$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: iNCLY2yTKddXH4k2nsCNJy3C3zSYX0xaoACBM6J7N6Q= Subject key identifier: 24:E1:77:8B:07:C9:EE:A4:1A:72:C9:39:EA:D0:B3:D3:E0:FB:68:D7 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 53B4EFBAC61EF48FAA671A8A5592878EF6750199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0175 Signing time: Sun 01 Mar 2026 21:21:14 +0000 Manifest this update: Sun 01 Mar 2026 21:16:14 +0000 Manifest next update: Thu 05 Mar 2026 08:02:14 +0000 Files and hashes: 1: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: YZ0ChZdppQyTuKZrMR5Sz/IPZrNt71X7NuEeHrxHW/I=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 3: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 4: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: zwjrrSSocCPkwpeZnvOXQTY6ZFKjf2v0QrVmVjzP5Ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b4:ef:ba:c6:1e:f4:8f:aa:67:1a:8a:55:92:87:8e:f6:75:01:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Mar 1 21:16:14 2026 GMT Not After : Mar 5 08:02:14 2026 GMT Subject: CN=24E1778B07C9EEA41A72C939EAD0B3D3E0FB68D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:96:9c:4d:1c:49:97:cf:98:0a:c4:cf:47: da:e3:26:df:9d:84:c2:f4:36:72:d7:03:4c:a0:08: 94:eb:41:9d:68:aa:74:9f:ec:93:90:9c:a5:b4:94: 00:c4:fa:76:e4:b0:bb:80:48:d4:39:da:e9:ac:90: 9d:66:c7:7e:39:9c:91:7d:80:51:89:c1:07:9e:8e: 48:9d:d0:43:5a:42:4a:05:94:90:5d:c3:ae:98:50: e4:be:a4:80:64:c6:77:90:35:93:7c:a9:df:86:73: a7:d0:16:6f:7e:e4:80:66:5a:f9:19:ed:50:10:1b: d9:41:bf:7c:6d:a6:e1:a2:d0:1a:0a:89:30:69:96: f1:9b:79:c0:10:c0:db:ab:dd:77:55:02:09:f0:51: 35:88:0c:de:51:d7:fd:af:de:91:6d:54:05:7f:4e: 1d:be:60:6e:93:d2:49:0e:d7:fa:f7:ce:5c:8a:bd: 24:80:06:1b:fc:81:40:cd:07:4d:d8:11:13:b3:69: 3f:cf:e2:68:1c:a1:90:b1:e8:a6:62:15:59:69:ea: 8f:5c:f4:00:9f:15:3e:b5:7d:8f:7f:56:f5:f4:3b: 30:6d:3f:ec:60:e0:25:47:84:7d:e2:46:8b:46:41: 99:ea:b5:43:00:73:f7:a5:ea:55:23:55:d7:45:87: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E1:77:8B:07:C9:EE:A4:1A:72:C9:39:EA:D0:B3:D3:E0:FB:68:D7 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:d4:6a:c5:50:4d:c6:25:8e:d5:ab:96:0d:ad:a6:78:ab: 58:7d:c2:49:8b:a8:cb:38:96:a6:18:44:a3:fc:d7:8c:ba:75: b0:c4:cc:3b:27:eb:5c:6c:e5:4a:5d:65:b5:d1:17:dc:ad:04: cd:e1:4a:48:9c:65:1d:80:e2:8a:69:57:91:a8:9c:66:6b:9b: 3b:ae:05:c5:bc:94:04:a1:d4:2b:7b:c4:f0:28:c4:f0:f1:4e: 1f:bc:08:b7:5d:f6:d5:1e:74:b5:39:79:4c:62:50:30:3f:e5: 4e:ff:ed:a2:33:75:0b:52:c0:49:7f:ab:ad:18:5c:9c:15:d8: dd:55:68:82:0c:12:ff:b9:6d:ca:8a:b1:25:bf:af:36:2e:bb: 3d:c0:ac:59:bb:9e:c1:74:94:29:1b:34:d9:e3:22:00:12:79: 57:fc:6f:e8:57:c3:9b:cf:59:f4:b0:b9:56:10:89:48:4b:c3: 54:da:56:32:0d:48:72:b3:39:eb:7e:6a:1b:1f:7d:57:81:20: 99:77:27:20:54:2d:1c:54:3d:b0:9d:76:e8:d9:d9:55:d8:5c: f5:fb:28:31:3e:50:64:95:75:cb:1d:28:aa:91:35:ed:33:df: 38:77:3f:a8:12:8e:20:9b:83:be:67:cf:a7:8c:ea:46:d2:74: 15:24:fe:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7TvusYe9I+qZxqKVZKHjvZ1AZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNjAzMDEyMTE2MTRaFw0yNjAzMDUwODAyMTRaMDMxMTAvBgNV BAMTKDI0RTE3NzhCMDdDOUVFQTQxQTcyQzkzOUVBRDBCM0QzRTBGQjY4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpr5acTRxJl8+YCsTPR9rjJt+d hML0NnLXA0ygCJTrQZ1oqnSf7JOQnKW0lADE+nbksLuASNQ52umskJ1mx345nJF9 gFGJwQeejkid0ENaQkoFlJBdw66YUOS+pIBkxneQNZN8qd+Gc6fQFm9+5IBmWvkZ 7VAQG9lBv3xtpuGi0BoKiTBplvGbecAQwNur3XdVAgnwUTWIDN5R1/2v3pFtVAV/ Th2+YG6T0kkO1/r3zlyKvSSABhv8gUDNB03YEROzaT/P4mgcoZCx6KZiFVlp6o9c 9ACfFT61fY9/VvX0OzBtP+xg4CVHhH3iRotGQZnqtUMAc/el6lUjVddFh9bXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJOF3iwfJ7qQacsk56tCz0+D7aNcwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5x1GrFUE3GJY7Vq5YNraZ4q1h9wkmLqMs4 lqYYRKP814y6dbDEzDsn61xs5UpdZbXRF9ytBM3hSkicZR2A4oppV5GonGZrmzuu BcW8lASh1Ct7xPAoxPDxTh+8CLdd9tUedLU5eUxiUDA/5U7/7aIzdQtSwEl/q60Y XJwV2N1VaIIMEv+5bcqKsSW/rzYuuz3ArFm7nsF0lCkbNNnjIgASeVf8b+hXw5vP WfSwuVYQiUhLw1TaVjINSHKzOet+ahsffVeBIJl3JyBULRxUPbCddujZ2VXYXPX7 KDE+UGSVdcsdKKqRNe0z3zh3P6gSjiCbg75nz6eM6kbSdBUk/mc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:43:20 2026 by rpki-client