$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: Sp8e/qXI+mi5X9kecl+0ZKaMopoKwlv/XJxlkp5Xdmo= Subject key identifier: 4E:0A:BF:3F:3D:D8:E2:47:7A:D6:24:5D:C2:6D:C3:87:6C:CC:1C:97 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 30FAF8204760AAB7B25522909BBB5934C5339535 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 010F Signing time: Sat 28 Feb 2026 09:50:47 +0000 Manifest this update: Sat 28 Feb 2026 09:45:47 +0000 Manifest next update: Tue 03 Mar 2026 18:53:47 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: 49zTPUkyq776PYNw5KL5TPBRj/aRf9Sn2jeEQuKLZ1Q=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fa:f8:20:47:60:aa:b7:b2:55:22:90:9b:bb:59:34:c5:33:95:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Feb 28 09:45:47 2026 GMT Not After : Mar 3 18:53:47 2026 GMT Subject: CN=4E0ABF3F3DD8E2477AD6245DC26DC3876CCC1C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2c:84:aa:9a:4d:96:62:6a:64:f2:fe:82:01: d2:81:a2:fb:14:87:6f:f2:c2:79:92:74:32:85:b2: 5d:e6:c5:ac:cc:72:d0:ef:d2:c3:78:e7:63:26:26: b3:38:af:e0:82:2b:4d:cc:17:1c:a9:fd:de:d4:3f: e7:97:a5:b3:01:bb:ff:e5:d8:86:3f:e4:9e:82:c4: 4f:06:2e:41:fb:22:d4:6b:e2:bb:94:68:44:78:15: 86:84:0d:a5:87:cb:a1:c7:36:60:ee:53:67:d1:8b: 72:5b:c8:98:4e:bf:e8:98:bb:19:cb:02:00:72:d0: 37:5c:bb:21:85:9d:e7:1f:be:e7:d4:e0:dc:9d:ee: 19:ed:fc:f1:4b:66:f5:78:40:0a:6f:e4:95:e6:ea: eb:42:9f:21:dd:4b:f6:29:ad:fb:cc:79:e5:91:f8: 97:7d:23:fc:2c:0f:01:c8:18:6d:fa:23:d9:53:3a: 02:4f:f9:a5:67:f8:71:89:36:14:d7:9d:c7:57:37: 95:14:88:ec:34:b7:57:e3:05:4b:a8:b7:52:f8:95: 8f:00:2f:d7:2a:ad:78:89:66:33:d8:f4:ac:1b:82: a1:a7:7e:35:0c:38:b8:ac:87:6a:14:72:3b:ea:ab: c4:16:dd:b0:3e:c2:bd:97:28:0a:ac:47:78:2d:e4: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:BF:3F:3D:D8:E2:47:7A:D6:24:5D:C2:6D:C3:87:6C:CC:1C:97 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6d:00:e4:64:1c:44:f6:ea:92:99:4b:97:e1:03:55:ef:29: a2:e4:83:33:65:fd:62:fa:95:67:09:86:84:6e:75:54:e4:d8: c8:c8:48:b9:25:8e:fc:d7:5c:3b:65:fc:02:bd:17:ea:b6:80: c3:5f:03:2a:9c:a5:54:20:cc:91:83:cf:53:03:aa:75:10:c3: 2b:2c:8f:8b:1e:7c:e8:cf:e4:5d:85:02:30:e3:0c:c5:34:ab: 7f:2b:84:9a:bb:2e:ab:68:7d:ff:c4:69:fb:5a:fa:cd:00:8d: 50:79:d0:ab:99:e9:a3:08:d1:e2:e6:4c:e2:62:0e:29:c2:db: 4f:04:ec:c0:c5:e2:fa:ed:e0:9c:92:7e:51:af:2c:ee:87:05: e8:3b:f7:af:77:6b:a3:0d:1d:00:f4:51:05:cf:df:c5:d2:d6: 44:de:2d:c3:44:85:e2:41:4d:0c:c5:35:4b:f4:cc:de:8f:8a: c6:e8:5a:59:e6:17:b9:11:58:06:40:c8:a1:43:1a:00:cc:95: 79:b1:94:68:d8:83:23:c9:d7:7e:38:1b:b4:b5:49:c8:3f:ef: 85:ba:f6:e1:9a:bd:3f:19:f2:6f:01:9c:e1:13:fa:91:75:27: 3b:e5:92:28:d3:fe:26:e3:c7:80:02:01:91:19:d5:ed:cc:f8: c8:0d:2d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPr4IEdgqreyVSKQm7tZNMUzlTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNjAyMjgwOTQ1NDdaFw0yNjAzMDMxODUzNDdaMDMxMTAvBgNV BAMTKDRFMEFCRjNGM0REOEUyNDc3QUQ2MjQ1REMyNkRDMzg3NkNDQzFDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmLISqmk2WYmpk8v6CAdKBovsU h2/ywnmSdDKFsl3mxazMctDv0sN452MmJrM4r+CCK03MFxyp/d7UP+eXpbMBu//l 2IY/5J6CxE8GLkH7ItRr4ruUaER4FYaEDaWHy6HHNmDuU2fRi3JbyJhOv+iYuxnL AgBy0DdcuyGFnecfvufU4Nyd7hnt/PFLZvV4QApv5JXm6utCnyHdS/YprfvMeeWR +Jd9I/wsDwHIGG36I9lTOgJP+aVn+HGJNhTXncdXN5UUiOw0t1fjBUuot1L4lY8A L9cqrXiJZjPY9KwbgqGnfjUMOLish2oUcjvqq8QW3bA+wr2XKAqsR3gt5FP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgq/Pz3Y4kd61iRdwm3Dh2zMHJcwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhtAORkHET26pKZS5fhA1XvKaLkgzNl/WL6 lWcJhoRudVTk2MjISLkljvzXXDtl/AK9F+q2gMNfAyqcpVQgzJGDz1MDqnUQwyss j4sefOjP5F2FAjDjDMU0q38rhJq7Lqtoff/Eafta+s0AjVB50KuZ6aMI0eLmTOJi DinC208E7MDF4vrt4JySflGvLO6HBeg79693a6MNHQD0UQXP38XS1kTeLcNEheJB TQzFNUv0zN6PisboWlnmF7kRWAZAyKFDGgDMlXmxlGjYgyPJ1344G7S1Scg/74W6 9uGavT8Z8m8BnOET+pF1JzvlkijT/ibjx4ACAZEZ1e3M+MgNLU8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:30:12 2026 by rpki-client