$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: mFaT2DtCUsV/KBMTm0eRI5wpsN233YzulVWYIunqIcE= Subject key identifier: 07:96:18:B9:F1:0E:39:5E:8E:39:74:20:76:62:82:B3:EA:FB:76:1D Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 493BF62D9C5D8858245C60E621DCE6C0117FB0FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 0232 Signing time: Sat 28 Feb 2026 21:02:27 +0000 Manifest this update: Sat 28 Feb 2026 20:57:27 +0000 Manifest next update: Wed 04 Mar 2026 02:53:27 +0000 Files and hashes: 1: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) 2: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: jZQKy993xy+dVRGvGQbrWIwSNqeLskE5Zwp8K1y9P4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3b:f6:2d:9c:5d:88:58:24:5c:60:e6:21:dc:e6:c0:11:7f:b0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Feb 28 20:57:27 2026 GMT Not After : Mar 4 02:53:27 2026 GMT Subject: CN=079618B9F10E395E8E397420766282B3EAFB761D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d7:bf:84:28:41:a1:26:99:db:35:50:33:6e: b5:40:5f:0a:5d:60:64:d8:d2:9b:e6:be:90:ce:97: 46:54:d2:8f:d9:25:29:4b:c6:c6:33:aa:ba:4b:bd: 39:81:2a:08:8f:05:40:8d:4a:84:cf:2c:27:86:68: 3b:8d:34:a6:c0:d2:66:61:a9:47:23:8e:a4:2c:af: 14:76:6c:e7:e8:e2:aa:29:0a:bc:2c:48:9b:19:f3: 06:00:ed:9f:66:cf:8d:ff:e7:76:19:d2:69:ae:5b: 4e:c6:d8:45:51:13:73:e1:7d:5c:35:13:d7:f3:bd: fd:78:b3:b5:43:65:43:de:28:4d:ea:b7:0b:33:81: 02:c9:97:42:d3:22:b3:98:9e:ff:f6:95:c5:dd:72: 23:d6:6f:2f:e9:ae:ec:89:ae:38:9e:d3:44:cf:d0: 12:12:7c:38:e7:08:ee:89:21:db:12:75:49:7e:f0: f2:0c:f0:13:27:90:87:95:ff:a2:19:e7:bd:34:41: b7:40:e0:1f:cd:f8:6c:39:e9:24:7a:ed:fd:65:14: 59:35:a3:ff:b6:c1:f3:4f:17:9c:b8:10:83:b1:c2: 87:3b:be:55:e9:b4:62:d0:73:1b:2e:b1:93:fa:53: 8c:d1:e5:da:d1:37:5e:f9:08:c5:5c:8c:15:94:27: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:18:B9:F1:0E:39:5E:8E:39:74:20:76:62:82:B3:EA:FB:76:1D X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c6:6b:09:9a:a3:75:c3:17:e9:69:be:17:76:a0:51:4a:e2: 48:47:9f:da:0c:a7:46:c8:d6:12:7d:ed:97:4f:95:2d:32:31: 86:f1:46:02:99:25:de:49:b8:8e:d7:d5:12:d7:ef:30:e9:99: 94:00:ea:e7:48:db:58:68:36:67:a2:07:dd:0b:ff:6e:fc:c6: 83:a3:ab:11:a3:56:1a:57:34:4d:3c:e9:9c:96:77:ce:1a:35: 65:94:22:49:38:10:0f:dd:87:7e:0a:d1:a8:64:c8:19:bc:1c: 10:46:4a:0b:30:b0:cc:4d:85:92:86:59:1c:9b:84:b3:ee:67: 5d:20:2d:91:2c:d4:b9:83:45:c3:eb:c5:a9:ed:d8:80:6d:f1: af:20:f6:31:99:a9:23:b9:4d:54:66:9e:ba:88:0a:46:1b:ec: 22:a3:e0:fb:3a:10:0e:0e:9d:a3:cb:0b:8f:0d:06:b9:1e:e2: 14:a8:ae:21:bb:2e:9c:cc:4d:13:74:59:d0:f0:d7:5d:f8:08: 34:c6:8d:09:67:4e:65:85:21:be:88:fe:f6:5a:a5:6f:c0:bb: d4:91:f2:8f:b6:ee:3d:2d:5e:e8:4c:70:9e:a2:db:08:42:11: df:83:40:35:3b:96:82:05:94:42:2d:b2:fe:58:92:b7:52:4c: 43:ca:48:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTv2LZxdiFgkXGDmIdzmwBF/sPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNjAyMjgyMDU3MjdaFw0yNjAzMDQwMjUzMjdaMDMxMTAvBgNV BAMTKDA3OTYxOEI5RjEwRTM5NUU4RTM5NzQyMDc2NjI4MkIzRUFGQjc2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV17+EKEGhJpnbNVAzbrVAXwpd YGTY0pvmvpDOl0ZU0o/ZJSlLxsYzqrpLvTmBKgiPBUCNSoTPLCeGaDuNNKbA0mZh qUcjjqQsrxR2bOfo4qopCrwsSJsZ8wYA7Z9mz43/53YZ0mmuW07G2EVRE3PhfVw1 E9fzvf14s7VDZUPeKE3qtwszgQLJl0LTIrOYnv/2lcXdciPWby/pruyJrjie00TP 0BISfDjnCO6JIdsSdUl+8PIM8BMnkIeV/6IZ5700QbdA4B/N+Gw56SR67f1lFFk1 o/+2wfNPF5y4EIOxwoc7vlXptGLQcxsusZP6U4zR5drRN175CMVcjBWUJ0EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5YYufEOOV6OOXQgdmKCs+r7dh0wHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnGawmao3XDF+lpvhd2oFFK4khHn9oMp0bI 1hJ97ZdPlS0yMYbxRgKZJd5JuI7X1RLX7zDpmZQA6udI21hoNmeiB90L/278xoOj qxGjVhpXNE086ZyWd84aNWWUIkk4EA/dh34K0ahkyBm8HBBGSgswsMxNhZKGWRyb hLPuZ10gLZEs1LmDRcPrxant2IBt8a8g9jGZqSO5TVRmnrqICkYb7CKj4Ps6EA4O naPLC48NBrke4hSoriG7LpzMTRN0WdDw1134CDTGjQlnTmWFIb6I/vZapW/Au9SR 8o+27j0tXuhMcJ6i2whCEd+DQDU7loIFlEItsv5YkrdSTEPKSL4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:04 2026 by rpki-client