$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: FassPd5t7GcxSJVywrJI4TprhPZxhUt32tJlICQhSLw= Subject key identifier: A6:30:A6:36:69:87:B0:84:27:7C:D0:D8:81:06:2B:90:2D:B3:E7:F1 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 6B601F1E4D6DDC5AD9A22566E8A9242F8274EB94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01DF Signing time: Sun 01 Mar 2026 09:31:34 +0000 Manifest this update: Sun 01 Mar 2026 09:26:34 +0000 Manifest next update: Wed 04 Mar 2026 21:29:34 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: MoFvv+++vTB85GXC2Kbs1Zs2yMHHdxOOMsOAsgFAkGY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: qIb12nBer7U22gx+6NJFs4OSiWdzBvcRl3arbQsxN/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:60:1f:1e:4d:6d:dc:5a:d9:a2:25:66:e8:a9:24:2f:82:74:eb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Mar 1 09:26:34 2026 GMT Not After : Mar 4 21:29:34 2026 GMT Subject: CN=A630A6366987B084277CD0D881062B902DB3E7F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:41:df:42:a1:68:b3:26:83:10:d7:39:92: a6:37:93:04:46:85:47:b9:91:2c:0e:6a:28:3b:08: b0:83:99:ec:76:d2:d9:6b:75:29:07:0f:11:6d:bf: 32:fa:18:3a:3c:92:17:ea:c7:86:57:67:50:66:4c: a2:6d:3b:79:46:f9:99:6d:fe:29:7e:54:37:8f:98: d1:90:45:2a:6d:af:e2:fb:2b:42:c8:bd:3c:55:b7: 51:0e:72:83:cb:5b:b6:69:16:d8:7a:cf:d2:66:1e: ed:87:f0:8e:cc:f9:90:ef:42:0f:fd:a5:92:6b:e6: 69:a9:e2:75:b3:8c:d0:26:c9:b3:83:6a:a9:d0:05: 53:64:c8:fd:f4:1d:1e:c4:9d:56:2f:0a:53:04:1e: ee:db:f4:b0:6e:92:34:62:9d:7f:d5:51:7f:5d:45: ca:8f:58:af:e6:f6:86:05:34:d1:a4:53:a1:35:fe: 96:ea:08:a4:c1:aa:a6:25:99:e0:69:2d:d0:65:94: f0:27:db:85:13:30:61:42:21:35:9e:b9:16:ee:b7: ec:1f:f4:e7:0e:bc:fb:40:59:94:63:a3:cb:13:d8: 77:be:5c:b4:4f:36:8f:22:96:26:df:5a:85:f7:aa: e4:a8:6a:49:16:9a:07:e3:d8:d6:ac:7d:a5:96:88: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:A6:36:69:87:B0:84:27:7C:D0:D8:81:06:2B:90:2D:B3:E7:F1 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:90:8b:b3:4c:25:eb:d0:1b:e7:a4:93:08:0a:98:2b:b4:6f: 70:d4:2a:5d:a6:59:6b:31:72:d3:0b:79:fe:ad:f1:6a:23:99: 40:7d:12:9e:cb:84:f5:35:2f:b8:aa:a1:6c:f2:77:f0:16:50: 7f:f9:45:b5:a8:a5:b4:1d:7c:38:c4:e0:32:cf:d1:8c:bd:0c: e2:46:0e:32:1b:bc:c2:f5:40:e7:d8:62:90:fa:7b:71:4b:c6: 5b:87:5c:97:c8:9a:44:bb:26:79:22:2f:15:87:fd:cd:13:61: 7d:db:57:0e:0a:1b:ff:2f:e6:f1:93:1a:0e:fb:ec:20:ea:c4: 89:79:31:a5:f5:38:20:e6:62:7e:20:23:27:86:c2:af:49:3c: 5c:a5:6a:fa:6f:ad:95:03:7b:d9:65:fc:26:a6:f3:11:86:f9: 25:16:77:dd:63:34:39:98:40:ba:12:32:ac:fa:c7:a5:38:a5: 0e:bc:40:bd:4e:65:2f:af:c0:03:c1:d3:ea:ed:ba:52:dd:c7: ee:b8:2c:4f:41:12:1d:d3:5a:6f:3f:68:07:d5:11:11:8b:6e: dc:d5:39:56:b0:a0:a3:bd:b7:fc:ac:87:d1:f4:45:44:70:b2: 61:1a:41:95:03:c8:87:21:5e:20:69:18:bf:d6:8b:90:56:22: 3c:78:22:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2AfHk1t3FrZoiVm6KkkL4J065QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNjAzMDEwOTI2MzRaFw0yNjAzMDQyMTI5MzRaMDMxMTAvBgNV BAMTKEE2MzBBNjM2Njk4N0IwODQyNzdDRDBEODgxMDYyQjkwMkRCM0U3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xUHfQqFosyaDENc5kqY3kwRG hUe5kSwOaig7CLCDmex20tlrdSkHDxFtvzL6GDo8khfqx4ZXZ1BmTKJtO3lG+Zlt /il+VDePmNGQRSptr+L7K0LIvTxVt1EOcoPLW7ZpFth6z9JmHu2H8I7M+ZDvQg/9 pZJr5mmp4nWzjNAmybODaqnQBVNkyP30HR7EnVYvClMEHu7b9LBukjRinX/VUX9d RcqPWK/m9oYFNNGkU6E1/pbqCKTBqqYlmeBpLdBllPAn24UTMGFCITWeuRbut+wf 9OcOvPtAWZRjo8sT2He+XLRPNo8ilibfWoX3quSoakkWmgfj2NasfaWWiFmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjCmNmmHsIQnfNDYgQYrkC2z5/EwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaQi7NMJevQG+ekkwgKmCu0b3DUKl2mWWsx ctMLef6t8WojmUB9Ep7LhPU1L7iqoWzyd/AWUH/5RbWopbQdfDjE4DLP0Yy9DOJG DjIbvML1QOfYYpD6e3FLxluHXJfImkS7JnkiLxWH/c0TYX3bVw4KG/8v5vGTGg77 7CDqxIl5MaX1OCDmYn4gIyeGwq9JPFylavpvrZUDe9ll/Cam8xGG+SUWd91jNDmY QLoSMqz6x6U4pQ68QL1OZS+vwAPB0+rtulLdx+64LE9BEh3TWm8/aAfVERGLbtzV OVawoKO9t/ysh9H0RURwsmEaQZUDyIchXiBpGL/Wi5BWIjx4Imo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:19 2026 by rpki-client