$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: xOWpU7h4v8IMs//5FMTPXvrvFpS7sSGi27dQ3EYJ7wQ= Subject key identifier: EB:72:6C:7B:94:B4:7F:83:D2:21:A5:9F:90:49:66:BD:0C:07:23:2A Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 54DC6BD10CDED1FD6C07CFD8F7249609EB31823A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: 0118 Signing time: Mon 02 Mar 2026 09:42:31 +0000 Manifest this update: Mon 02 Mar 2026 09:37:31 +0000 Manifest next update: Thu 05 Mar 2026 10:50:31 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: v07cLtDU8hd2FBYRGUAZ3WQZco+fgXGEiO9GQiour8w=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:dc:6b:d1:0c:de:d1:fd:6c:07:cf:d8:f7:24:96:09:eb:31:82:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Mar 2 09:37:31 2026 GMT Not After : Mar 5 10:50:31 2026 GMT Subject: CN=EB726C7B94B47F83D221A59F904966BD0C07232A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:63:ce:84:a0:91:73:32:c5:22:8b:fe:9a: 2d:38:da:b0:92:5f:ee:05:ee:b4:94:6d:39:53:67: 9c:8d:fc:34:25:67:16:e6:88:f7:a4:18:fa:53:41: 86:2e:4e:b1:0c:6c:3f:8c:3c:50:f8:b1:13:1c:d9: ce:68:49:3d:94:1c:fa:a8:24:5c:2d:ef:42:63:ea: e2:df:eb:47:a4:62:63:9d:05:19:5c:49:9d:45:08: a2:a9:44:5d:26:14:a5:45:a8:17:d1:52:c5:c0:25: 21:3a:b3:a7:f6:e2:28:ef:a3:73:d6:1b:05:5f:52: f4:0e:8c:28:eb:cb:97:a6:89:e7:89:03:52:58:2e: 8a:4c:60:d1:eb:25:3f:9f:b0:7f:6f:f1:00:87:c7: 11:71:f6:46:12:2e:37:4d:42:fd:9a:0b:f2:2c:9a: f5:6f:20:b3:df:72:d6:80:d2:6a:28:19:c3:82:db: 2b:bc:d2:e3:20:92:9e:0d:3c:9f:66:5b:44:9d:68: 31:00:24:f1:01:61:a7:13:d8:f0:1d:de:45:7b:2a: b3:da:21:8f:c7:26:57:1b:15:73:98:83:5d:a5:3e: c6:fd:20:ff:1a:b9:f3:c6:29:9f:f7:c8:97:d1:7d: 27:0b:7e:9e:2b:b3:fb:f2:e5:5b:ef:e7:86:24:a3: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:72:6C:7B:94:B4:7F:83:D2:21:A5:9F:90:49:66:BD:0C:07:23:2A X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:01:b9:b4:0b:a3:34:d6:d9:05:92:3f:4b:c6:9d:32:ef:e5: 05:c5:57:a8:9d:4b:33:78:0e:ce:9b:ec:0c:33:01:07:7e:04: 9e:dc:0d:ff:db:b1:c9:01:a7:7c:77:fc:6b:6f:5f:8d:cd:58: 3a:66:bb:d3:4f:d4:ac:67:2d:33:3f:d1:64:b3:5c:b6:5e:27: 68:18:cf:09:83:da:4e:86:d6:83:03:e6:4d:dd:72:a7:5c:a9: ec:df:51:16:87:73:76:ca:97:90:d1:b4:3a:b4:1f:ca:a9:93: ae:13:ac:64:59:e6:d2:14:a2:8f:28:0b:e4:c4:95:fe:da:9c: 0a:c9:be:25:29:e9:db:e4:9f:0e:1f:4e:47:1d:61:e2:07:90: 02:31:cd:64:b7:7b:b3:be:b6:9a:c4:f9:ef:6a:39:d6:4b:bc: 8f:62:c6:f7:8f:6b:c6:5c:85:20:90:8a:ec:e8:1a:57:b6:29: 43:c5:b3:85:1b:cf:0f:b4:6a:ef:91:af:18:6e:76:76:a3:98: f7:8a:3d:fe:3d:fb:6f:82:49:e8:4c:e9:06:5c:6d:39:51:ac: 5e:5a:d0:87:90:d4:f7:9f:b4:d5:3a:94:59:ec:61:7d:0f:6b: 4e:2f:e6:8d:aa:64:84:7f:b6:62:05:f8:45:d9:cc:2a:f2:c1: d8:82:4c:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNxr0Qze0f1sB8/Y9ySWCesxgjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNjAzMDIwOTM3MzFaFw0yNjAzMDUxMDUwMzFaMDMxMTAvBgNV BAMTKEVCNzI2QzdCOTRCNDdGODNEMjIxQTU5RjkwNDk2NkJEMEMwNzIzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpGPOhKCRczLFIov+mi042rCS X+4F7rSUbTlTZ5yN/DQlZxbmiPekGPpTQYYuTrEMbD+MPFD4sRMc2c5oST2UHPqo JFwt70Jj6uLf60ekYmOdBRlcSZ1FCKKpRF0mFKVFqBfRUsXAJSE6s6f24ijvo3PW GwVfUvQOjCjry5emieeJA1JYLopMYNHrJT+fsH9v8QCHxxFx9kYSLjdNQv2aC/Is mvVvILPfctaA0mooGcOC2yu80uMgkp4NPJ9mW0SdaDEAJPEBYacT2PAd3kV7KrPa IY/HJlcbFXOYg12lPsb9IP8aufPGKZ/3yJfRfScLfp4rs/vy5Vvv54Yko45xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63Jse5S0f4PSIaWfkElmvQwHIyowHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUBubQLozTW2QWSP0vGnTLv5QXFV6idSzN4 Ds6b7AwzAQd+BJ7cDf/bsckBp3x3/GtvX43NWDpmu9NP1KxnLTM/0WSzXLZeJ2gY zwmD2k6G1oMD5k3dcqdcqezfURaHc3bKl5DRtDq0H8qpk64TrGRZ5tIUoo8oC+TE lf7anArJviUp6dvknw4fTkcdYeIHkAIxzWS3e7O+tprE+e9qOdZLvI9ixvePa8Zc hSCQiuzoGle2KUPFs4Ubzw+0au+RrxhudnajmPeKPf49+2+CSehM6QZcbTlRrF5a 0IeQ1PeftNU6lFnsYX0Pa04v5o2qZIR/tmIF+EXZzCrywdiCTP0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:07:09 2026 by rpki-client