$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: VsMUt+ovp0lzXWPisgVzUYrMtJ/Mm2qvtco2ytgGtwY= Subject key identifier: 8F:74:AD:E4:48:EC:94:3B:8F:DE:AD:ED:DD:F7:0A:5C:3E:E2:33:EB Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 78B86FC72C01690BA46033D84C76EA7E1C944F80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 025A Signing time: Sun 01 Mar 2026 10:00:42 +0000 Manifest this update: Sun 01 Mar 2026 09:55:42 +0000 Manifest next update: Wed 04 Mar 2026 11:15:42 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 2: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: 2aThlyTedV8cCex9NoO9oG17NPvgGP85z0A3YBmWjN0=) 3: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b8:6f:c7:2c:01:69:0b:a4:60:33:d8:4c:76:ea:7e:1c:94:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Mar 1 09:55:42 2026 GMT Not After : Mar 4 11:15:42 2026 GMT Subject: CN=8F74ADE448EC943B8FDEADEDDDF70A5C3EE233EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:fa:27:f8:6c:2c:a5:ec:8e:8c:2b:65:f0: 2c:68:74:59:2a:91:a6:ce:df:69:54:0e:82:c1:5c: b4:5f:ac:60:3b:de:bc:d3:ee:a8:ed:ca:28:de:c5: 9d:bf:8b:a1:b1:3b:97:87:9c:19:b4:08:bc:8b:94: 0c:4d:3e:e0:75:64:e5:b7:e5:1f:ca:a9:ca:53:05: cc:d8:de:69:ea:f7:a1:91:a8:d5:7b:00:9f:3a:44: e5:8e:af:1c:de:2f:1f:18:e4:9e:8e:ae:5a:94:9a: ee:1e:5f:50:9a:53:82:83:ec:21:c0:43:9f:87:26: 2c:47:00:98:c4:d6:4b:a4:1c:37:9e:75:b9:0d:e5: 56:71:d2:06:5e:1e:5d:e9:cc:91:4c:da:f0:d0:83: f5:6b:b3:c9:5d:19:93:d5:4f:e0:d0:a7:6b:5e:a4: 17:bd:4f:d8:b2:12:c1:9b:c7:b5:92:31:47:28:6f: 3d:78:28:5d:95:05:3d:28:04:60:69:81:1a:05:3d: b2:64:b5:b2:6a:54:20:d6:38:dc:51:00:f4:b8:d8: 79:e4:13:f5:cd:55:9e:a4:9c:a4:13:b8:a1:9c:e2: c6:ee:8e:fb:1e:a4:3e:3b:0f:2e:e4:22:f9:47:a5: 05:2c:42:8b:b6:27:6d:b7:e9:54:63:fe:72:a8:a1: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:AD:E4:48:EC:94:3B:8F:DE:AD:ED:DD:F7:0A:5C:3E:E2:33:EB X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:95:e0:0e:3d:21:81:d6:bf:33:b2:f3:61:d7:c5:12:1a:c6: 85:c3:9f:d2:6b:80:47:3a:9d:0b:d7:90:84:ba:fa:5d:95:87: 6e:22:41:e7:7e:98:7f:5c:bd:82:60:90:9f:07:a7:4b:bb:0e: 67:c9:0a:81:6c:cc:05:65:d5:8f:e4:10:3e:a7:fa:d4:b4:e8: 1d:1a:cb:72:b0:60:65:75:b8:c6:36:a0:81:8d:5d:75:88:f4: fb:65:87:1e:52:65:94:4c:cb:94:81:b4:b4:c2:ee:db:a7:bd: 14:b6:7b:e0:8e:e7:54:c2:13:7f:6f:3f:08:1f:9a:74:d1:78: 0a:9f:d9:cb:b3:21:f0:58:dc:07:bd:59:a2:18:d8:35:6c:be: f6:f8:35:db:54:57:cd:86:b0:c3:d2:bf:1e:20:19:0b:fd:f8: e1:e0:6c:8c:0b:6c:46:48:3e:8b:84:86:e9:25:fe:77:75:d8: 6c:e7:19:66:81:52:dc:79:ab:3d:c7:fd:50:66:c4:c9:80:0b: c1:9d:e0:d4:0c:de:b4:e4:77:ab:ea:9f:cc:cc:83:90:8f:c4: b5:a3:3f:4d:19:32:cb:c7:b1:b6:e6:91:53:09:60:72:95:8a: ae:17:52:6d:10:61:80:5d:d9:c7:d0:58:db:d8:cb:97:51:de: 1d:2e:25:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLhvxywBaQukYDPYTHbqfhyUT4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNjAzMDEwOTU1NDJaFw0yNjAzMDQxMTE1NDJaMDMxMTAvBgNV BAMTKDhGNzRBREU0NDhFQzk0M0I4RkRFQURFRERERjcwQTVDM0VFMjMzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZvon+GwspeyOjCtl8CxodFkq kabO32lUDoLBXLRfrGA73rzT7qjtyijexZ2/i6GxO5eHnBm0CLyLlAxNPuB1ZOW3 5R/KqcpTBczY3mnq96GRqNV7AJ86ROWOrxzeLx8Y5J6OrlqUmu4eX1CaU4KD7CHA Q5+HJixHAJjE1kukHDeedbkN5VZx0gZeHl3pzJFM2vDQg/Vrs8ldGZPVT+DQp2te pBe9T9iyEsGbx7WSMUcobz14KF2VBT0oBGBpgRoFPbJktbJqVCDWONxRAPS42Hnk E/XNVZ6knKQTuKGc4sbujvsepD47Dy7kIvlHpQUsQou2J2236VRj/nKood6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3St5EjslDuP3q3t3fcKXD7iM+swHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeV4A49IYHWvzOy82HXxRIaxoXDn9JrgEc6 nQvXkIS6+l2Vh24iQed+mH9cvYJgkJ8Hp0u7DmfJCoFszAVl1Y/kED6n+tS06B0a y3KwYGV1uMY2oIGNXXWI9Ptlhx5SZZRMy5SBtLTC7tunvRS2e+CO51TCE39vPwgf mnTReAqf2cuzIfBY3Ae9WaIY2DVsvvb4NdtUV82GsMPSvx4gGQv9+OHgbIwLbEZI PouEhukl/nd12GznGWaBUtx5qz3H/VBmxMmAC8Gd4NQM3rTkd6vqn8zMg5CPxLWj P00ZMsvHsbbmkVMJYHKViq4XUm0QYYBd2cfQWNvYy5dR3h0uJcA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:31:50 2026 by rpki-client