$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: QdAFKdxGZH6uVGYqXtX6AmN/7RvkoYcjEe7Gs6qE7TQ= Subject key identifier: BE:E7:16:18:F3:AC:AA:D5:26:54:7A:74:1A:87:0E:A3:D4:B6:06:F4 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 19122F92805F815AE16D3E80105DC7D3A005CB39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: F8 Signing time: Mon 02 Mar 2026 08:20:53 +0000 Manifest this update: Mon 02 Mar 2026 08:15:53 +0000 Manifest next update: Thu 05 Mar 2026 11:54:53 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: NLnyyxEhnshl8M0vZmmh6y422VBLzdBQzG682UNLOQc=) 2: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: OJeztSNPa6Ny2Jrl9pv1yxSSkQT/t6rbcjh/ieoX/VA=) 3: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: 9NuukBIDDZ7f6DuKuIwjkGDhtnMzcPyVVkUYuDF3dPM=) 4: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: 8KnfI0d1sulWwsMwMm+M8qTLrrXkGvZnrFDepOnzrhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:12:2f:92:80:5f:81:5a:e1:6d:3e:80:10:5d:c7:d3:a0:05:cb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Mar 2 08:15:53 2026 GMT Not After : Mar 5 11:54:53 2026 GMT Subject: CN=BEE71618F3ACAAD526547A741A870EA3D4B606F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:a6:72:af:07:a6:be:a9:df:cb:1f:03:ac: 57:b8:d8:59:04:12:3a:a8:0b:b7:45:a8:ea:4a:46: ce:c2:01:ac:c2:3e:5f:60:12:4a:3f:30:ca:30:2c: ab:79:83:c4:7e:1e:22:df:30:ff:fb:9e:94:44:78: 56:40:73:33:d7:da:de:ff:2a:84:4a:df:d9:0c:f3: 03:c4:be:41:c0:5f:6a:94:90:05:6d:dd:c1:ef:89: 2c:b9:ca:0c:8f:13:78:64:17:73:95:32:a2:84:51: 59:d9:62:f1:a7:00:7e:fd:5f:cb:d9:b3:4a:86:77: e3:11:ab:cf:9a:03:a9:76:d3:f7:c7:86:bf:0d:0b: d6:98:e0:e1:69:88:ae:98:08:6c:f3:65:36:0a:a6: 53:7f:4a:94:72:32:c0:32:6c:3f:7a:6f:be:44:4a: 49:54:c2:8e:fa:9f:cb:22:52:92:9c:13:c1:cb:8c: 32:2f:a7:97:d2:78:b0:94:12:7b:2d:63:2d:5f:ca: 6b:6b:44:2a:eb:13:58:7b:4d:f0:e5:71:14:77:4b: 50:21:d5:c4:0f:b1:a7:87:5c:b5:95:9c:e1:8b:f1: a5:34:50:76:36:bf:36:e3:30:98:72:b7:bb:cb:e7: 97:61:05:3b:94:28:2f:5f:fb:ec:5a:dd:aa:93:f8: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:16:18:F3:AC:AA:D5:26:54:7A:74:1A:87:0E:A3:D4:B6:06:F4 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b2:e7:ec:42:4c:ba:cc:5f:db:b5:33:1d:7b:ee:0b:6e:a6: fa:8f:ea:fa:9c:f3:66:86:fa:1c:1c:ad:87:91:32:ef:af:4a: f0:79:ad:51:d3:bf:6f:62:ee:84:c4:c7:5c:6b:b9:c5:4b:02: 3f:d5:67:b5:32:9c:56:65:f0:73:8a:1e:7a:78:75:64:c6:9b: 36:de:67:55:40:02:1d:a3:03:36:a0:b5:c3:c8:0c:67:cb:a9: 46:2c:aa:58:53:3c:54:c2:be:70:60:66:1a:51:15:98:89:71: d0:c7:30:6e:20:30:c6:73:65:8d:fa:d7:1c:01:c0:93:14:01: 1c:ef:4e:a2:a2:3f:9f:86:b3:d3:b5:55:26:25:4c:da:86:38: 7e:0b:11:3d:63:f0:74:6e:e7:2b:1e:c9:74:3f:94:de:2b:59: 77:c2:0c:23:69:1a:21:1c:c9:92:7b:31:9c:ed:52:57:14:18: 58:cb:20:b6:dc:60:fb:33:df:b9:82:c2:6e:ed:57:99:a8:af: 1f:41:52:2f:84:b8:a0:61:c7:6e:44:11:14:23:49:5a:ec:5c: 5e:21:e6:dd:c8:42:2a:c4:4b:40:ee:8c:93:3c:4b:e4:4c:9d: 44:ab:85:16:0e:2c:6f:5a:a8:3b:62:8a:69:99:f7:0e:00:f8: cf:95:ec:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRIvkoBfgVrhbT6AEF3H06AFyzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNjAzMDIwODE1NTNaFw0yNjAzMDUxMTU0NTNaMDMxMTAvBgNV BAMTKEJFRTcxNjE4RjNBQ0FBRDUyNjU0N0E3NDFBODcwRUEzRDRCNjA2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSqZyrwemvqnfyx8DrFe42FkE EjqoC7dFqOpKRs7CAazCPl9gEko/MMowLKt5g8R+HiLfMP/7npREeFZAczPX2t7/ KoRK39kM8wPEvkHAX2qUkAVt3cHviSy5ygyPE3hkF3OVMqKEUVnZYvGnAH79X8vZ s0qGd+MRq8+aA6l20/fHhr8NC9aY4OFpiK6YCGzzZTYKplN/SpRyMsAybD96b75E SklUwo76n8siUpKcE8HLjDIvp5fSeLCUEnstYy1fymtrRCrrE1h7TfDlcRR3S1Ah 1cQPsaeHXLWVnOGL8aU0UHY2vzbjMJhyt7vL55dhBTuUKC9f++xa3aqT+GF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvucWGPOsqtUmVHp0GocOo9S2BvQwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKy5+xCTLrMX9u1Mx177gtupvqP6vqc82aG +hwcrYeRMu+vSvB5rVHTv29i7oTEx1xrucVLAj/VZ7UynFZl8HOKHnp4dWTGmzbe Z1VAAh2jAzagtcPIDGfLqUYsqlhTPFTCvnBgZhpRFZiJcdDHMG4gMMZzZY361xwB wJMUARzvTqKiP5+Gs9O1VSYlTNqGOH4LET1j8HRu5yseyXQ/lN4rWXfCDCNpGiEc yZJ7MZztUlcUGFjLILbcYPsz37mCwm7tV5morx9BUi+EuKBhx25EERQjSVrsXF4h 5t3IQirES0DujJM8S+RMnUSrhRYOLG9aqDtiimmZ9w4A+M+V7HA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:31:06 2026 by rpki-client