$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: SPQlqQIgVumr8s9VpJR5qysktPzwy4ZjVtyRiE2Dk/8= Subject key identifier: 52:31:F4:5A:EA:3E:27:A3:D2:94:7B:68:C3:DA:CA:24:0B:69:FF:0D Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 2BCB0107D9CDEECF80C6D09D7405B0E8E19566F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 02AC Signing time: Sun 01 Mar 2026 17:42:01 +0000 Manifest this update: Sun 01 Mar 2026 17:37:01 +0000 Manifest next update: Thu 05 Mar 2026 00:18:01 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=) 3: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=) 4: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: FXvkJHha6C3TE+1AYDGitE7Ql1LCYz1rG2s/cNBKU80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:cb:01:07:d9:cd:ee:cf:80:c6:d0:9d:74:05:b0:e8:e1:95:66:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Mar 1 17:37:01 2026 GMT Not After : Mar 5 00:18:01 2026 GMT Subject: CN=5231F45AEA3E27A3D2947B68C3DACA240B69FF0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:6c:4c:01:0e:0d:4d:6e:76:c1:71:85:5a: 3c:7f:b7:67:c7:05:72:2b:61:1f:59:f0:31:78:d4: df:0c:d7:00:38:09:6f:bf:64:b3:c1:62:cc:1f:7c: 6f:a8:02:b8:71:bd:4d:60:0e:af:df:18:ba:2f:02: e4:9d:08:84:91:b5:65:a8:0d:70:5b:79:46:5b:fe: b6:59:f2:91:cf:89:e5:c0:d1:95:86:ff:ac:07:b8: 04:1a:af:92:da:0e:f4:2e:06:4d:2b:95:f8:ca:ed: 27:ef:16:5f:a9:7b:29:33:fa:2b:4b:43:98:56:52: 1a:67:f3:80:0a:1a:29:ac:c0:db:cc:57:f7:be:f3: 04:02:4b:f4:7a:4a:77:1b:57:3d:35:2c:75:4d:8b: 6e:cb:a6:cb:3c:0e:8d:a5:bd:48:29:64:ed:00:7f: 45:50:2d:e5:c2:1e:4d:1c:6d:f2:43:ee:2c:8b:58: ed:33:d0:a4:ac:8b:5c:43:3a:d0:64:16:47:dc:85: 6b:85:dd:b4:0d:fa:37:7b:5f:c5:08:ed:cb:d5:d0: 54:de:28:98:32:fe:62:1e:1f:5f:88:74:7f:03:44: bd:ba:3d:e4:7d:cb:57:5b:59:9b:64:80:86:29:5e: 95:fe:87:71:8e:5e:b8:3c:01:50:cc:bc:e5:62:b6: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:31:F4:5A:EA:3E:27:A3:D2:94:7B:68:C3:DA:CA:24:0B:69:FF:0D X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a5:92:d5:a2:aa:58:20:94:2a:c8:f1:18:af:2b:42:a6:0f: 25:66:56:40:b3:18:fe:ea:ee:99:51:38:58:3d:7d:2f:fa:8b: 46:b1:53:29:f8:79:4a:51:86:4d:d8:d1:4c:40:0e:a8:ad:ed: fb:82:04:c5:18:1b:dd:88:87:57:f8:88:4e:5f:b3:80:b2:a9: eb:ff:70:e4:fc:33:f6:91:79:75:35:00:54:d6:72:61:91:05: 2f:8b:4d:c9:72:27:db:dd:78:9a:5c:ab:37:11:43:18:c8:ab: 6d:96:f1:13:b8:4c:bf:e3:e4:15:f1:a9:60:fa:09:27:75:af: 3b:3a:01:54:fb:43:7b:7d:c9:e4:eb:de:ac:ff:f4:51:50:e1: 39:01:69:ad:af:e3:6f:6c:ec:9e:68:4a:6a:08:4e:5d:b0:26: dc:51:6b:6c:80:d2:37:e8:52:58:3d:7d:a8:83:3f:69:ac:40: 0c:95:57:cc:2c:56:03:e0:0b:9f:1e:8f:b6:32:61:79:b9:55: 7e:18:02:95:cc:da:7c:09:32:74:e1:50:bf:6b:b0:72:9c:cd: 32:59:84:72:5d:9e:23:56:a4:93:30:64:82:5e:0e:fa:33:35: e2:ae:70:2c:23:ee:d8:87:9e:b4:1d:80:43:10:19:af:21:5e: c6:25:44:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8sBB9nN7s+AxtCddAWw6OGVZvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNjAzMDExNzM3MDFaFw0yNjAzMDUwMDE4MDFaMDMxMTAvBgNV BAMTKDUyMzFGNDVBRUEzRTI3QTNEMjk0N0I2OEMzREFDQTI0MEI2OUZGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5WxMAQ4NTW52wXGFWjx/t2fH BXIrYR9Z8DF41N8M1wA4CW+/ZLPBYswffG+oArhxvU1gDq/fGLovAuSdCISRtWWo DXBbeUZb/rZZ8pHPieXA0ZWG/6wHuAQar5LaDvQuBk0rlfjK7SfvFl+peykz+itL Q5hWUhpn84AKGimswNvMV/e+8wQCS/R6SncbVz01LHVNi27Lpss8Do2lvUgpZO0A f0VQLeXCHk0cbfJD7iyLWO0z0KSsi1xDOtBkFkfchWuF3bQN+jd7X8UI7cvV0FTe KJgy/mIeH1+IdH8DRL26PeR9y1dbWZtkgIYpXpX+h3GOXrg8AVDMvOVithFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjH0Wuo+J6PSlHtow9rKJAtp/w0wHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6lktWiqlgglCrI8RivK0KmDyVmVkCzGP7q 7plROFg9fS/6i0axUyn4eUpRhk3Y0UxADqit7fuCBMUYG92Ih1f4iE5fs4Cyqev/ cOT8M/aReXU1AFTWcmGRBS+LTclyJ9vdeJpcqzcRQxjIq22W8RO4TL/j5BXxqWD6 CSd1rzs6AVT7Q3t9yeTr3qz/9FFQ4TkBaa2v429s7J5oSmoITl2wJtxRa2yA0jfo Ulg9faiDP2msQAyVV8wsVgPgC58ej7YyYXm5VX4YApXM2nwJMnThUL9rsHKczTJZ hHJdniNWpJMwZIJeDvozNeKucCwj7tiHnrQdgEMQGa8hXsYlRAk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:52 2026 by rpki-client