$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: 9KHyFnKK6ikicJY3Xe2OvdbPmUwBFOuEQz/wX+A2qEA= Subject key identifier: BE:29:42:FC:4F:AC:8D:9F:BC:39:91:A4:20:72:E4:33:58:B3:84:A3 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 379E2CB823F3D21097034D3C493A6AD78486E718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0441 Signing time: Sun 01 Mar 2026 05:13:26 +0000 Manifest this update: Sun 01 Mar 2026 05:08:26 +0000 Manifest next update: Wed 04 Mar 2026 09:53:26 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 2: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 3: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 5: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: OKSFW/nj+RBrB7prstzhaf5IgOtXnW3dHoCdwJ+TRt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9e:2c:b8:23:f3:d2:10:97:03:4d:3c:49:3a:6a:d7:84:86:e7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Mar 1 05:08:26 2026 GMT Not After : Mar 4 09:53:26 2026 GMT Subject: CN=BE2942FC4FAC8D9FBC3991A42072E43358B384A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:ac:73:23:26:6b:f8:1e:0a:1e:77:b7:25: ef:f7:92:47:8c:fc:9e:e8:8f:7b:73:18:31:cb:84: 88:fc:6a:93:62:6c:0a:fc:17:92:d7:4f:76:90:a2: c6:0a:9e:fd:59:9b:86:ef:b4:94:0c:d8:28:3f:93: a2:96:5b:91:1b:08:82:a9:27:5d:35:21:cb:ff:3c: 0e:79:42:4f:c9:5f:0f:df:bd:1a:2c:3c:d4:36:7e: de:47:0c:51:85:db:4e:83:22:82:6b:da:e6:eb:77: 2d:cf:55:11:6f:a9:0f:7f:e4:da:62:35:10:26:c0: a0:2f:d2:f0:9a:27:63:c2:4c:fe:8a:4b:6e:83:e2: 99:e4:96:8d:48:e3:31:f3:23:1b:57:5f:cc:2e:d1: 78:89:79:98:fd:b1:9e:cb:1a:31:2f:65:d4:c4:35: 74:cf:45:72:b1:f4:1f:5e:90:53:36:7c:67:07:8f: 29:a4:df:28:9c:b4:c2:fb:a8:9d:58:b6:b2:dd:26: 27:2a:7d:ee:db:c8:3b:81:ea:9c:7d:ce:96:1b:e1: 27:99:31:6c:cf:c7:ba:27:12:a5:ef:a1:f0:82:42: 50:a9:fe:4f:f3:19:c4:72:9b:ea:35:09:dd:2c:dd: 2e:25:96:44:09:7c:a2:59:ca:96:0a:14:67:fc:fa: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:42:FC:4F:AC:8D:9F:BC:39:91:A4:20:72:E4:33:58:B3:84:A3 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3f:03:5c:0e:87:a9:92:a0:e4:70:64:f8:73:f3:2e:71:44: 52:00:da:cd:d1:ce:da:92:d1:09:44:ff:a1:9f:08:f3:34:62: 40:84:c5:c0:dc:4d:34:ff:af:7a:d3:38:3b:b8:48:4b:66:2a: 57:0f:14:0a:2f:c7:72:1c:d6:d8:9f:a6:8f:c3:b0:c9:ac:f8: 2d:a3:b4:d3:95:50:9e:2b:5a:fa:39:eb:87:a5:fd:c7:73:a5: 09:bb:91:d4:3c:fd:ee:64:a0:74:9b:9f:84:ba:6a:bd:dc:5d: 5c:95:f3:56:80:69:ab:67:b3:f5:b7:02:d2:ff:1b:b2:ae:55: 74:6f:50:20:d3:7f:71:9e:7c:21:03:da:57:2b:7a:7d:00:a2: d6:0e:6e:e3:97:60:d3:9a:b5:b6:e5:fe:2e:2e:c6:37:6c:d9: f8:21:82:01:b8:f3:d7:46:4e:fb:25:6d:37:52:9b:23:8a:6c: 99:fd:4e:af:b1:8a:43:56:0d:95:d2:61:ff:4c:24:9e:08:4b: 5d:ed:01:9c:bc:f2:43:3b:0e:56:5f:10:72:88:48:ef:e7:69: 30:bf:d0:15:ea:90:ba:f6:d3:8b:ca:76:1e:9f:8f:94:4a:3a: 4d:7b:7f:0f:7c:5a:b1:38:57:cb:7b:2d:dc:f8:b9:97:93:45: a9:cb:f9:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN54suCPz0hCXA008STpq14SG5xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNjAzMDEwNTA4MjZaFw0yNjAzMDQwOTUzMjZaMDMxMTAvBgNV BAMTKEJFMjk0MkZDNEZBQzhEOUZCQzM5OTFBNDIwNzJFNDMzNThCMzg0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYqxzIyZr+B4KHne3Je/3kkeM /J7oj3tzGDHLhIj8apNibAr8F5LXT3aQosYKnv1Zm4bvtJQM2Cg/k6KWW5EbCIKp J101Icv/PA55Qk/JXw/fvRosPNQ2ft5HDFGF206DIoJr2ubrdy3PVRFvqQ9/5Npi NRAmwKAv0vCaJ2PCTP6KS26D4pnklo1I4zHzIxtXX8wu0XiJeZj9sZ7LGjEvZdTE NXTPRXKx9B9ekFM2fGcHjymk3yictML7qJ1YtrLdJicqfe7byDuB6px9zpYb4SeZ MWzPx7onEqXvofCCQlCp/k/zGcRym+o1Cd0s3S4llkQJfKJZypYKFGf8+iPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvilC/E+sjZ+8OZGkIHLkM1izhKMwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHU/A1wOh6mSoORwZPhz8y5xRFIA2s3RztqS 0QlE/6GfCPM0YkCExcDcTTT/r3rTODu4SEtmKlcPFAovx3Ic1tifpo/DsMms+C2j tNOVUJ4rWvo564el/cdzpQm7kdQ8/e5koHSbn4S6ar3cXVyV81aAaatns/W3AtL/ G7KuVXRvUCDTf3GefCED2lcren0AotYObuOXYNOatbbl/i4uxjds2fghggG489dG TvslbTdSmyOKbJn9Tq+xikNWDZXSYf9MJJ4IS13tAZy88kM7DlZfEHKISO/naTC/ 0BXqkLr204vKdh6fj5RKOk17fw98WrE4V8t7Ldz4uZeTRanL+R8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:05 2026 by rpki-client