$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: Wry9lLTrnuIgyyS9uay7q/g0+9qmCEC3rCHdBpLxx58= Subject key identifier: A9:6A:EB:E6:B5:D0:3F:05:1A:40:9C:84:5C:16:41:6B:57:D6:FA:F9 Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 0D6421BBA0863C846B134D5DDF68255C152A3861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: 0142 Signing time: Sat 28 Feb 2026 16:32:25 +0000 Manifest this update: Sat 28 Feb 2026 16:27:25 +0000 Manifest next update: Wed 04 Mar 2026 04:12:25 +0000 Files and hashes: 1: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: D1tp+MoN60deNjBNLRApVJU372Dcrx+y8ibjwaedoeU=) 2: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: P7Y8t8QlzVHnPDCRyEAdHrWqFac2Md1CGzVdP33gimk=) 3: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: 7xhwBLoxBcZfSoTZvdUTvLkraKKygpQjYGPK+6LQ1oA=) 4: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: QrSBRaxGaWU8ZoD0zYmeD1ZaWtynoFSmr/bVUUg5r5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:64:21:bb:a0:86:3c:84:6b:13:4d:5d:df:68:25:5c:15:2a:38:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Feb 28 16:27:25 2026 GMT Not After : Mar 4 04:12:25 2026 GMT Subject: CN=A96AEBE6B5D03F051A409C845C16416B57D6FAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:ef:3e:ad:bc:3e:33:f7:26:d3:df:86:59: 64:6b:9c:7c:6e:15:b4:6f:76:6e:e9:88:0b:bd:f1: d6:9a:9e:1d:41:af:6d:82:04:af:61:d1:ab:ed:88: 4a:44:d0:b7:71:05:6a:86:e3:45:d2:56:8f:c2:c5: 57:9b:74:c7:8e:55:c0:e8:a6:d0:2b:3a:a7:48:75: b2:17:e2:d2:02:23:b5:25:23:58:f6:87:62:80:47: b1:79:ea:39:7b:6e:73:a8:1b:35:6d:74:ff:74:23: af:c2:28:a3:64:26:6f:b3:e3:6d:ca:9d:16:40:bb: 47:e6:10:d9:75:ed:3b:80:cb:ab:53:c9:92:83:94: 60:7c:8d:a3:8e:e9:94:3e:4c:ec:de:68:a2:a1:c0: 0a:d6:58:aa:d7:7e:a3:f4:9a:98:72:a5:ac:51:e3: 4c:ad:bc:95:6f:11:5f:a1:24:69:87:64:f0:17:cc: 79:6f:39:50:21:a8:c0:d2:95:09:65:46:5b:1b:3e: 49:ef:fb:10:1e:38:9e:bf:d8:12:73:4e:1d:78:f4: ee:c8:5b:f9:83:1a:75:9c:80:a5:4c:5e:96:da:b3: 33:bf:13:68:49:1d:05:1f:50:81:3a:f8:73:a6:05: 60:c2:c5:5e:05:a3:78:20:7d:70:d6:38:a7:14:d4: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6A:EB:E6:B5:D0:3F:05:1A:40:9C:84:5C:16:41:6B:57:D6:FA:F9 X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:af:7e:d0:c4:b3:aa:1a:9a:94:6f:a2:d3:de:27:74:d8:fc: b3:3a:5a:6c:55:a0:55:84:ba:44:93:0e:72:80:e6:48:8a:3c: 22:8c:93:35:76:8d:9a:50:aa:c1:34:2b:92:ea:9e:4a:42:a1: 38:6c:72:50:11:4e:4e:9f:41:5a:7a:de:f3:02:ab:fd:22:6c: 1b:1d:d4:05:4b:f0:28:55:49:e7:d1:f2:31:d5:1e:83:07:c6: 4b:7e:db:47:19:c3:94:ae:4d:da:e3:b3:3e:3b:1f:26:5a:fc: 99:66:1f:a6:21:40:e4:40:cf:e7:be:f6:94:33:4b:31:49:27: f2:3e:b5:fe:df:cc:ac:2a:c6:e6:66:db:a1:25:1b:53:75:30: a4:f4:49:2d:58:0f:b3:1b:1c:9d:0f:04:36:84:bc:4e:b8:26: c0:30:8f:33:35:93:2c:77:4e:27:e9:a8:17:3e:2d:5d:f6:01: 73:23:65:89:61:1e:1c:f8:4b:1b:b4:59:57:b6:02:49:4c:7f: 10:9a:50:a7:11:1e:db:eb:e1:99:89:eb:6d:3b:a8:9f:fa:74: 0e:1d:2a:75:ab:6a:f7:71:a1:7c:1b:07:82:33:15:c8:ac:10: a3:d7:b0:19:5b:1f:3c:6f:ba:e0:c1:82:ae:20:29:04:19:f9: 39:59:27:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWQhu6CGPIRrE01d32glXBUqOGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNjAyMjgxNjI3MjVaFw0yNjAzMDQwNDEyMjVaMDMxMTAvBgNV BAMTKEE5NkFFQkU2QjVEMDNGMDUxQTQwOUM4NDVDMTY0MTZCNTdENkZBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2O8+rbw+M/cm09+GWWRrnHxu FbRvdm7piAu98daanh1Br22CBK9h0avtiEpE0LdxBWqG40XSVo/CxVebdMeOVcDo ptArOqdIdbIX4tICI7UlI1j2h2KAR7F56jl7bnOoGzVtdP90I6/CKKNkJm+z423K nRZAu0fmENl17TuAy6tTyZKDlGB8jaOO6ZQ+TOzeaKKhwArWWKrXfqP0mphypaxR 40ytvJVvEV+hJGmHZPAXzHlvOVAhqMDSlQllRlsbPknv+xAeOJ6/2BJzTh149O7I W/mDGnWcgKVMXpbaszO/E2hJHQUfUIE6+HOmBWDCxV4Fo3ggfXDWOKcU1FRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWrr5rXQPwUaQJyEXBZBa1fW+vkwHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHavftDEs6oampRvotPeJ3TY/LM6WmxVoFWE ukSTDnKA5kiKPCKMkzV2jZpQqsE0K5LqnkpCoThsclARTk6fQVp63vMCq/0ibBsd 1AVL8ChVSefR8jHVHoMHxkt+20cZw5SuTdrjsz47HyZa/JlmH6YhQORAz+e+9pQz SzFJJ/I+tf7fzKwqxuZm26ElG1N1MKT0SS1YD7MbHJ0PBDaEvE64JsAwjzM1kyx3 TifpqBc+LV32AXMjZYlhHhz4Sxu0WVe2AklMfxCaUKcRHtvr4ZmJ6207qJ/6dA4d KnWravdxoXwbB4IzFcisEKPXsBlbHzxvuuDBgq4gKQQZ+TlZJyg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:09 2026 by rpki-client