$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: Of94F73J6KYXs8znZ3bJ9b8xHYNRVTNhmvmwnTMJMgk= Subject key identifier: A8:3F:54:53:D1:18:7E:9A:F7:78:A0:D4:1A:B9:1F:F1:10:BD:C3:4C Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 774C346D3F89A19A9F32C2697FF229625393CB58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 0556 Signing time: Mon 02 Mar 2026 02:01:57 +0000 Manifest this update: Mon 02 Mar 2026 01:56:57 +0000 Manifest next update: Thu 05 Mar 2026 02:50:57 +0000 Files and hashes: 1: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 4: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: fWFQLKt8RHFn8CH/dNP2SvsEg/zti7KFbTpxkIhBF5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4c:34:6d:3f:89:a1:9a:9f:32:c2:69:7f:f2:29:62:53:93:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Mar 2 01:56:57 2026 GMT Not After : Mar 5 02:50:57 2026 GMT Subject: CN=A83F5453D1187E9AF778A0D41AB91FF110BDC34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:37:7e:91:ff:22:07:d0:8a:9b:c7:31:99: 3b:de:03:d1:cb:57:1f:df:14:69:12:82:7a:c5:4d: 09:7e:42:f2:80:4b:de:84:25:df:13:b1:c3:f5:5f: a6:5e:92:f0:19:d6:af:2b:5d:b8:f5:15:ed:b0:0d: 6e:f4:a5:f3:6d:b8:65:4a:a7:29:69:d7:75:91:0a: 92:05:59:0b:9a:c3:8b:32:c0:de:4b:b0:e5:63:9d: 1e:8c:36:f7:e9:30:42:f3:2b:97:27:a7:b5:fd:2c: dd:40:e8:1d:9e:73:97:bd:78:e8:29:3c:89:80:d4: 0d:66:55:3a:b5:54:fd:75:08:f9:15:33:90:26:e1: 05:69:78:07:62:41:13:32:9b:74:41:61:61:51:38: 5c:e8:bf:22:93:9e:6c:1d:9e:c5:22:fc:54:a6:fb: 20:38:1e:80:dd:3a:56:96:af:27:af:3f:64:b8:79: 02:e4:06:78:63:cb:63:d2:16:12:c0:ca:a8:99:f4: cc:e1:29:da:aa:b1:69:e4:67:1b:21:5b:f9:14:4a: f0:70:3c:5f:c3:3c:be:b6:5a:ba:fb:e3:5c:64:89: e0:58:6f:2a:a1:8a:19:df:d6:0a:85:b1:48:c0:cb: ed:73:0e:af:aa:5d:9f:3f:d1:a8:51:9f:c3:33:c6: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3F:54:53:D1:18:7E:9A:F7:78:A0:D4:1A:B9:1F:F1:10:BD:C3:4C X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:63:13:33:0b:ec:1d:71:df:ca:5a:dc:ce:02:c8:70:1e:2d: d1:42:ad:25:58:ee:ba:dc:32:0b:d4:98:99:8b:eb:b6:a8:4d: 82:5d:c2:6c:06:74:af:f0:b9:fc:fc:cb:ac:aa:08:40:e8:4e: 89:e8:2c:81:ab:e0:8a:03:85:bb:64:57:9b:3a:39:3b:32:ce: 72:6d:39:e8:26:57:98:36:e4:3a:60:54:a5:af:da:68:92:e1: 98:e6:24:4f:37:4e:96:55:5a:de:cd:07:1e:bc:81:0d:89:51: c7:85:d5:e5:1e:48:96:e1:f2:2f:21:0d:85:57:e0:87:7f:cd: e2:23:3c:b7:96:49:08:47:9c:83:8c:d7:06:13:ef:e8:2f:56: 2e:85:54:d1:8c:b2:ed:97:e1:4d:f8:19:c0:ee:9f:00:ab:94: 71:7a:3e:20:82:a9:fb:e2:ee:7d:81:e6:07:31:b0:31:f0:25: 11:12:d0:e8:23:0f:b1:f1:c3:7a:a7:2e:a6:c4:bc:3a:93:e9: 5e:3a:65:f3:49:f6:0e:8e:24:9c:fd:57:a3:b7:b6:6f:9f:f9: 42:6f:30:25:d7:47:7b:47:2e:89:35:2e:7e:b9:d5:3f:67:0d: 15:8b:d5:b7:d9:20:0b:a0:aa:94:23:a9:a2:cc:c0:cb:86:87: 32:9f:f3:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0w0bT+JoZqfMsJpf/IpYlOTy1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNjAzMDIwMTU2NTdaFw0yNjAzMDUwMjUwNTdaMDMxMTAvBgNV BAMTKEE4M0Y1NDUzRDExODdFOUFGNzc4QTBENDFBQjkxRkYxMTBCREMzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRzd+kf8iB9CKm8cxmTveA9HL Vx/fFGkSgnrFTQl+QvKAS96EJd8TscP1X6ZekvAZ1q8rXbj1Fe2wDW70pfNtuGVK pylp13WRCpIFWQuaw4sywN5LsOVjnR6MNvfpMELzK5cnp7X9LN1A6B2ec5e9eOgp PImA1A1mVTq1VP11CPkVM5Am4QVpeAdiQRMym3RBYWFROFzovyKTnmwdnsUi/FSm +yA4HoDdOlaWryevP2S4eQLkBnhjy2PSFhLAyqiZ9MzhKdqqsWnkZxshW/kUSvBw PF/DPL62Wrr741xkieBYbyqhihnf1gqFsUjAy+1zDq+qXZ8/0ahRn8MzxnhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqD9UU9EYfpr3eKDUGrkf8RC9w0wwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZjEzML7B1x38pa3M4CyHAeLdFCrSVY7rrc MgvUmJmL67aoTYJdwmwGdK/wufz8y6yqCEDoTonoLIGr4IoDhbtkV5s6OTsyznJt OegmV5g25DpgVKWv2miS4ZjmJE83TpZVWt7NBx68gQ2JUceF1eUeSJbh8i8hDYVX 4Id/zeIjPLeWSQhHnIOM1wYT7+gvVi6FVNGMsu2X4U34GcDunwCrlHF6PiCCqfvi 7n2B5gcxsDHwJRES0OgjD7Hxw3qnLqbEvDqT6V46ZfNJ9g6OJJz9V6O3tm+f+UJv MCXXR3tHLok1Ln651T9nDRWL1bfZIAugqpQjqaLMwMuGhzKf80I= -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:57 2026 by rpki-client