$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: CpPDZjdNiS9p0FXc7Ms6aHZCthRspunX5tF1YeXGg6k= Subject key identifier: 2F:81:5D:C4:CC:80:86:40:3F:9A:28:9D:AC:B5:A7:7B:CD:00:0D:6A Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 2874910B7FCD41CD89F3163A277324D268279E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 0221 Signing time: Sun 01 Mar 2026 02:02:20 +0000 Manifest this update: Sun 01 Mar 2026 01:57:20 +0000 Manifest next update: Wed 04 Mar 2026 10:02:20 +0000 Files and hashes: 1: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: DypnmYKK/zIopz06wjybNFxQU1pvYeXf3UknJrsWS8Q=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: mvjYp+1vrLLE5z7eCg/M+MdscRpVan6q1wn/N7ffyk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:74:91:0b:7f:cd:41:cd:89:f3:16:3a:27:73:24:d2:68:27:9e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Mar 1 01:57:20 2026 GMT Not After : Mar 4 10:02:20 2026 GMT Subject: CN=2F815DC4CC8086403F9A289DACB5A77BCD000D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:34:2e:7d:f4:91:00:72:f0:04:30:41:d5: fa:8d:e3:75:89:44:31:af:f8:1e:0c:99:7c:b0:ec: 17:90:61:3f:5a:82:f1:11:76:30:9f:be:8e:33:de: 3f:fb:36:34:a4:23:94:a3:a7:4e:ef:5e:2f:55:71: 20:5e:a3:33:9a:d4:24:17:97:f9:1b:b0:99:a4:27: 34:cc:0a:99:a4:b8:9e:db:17:ab:da:cf:b1:6a:8b: 03:ce:27:e3:44:02:f6:92:6d:a2:83:70:37:96:4d: 32:52:b2:db:b0:53:16:82:f5:be:d0:7d:66:4e:10: ad:50:f4:82:20:ea:ff:ec:3f:e4:8c:40:ff:2c:6d: 9f:48:c2:7a:7f:f1:b8:3a:fa:36:93:8f:96:c2:60: e3:c7:ab:77:fd:a7:ee:bc:29:98:2b:16:c2:99:b3: 96:06:ad:bf:39:88:03:c3:f9:be:84:f9:bf:2b:26: f5:8b:86:26:b9:22:83:f4:b7:74:47:79:2c:d7:6a: 37:60:37:d7:27:aa:49:83:f6:7b:c3:8a:71:a2:de: 14:ea:56:4b:d0:d2:a3:9d:1c:34:38:55:9e:2e:5b: 13:ae:a4:db:92:54:db:d7:61:77:a9:48:61:96:7b: c7:96:f2:07:ea:7b:33:ca:16:6d:16:51:35:2d:fb: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:5D:C4:CC:80:86:40:3F:9A:28:9D:AC:B5:A7:7B:CD:00:0D:6A X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d6:c7:bf:87:3d:89:26:0a:30:8b:ed:c6:a4:82:f8:04:ce: de:dd:fb:3b:31:fc:0c:eb:c9:e7:77:c2:21:48:5e:88:71:e3: 50:29:00:16:5d:80:a2:23:e3:2f:72:bc:a0:f2:d0:3d:a1:c8: 65:1c:ba:83:55:3b:a3:83:e4:8b:10:40:d0:94:c0:f8:45:7b: 43:75:65:81:fe:ac:07:4a:4f:e9:52:f9:c4:71:f5:6d:73:57: 82:ae:eb:90:ff:e4:34:55:ea:36:81:85:cd:b1:1a:31:6b:41: 04:fd:c6:b6:3b:04:e3:fc:95:37:75:61:dd:08:33:32:62:21: 27:7d:f2:8c:7d:2b:5c:6a:f4:37:5f:27:d8:25:81:cb:20:c8: d4:bd:49:49:e7:e7:67:4d:db:1b:a2:f5:37:a5:10:60:ca:5f: 14:fa:a1:ba:7d:98:91:35:d6:2f:0a:04:7d:f2:86:75:b8:18: 25:64:2e:5c:4a:f2:8f:cd:b3:30:2f:c6:84:d1:26:62:39:71: 9d:6d:23:bc:83:0f:7c:97:25:72:1d:77:e3:8e:6d:e7:2b:4a: 5d:cf:5e:8f:63:fe:67:04:41:1a:1c:f6:93:94:ca:00:f2:9d: 15:e2:a9:ed:86:6f:28:40:54:58:4c:e0:a8:77:ea:00:b4:86: d4:62:e4:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHSRC3/NQc2J8xY6J3Mk0mgnng4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNjAzMDEwMTU3MjBaFw0yNjAzMDQxMDAyMjBaMDMxMTAvBgNV BAMTKDJGODE1REM0Q0M4MDg2NDAzRjlBMjg5REFDQjVBNzdCQ0QwMDBENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ATQuffSRAHLwBDBB1fqN43WJ RDGv+B4MmXyw7BeQYT9agvERdjCfvo4z3j/7NjSkI5Sjp07vXi9VcSBeozOa1CQX l/kbsJmkJzTMCpmkuJ7bF6vaz7FqiwPOJ+NEAvaSbaKDcDeWTTJSstuwUxaC9b7Q fWZOEK1Q9IIg6v/sP+SMQP8sbZ9Iwnp/8bg6+jaTj5bCYOPHq3f9p+68KZgrFsKZ s5YGrb85iAPD+b6E+b8rJvWLhia5IoP0t3RHeSzXajdgN9cnqkmD9nvDinGi3hTq VkvQ0qOdHDQ4VZ4uWxOupNuSVNvXYXepSGGWe8eW8gfqezPKFm0WUTUt+x/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4FdxMyAhkA/miidrLWne80ADWowHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrWx7+HPYkmCjCL7cakgvgEzt7d+zsx/Azr yed3wiFIXohx41ApABZdgKIj4y9yvKDy0D2hyGUcuoNVO6OD5IsQQNCUwPhFe0N1 ZYH+rAdKT+lS+cRx9W1zV4Ku65D/5DRV6jaBhc2xGjFrQQT9xrY7BOP8lTd1Yd0I MzJiISd98ox9K1xq9DdfJ9glgcsgyNS9SUnn52dN2xui9TelEGDKXxT6obp9mJE1 1i8KBH3yhnW4GCVkLlxK8o/NszAvxoTRJmI5cZ1tI7yDD3yXJXIdd+OObecrSl3P Xo9j/mcEQRoc9pOUygDynRXiqe2GbyhAVFhM4Kh36gC0htRi5FY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:04 2026 by rpki-client