subject: CN=61F54217D9AAE256AB0D54E341DDD23C4B3F81EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:4f:f2:85:3a:86:f8:c7:43:43:a0:6d:ff: 28:a5:06:44:c0:cc:b3:4e:ae:0a:b4:05:55:ed:b2: bc:c0:37:58:ac:3c:7f:a6:b4:2b:42:02:4a:e0:8b: 23:f3:e8:0f:8b:96:ab:37:91:48:a4:a7:e5:f7:34: b3:c9:3c:d7:ca:3e:fb:99:4f:c0:35:e5:46:09:4b: 41:6d:1b:5e:7f:81:4f:59:c4:ba:4c:74:a3:e7:9a: a7:72:95:e3:88:e1:48:1b:74:06:ed:28:f6:b1:12: eb:aa:2d:18:81:58:88:56:15:de:99:34:69:8e:05: 57:7e:96:a6:a7:a0:ba:21:6b:a9:75:55:05:b4:01: b6:be:bf:cc:31:a3:00:42:a5:c8:98:c3:0f:13:51: af:4a:62:fc:29:0c:17:1b:3b:04:08:48:46:46:55: 4b:c2:31:6c:dd:0b:94:66:65:0d:08:f1:15:59:b5: b1:66:3a:fe:fe:37:26:d9:f9:85:0b:5f:0a:93:65: 74:e8:8d:ff:9b:2f:e2:6b:b8:3b:20:97:a0:a6:c7: a0:46:29:99:13:62:fa:be:98:51:08:9c:94:23:7d: bd:e4:2e:10:83:d0:35:78:2a:d6:db:c7:7c:83:5a: d9:6a:7c:43:99:90:8b:b3:0f:c5:6d:2d:64:2b:41: 77:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:42:17:D9:AA:E2:56:AB:0D:54:E3:41:DD:D2:3C:4B:3F:81:EB X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0f:a8:5f:52:99:b8:69:1f:f1:5c:41:92:66:fd:95:3b:a2: c5:29:7b:35:9c:86:e8:82:08:3e:f8:6d:d6:d9:77:9d:c6:06: 3f:c2:9b:3f:27:e3:cb:17:b5:15:a2:4d:0b:0c:37:89:56:0f: 57:f9:f2:b8:53:3c:28:ac:40:35:e5:5c:b2:9f:66:a4:1f:79: 76:a1:3d:6a:03:a3:c1:bf:6d:52:a8:7c:f7:00:47:eb:1e:31: ad:59:78:54:7f:b3:7c:d4:2d:39:96:ae:28:49:98:f2:55:56: 43:b6:90:20:8c:ea:7c:62:0d:1b:dd:e7:2a:29:6b:44:b1:4e: 7b:d4:cc:c8:81:14:36:99:e6:10:95:52:ca:7b:92:d9:74:25: 03:8e:aa:6f:24:54:48:72:85:f1:7f:95:b0:42:c2:33:db:02: 9a:55:cd:b4:37:67:31:ff:37:c7:96:4e:a9:4c:cf:5e:7b:7f: b0:9a:76:49:05:af:86:88:f0:61:0e:ae:64:00:56:d7:74:08: fc:9f:55:5d:99:65:97:20:85:82:41:f6:eb:4b:d7:a5:78:b3: 88:ef:7c:98:99:67:ea:20:43:48:32:e6:5e:48:34:4b:35:a4: 08:b5:63:31:be:08:44:03:d1:6d:7f:34:0e:ea:d0:df:dc:93: 2c:0c:8c:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdLOh1fOkfr4xX0ILyMENDBoR1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNjAzMDEwMjQ3NDBaFw0yNjAzMDQwNjM0NDBaMDMxMTAvBgNV BAMTKDYxRjU0MjE3RDlBQUUyNTZBQjBENTRFMzQxREREMjNDNEIzRjgxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRU/yhTqG+MdDQ6Bt/yilBkTA zLNOrgq0BVXtsrzAN1isPH+mtCtCAkrgiyPz6A+Llqs3kUikp+X3NLPJPNfKPvuZ T8A15UYJS0FtG15/gU9ZxLpMdKPnmqdyleOI4UgbdAbtKPaxEuuqLRiBWIhWFd6Z NGmOBVd+lqanoLoha6l1VQW0Aba+v8wxowBCpciYww8TUa9KYvwpDBcbOwQISEZG VUvCMWzdC5RmZQ0I8RVZtbFmOv7+NybZ+YULXwqTZXTojf+bL+JruDsgl6Cmx6BG KZkTYvq+mFEInJQjfb3kLhCD0DV4Ktbbx3yDWtlqfEOZkIuzD8VtLWQrQXcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYfVCF9mq4larDVTjQd3SPEs/geswHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIPqF9SmbhpH/FcQZJm/ZU7osUpezWchuiC CD74bdbZd53GBj/Cmz8n48sXtRWiTQsMN4lWD1f58rhTPCisQDXlXLKfZqQfeXah PWoDo8G/bVKofPcAR+seMa1ZeFR/s3zULTmWrihJmPJVVkO2kCCM6nxiDRvd5yop a0SxTnvUzMiBFDaZ5hCVUsp7ktl0JQOOqm8kVEhyhfF/lbBCwjPbAppVzbQ3ZzH/ N8eWTqlMz157f7CadkkFr4aI8GEOrmQAVtd0CPyfVV2ZZZcghYJB9utL16V4s4jv fJiZZ+ogQ0gy5l5INEs1pAi1YzG+CEQD0W1/NA7q0N/ckywMjGo= -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:54 2026 by rpki-client