$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: sS7SH4gcQcca3GUuBXD2d3cSpNXP056NMnH+BQweGJs= Subject key identifier: A5:CD:2E:68:C6:88:B0:F2:1F:89:B3:59:78:71:FD:8E:21:82:03:DA Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 03431E63E3DE3570775C6AF86097A79010B22ACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 0252 Signing time: Sun 01 Mar 2026 21:31:38 +0000 Manifest this update: Sun 01 Mar 2026 21:26:38 +0000 Manifest next update: Thu 05 Mar 2026 06:04:38 +0000 Files and hashes: 1: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: IhTAbbsD1hkMIq2Xk5LkkmyeSAil2EjtBVnpz39cy1k=) 2: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:43:1e:63:e3:de:35:70:77:5c:6a:f8:60:97:a7:90:10:b2:2a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Mar 1 21:26:38 2026 GMT Not After : Mar 5 06:04:38 2026 GMT Subject: CN=A5CD2E68C688B0F21F89B3597871FD8E218203DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:e5:1e:7c:41:21:ee:2b:bd:d8:74:a1:09: 41:c8:8b:0f:83:90:9e:b9:f9:bf:f2:ee:0e:75:b6: 37:d9:35:14:f9:46:97:23:fb:2b:71:76:bd:23:1c: be:51:f9:f2:0a:b8:b8:cb:bd:00:38:a2:fd:39:1e: 7e:06:26:cc:e6:45:14:43:c5:af:7a:0a:4d:e7:a2: 1f:af:87:1c:1f:49:b5:6d:0f:37:f7:f7:a4:da:ba: 99:ee:e6:9c:75:09:db:78:c3:e7:c3:1f:31:1e:fb: b0:a7:79:54:19:64:2c:54:dc:15:04:34:32:08:58: ed:43:5e:47:a0:41:ef:d5:0c:8c:c3:45:6f:b9:51: 1f:56:45:ca:72:a3:38:63:52:c8:be:ac:83:f9:80: e0:d1:4b:f3:1d:07:44:84:65:9e:62:57:08:dc:9f: a8:9e:81:f8:7c:dd:25:68:83:0c:f5:e5:ab:46:8f: f3:37:69:91:3b:e5:a2:fd:21:fa:fb:27:67:e0:ef: 86:a6:67:0e:8b:18:f7:40:0f:b6:c0:88:3b:b1:4e: 02:09:be:e4:89:35:36:a3:28:b4:85:6d:38:73:70: 90:1d:6a:b7:6c:51:2b:99:9c:ba:6b:fe:66:ee:97: 3a:10:b1:e6:45:b7:f9:55:c2:92:58:f4:9a:01:49: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:2E:68:C6:88:B0:F2:1F:89:B3:59:78:71:FD:8E:21:82:03:DA X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e8:36:82:17:03:e4:43:aa:b2:eb:b7:66:fc:a1:b4:95:c8: 5d:d4:fa:2f:1f:3f:ae:0d:99:b9:ac:47:12:c8:ea:23:f8:23: f8:ab:93:07:5f:6b:3a:0b:49:20:f2:29:cc:68:c4:ec:6b:84: 6f:20:5e:a6:c2:62:44:8c:b3:29:36:54:9f:4e:d8:3b:97:1f: 89:df:76:7f:b9:ac:16:43:c2:37:c6:47:51:8f:86:70:30:a5: a8:3a:10:27:51:f6:b2:d9:72:51:88:89:c7:f1:fe:95:a6:61: 4d:cf:13:da:95:21:df:4c:83:4f:02:b6:84:e0:d0:14:f1:15: 05:ee:cd:66:7a:d6:68:f4:8a:8e:3a:a6:4a:58:7c:42:06:32: 99:94:ff:54:b0:b9:3c:9c:ce:51:1a:34:73:8f:04:fa:9d:73: 12:c7:d9:9a:dd:cf:e0:bd:80:e3:d0:ac:0b:89:ba:08:dc:98: e4:ed:c7:fe:df:6d:98:a7:5c:cd:74:e8:8a:12:f9:f8:36:4d: fc:0c:e3:8a:69:50:1a:6c:0c:7d:76:ef:6d:32:79:f5:2d:0f: 22:96:fc:58:32:8a:46:14:5a:17:9d:27:2a:bc:db:31:1d:27: 5a:49:0c:81:e9:b9:79:56:59:95:0f:df:91:7b:7f:c0:9f:17: af:b7:e8:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0MeY+PeNXB3XGr4YJenkBCyKs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNjAzMDEyMTI2MzhaFw0yNjAzMDUwNjA0MzhaMDMxMTAvBgNV BAMTKEE1Q0QyRTY4QzY4OEIwRjIxRjg5QjM1OTc4NzFGRDhFMjE4MjAzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBOUefEEh7iu92HShCUHIiw+D kJ65+b/y7g51tjfZNRT5Rpcj+ytxdr0jHL5R+fIKuLjLvQA4ov05Hn4GJszmRRRD xa96Ck3noh+vhxwfSbVtDzf396Taupnu5px1Cdt4w+fDHzEe+7CneVQZZCxU3BUE NDIIWO1DXkegQe/VDIzDRW+5UR9WRcpyozhjUsi+rIP5gODRS/MdB0SEZZ5iVwjc n6iegfh83SVogwz15atGj/M3aZE75aL9Ifr7J2fg74amZw6LGPdAD7bAiDuxTgIJ vuSJNTajKLSFbThzcJAdardsUSuZnLpr/mbulzoQseZFt/lVwpJY9JoBSSBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpc0uaMaIsPIfibNZeHH9jiGCA9owHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEToNoIXA+RDqrLrt2b8obSVyF3U+i8fP64N mbmsRxLI6iP4I/irkwdfazoLSSDyKcxoxOxrhG8gXqbCYkSMsyk2VJ9O2DuXH4nf dn+5rBZDwjfGR1GPhnAwpag6ECdR9rLZclGIicfx/pWmYU3PE9qVId9Mg08CtoTg 0BTxFQXuzWZ61mj0io46pkpYfEIGMpmU/1SwuTyczlEaNHOPBPqdcxLH2Zrdz+C9 gOPQrAuJugjcmOTtx/7fbZinXM106IoS+fg2TfwM44ppUBpsDH12720yefUtDyKW /FgyikYUWhedJyq82zEdJ1pJDIHpuXlWWZUP35F7f8CfF6+36PQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:18:17 2026 by rpki-client