$ rpki-client -vvf repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft (raw, json) Hash identifier: SBlOdinqNaKJZnvsPfQm+xom+uWNWHN7ZebcFAxleTs= Subject key identifier: 54:4E:7B:B3:FF:40:59:B0:C9:6A:AF:03:40:71:D0:20:B6:10:76:BD Authority key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Certificate issuer: /CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Certificate serial: 3D423AD11691BD12994BB9018613D0CCD63D7F4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft Manifest number: 0554 Signing time: Sat 28 Feb 2026 12:42:21 +0000 Manifest this update: Sat 28 Feb 2026 12:37:21 +0000 Manifest next update: Tue 03 Mar 2026 12:51:21 +0000 Files and hashes: 1: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: fC+4pLH4upbRJiJYtSpDhyvCOyqsm8KVDJLsLZlAJfs=) 2: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: 3VPC2jTp4UheTC+oF+eJLG0wRoEjVA5eKjIxD8N5Uh0=) 3: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: EV88jOIELhWBAVSmJqvptwA4m5UyL3dS/vav1cA94d8=) 4: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: 9T03XiS2C6Ixb+0gY6hBiP7ITeOtcYnJd0bPsi6ffrI=) 5: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl (hash: Yf36v5TJYk+9WoA+Q0zCYV9f8ObroOH6VkZZl4tFdB8=) 6: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: LxNIC9GUMk4NDV//CAiwhidJ9aXKaAFBBW+ysgKoUy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:42:3a:d1:16:91:bd:12:99:4b:b9:01:86:13:d0:cc:d6:3d:7f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Validity Not Before: Feb 28 12:37:21 2026 GMT Not After : Mar 3 12:51:21 2026 GMT Subject: CN=544E7BB3FF4059B0C96AAF034071D020B61076BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:c7:b5:a9:20:d2:39:3f:8c:3d:b4:0d:0a: 7c:72:a6:27:6a:42:7d:15:a3:96:41:43:5a:13:6f: ea:ef:8f:73:cb:01:6e:26:53:7d:68:39:0f:59:ef: e8:e1:f3:e2:05:69:5c:b6:73:54:76:04:b9:3b:d4: af:35:83:71:c3:8a:73:6a:58:53:0a:e8:b9:8b:dd: 28:d6:27:ff:d2:af:9f:7f:43:6e:2e:25:c0:0a:03: b1:15:3e:59:77:7d:f5:3c:93:4b:ab:f3:2e:d5:65: 25:b6:87:d2:80:4a:13:80:82:3d:41:6d:24:31:14: 12:68:c2:20:42:9f:43:ab:9e:6f:b8:d4:ae:de:ae: dd:fc:84:44:d7:83:7c:62:72:4a:09:5d:f6:ad:ba: 6a:70:d7:f4:f6:5c:7b:9a:ed:36:6d:9e:08:a8:60: 82:cc:17:55:9a:22:6c:7d:ff:b1:53:02:1f:d4:bd: b9:2a:44:f3:ae:8c:03:2c:26:ba:bb:fc:3d:fc:ef: 28:74:ec:38:29:bb:c6:53:d0:0f:0d:7a:94:51:a7: 16:08:7b:fb:52:d2:57:d3:26:77:20:bd:f5:33:85: 80:dd:4d:0b:3d:72:2c:f2:ac:1b:ba:eb:5a:23:d6: 24:9a:d5:86:94:d8:92:b9:86:e3:9f:eb:6a:fd:08: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4E:7B:B3:FF:40:59:B0:C9:6A:AF:03:40:71:D0:20:B6:10:76:BD X509v3 Authority Key Identifier: keyid:8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ee:b9:92:c2:f6:03:51:46:61:34:05:b0:2e:e0:4f:1c:69: 13:9f:98:84:96:f9:87:1b:a3:b6:83:d9:98:cb:e8:e0:b9:9c: 61:ef:e9:85:dd:71:ce:94:ad:4e:df:bf:28:12:f9:76:66:3f: c7:62:02:da:56:ca:30:b9:0c:22:ed:7a:34:1c:a5:8d:9f:1b: 2f:9c:e0:b1:b7:cf:1f:ec:e8:2e:95:39:3b:a9:31:49:bf:3a: 64:ef:f3:90:73:06:77:e9:e8:f7:40:6f:ce:01:ae:91:98:00: 25:97:f8:4b:0c:da:a4:20:f2:e5:7b:b6:9e:ed:61:e1:95:83: f8:8e:ba:68:e1:45:6d:3c:af:8b:fc:eb:01:79:e3:1d:61:a5: e0:13:53:1a:86:52:79:7a:e8:f4:a8:71:cc:fe:23:41:ba:65: d7:4c:78:4b:b2:e4:c3:1d:8d:e6:ee:cb:71:63:2c:f4:2c:1e: 96:b8:00:27:f1:7f:c9:cf:7b:06:48:92:b5:02:53:ec:eb:8b: f2:ad:b9:7d:59:51:53:27:3e:f1:a9:10:b6:87:87:9d:36:04: dc:ce:ae:d3:fa:77:0b:b7:08:e9:21:e7:f6:5e:2e:c3:b8:5e: d8:87:48:6f:09:40:43:cd:fe:d1:17:a3:52:44:c3:c6:5e:52: 07:28:0d:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUI60RaRvRKZS7kBhhPQzNY9f0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1 NjNERkU3MjAeFw0yNjAyMjgxMjM3MjFaFw0yNjAzMDMxMjUxMjFaMDMxMTAvBgNV BAMTKDU0NEU3QkIzRkY0MDU5QjBDOTZBQUYwMzQwNzFEMDIwQjYxMDc2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ose1qSDSOT+MPbQNCnxypidq Qn0Vo5ZBQ1oTb+rvj3PLAW4mU31oOQ9Z7+jh8+IFaVy2c1R2BLk71K81g3HDinNq WFMK6LmL3SjWJ//Sr59/Q24uJcAKA7EVPll3ffU8k0ur8y7VZSW2h9KAShOAgj1B bSQxFBJowiBCn0Ornm+41K7ert38hETXg3xickoJXfatumpw1/T2XHua7TZtngio YILMF1WaImx9/7FTAh/UvbkqRPOujAMsJrq7/D387yh07Dgpu8ZT0A8NepRRpxYI e/tS0lfTJncgvfUzhYDdTQs9cizyrBu661oj1iSa1YaU2JK5huOf62r9CPtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVE57s/9AWbDJaq8DQHHQILYQdr0wHwYDVR0j BBgwFoAUje2rrSGtGmvvJ+kfzuMEZVY9/nIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMC84REVEQUJBRDIx QUQxQTZCRUYyN0U5MUZDRUUzMDQ2NTU2M0RGRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0NjU1NjNE RkU3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvOERFREFCQUQyMUFEMUE2QkVGMjdFOTFGQ0VFMzA0 NjU1NjNERkU3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjuuZLC9gNRRmE0BbAu4E8caROfmISW+Ycb o7aD2ZjL6OC5nGHv6YXdcc6UrU7fvygS+XZmP8diAtpWyjC5DCLtejQcpY2fGy+c 4LG3zx/s6C6VOTupMUm/OmTv85BzBnfp6PdAb84BrpGYACWX+EsM2qQg8uV7tp7t YeGVg/iOumjhRW08r4v86wF54x1hpeATUxqGUnl66PSoccz+I0G6ZddMeEuy5MMd jebuy3FjLPQsHpa4ACfxf8nPewZIkrUCU+zri/KtuX1ZUVMnPvGpELaHh502BNzO rtP6dwu3COkh5/ZeLsO4XtiHSG8JQEPN/tEXo1JEw8ZeUgcoDQs= -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:45 2026 by rpki-client