$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: VQgTC+mMCRwLGVy7KLC82opiEZGO8H5yp4IYKcA0lT8= Subject key identifier: B7:85:0E:90:18:76:AF:5A:72:F6:97:68:08:40:B4:7A:EB:DE:34:31 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 320E9061C5BA1A24B119D55C574D63D24EF3BF7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: EF Signing time: Mon 02 Mar 2026 09:41:36 +0000 Manifest this update: Mon 02 Mar 2026 09:36:36 +0000 Manifest next update: Thu 05 Mar 2026 14:53:36 +0000 Files and hashes: 1: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) 2: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: yXZ2A81HqCQ7hLrcak4/jtWVzqrUxdfJ8teryj+mNC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0e:90:61:c5:ba:1a:24:b1:19:d5:5c:57:4d:63:d2:4e:f3:bf:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Mar 2 09:36:36 2026 GMT Not After : Mar 5 14:53:36 2026 GMT Subject: CN=B7850E901876AF5A72F697680840B47AEBDE3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a2:e9:a3:69:d2:17:ac:c3:2b:75:fc:d9:b2: b8:bd:b2:dc:1d:f4:68:11:1d:50:6b:d8:a5:d0:8e: 73:ae:57:5b:ee:f2:07:78:90:e6:f2:9c:88:57:ba: d4:f1:98:b7:c2:79:63:ca:81:2e:7c:88:f2:9e:71: 59:a4:bd:99:be:de:26:51:87:4c:6b:c5:a5:24:30: c3:c0:b2:06:63:ce:d3:d0:ff:4f:4a:9b:47:3e:a8: 56:c3:f0:bf:28:ff:29:e1:13:86:2c:9a:86:d0:69: 9e:69:92:e6:ca:01:cc:b7:d8:3f:15:d4:17:3f:29: 4e:54:56:49:9f:07:e7:5a:f8:eb:db:cc:16:13:ac: dc:6d:ab:c8:c0:08:c6:48:58:18:e4:88:16:00:ab: 98:68:16:98:c7:ab:7e:32:82:c0:b3:9d:9c:1f:95: 03:0f:e3:16:e7:b6:96:48:df:8c:2d:c1:c5:8b:f5: 85:87:dd:45:5c:27:83:43:ea:65:b7:83:16:67:e1: 3b:f3:5d:9f:f0:0a:df:f2:d3:a4:ff:95:47:c2:fa: 21:b4:f4:dc:ed:e6:f1:b6:6e:2a:cb:89:e1:b8:b0: 90:62:e3:38:8b:6c:6c:d6:dc:4f:20:61:18:1e:dd: 43:af:47:9b:25:d0:77:66:95:22:3e:c8:d1:21:a6: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:85:0E:90:18:76:AF:5A:72:F6:97:68:08:40:B4:7A:EB:DE:34:31 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:74:55:8a:e8:8e:c9:37:c4:c1:e8:41:af:65:69:f2:46:87: 15:bf:08:53:0e:41:38:91:01:e6:d6:61:97:66:49:49:b6:9e: c6:41:27:15:9e:bc:e3:80:8b:e6:4d:c9:07:d8:22:51:8d:56: 6c:8f:8e:f7:19:d5:34:8c:8f:42:6d:d9:c2:52:39:e6:82:c3: 98:9a:15:99:5f:0b:7d:12:df:a5:3a:c8:73:90:8c:11:34:b3: 9b:63:e0:c9:a8:55:e4:9f:68:c2:dc:8d:37:81:6a:eb:fa:b4: 8e:01:fe:30:18:7a:f9:9b:e5:9c:21:2c:b2:a4:85:ab:ad:01: 28:dc:cb:62:36:58:8c:bc:48:2c:ad:37:74:31:9a:3a:cd:fb: dc:97:e7:8e:a2:aa:90:35:f7:89:30:b8:78:9a:04:8c:0a:58: 06:44:5b:a1:2d:1a:dc:5d:4c:c8:0e:f0:82:94:a5:29:08:1b: 7c:ac:17:89:69:f9:2b:d4:a0:b2:d9:31:06:f3:2a:b6:07:6f: 4e:51:27:da:46:32:ca:7f:e3:8d:83:52:78:26:9a:e1:b4:8c: c4:e3:45:2c:61:f9:e8:df:be:bf:57:5d:b0:a0:1a:5e:30:5b: 0f:52:b8:b1:06:79:99:77:42:6e:54:f9:45:db:84:5e:da:92: 25:ac:f8:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMg6QYcW6GiSxGdVcV01j0k7zv38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNjAzMDIwOTM2MzZaFw0yNjAzMDUxNDUzMzZaMDMxMTAvBgNV BAMTKEI3ODUwRTkwMTg3NkFGNUE3MkY2OTc2ODA4NDBCNDdBRUJERTM0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhoumjadIXrMMrdfzZsri9stwd 9GgRHVBr2KXQjnOuV1vu8gd4kObynIhXutTxmLfCeWPKgS58iPKecVmkvZm+3iZR h0xrxaUkMMPAsgZjztPQ/09Km0c+qFbD8L8o/ynhE4YsmobQaZ5pkubKAcy32D8V 1Bc/KU5UVkmfB+da+OvbzBYTrNxtq8jACMZIWBjkiBYAq5hoFpjHq34ygsCznZwf lQMP4xbntpZI34wtwcWL9YWH3UVcJ4ND6mW3gxZn4TvzXZ/wCt/y06T/lUfC+iG0 9Nzt5vG2birLieG4sJBi4ziLbGzW3E8gYRge3UOvR5sl0HdmlSI+yNEhpgajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4UOkBh2r1py9pdoCEC0euveNDEwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB0VYrojsk3xMHoQa9lafJGhxW/CFMOQTiR AebWYZdmSUm2nsZBJxWevOOAi+ZNyQfYIlGNVmyPjvcZ1TSMj0Jt2cJSOeaCw5ia FZlfC30S36U6yHOQjBE0s5tj4MmoVeSfaMLcjTeBauv6tI4B/jAYevmb5ZwhLLKk hautASjcy2I2WIy8SCytN3QxmjrN+9yX546iqpA194kwuHiaBIwKWAZEW6EtGtxd TMgO8IKUpSkIG3ysF4lp+SvUoLLZMQbzKrYHb05RJ9pGMsp/442DUngmmuG0jMTj RSxh+ejfvr9XXbCgGl4wWw9SuLEGeZl3Qm5U+UXbhF7akiWs+P0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:52 2026 by rpki-client