$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: 0qSvhoPmYD0kaCPmez8ZY2t+W+IOTFhgYOFpviQH/Hc= Subject key identifier: E4:4C:78:B4:07:A1:01:F7:57:A9:BA:E3:FC:E0:B9:5D:12:99:50:46 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 4D2548BA3A2B28A52DC6A74557A00871EA1A2CFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0555 Signing time: Sat 28 Feb 2026 01:02:08 +0000 Manifest this update: Sat 28 Feb 2026 00:57:08 +0000 Manifest next update: Tue 03 Mar 2026 06:40:08 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 3: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: OS4ms3PENwQs7S28akkn4Pn24ELxHshZpv69orYEHWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:25:48:ba:3a:2b:28:a5:2d:c6:a7:45:57:a0:08:71:ea:1a:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Feb 28 00:57:08 2026 GMT Not After : Mar 3 06:40:08 2026 GMT Subject: CN=E44C78B407A101F757A9BAE3FCE0B95D12995046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:a7:f4:a2:75:9b:33:ad:51:c7:f5:e4:29: 1f:09:a4:00:57:7a:f5:a4:37:d8:65:f1:fa:e7:8e: a3:78:4f:5a:ef:e4:76:c7:e7:bd:71:7e:60:ed:3a: 59:88:b9:de:88:a0:59:8c:23:29:20:e5:c1:1a:72: 9e:78:9d:ef:3c:1d:5e:3e:3b:f2:7d:dd:cd:e6:02: f6:4c:0b:33:74:40:ef:bf:37:ec:05:a5:42:1d:f4: 1f:6f:cb:09:89:da:6b:41:c9:24:de:e2:89:2c:e3: cf:a8:48:0d:f3:7c:c9:fe:97:49:42:66:96:dd:93: 63:d3:2c:28:7e:71:b8:7c:fb:ce:46:62:1a:46:af: b4:db:5a:37:66:bf:ef:32:54:57:ba:b1:d4:7d:3f: bf:c7:df:a6:83:01:ea:b1:91:de:5b:83:10:d3:6f: cc:c0:c4:dc:fa:2f:62:32:cb:b7:87:df:6c:c4:37: 9f:d9:b2:e5:7a:51:a5:8c:e5:46:86:2c:08:bc:be: 21:f4:10:80:ab:e5:a4:26:c8:4c:b5:03:22:75:cd: 66:dc:c1:cd:33:dc:cb:a1:ea:44:bd:b5:9b:8b:7b: 4c:85:4c:7a:7c:37:b2:d3:0e:f3:1e:37:34:03:29: e7:f2:d9:11:f6:b0:16:84:06:36:8c:79:4c:ee:40: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:78:B4:07:A1:01:F7:57:A9:BA:E3:FC:E0:B9:5D:12:99:50:46 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:29:0b:75:e4:0a:3b:08:c4:e3:e2:51:55:62:e3:e5:f7:3b: fb:ff:f4:89:0c:20:75:f3:50:5e:fc:c3:31:3e:be:e1:b8:b7: 03:c5:26:3c:23:cf:eb:e2:1e:c7:26:76:ee:b3:a7:95:ff:99: f1:e8:d8:cc:e0:88:00:de:b1:29:75:a2:c0:86:ce:01:7b:0b: db:06:a3:a4:3e:78:6e:5b:03:c5:a5:e7:c1:31:85:2f:b6:60: 77:d2:c3:d3:3b:da:0c:72:a2:f8:e8:33:f8:01:a0:e4:08:19: 0c:2f:fc:69:14:25:08:ca:74:35:83:42:9d:f5:8c:60:ca:69: eb:51:c7:b7:af:2e:4a:99:b0:41:15:c3:8d:8b:51:ce:80:9e: 68:46:c5:da:99:0c:3f:09:19:f7:31:f1:c8:37:4f:cc:68:31: 2e:26:83:19:8a:a5:88:fc:ce:33:61:c2:b0:d2:9a:1c:5c:81: 6f:c5:0a:10:8f:70:d5:fd:9c:22:16:34:b6:37:bd:4c:56:07: a1:d0:d5:6a:2b:76:4a:c1:11:e9:da:31:62:a7:f8:ca:e9:9a: 9b:6d:df:f7:6c:03:6f:d0:8f:b7:ee:71:84:38:79:36:16:5a: dd:6b:c7:ac:c5:1b:04:14:df:e2:6f:6d:ae:99:c7:5a:5e:e5: 33:4b:3a:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSVIujorKKUtxqdFV6AIceoaLP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNjAyMjgwMDU3MDhaFw0yNjAzMDMwNjQwMDhaMDMxMTAvBgNV BAMTKEU0NEM3OEI0MDdBMTAxRjc1N0E5QkFFM0ZDRTBCOTVEMTI5OTUwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xaf0onWbM61Rx/XkKR8JpABX evWkN9hl8frnjqN4T1rv5HbH571xfmDtOlmIud6IoFmMIykg5cEacp54ne88HV4+ O/J93c3mAvZMCzN0QO+/N+wFpUId9B9vywmJ2mtBySTe4oks48+oSA3zfMn+l0lC Zpbdk2PTLCh+cbh8+85GYhpGr7TbWjdmv+8yVFe6sdR9P7/H36aDAeqxkd5bgxDT b8zAxNz6L2Iyy7eH32zEN5/ZsuV6UaWM5UaGLAi8viH0EICr5aQmyEy1AyJ1zWbc wc0z3Muh6kS9tZuLe0yFTHp8N7LTDvMeNzQDKefy2RH2sBaEBjaMeUzuQAEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ex4tAehAfdXqbrj/OC5XRKZUEYwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQpC3XkCjsIxOPiUVVi4+X3O/v/9IkMIHXz UF78wzE+vuG4twPFJjwjz+viHscmdu6zp5X/mfHo2MzgiADesSl1osCGzgF7C9sG o6Q+eG5bA8Wl58ExhS+2YHfSw9M72gxyovjoM/gBoOQIGQwv/GkUJQjKdDWDQp31 jGDKaetRx7evLkqZsEEVw42LUc6AnmhGxdqZDD8JGfcx8cg3T8xoMS4mgxmKpYj8 zjNhwrDSmhxcgW/FChCPcNX9nCIWNLY3vUxWB6HQ1WordkrBEenaMWKn+Mrpmptt 3/dsA2/Qj7fucYQ4eTYWWt1rx6zFGwQU3+Jvba6Zx1pe5TNLOmU= -----END CERTIFICATE-----Generated at Mon Mar 2 06:23:30 2026 by rpki-client