$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: G/TuZlo0SXD6Ssoaq4wbwxUc/IqsdqOBT8OjW5HXD1M= Subject key identifier: 38:53:14:4A:4C:31:FB:C3:D1:94:54:52:27:1D:E0:D7:5E:12:F4:FC Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 7834FAAAF89834E8C2D9537BBD1A62322CCA1320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 02A8 Signing time: Sun 01 Mar 2026 12:51:55 +0000 Manifest this update: Sun 01 Mar 2026 12:46:55 +0000 Manifest next update: Wed 04 Mar 2026 18:22:55 +0000 Files and hashes: 1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: i+qeUrmD9Fd3rphrK86nIHEBz1MTNlM7EqpgrI3Gmww=) 2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: 7mSy93JyGfuZLtTA89nmtcGQjqdRbUslrbNWczBJpGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:34:fa:aa:f8:98:34:e8:c2:d9:53:7b:bd:1a:62:32:2c:ca:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Mar 1 12:46:55 2026 GMT Not After : Mar 4 18:22:55 2026 GMT Subject: CN=3853144A4C31FBC3D1945452271DE0D75E12F4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:99:1a:ce:1a:59:c1:28:2b:f7:89:f5:88: f5:bd:16:1c:c1:72:07:8b:ac:f1:ee:ea:98:69:23: 37:f2:1e:2e:d5:ad:96:7e:24:00:b7:2c:56:59:64: 31:bc:5c:64:11:90:0b:4d:f0:24:b5:b4:eb:71:2f: 93:c3:5c:f5:25:06:c6:06:4d:30:66:3e:dd:1e:3d: cd:26:f8:52:b2:52:4a:77:00:5e:af:d5:b2:3c:a7: 0d:87:68:11:57:ee:b7:56:57:e6:c7:9d:ef:86:ca: 60:a4:d2:95:9d:55:b2:a9:82:60:1b:30:1e:68:32: 32:43:f4:8b:81:92:36:f7:a0:ca:ee:71:ab:bd:3d: 30:01:60:ec:6d:6d:8e:60:2c:cd:b8:bf:0f:9e:01: c1:e7:47:74:5a:fa:28:f1:17:86:a7:f6:ed:58:50: a8:4c:ff:fc:75:1c:a2:81:f3:77:fd:bc:b5:85:e7: 40:85:82:39:3e:8b:92:d2:1b:84:f9:69:e9:3a:76: 48:f0:ad:2d:8c:1e:07:76:e8:d7:be:83:b0:77:6c: 40:a8:ae:97:6f:12:2b:e6:88:cc:d2:60:d6:0c:db: 20:ae:99:f5:03:e6:bf:bb:de:2e:ba:9b:56:f7:31: f8:7b:a5:fc:5c:1c:e7:91:24:01:db:d7:6f:70:df: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:53:14:4A:4C:31:FB:C3:D1:94:54:52:27:1D:E0:D7:5E:12:F4:FC X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:00:4a:94:da:ee:52:7f:39:ac:da:e5:5b:10:0d:5e:f9:99: f4:8b:37:68:83:24:18:62:d1:0a:f4:18:f2:7d:53:9e:a5:59: d4:71:6c:02:ab:06:8e:37:b4:5e:53:8d:78:0b:1c:3b:f0:83: ce:f2:68:ca:1a:13:90:ea:b8:8a:db:77:73:47:c1:c3:b2:2b: a9:c3:f1:25:31:96:e6:fa:f4:30:17:78:68:c3:5f:52:39:b5: 02:60:55:f0:25:1a:e1:91:d2:22:f3:47:00:d4:c2:51:8e:b3: 1f:87:2f:d2:ce:26:5a:7d:71:0f:75:40:61:fb:51:12:3a:de: 45:f5:08:31:d1:6b:78:6c:11:51:97:50:98:0b:b5:40:b4:24: b7:60:08:bc:09:f1:88:6f:b5:10:6f:bf:92:0b:ac:e9:02:35: 20:f8:49:b1:b7:aa:2b:a8:2c:fa:81:06:95:0d:31:a2:25:29: 0c:01:84:31:21:3f:8a:c6:1c:d9:aa:4c:da:09:5a:7c:f4:dc: 1a:42:88:a8:9f:de:34:04:8d:9d:f0:26:39:86:fb:fc:a6:cf: 98:c2:1a:79:60:5c:f7:23:d2:28:e6:56:ee:02:b9:13:ed:37: e9:58:b8:d3:a7:64:e7:64:d8:73:a6:70:71:20:d0:c8:9d:a1: 62:80:fa:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeDT6qviYNOjC2VN7vRpiMizKEyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNjAzMDExMjQ2NTVaFw0yNjAzMDQxODIyNTVaMDMxMTAvBgNV BAMTKDM4NTMxNDRBNEMzMUZCQzNEMTk0NTQ1MjI3MURFMEQ3NUUxMkY0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiOZkazhpZwSgr94n1iPW9FhzB cgeLrPHu6phpIzfyHi7VrZZ+JAC3LFZZZDG8XGQRkAtN8CS1tOtxL5PDXPUlBsYG TTBmPt0ePc0m+FKyUkp3AF6v1bI8pw2HaBFX7rdWV+bHne+GymCk0pWdVbKpgmAb MB5oMjJD9IuBkjb3oMrucau9PTABYOxtbY5gLM24vw+eAcHnR3Ra+ijxF4an9u1Y UKhM//x1HKKB83f9vLWF50CFgjk+i5LSG4T5aek6dkjwrS2MHgd26Ne+g7B3bECo rpdvEivmiMzSYNYM2yCumfUD5r+73i66m1b3Mfh7pfxcHOeRJAHb129w3+VVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFMUSkwx+8PRlFRSJx3g114S9PwwHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgASpTa7lJ/Oaza5VsQDV75mfSLN2iDJBhi 0Qr0GPJ9U56lWdRxbAKrBo43tF5TjXgLHDvwg87yaMoaE5DquIrbd3NHwcOyK6nD 8SUxlub69DAXeGjDX1I5tQJgVfAlGuGR0iLzRwDUwlGOsx+HL9LOJlp9cQ91QGH7 URI63kX1CDHRa3hsEVGXUJgLtUC0JLdgCLwJ8YhvtRBvv5ILrOkCNSD4SbG3qiuo LPqBBpUNMaIlKQwBhDEhP4rGHNmqTNoJWnz03BpCiKif3jQEjZ3wJjmG+/ymz5jC GnlgXPcj0ijmVu4CuRPtN+lYuNOnZOdk2HOmcHEg0MidoWKA+os= -----END CERTIFICATE-----Generated at Mon Mar 2 14:11:52 2026 by rpki-client