$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: sfCPalCE9HQAyxd9vaXx3y+5gUqhqVKgxy6lHwOCOEU= Subject key identifier: DF:E1:2A:48:A2:49:0B:09:36:5A:B0:9D:B8:E0:D8:FF:DA:F5:E2:00 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 266B1DB2EF2869DA7CBD4ED30503E79E191C1888 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 0110 Signing time: Sun 01 Mar 2026 14:32:08 +0000 Manifest this update: Sun 01 Mar 2026 14:27:08 +0000 Manifest next update: Wed 04 Mar 2026 17:55:08 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: kEgN79AJTi27Kzydt+kfrCL94f5wLihxWisrWUhTtgM=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 2KoUt2/IqlrBdeTYa4zU+PXccPJfUuUeEVNRh95cwQ4=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6b:1d:b2:ef:28:69:da:7c:bd:4e:d3:05:03:e7:9e:19:1c:18:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Mar 1 14:27:08 2026 GMT Not After : Mar 4 17:55:08 2026 GMT Subject: CN=DFE12A48A2490B09365AB09DB8E0D8FFDAF5E200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:19:a6:7a:05:4b:bc:80:18:a1:4a:25:05: 2b:56:ac:23:86:36:17:30:8e:8f:54:d6:8f:d6:61: c7:15:ff:b3:04:d6:1d:9d:54:12:0d:49:95:67:6b: c9:fb:dd:e0:1d:26:8d:16:a5:dd:2a:b8:1e:ca:ca: 7f:52:97:cd:13:5a:4f:8c:24:99:6a:f9:78:f1:0d: 2d:0c:d0:91:ff:e9:ef:9b:1f:ed:cb:03:1c:44:ec: 57:85:78:30:83:92:52:2c:33:4a:d8:3b:90:0d:e8: 5e:75:fd:02:a3:b4:aa:5a:21:c3:0d:17:0e:64:18: fe:bb:37:4c:b8:1a:0e:43:c9:79:8f:6d:24:3f:43: 1a:c1:69:ea:fe:32:1e:a2:7e:03:ef:e2:01:30:ad: 13:88:24:f7:9f:1e:70:90:46:a9:4d:13:4f:4f:c8: b7:ea:16:8b:1c:7e:0d:57:e1:f3:8e:2e:2e:e3:7a: ef:6d:f0:cd:9a:f6:02:bf:51:9f:3f:6d:50:bf:48: f8:af:05:b8:e8:11:cb:c7:c4:3e:b8:6c:9b:e7:ba: 5a:e4:0e:4f:8b:86:96:37:b2:cf:31:98:ca:2f:68: 5b:20:48:26:96:df:ea:c0:3f:b5:92:47:77:00:1b: 65:a7:40:10:10:ed:26:ec:b1:30:dd:24:37:73:ca: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E1:2A:48:A2:49:0B:09:36:5A:B0:9D:B8:E0:D8:FF:DA:F5:E2:00 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8c:c7:81:56:6c:83:62:ba:39:b5:35:ee:f5:60:72:52:60: 81:c9:71:d5:3c:80:ad:2e:12:0c:01:3d:5c:be:10:3b:3d:10: c0:77:91:cc:ed:ec:bb:3c:cb:7a:84:a0:a1:af:b1:46:18:27: ac:a4:75:47:44:87:4c:94:30:31:47:bd:f1:d8:fd:ca:6e:c3: ad:70:28:28:8c:26:ba:4e:77:22:f9:86:83:06:14:22:4a:fe: ad:71:6b:af:ea:ed:0d:4b:55:7e:d9:8c:42:29:29:e0:ec:42: 7a:5d:0e:c3:f3:46:10:0a:97:76:7c:30:2b:62:94:a0:59:48: ed:1f:3b:7a:c4:98:ee:12:e8:6d:a2:01:0d:53:66:8c:52:37: 42:66:36:08:d5:9f:cc:64:11:78:2c:06:1d:ab:14:85:a7:15: 25:c9:d0:8e:98:ef:59:85:e9:67:44:72:8a:bd:5a:36:d2:91: e9:ee:e0:80:3e:b5:56:85:03:8e:31:14:9e:64:92:f0:a2:37: cb:d2:8e:d8:09:f8:03:ee:21:2d:7d:6c:da:c9:b6:41:a4:20: c7:91:7e:88:9d:78:6f:63:62:89:59:24:05:25:6d:f1:f5:70: 7a:f6:08:6a:fe:30:4c:81:c0:cd:15:9d:ff:ec:07:2c:19:d2: 85:78:cd:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmsdsu8oadp8vU7TBQPnnhkcGIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNjAzMDExNDI3MDhaFw0yNjAzMDQxNzU1MDhaMDMxMTAvBgNV BAMTKERGRTEyQTQ4QTI0OTBCMDkzNjVBQjA5REI4RTBEOEZGREFGNUUyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqRmmegVLvIAYoUolBStWrCOG Nhcwjo9U1o/WYccV/7ME1h2dVBINSZVna8n73eAdJo0Wpd0quB7Kyn9Sl80TWk+M JJlq+XjxDS0M0JH/6e+bH+3LAxxE7FeFeDCDklIsM0rYO5AN6F51/QKjtKpaIcMN Fw5kGP67N0y4Gg5DyXmPbSQ/QxrBaer+Mh6ifgPv4gEwrROIJPefHnCQRqlNE09P yLfqFoscfg1X4fOOLi7jeu9t8M2a9gK/UZ8/bVC/SPivBbjoEcvHxD64bJvnulrk Dk+LhpY3ss8xmMovaFsgSCaW3+rAP7WSR3cAG2WnQBAQ7SbssTDdJDdzyjVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3+EqSKJJCwk2WrCduODY/9r14gAwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCMx4FWbINiujm1Ne71YHJSYIHJcdU8gK0u EgwBPVy+EDs9EMB3kczt7Ls8y3qEoKGvsUYYJ6ykdUdEh0yUMDFHvfHY/cpuw61w KCiMJrpOdyL5hoMGFCJK/q1xa6/q7Q1LVX7ZjEIpKeDsQnpdDsPzRhAKl3Z8MCti lKBZSO0fO3rEmO4S6G2iAQ1TZoxSN0JmNgjVn8xkEXgsBh2rFIWnFSXJ0I6Y71mF 6WdEcoq9WjbSkenu4IA+tVaFA44xFJ5kkvCiN8vSjtgJ+APuIS19bNrJtkGkIMeR foideG9jYolZJAUlbfH1cHr2CGr+MEyBwM0Vnf/sBywZ0oV4zaM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:05 2026 by rpki-client