$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: TDGy+fQFKHgY1MaEDMRUwPHVvrrsfAI0y25qMCboe1I= Subject key identifier: 47:C5:96:8F:FC:2C:48:50:CA:A5:95:EC:3B:45:FE:D6:7E:6F:D8:AA Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 0DBD4E13BA04C97AC499FDDC00F5E2BFFF60D198 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 035E Signing time: Sat 28 Feb 2026 11:21:59 +0000 Manifest this update: Sat 28 Feb 2026 11:16:59 +0000 Manifest next update: Tue 03 Mar 2026 17:09:59 +0000 Files and hashes: 1: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: /DSwJ/Jf3E3u9pPowd2W59es/yYENaJAAwMVwFutBlk=) 2: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 3: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) 4: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 5: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bd:4e:13:ba:04:c9:7a:c4:99:fd:dc:00:f5:e2:bf:ff:60:d1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Feb 28 11:16:59 2026 GMT Not After : Mar 3 17:09:59 2026 GMT Subject: CN=47C5968FFC2C4850CAA595EC3B45FED67E6FD8AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:94:db:a9:63:63:4e:b1:87:e7:33:e9:82: b6:1f:06:bb:25:b9:77:be:9a:8f:09:b1:cc:ef:fe: b4:fe:19:69:e8:60:17:ea:2f:fd:a0:27:37:96:98: 26:04:d9:46:c8:27:6a:65:61:ba:8d:6d:61:fd:47: bd:e6:50:7e:7f:55:11:9f:5a:54:a1:3c:c0:2c:66: bb:f7:8b:f7:a1:7f:ef:42:c8:ac:fe:f5:71:d7:a8: 43:b3:19:d3:e9:74:bf:90:ba:70:ee:01:41:70:e5: d1:83:b8:ae:b8:34:6c:77:98:59:af:b6:a3:10:cd: 92:5f:66:c6:cb:b7:86:7e:24:a9:b5:1a:26:87:96: a8:25:34:33:68:7e:67:6c:53:10:8c:0e:11:1c:fd: 96:17:b3:94:de:42:c2:f5:88:1d:e1:cf:df:0c:e7: 53:10:c2:6e:9f:11:77:4c:3d:c1:a6:65:6c:df:ed: fe:37:1c:71:ba:d9:87:a8:f0:21:30:2f:e0:c5:a1: ef:22:7f:5e:a9:0b:02:58:d9:0d:1e:c1:c5:a8:07: d5:00:c5:78:32:fd:81:38:a8:1f:4e:cb:6d:24:39: 17:e8:5d:db:ad:ac:71:e7:7e:31:8c:c1:62:f7:88: d2:2b:16:4b:b7:e0:78:56:32:f5:d4:bd:a8:20:98: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C5:96:8F:FC:2C:48:50:CA:A5:95:EC:3B:45:FE:D6:7E:6F:D8:AA X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7d:99:a4:ab:eb:f6:1d:91:0f:ea:22:84:2e:8b:4e:02:c0: a8:b3:9a:4f:32:d5:1b:72:7a:22:1d:f2:9f:9b:e6:5f:82:81: dd:1f:aa:e4:85:73:f2:51:e9:a7:da:7a:80:62:e5:e9:60:13: d7:0f:f2:db:1f:8d:5e:27:56:8b:c9:6d:d6:0c:b8:8b:2c:f7: 5f:67:8d:ee:64:77:9b:4b:bf:1e:6a:68:e3:90:b2:25:aa:ac: 17:45:5a:3a:c1:34:75:b2:02:98:a7:b3:6c:4a:14:c8:2f:6f: 83:14:eb:3b:3a:f3:a7:de:20:14:66:40:fa:ee:5b:4b:47:b4: 33:af:46:7b:e4:de:f7:73:eb:ec:5d:d3:1e:64:53:bb:12:b2: c2:c6:15:96:51:e4:c2:a2:7b:28:9b:34:cf:93:7c:ff:a6:59: 7c:2b:f3:49:86:2b:ff:81:f1:e7:1a:bd:f1:67:ba:61:ad:ba: d1:3b:41:1f:b3:b6:0c:f6:75:53:7d:34:4e:62:d8:d2:bc:77: 20:b8:97:b1:7f:ca:6c:35:4d:57:15:c5:0a:a4:37:05:ce:1a: bf:6d:e9:b4:b7:e3:f6:3e:f5:50:a0:7e:35:86:86:4b:03:ff: 3a:c0:67:77:20:89:85:f9:57:9b:36:d7:70:c9:aa:ac:ce:9e: 25:8f:5a:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDb1OE7oEyXrEmf3cAPXiv/9g0ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNjAyMjgxMTE2NTlaFw0yNjAzMDMxNzA5NTlaMDMxMTAvBgNV BAMTKDQ3QzU5NjhGRkMyQzQ4NTBDQUE1OTVFQzNCNDVGRUQ2N0U2RkQ4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zpTbqWNjTrGH5zPpgrYfBrsl uXe+mo8Jsczv/rT+GWnoYBfqL/2gJzeWmCYE2UbIJ2plYbqNbWH9R73mUH5/VRGf WlShPMAsZrv3i/ehf+9CyKz+9XHXqEOzGdPpdL+QunDuAUFw5dGDuK64NGx3mFmv tqMQzZJfZsbLt4Z+JKm1GiaHlqglNDNofmdsUxCMDhEc/ZYXs5TeQsL1iB3hz98M 51MQwm6fEXdMPcGmZWzf7f43HHG62Yeo8CEwL+DFoe8if16pCwJY2Q0ewcWoB9UA xXgy/YE4qB9Oy20kORfoXdutrHHnfjGMwWL3iNIrFku34HhWMvXUvaggmKXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR8WWj/wsSFDKpZXsO0X+1n5v2KowHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB9maSr6/YdkQ/qIoQui04CwKizmk8y1Rty eiId8p+b5l+Cgd0fquSFc/JR6afaeoBi5elgE9cP8tsfjV4nVovJbdYMuIss919n je5kd5tLvx5qaOOQsiWqrBdFWjrBNHWyApins2xKFMgvb4MU6zs686feIBRmQPru W0tHtDOvRnvk3vdz6+xd0x5kU7sSssLGFZZR5MKieyibNM+TfP+mWXwr80mGK/+B 8ecavfFnumGtutE7QR+ztgz2dVN9NE5i2NK8dyC4l7F/ymw1TVcVxQqkNwXOGr9t 6bS34/Y+9VCgfjWGhksD/zrAZ3cgiYX5V5s213DJqqzOniWPWrI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:05 2026 by rpki-client