$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: iOnQjWsZymn9xuTChaa1Y0B6DGwcTmNVp7WB9GIKQ8E= Subject key identifier: 78:78:E2:2A:B1:CA:22:53:A1:D3:FE:53:02:9B:6F:75:9A:31:C3:E8 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 09EBA997B06AF4443BBA6EA27B28DDE52C23D64E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 025F Signing time: Fri 27 Feb 2026 15:11:42 +0000 Manifest this update: Fri 27 Feb 2026 15:06:42 +0000 Manifest next update: Tue 03 Mar 2026 01:13:42 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: Up/VZwaAMaNGtZbo8Zi2BBKWtCEmYirLtFCS4wd+4dQ=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:eb:a9:97:b0:6a:f4:44:3b:ba:6e:a2:7b:28:dd:e5:2c:23:d6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Feb 27 15:06:42 2026 GMT Not After : Mar 3 01:13:42 2026 GMT Subject: CN=7878E22AB1CA2253A1D3FE53029B6F759A31C3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:0a:5c:c4:23:92:b3:d8:79:e2:ed:4c:fe: 98:4e:08:62:1e:a0:91:26:37:da:c3:19:94:46:62: cf:46:2a:14:db:a5:6f:d9:ed:9c:a9:6c:f4:d5:59: 74:41:d0:ef:5f:4d:15:d2:6c:6d:bf:01:0b:8d:5d: 42:b7:84:1c:1b:55:fc:58:72:cd:86:a4:3a:69:ee: 08:54:0d:e6:b3:33:fc:4b:8a:7c:69:88:e8:fc:80: 0d:39:15:2d:ca:6b:4a:75:ca:d4:96:75:51:d4:21: 74:b6:80:44:4f:b1:65:cf:9b:7d:e2:72:f3:52:f5: 4f:e4:59:9a:1a:c5:b9:a0:21:fd:8d:12:eb:8f:f1: 13:3c:c4:6e:55:3f:5c:21:1f:83:3e:da:c1:06:1a: a0:fe:ad:12:29:96:72:a5:97:fb:13:47:98:95:21: 41:6b:3f:ed:f7:0b:fd:64:0c:ab:91:f0:fc:b8:0e: 32:f7:31:6d:a8:85:63:9b:3e:82:39:2c:36:c9:1f: e0:c9:fc:d0:41:b1:fe:88:2d:3e:6e:2f:c7:d4:0c: ae:44:b3:82:2a:03:ad:ce:05:0c:06:c9:9c:1e:ce: 90:5d:4c:32:83:f2:ed:b2:ac:3d:5b:16:96:3d:03: e4:9f:d6:b9:e2:7c:e7:33:50:d0:a9:4d:80:eb:a3: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:78:E2:2A:B1:CA:22:53:A1:D3:FE:53:02:9B:6F:75:9A:31:C3:E8 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:9c:cc:b1:0f:d5:cd:d2:f8:9f:a3:f2:21:2d:7e:40:21: 8e:8a:64:c5:a6:59:87:cc:8a:b9:d3:b8:32:c5:5b:47:1e:ec: 1a:e6:b9:c9:50:76:db:f5:9e:b0:19:a7:15:90:2d:22:9b:bd: 11:d3:b8:0e:91:ad:9c:91:74:e2:a1:e4:23:29:c1:59:61:01: 92:e7:86:0d:87:af:28:e1:0f:03:a2:47:4e:25:24:3d:0a:01: 36:af:52:df:dd:b2:ac:84:39:44:1e:1e:8b:2e:ba:55:9b:46: 21:40:e3:2e:a7:f1:e0:33:d8:5e:57:75:b3:0f:ea:ea:6e:b9: 27:3c:11:b9:7e:fb:35:bb:96:40:2a:43:6f:26:20:b6:06:e6: a2:a8:b7:c4:4e:67:31:d7:e6:9a:2a:72:f5:0c:e6:60:78:22: 35:fc:70:2d:c5:b5:3c:a7:86:33:65:38:ce:25:24:ff:f7:b9: c0:41:c9:a7:20:d4:9c:7e:6d:c2:90:36:50:ce:2f:55:ec:ec: 0d:b9:25:b9:d0:43:a5:45:e2:0c:7f:54:97:61:35:52:0a:26: 49:af:85:a8:77:f6:09:02:60:c0:29:c9:66:d5:d6:df:f1:4a: 6b:e8:14:be:20:29:5a:d0:3d:eb:b4:d9:da:8f:f0:25:ef:52: a4:f9:10:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeupl7Bq9EQ7um6ieyjd5Swj1k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNjAyMjcxNTA2NDJaFw0yNjAzMDMwMTEzNDJaMDMxMTAvBgNV BAMTKDc4NzhFMjJBQjFDQTIyNTNBMUQzRkU1MzAyOUI2Rjc1OUEzMUMzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7ApcxCOSs9h54u1M/phOCGIe oJEmN9rDGZRGYs9GKhTbpW/Z7ZypbPTVWXRB0O9fTRXSbG2/AQuNXUK3hBwbVfxY cs2GpDpp7ghUDeazM/xLinxpiOj8gA05FS3Ka0p1ytSWdVHUIXS2gERPsWXPm33i cvNS9U/kWZoaxbmgIf2NEuuP8RM8xG5VP1whH4M+2sEGGqD+rRIplnKll/sTR5iV IUFrP+33C/1kDKuR8Py4DjL3MW2ohWObPoI5LDbJH+DJ/NBBsf6ILT5uL8fUDK5E s4IqA63OBQwGyZwezpBdTDKD8u2yrD1bFpY9A+Sf1rnifOczUNCpTYDro4RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeHjiKrHKIlOh0/5TAptvdZoxw+gwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzCnMyxD9XN0vifo/IhLX5AIY6KZMWmWYfM irnTuDLFW0ce7BrmuclQdtv1nrAZpxWQLSKbvRHTuA6RrZyRdOKh5CMpwVlhAZLn hg2HryjhDwOiR04lJD0KATavUt/dsqyEOUQeHosuulWbRiFA4y6n8eAz2F5XdbMP 6upuuSc8Ebl++zW7lkAqQ28mILYG5qKot8ROZzHX5poqcvUM5mB4IjX8cC3FtTyn hjNlOM4lJP/3ucBByacg1Jx+bcKQNlDOL1Xs7A25JbnQQ6VF4gx/VJdhNVIKJkmv hah39gkCYMApyWbV1t/xSmvoFL4gKVrQPeu02dqP8CXvUqT5EFc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:41 2026 by rpki-client