$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: h5RABTJJKRHNya8oBQmNptAH+dB9yIczFVrNzme71yo= Subject key identifier: DD:34:D9:AF:B6:21:2C:DE:CB:3B:7F:EF:EE:8A:E5:8D:AC:D1:EB:A6 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 7BE7C363459A8F4E4F9A537676D36B65325A5F05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 0260 Signing time: Sun 01 Mar 2026 06:50:52 +0000 Manifest this update: Sun 01 Mar 2026 06:45:52 +0000 Manifest next update: Wed 04 Mar 2026 15:30:52 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: l2B2aK7iKjtGlm+JZBsaRQ0Oiz1msVZD+MDO3SYRf38=) 2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: SAahootSPmXzXt4oT903K8SIv0eNlbDgN/Pav7oeETk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e7:c3:63:45:9a:8f:4e:4f:9a:53:76:76:d3:6b:65:32:5a:5f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Mar 1 06:45:52 2026 GMT Not After : Mar 4 15:30:52 2026 GMT Subject: CN=DD34D9AFB6212CDECB3B7FEFEE8AE58DACD1EBA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:74:af:1a:a9:b7:af:c8:0e:b5:e9:45:c4: f4:8c:82:ae:2d:1e:08:21:9a:b5:20:b8:e9:a0:80: 1e:2a:2f:a2:57:6c:8d:84:c3:03:2e:20:e1:ba:09: 6d:a5:75:f1:00:f5:46:dd:4b:7b:30:52:a7:65:95: 54:6a:c3:1a:59:9e:4e:0e:a2:79:8c:4c:a4:7a:62: dd:df:95:3e:8e:5a:9a:23:fc:a6:8c:6b:1e:da:9e: 50:a9:ab:8a:e3:0a:1c:ab:15:ec:cd:d6:6a:5e:e9: 69:a8:04:7d:b7:71:a9:a6:35:06:4e:8c:d2:da:a6: 53:db:d3:6d:a5:a3:12:ae:c7:6d:09:cf:b3:c7:76: d5:62:64:d5:ae:2e:b0:23:ad:f0:5f:6d:26:d6:cf: b9:f1:54:b3:b8:c8:11:fe:2b:30:52:bf:67:6a:b9: eb:c6:a0:76:20:fc:74:a9:0e:37:6e:46:d9:86:b3: 41:8c:db:28:be:4a:63:12:0a:39:a8:98:3f:ff:aa: 16:66:e9:ed:e1:94:c0:51:d8:51:96:14:cb:9c:b2: 52:ed:39:47:03:22:cd:79:cc:64:db:32:b5:5b:3d: 58:a0:02:ce:cc:37:e8:4b:b0:9d:f4:31:86:21:f8: f9:a9:6c:92:a4:78:96:9d:02:74:f4:b3:72:f6:1e: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:34:D9:AF:B6:21:2C:DE:CB:3B:7F:EF:EE:8A:E5:8D:AC:D1:EB:A6 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cd:26:8d:8c:a1:4c:d6:36:09:f3:a3:6c:f7:d2:de:6e:20: 17:f0:a4:6e:a5:c0:ea:c7:b1:64:08:ac:be:a0:64:8e:cc:27: 4c:94:91:f2:56:18:18:fd:75:41:27:96:b6:19:9a:73:26:c5: ac:0f:7f:f9:b9:35:5e:7b:01:fd:9d:b1:1a:fc:44:c8:c7:a7: ff:d9:15:49:f1:6b:bd:fa:a4:06:7c:06:8f:5a:9a:45:a7:b6: d3:81:d2:e4:5e:77:48:a9:6a:36:89:80:12:75:0c:70:1a:bb: b6:df:45:6a:45:a8:d4:00:59:89:52:03:3b:c8:a3:99:b3:29: 14:75:9e:b7:44:56:61:21:db:b5:51:31:c8:10:65:d2:4d:6e: 3c:ef:64:ca:47:e8:aa:9e:09:75:43:83:4c:2f:d6:d5:db:74: 21:81:9c:8e:ed:11:65:d5:94:8e:10:f4:c7:4b:da:12:ee:97: e8:ae:11:27:48:20:05:fc:51:cf:13:fe:c1:14:da:ba:83:1a: 35:3b:06:7c:64:16:af:92:ea:eb:61:f8:0a:d3:e4:4f:4d:81: 5f:13:a5:17:ec:bd:50:55:9c:c5:98:fa:c7:7d:70:6d:66:c1: a5:e2:9e:f0:2c:d1:03:75:43:f8:b3:f0:8e:b8:18:03:0a:ee: c2:2f:72:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+fDY0Waj05PmlN2dtNrZTJaXwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNjAzMDEwNjQ1NTJaFw0yNjAzMDQxNTMwNTJaMDMxMTAvBgNV BAMTKEREMzREOUFGQjYyMTJDREVDQjNCN0ZFRkVFOEFFNThEQUNEMUVCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPnSvGqm3r8gOtelFxPSMgq4t HgghmrUguOmggB4qL6JXbI2EwwMuIOG6CW2ldfEA9UbdS3swUqdllVRqwxpZnk4O onmMTKR6Yt3flT6OWpoj/KaMax7anlCpq4rjChyrFezN1mpe6WmoBH23cammNQZO jNLaplPb022loxKux20Jz7PHdtViZNWuLrAjrfBfbSbWz7nxVLO4yBH+KzBSv2dq uevGoHYg/HSpDjduRtmGs0GM2yi+SmMSCjmomD//qhZm6e3hlMBR2FGWFMucslLt OUcDIs15zGTbMrVbPVigAs7MN+hLsJ30MYYh+PmpbJKkeJadAnT0s3L2HjyBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TTZr7YhLN7LO3/v7orljazR66YwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3NJo2MoUzWNgnzo2z30t5uIBfwpG6lwOrH sWQIrL6gZI7MJ0yUkfJWGBj9dUEnlrYZmnMmxawPf/m5NV57Af2dsRr8RMjHp//Z FUnxa736pAZ8Bo9amkWnttOB0uRed0ipajaJgBJ1DHAau7bfRWpFqNQAWYlSAzvI o5mzKRR1nrdEVmEh27VRMcgQZdJNbjzvZMpH6KqeCXVDg0wv1tXbdCGBnI7tEWXV lI4Q9MdL2hLul+iuESdIIAX8Uc8T/sEU2rqDGjU7BnxkFq+S6uth+ArT5E9NgV8T pRfsvVBVnMWY+sd9cG1mwaXinvAs0QN1Q/iz8I64GAMK7sIvcnI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:37:58 2026 by rpki-client