$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: M/nof19DL9DT17Dfu2BH8Wetcj2uxPiMI/M8wLYH1pc= Subject key identifier: 7A:AE:66:43:57:3B:D2:D1:E5:E9:5E:07:FB:D0:E1:56:54:65:16:0C Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 69AA28F9932326ED0B7EF39A2D9CBAAE8FE84040 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0281 Signing time: Sun 01 Mar 2026 12:02:05 +0000 Manifest this update: Sun 01 Mar 2026 11:57:05 +0000 Manifest next update: Wed 04 Mar 2026 20:17:05 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: L4Cx0jc76EnGcVHkt/8Ti9rPxYuC0ZzaLUB8EZtCpiE=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:aa:28:f9:93:23:26:ed:0b:7e:f3:9a:2d:9c:ba:ae:8f:e8:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Mar 1 11:57:05 2026 GMT Not After : Mar 4 20:17:05 2026 GMT Subject: CN=7AAE6643573BD2D1E5E95E07FBD0E1565465160C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:1c:09:6e:01:b0:fe:29:a9:4a:a7:c2:47: 4d:93:d9:35:a7:6f:3e:8e:8b:a6:0a:6b:b6:8c:55: a9:bc:3e:26:ca:99:f6:2f:ef:ee:9d:22:11:f6:00: 1c:48:d6:da:4f:76:8c:c6:45:92:7d:72:73:c4:29: a7:fc:d5:e4:d7:df:17:68:36:7a:8b:c5:86:41:b4: 27:ef:3d:50:9a:28:a6:1a:a3:f6:17:b1:6d:94:1f: d9:17:0a:60:23:a9:48:b3:f3:d2:cc:b2:c2:3a:13: 38:5d:ce:08:06:a8:e4:73:d2:47:b5:89:29:f3:88: dd:f6:27:9a:d0:ad:b7:e6:54:b3:ad:3d:9b:97:73: 3d:08:2a:29:3b:e0:aa:39:ac:81:8d:d3:bd:14:48: a9:b1:ec:47:51:b3:14:16:a0:4a:32:66:67:9b:a2: 17:79:a7:d0:86:4d:d0:b9:93:56:2e:33:f8:84:cd: 52:e5:41:16:f6:86:64:00:95:1c:82:82:59:3c:d2: 0b:8a:c7:45:a3:db:74:7a:91:15:92:10:27:f0:c6: 06:b6:97:d3:11:a9:0e:73:ad:3b:a4:0f:49:03:8c: cd:65:41:ff:82:f5:6c:5d:43:8d:75:8d:3c:c0:60: e1:04:4d:71:05:50:ce:c4:01:10:50:66:cc:9a:a5: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AE:66:43:57:3B:D2:D1:E5:E9:5E:07:FB:D0:E1:56:54:65:16:0C X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:36:9a:a1:f1:6c:7a:17:ab:64:e6:87:6a:a9:df:62:09:6c: f8:48:b8:69:67:61:a8:d8:53:f7:9e:62:d0:0d:24:35:b5:a7: 0d:bf:3c:91:20:62:4a:73:fe:6e:68:3a:0d:9e:43:d6:93:fe: f9:5d:af:65:92:05:67:b5:04:77:1a:a4:a7:5a:7a:2f:d4:25: 85:26:f6:3a:14:0f:ae:c1:1d:37:74:a9:c0:ba:84:83:d5:25: ba:11:33:62:db:10:18:ca:1f:f0:84:1f:4f:54:9c:18:15:6d: ba:a8:eb:87:0a:d2:9c:83:9e:18:bd:6a:7b:82:da:88:8f:8a: ef:be:f2:30:0d:90:fc:fd:2e:87:5e:a6:53:f5:e1:51:aa:b7: 3f:3e:40:bc:56:78:c8:86:ea:82:74:a8:ab:26:08:66:1f:f6: 49:ef:59:ef:66:99:57:89:1b:28:69:18:61:d0:60:f8:1c:66: e4:88:ec:9e:ba:75:ee:3d:b4:e0:34:9a:da:55:97:72:3d:e6: 7e:fb:96:84:74:50:58:54:34:33:ba:46:59:f0:4d:78:af:8a: 24:aa:ba:70:f0:c0:85:48:ad:e7:51:6a:08:17:3d:d1:8f:6b: 1b:e1:3a:29:4f:3f:a8:b0:b4:71:96:1a:57:3c:ef:2b:85:f1: 92:33:45:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaoo+ZMjJu0LfvOaLZy6ro/oQEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNjAzMDExMTU3MDVaFw0yNjAzMDQyMDE3MDVaMDMxMTAvBgNV BAMTKDdBQUU2NjQzNTczQkQyRDFFNUU5NUUwN0ZCRDBFMTU2NTQ2NTE2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrxwJbgGw/impSqfCR02T2TWn bz6Oi6YKa7aMVam8PibKmfYv7+6dIhH2ABxI1tpPdozGRZJ9cnPEKaf81eTX3xdo NnqLxYZBtCfvPVCaKKYao/YXsW2UH9kXCmAjqUiz89LMssI6EzhdzggGqORz0ke1 iSnziN32J5rQrbfmVLOtPZuXcz0IKik74Ko5rIGN070USKmx7EdRsxQWoEoyZmeb ohd5p9CGTdC5k1YuM/iEzVLlQRb2hmQAlRyCglk80guKx0Wj23R6kRWSECfwxga2 l9MRqQ5zrTukD0kDjM1lQf+C9WxdQ411jTzAYOEETXEFUM7EARBQZsyapQObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeq5mQ1c70tHl6V4H+9DhVlRlFgwwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE42mqHxbHoXq2Tmh2qp32IJbPhIuGlnYajY U/eeYtANJDW1pw2/PJEgYkpz/m5oOg2eQ9aT/vldr2WSBWe1BHcapKdaei/UJYUm 9joUD67BHTd0qcC6hIPVJboRM2LbEBjKH/CEH09UnBgVbbqo64cK0pyDnhi9anuC 2oiPiu++8jANkPz9LodeplP14VGqtz8+QLxWeMiG6oJ0qKsmCGYf9knvWe9mmVeJ GyhpGGHQYPgcZuSI7J66de49tOA0mtpVl3I95n77loR0UFhUNDO6RlnwTXiviiSq unDwwIVIredRaggXPdGPaxvhOilPP6iwtHGWGlc87yuF8ZIzRZ4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:52 2026 by rpki-client