$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: wEnuHPfgfbQaJynyXPpo8y76iy643wsAKTH74q9MV3U= Subject key identifier: 91:A2:0D:20:B0:8A:0D:09:17:21:90:C0:18:79:86:68:DB:D7:76:81 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 287F30545A2020C47A8546957E36F548CA343E07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0577 Signing time: Sun 01 Mar 2026 15:41:25 +0000 Manifest this update: Sun 01 Mar 2026 15:36:25 +0000 Manifest next update: Wed 04 Mar 2026 23:33:25 +0000 Files and hashes: 1: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo=) 2: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=) 3: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: mm2pBp9XNAO/aA6cLfKsVFgLvpIqWU1n8jnigUN46c4=) 4: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: /WT3CcLt/Wqy1totp1szjJmd03e3/iGONHlBm57jO1k=) 5: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o=) 6: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 7: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 8: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: U+8nHugAvpkv+9SpiUMRvxa33+AJ90Dde+HOGWwtDXg=) 9: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038=) 10: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 6ji1OwtEeZ5gDOUwTpL/nrhK0wgzay4u+O8JbfpMxKk=) 11: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE=) 12: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 13: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM=) 14: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=) 15: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk=) 16: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=) 17: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: bw8Hpu0FONj3uQaL/ySP1D3C1YAb9B5NcNozVjL3dTY=) 18: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=) 19: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 20: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: Wyb0UWY/xry3f5h6Pv1OX1FeBIM6n1lp2HY/CxbmmFM=) 21: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7f:30:54:5a:20:20:c4:7a:85:46:95:7e:36:f5:48:ca:34:3e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Mar 1 15:36:25 2026 GMT Not After : Mar 4 23:33:25 2026 GMT Subject: CN=91A20D20B08A0D09172190C018798668DBD77681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:e2:72:ca:a7:20:e6:28:ea:19:2a:b7:9a: 6b:bd:74:94:07:26:5e:b1:ce:75:78:d7:f1:17:ad: dd:5e:1e:9a:d9:03:5e:12:58:fa:72:29:9d:8a:e9: 41:c0:7f:9c:e7:c9:21:c6:17:aa:b9:27:47:1c:09: 8c:a8:27:fa:d4:aa:e8:5b:e0:b8:7c:d4:0f:25:80: 40:8a:e4:41:89:13:dc:15:c1:19:00:68:74:95:20: 29:f8:b4:52:bf:fb:36:49:4f:b4:7a:ce:04:26:98: b4:79:2c:ea:a2:0a:66:0f:ad:f7:bb:e0:c7:24:e1: e2:ec:fd:1b:98:9b:3d:1d:fa:e4:3c:89:a9:af:53: aa:f9:96:eb:ff:aa:5d:a1:a8:cb:53:33:12:c5:34: e4:71:9c:d8:da:55:ae:5e:1c:48:d0:a9:d3:0c:2b: 9d:1a:9a:c8:aa:aa:ef:90:13:9b:58:8f:67:3e:bc: 6f:a5:d0:91:e9:f6:31:85:ef:f3:1c:fd:7c:9f:6e: 95:47:cc:16:04:eb:fe:48:b9:ee:6f:20:45:9b:e1: 3f:ba:1f:55:c6:b4:2a:eb:e2:a0:9a:05:57:92:07: b8:55:3e:04:b3:94:1f:95:b6:09:22:9c:0d:f7:33: 43:f9:c8:81:ec:a9:8d:f4:0f:ed:59:15:f1:dc:c5: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A2:0D:20:B0:8A:0D:09:17:21:90:C0:18:79:86:68:DB:D7:76:81 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:27:62:dd:c1:71:88:87:2d:68:7d:9b:1b:5c:93:49:68:35: ed:c3:5a:db:05:79:fa:3f:2b:c0:a1:f6:73:0e:bf:29:7a:37: 6f:1b:0c:11:c2:ff:69:3b:e3:69:2e:98:d8:fa:e1:b4:81:09: 68:47:f5:b5:ee:3c:9b:aa:b4:d5:4b:2e:85:91:a0:70:a1:aa: 77:95:bd:e3:53:25:aa:63:d1:f8:c0:4e:aa:f7:d1:70:19:c7: c1:8a:5f:66:7f:28:a9:39:f7:ec:27:72:61:c7:30:7e:35:39: f3:40:c1:0e:ab:5c:62:09:fd:e0:f5:c6:08:5f:df:16:54:3d: e6:a4:42:2f:c0:41:d6:37:73:e1:89:75:77:6b:e4:d2:9f:5c: 91:a5:7d:c3:a6:51:25:32:f0:0d:e8:5b:c5:a0:aa:a1:4d:25: 7f:0f:4a:e8:bf:bd:72:82:de:82:bf:7e:1a:a7:d3:a9:a8:03: 39:b8:17:3a:de:5e:f1:62:64:49:98:f6:71:47:a0:9c:13:91: d4:90:bc:80:72:03:11:2f:fb:a2:5a:db:b0:34:67:97:6a:4c: 33:e6:fd:8f:a7:36:0a:9f:a8:5c:b5:f8:2e:30:65:fa:2f:85: 90:29:e2:66:f2:5f:79:8b:b7:96:9f:4c:ee:12:8b:4e:cd:98: 7b:a9:24:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKH8wVFogIMR6hUaVfjb1SMo0PgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNjAzMDExNTM2MjVaFw0yNjAzMDQyMzMzMjVaMDMxMTAvBgNV BAMTKDkxQTIwRDIwQjA4QTBEMDkxNzIxOTBDMDE4Nzk4NjY4REJENzc2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmOJyyqcg5ijqGSq3mmu9dJQH Jl6xznV41/EXrd1eHprZA14SWPpyKZ2K6UHAf5znySHGF6q5J0ccCYyoJ/rUquhb 4Lh81A8lgECK5EGJE9wVwRkAaHSVICn4tFK/+zZJT7R6zgQmmLR5LOqiCmYPrfe7 4Mck4eLs/RuYmz0d+uQ8iamvU6r5luv/ql2hqMtTMxLFNORxnNjaVa5eHEjQqdMM K50amsiqqu+QE5tYj2c+vG+l0JHp9jGF7/Mc/XyfbpVHzBYE6/5Iue5vIEWb4T+6 H1XGtCrr4qCaBVeSB7hVPgSzlB+VtgkinA33M0P5yIHsqY30D+1ZFfHcxQoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaINILCKDQkXIZDAGHmGaNvXdoEwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEnYt3BcYiHLWh9mxtck0loNe3DWtsFefo/ K8Ch9nMOvyl6N28bDBHC/2k742kumNj64bSBCWhH9bXuPJuqtNVLLoWRoHChqneV veNTJapj0fjATqr30XAZx8GKX2Z/KKk59+wncmHHMH41OfNAwQ6rXGIJ/eD1xghf 3xZUPeakQi/AQdY3c+GJdXdr5NKfXJGlfcOmUSUy8A3oW8WgqqFNJX8PSui/vXKC 3oK/fhqn06moAzm4FzreXvFiZEmY9nFHoJwTkdSQvIByAxEv+6Ja27A0Z5dqTDPm /Y+nNgqfqFy1+C4wZfovhZAp4mbyX3mLt5afTO4Si07NmHupJKQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:04 2026 by rpki-client