$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: lLx53BsvtzurPKPqHZLIY2+3odZiqxXR6yzgCO4TBdk= Subject key identifier: B1:E1:76:BC:B7:84:CE:7F:64:09:53:94:DA:5B:9E:B6:F6:CE:3E:8D Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 7E6EFAF4E001BF484146EAD9D9A9A1B7C050E0B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0555 Signing time: Fri 27 Feb 2026 17:50:41 +0000 Manifest this update: Fri 27 Feb 2026 17:45:41 +0000 Manifest next update: Tue 03 Mar 2026 01:55:41 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: j2t5EhfQZfa8LqAOTVlWgGFMB/qG8/nUr7CM6gpfC2U=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6e:fa:f4:e0:01:bf:48:41:46:ea:d9:d9:a9:a1:b7:c0:50:e0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Feb 27 17:45:41 2026 GMT Not After : Mar 3 01:55:41 2026 GMT Subject: CN=B1E176BCB784CE7F64095394DA5B9EB6F6CE3E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:68:89:bb:35:8b:1a:1c:5b:d6:ce:50:10: 59:e9:c0:e7:d2:85:f3:4f:57:05:56:46:21:1a:12: 42:9e:82:69:98:b4:c8:b8:58:e2:1e:9c:af:e2:c7: 82:68:ad:48:c2:54:9f:ac:73:29:e6:c5:0c:f6:2b: 70:c3:5a:7c:2b:24:fe:bb:73:b7:fd:cb:c1:25:6c: d8:35:d2:9b:30:80:51:5b:36:ae:4a:f4:f3:9d:a2: 9a:38:1a:c0:af:11:59:d8:67:ec:06:9f:a3:01:e9: 16:d2:28:d2:f7:b5:00:71:68:6b:e4:52:fc:99:55: 5e:2d:5b:de:f5:90:b6:df:9f:f3:cb:7f:99:5a:aa: 4d:40:70:33:01:46:6d:5d:43:40:1a:ab:94:33:c2: c0:9e:50:17:82:5c:91:fa:9a:92:d1:fe:63:a3:14: 7e:2f:8a:f8:79:7a:8a:72:45:14:53:2a:c9:50:71: 21:c2:a8:29:e9:50:f9:08:17:fe:21:d0:12:e8:41: da:d6:f9:ab:47:dc:14:07:cc:77:9e:70:37:4c:24: 15:75:86:d5:2a:a2:10:1a:d2:84:fd:ab:a9:65:39: 9c:86:86:2d:3e:2e:24:43:29:4b:5e:03:cd:e4:76: 62:2d:7a:bb:a4:dd:2e:d3:89:e1:65:a8:20:f6:f5: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:76:BC:B7:84:CE:7F:64:09:53:94:DA:5B:9E:B6:F6:CE:3E:8D X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:03:28:9e:09:18:f6:85:e8:b0:30:b4:3f:60:b2:56:0e:8c: cf:51:d4:8e:6d:c5:76:45:32:e2:9d:48:89:b8:12:75:3b:d1: 30:bf:5f:7f:6e:0b:ba:43:39:80:a0:d5:bc:91:ab:3e:88:79: 90:90:02:b0:73:5b:35:60:48:73:69:5b:d1:4b:53:5c:2a:1a: e6:54:32:bf:22:26:53:3e:be:fe:31:2c:53:ec:30:c4:69:98: 02:9c:ce:01:41:ea:62:6f:63:91:f9:a5:e4:7a:65:a2:7e:9d: 29:cd:9a:9d:3f:33:59:4e:5a:a0:b3:76:59:73:ef:8a:b9:50: d2:9d:a9:fe:10:87:27:c7:2b:77:c1:e3:2a:43:03:79:02:22: a6:69:79:79:2a:86:88:aa:0f:46:59:a6:59:82:c8:c8:0c:44: 10:52:58:ad:57:1b:2e:29:2c:14:f9:8a:93:2d:72:d0:c0:8c: f7:fc:f1:e0:74:1f:cd:9b:61:b5:26:58:5a:2a:56:6c:42:81: 5c:79:66:d1:27:d7:9c:5f:ca:9c:ab:c0:b8:1b:0f:96:fa:ed: 2e:d3:61:ca:f9:13:49:6c:39:5a:df:34:fb:24:0b:7f:7d:8f: 9d:8c:a9:c5:77:7e:40:71:4c:79:0f:be:fb:52:29:8f:ec:cf: 25:07:c0:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfm769OABv0hBRurZ2amht8BQ4LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNjAyMjcxNzQ1NDFaFw0yNjAzMDMwMTU1NDFaMDMxMTAvBgNV BAMTKEIxRTE3NkJDQjc4NENFN0Y2NDA5NTM5NERBNUI5RUI2RjZDRTNFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNWiJuzWLGhxb1s5QEFnpwOfS hfNPVwVWRiEaEkKegmmYtMi4WOIenK/ix4JorUjCVJ+scynmxQz2K3DDWnwrJP67 c7f9y8ElbNg10pswgFFbNq5K9POdopo4GsCvEVnYZ+wGn6MB6RbSKNL3tQBxaGvk UvyZVV4tW971kLbfn/PLf5laqk1AcDMBRm1dQ0Aaq5QzwsCeUBeCXJH6mpLR/mOj FH4vivh5eopyRRRTKslQcSHCqCnpUPkIF/4h0BLoQdrW+atH3BQHzHeecDdMJBV1 htUqohAa0oT9q6llOZyGhi0+LiRDKUteA83kdmIteruk3S7TieFlqCD29cVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseF2vLeEzn9kCVOU2luetvbOPo0wHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgDKJ4JGPaF6LAwtD9gslYOjM9R1I5txXZF MuKdSIm4EnU70TC/X39uC7pDOYCg1byRqz6IeZCQArBzWzVgSHNpW9FLU1wqGuZU Mr8iJlM+vv4xLFPsMMRpmAKczgFB6mJvY5H5peR6ZaJ+nSnNmp0/M1lOWqCzdllz 74q5UNKdqf4QhyfHK3fB4ypDA3kCIqZpeXkqhoiqD0ZZplmCyMgMRBBSWK1XGy4p LBT5ipMtctDAjPf88eB0H82bYbUmWFoqVmxCgVx5ZtEn15xfypyrwLgbD5b67S7T Ycr5E0lsOVrfNPskC399j52MqcV3fkBxTHkPvvtSKY/szyUHwLg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:13 2026 by rpki-client