$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: bjO0asbyD4BeFuGzjgkiV62JzFYJzwN1aexLXYfotY0= Subject key identifier: 88:D7:70:B9:7D:95:32:73:3E:83:CE:68:99:FC:97:76:09:61:42:E3 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 7CF66AA836ABB258834A103213410F5452F901BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 031D Signing time: Sun 01 Mar 2026 04:31:04 +0000 Manifest this update: Sun 01 Mar 2026 04:26:04 +0000 Manifest next update: Wed 04 Mar 2026 08:46:04 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: ZtTQfqhuMFgu5/iyqp3pABMqU2ptM3jE2O58uptxRV4=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f6:6a:a8:36:ab:b2:58:83:4a:10:32:13:41:0f:54:52:f9:01:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Mar 1 04:26:04 2026 GMT Not After : Mar 4 08:46:04 2026 GMT Subject: CN=88D770B97D9532733E83CE6899FC9776096142E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:31:58:7c:99:26:f6:dd:e5:aa:e1:5f:e5: ae:46:b9:bc:f0:05:42:c6:90:a6:93:fa:03:ab:d9: 68:8e:a0:d4:f3:23:e8:88:f4:6d:57:69:74:57:1c: 64:fe:8f:f3:c2:24:80:b2:d8:af:2b:88:3b:5f:46: 09:c0:33:44:e3:19:69:20:04:8a:bb:dd:c2:dd:0d: 93:c4:0f:34:af:cf:6a:b5:1d:e5:97:15:0d:89:d2: 45:00:82:14:6d:e7:05:ae:d8:f9:cb:8a:ec:e0:6a: 9f:cd:ba:d4:b9:8d:43:54:46:bb:02:25:23:95:c8: f0:4e:70:51:f3:6d:fc:22:0b:d6:00:c1:a0:a5:25: d8:fc:fb:d8:a5:51:c0:34:ff:a7:35:2c:31:5d:45: ab:94:aa:5a:86:1b:d1:8d:81:b0:42:b1:11:f3:69: 56:18:71:e2:a1:69:c7:a6:80:c2:20:80:94:a0:46: 37:b9:4d:a5:be:80:da:7f:56:d9:e2:ce:62:70:f8: b6:c2:e5:e0:b3:73:0b:92:13:19:91:d6:0f:fa:1c: ea:05:01:13:af:15:c3:e4:09:04:4a:83:05:ef:48: 83:cf:8d:e2:16:d3:67:0c:c7:fc:ac:56:13:79:1f: 1d:01:57:77:59:5a:a8:6b:53:60:14:9c:d9:53:41: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D7:70:B9:7D:95:32:73:3E:83:CE:68:99:FC:97:76:09:61:42:E3 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:05:00:5a:d7:48:67:68:45:74:29:72:e5:f5:59:0e:5b:52: f4:0c:f9:be:d5:ff:6e:8d:ff:9f:71:21:50:5b:75:5d:2f:8c: e2:c4:21:83:b0:5c:46:9e:32:ea:3b:37:6d:ea:43:bb:a1:4c: 00:fb:d5:30:03:ff:f2:11:10:8d:45:1f:cf:96:df:df:5b:0f: f8:4d:bf:fb:23:f2:b4:fe:fa:a5:6f:de:d6:d7:eb:ac:0e:1b: b7:14:ae:d2:51:7a:ac:f7:06:9c:90:80:79:b4:0b:4f:eb:41: be:9e:db:48:73:87:dd:a2:47:9a:d7:f0:80:58:85:d2:68:ca: 4d:d0:37:5e:53:cf:9d:62:26:13:8d:a2:cf:c2:96:d7:6d:42: a9:90:65:bb:81:b9:f7:2d:c8:94:4e:ff:72:33:d0:2c:bb:16: aa:fd:d8:df:07:81:2a:47:e0:3b:1e:3a:86:95:df:a5:eb:a6: a9:c5:ce:3a:ce:2c:8c:b4:e1:94:12:fe:3b:2c:e0:4f:eb:72: fc:aa:9e:d3:0b:f5:e8:f4:f9:6a:27:41:f7:1c:6c:39:6b:bc: c9:28:83:81:45:f8:cf:15:69:bd:cd:22:ec:a4:47:87:6a:6f: 9d:95:8a:3d:be:25:05:b8:e0:70:bd:9b:58:d3:73:69:ec:91: 72:c2:a2:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPZqqDarsliDShAyE0EPVFL5AbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNjAzMDEwNDI2MDRaFw0yNjAzMDQwODQ2MDRaMDMxMTAvBgNV BAMTKDg4RDc3MEI5N0Q5NTMyNzMzRTgzQ0U2ODk5RkM5Nzc2MDk2MTQyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhzFYfJkm9t3lquFf5a5Gubzw BULGkKaT+gOr2WiOoNTzI+iI9G1XaXRXHGT+j/PCJICy2K8riDtfRgnAM0TjGWkg BIq73cLdDZPEDzSvz2q1HeWXFQ2J0kUAghRt5wWu2PnLiuzgap/NutS5jUNURrsC JSOVyPBOcFHzbfwiC9YAwaClJdj8+9ilUcA0/6c1LDFdRauUqlqGG9GNgbBCsRHz aVYYceKhacemgMIggJSgRje5TaW+gNp/VtnizmJw+LbC5eCzcwuSExmR1g/6HOoF AROvFcPkCQRKgwXvSIPPjeIW02cMx/ysVhN5Hx0BV3dZWqhrU2AUnNlTQVDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNdwuX2VMnM+g85omfyXdglhQuMwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8FAFrXSGdoRXQpcuX1WQ5bUvQM+b7V/26N /59xIVBbdV0vjOLEIYOwXEaeMuo7N23qQ7uhTAD71TAD//IREI1FH8+W399bD/hN v/sj8rT++qVv3tbX66wOG7cUrtJReqz3BpyQgHm0C0/rQb6e20hzh92iR5rX8IBY hdJoyk3QN15Tz51iJhONos/CltdtQqmQZbuBufctyJRO/3Iz0Cy7Fqr92N8HgSpH 4DseOoaV36XrpqnFzjrOLIy04ZQS/jss4E/rcvyqntML9ej0+WonQfccbDlrvMko g4FF+M8Vab3NIuykR4dqb52Vij2+JQW44HC9m1jTc2nskXLCokU= -----END CERTIFICATE-----Generated at Mon Mar 2 06:23:23 2026 by rpki-client