$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: NS9xTDHAMD2lLBGIb7vCwNlJo0XupRifvHl4tlqF7G4= Subject key identifier: AA:AF:74:BB:76:04:BB:89:7E:B1:30:68:34:AF:CB:72:EA:32:10:4B Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 58D4BF36EF98A45664E948786B429DE1F4D4F7D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 024E Signing time: Sun 01 Mar 2026 05:23:14 +0000 Manifest this update: Sun 01 Mar 2026 05:18:14 +0000 Manifest next update: Wed 04 Mar 2026 12:07:14 +0000 Files and hashes: 1: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: XkSABf/zboj8Dx0IAARirp1SXz44kjrtiixOaGfA9QA=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d4:bf:36:ef:98:a4:56:64:e9:48:78:6b:42:9d:e1:f4:d4:f7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Mar 1 05:18:14 2026 GMT Not After : Mar 4 12:07:14 2026 GMT Subject: CN=AAAF74BB7604BB897EB1306834AFCB72EA32104B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:bc:a8:77:10:fb:fe:d4:11:b4:e9:04:a2: 37:c8:38:79:5d:59:6b:7d:83:d7:f6:dc:cd:ed:cc: 4a:a2:2e:09:e9:cc:24:d4:96:90:91:f9:de:9b:b5: 5a:83:73:3b:7b:73:52:79:22:d0:61:ac:6f:f1:f1: d6:66:c6:e7:38:51:a4:f6:8a:46:66:ec:06:b3:69: f5:2e:f3:c8:63:61:da:3c:03:4f:59:b0:49:b1:83: f6:24:52:54:66:50:3a:02:88:e4:ec:3e:c0:05:83: 69:93:ad:d0:44:36:0e:2a:5a:94:46:b9:64:04:8b: d6:e4:c8:e7:c7:d3:d7:1e:e6:2f:19:0f:d8:8c:82: 9b:00:77:0d:e2:26:74:c0:ff:91:89:ab:14:95:41: e0:c2:87:8b:0f:46:ed:df:71:f6:f2:82:fa:b6:46: 1d:18:05:4c:3d:ce:64:c7:71:35:3f:0e:6a:cc:4e: 56:b1:56:15:07:1c:e7:c5:9a:28:51:87:1d:94:73: f2:5a:8c:d1:26:7c:f4:fb:ae:01:0b:2c:5a:c6:2d: c8:e3:d0:73:43:62:1f:da:72:d8:af:42:31:0e:c1: ae:cd:a4:76:16:fa:17:91:45:36:79:e9:9c:cd:54: c5:af:1e:7a:11:a2:2a:13:c0:b1:16:60:d7:e0:7c: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AF:74:BB:76:04:BB:89:7E:B1:30:68:34:AF:CB:72:EA:32:10:4B X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2c:0c:74:22:17:c9:c5:44:a7:1e:b2:a2:46:c4:28:7f:63: 0b:dc:10:6a:8d:24:3c:9e:ed:7d:56:16:8a:3c:0c:f1:ec:fe: aa:77:36:08:4b:1c:93:b8:23:61:45:c3:0d:7a:39:01:6b:c4: 24:61:85:a9:a6:bd:33:22:0f:36:e7:77:eb:1f:71:77:92:95: 59:a2:61:1a:17:30:aa:ed:2b:9f:9a:ea:73:0e:cd:75:17:65: 34:be:ef:b0:c6:8d:96:e0:cc:43:67:6d:e3:f5:b3:37:51:3d: ec:e5:14:8d:f1:e8:a9:c1:8d:ae:40:d5:da:ae:b6:57:fa:87: c9:d7:cb:cc:12:f4:05:fc:c0:28:c4:6c:26:c3:83:bd:95:32: 87:20:e2:24:c7:6e:a2:ff:09:ab:ce:d2:e6:6e:5f:14:de:1f: e4:5d:ce:96:bb:f3:e2:62:57:5a:0e:9c:32:5d:cd:4f:2c:5b: 57:c9:77:e4:3c:c1:66:e9:ab:57:c4:87:e5:a4:41:f4:03:a2: dc:bf:01:6b:e0:40:ec:ba:cf:c7:9d:1b:de:b0:28:00:37:a0: 9d:fe:4c:90:7a:9e:3a:1d:2a:88:b2:13:0e:47:20:73:0c:ec: 24:f2:57:82:a8:e3:ec:c4:25:23:4e:d8:21:4f:44:92:0f:4a: 32:8b:37:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNS/Nu+YpFZk6Uh4a0Kd4fTU99YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNjAzMDEwNTE4MTRaFw0yNjAzMDQxMjA3MTRaMDMxMTAvBgNV BAMTKEFBQUY3NEJCNzYwNEJCODk3RUIxMzA2ODM0QUZDQjcyRUEzMjEwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/byodxD7/tQRtOkEojfIOHld WWt9g9f23M3tzEqiLgnpzCTUlpCR+d6btVqDczt7c1J5ItBhrG/x8dZmxuc4UaT2 ikZm7AazafUu88hjYdo8A09ZsEmxg/YkUlRmUDoCiOTsPsAFg2mTrdBENg4qWpRG uWQEi9bkyOfH09ce5i8ZD9iMgpsAdw3iJnTA/5GJqxSVQeDCh4sPRu3fcfbygvq2 Rh0YBUw9zmTHcTU/DmrMTlaxVhUHHOfFmihRhx2Uc/JajNEmfPT7rgELLFrGLcjj 0HNDYh/activQjEOwa7NpHYW+heRRTZ56ZzNVMWvHnoRoioTwLEWYNfgfHYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqq90u3YEu4l+sTBoNK/LcuoyEEswHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgsDHQiF8nFRKcesqJGxCh/YwvcEGqNJDye 7X1WFoo8DPHs/qp3NghLHJO4I2FFww16OQFrxCRhhammvTMiDzbnd+sfcXeSlVmi YRoXMKrtK5+a6nMOzXUXZTS+77DGjZbgzENnbeP1szdRPezlFI3x6KnBja5A1dqu tlf6h8nXy8wS9AX8wCjEbCbDg72VMocg4iTHbqL/CavO0uZuXxTeH+Rdzpa78+Ji V1oOnDJdzU8sW1fJd+Q8wWbpq1fEh+WkQfQDoty/AWvgQOy6z8edG96wKAA3oJ3+ TJB6njodKoiyEw5HIHMM7CTyV4Ko4+zEJSNO2CFPRJIPSjKLN8A= -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:31 2026 by rpki-client