$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: ZpAbQyva7noKGPEqGTKMXoc6NM/bW586G/Yqf6H8szE= Subject key identifier: 3E:73:4F:C9:D1:1D:BC:3A:5A:8C:3F:D0:13:D1:53:F2:E5:31:7E:9B Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 50AC427E90B5FA6670909BD94D06B84D4BABC409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 0252 Signing time: Sun 01 Mar 2026 01:52:05 +0000 Manifest this update: Sun 01 Mar 2026 01:47:05 +0000 Manifest next update: Wed 04 Mar 2026 12:50:05 +0000 Files and hashes: 1: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: mc/gpdR9OainKrNd2JN4dpp3ypq2I3I6/bxvklOLr6k=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:42:7e:90:b5:fa:66:70:90:9b:d9:4d:06:b8:4d:4b:ab:c4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Mar 1 01:47:05 2026 GMT Not After : Mar 4 12:50:05 2026 GMT Subject: CN=3E734FC9D11DBC3A5A8C3FD013D153F2E5317E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:88:2e:d2:e3:88:33:57:51:4a:98:f1:fa: 4c:1b:fc:60:fe:f1:c3:35:39:0f:ce:20:cc:9c:d4: cf:77:bc:91:ed:80:1f:13:f6:e8:72:d1:af:8a:49: a3:55:da:aa:36:47:18:4e:f5:2d:d4:08:d3:d1:c0: 29:32:db:6b:00:0e:9c:ca:24:c1:6a:3b:25:42:70: 2a:c5:b1:df:1c:35:0e:20:83:58:b2:ff:6b:12:fd: fa:90:4e:f6:ba:67:64:c6:b8:c0:cb:98:87:28:81: 9d:77:50:fd:2c:7f:e4:7b:c5:f4:63:6f:f2:81:a2: 5a:76:26:cd:26:bd:47:7d:d8:25:66:1c:ae:5c:cd: a5:5a:00:a6:c0:f9:fb:5d:3a:b1:9b:86:5f:31:aa: b6:6b:c0:4e:15:12:87:24:5c:69:d6:11:81:02:75: 22:f6:bf:20:8f:43:be:9f:56:cd:c5:c9:9d:36:81: 8b:a3:08:7b:64:c4:50:59:7e:cc:54:48:fc:78:1a: 8b:6e:d4:1b:bc:0a:ea:16:88:2f:8c:8b:2d:65:4f: ff:83:a3:45:b1:f9:6e:95:59:79:4e:ce:10:17:05: cc:f7:9b:1e:f9:08:b2:29:ce:ca:44:c2:7a:83:0f: 76:a5:af:eb:89:05:7f:87:4f:37:c0:e3:4e:c4:cb: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:4F:C9:D1:1D:BC:3A:5A:8C:3F:D0:13:D1:53:F2:E5:31:7E:9B X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a1:27:35:58:69:af:1d:47:8b:b9:d8:bb:dd:b9:85:e3:d7: 24:92:a7:86:1f:e1:3f:4c:0b:1b:ea:3b:6b:57:39:2f:03:f6: 33:f4:10:26:ee:e3:f6:8b:8f:87:68:ac:a4:1f:1b:dc:75:d9: ff:16:ea:ac:37:ca:3a:be:a5:6e:e3:73:36:1a:02:49:ec:e0: 9b:6a:df:c8:b6:7d:40:00:e2:0f:3e:f8:b0:bb:8f:db:9f:34: 23:d3:c9:45:e4:9c:37:ba:73:c4:a7:6b:e0:70:41:86:71:f0: 2b:e9:79:cb:97:b5:f7:72:7e:77:44:a6:40:18:76:b3:61:0d: 6a:a6:10:0c:7e:62:02:0f:df:78:79:84:04:8d:bc:de:f9:27: 88:31:de:fa:2a:2b:c5:c5:b0:75:4e:b7:33:af:39:42:13:d3: 1c:00:fe:80:82:9a:9c:af:19:f0:07:6b:0c:e9:08:09:4d:ab: 6d:d9:d4:b5:e6:84:01:2a:0a:6d:5b:9c:22:04:a1:e2:e7:57: 8a:86:dc:d3:07:64:04:02:f7:d9:0a:9e:27:89:47:60:8e:e4: b3:dd:d8:e0:c1:85:e6:80:60:79:18:5b:a3:e4:d6:93:8b:c8: 0d:f5:68:e6:90:94:63:82:73:c5:57:04:59:d1:d5:a0:79:51: b8:a5:80:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKxCfpC1+mZwkJvZTQa4TUurxAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNjAzMDEwMTQ3MDVaFw0yNjAzMDQxMjUwMDVaMDMxMTAvBgNV BAMTKDNFNzM0RkM5RDExREJDM0E1QThDM0ZEMDEzRDE1M0YyRTUzMTdFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXIgu0uOIM1dRSpjx+kwb/GD+ 8cM1OQ/OIMyc1M93vJHtgB8T9uhy0a+KSaNV2qo2RxhO9S3UCNPRwCky22sADpzK JMFqOyVCcCrFsd8cNQ4gg1iy/2sS/fqQTva6Z2TGuMDLmIcogZ13UP0sf+R7xfRj b/KBolp2Js0mvUd92CVmHK5czaVaAKbA+ftdOrGbhl8xqrZrwE4VEockXGnWEYEC dSL2vyCPQ76fVs3FyZ02gYujCHtkxFBZfsxUSPx4Gotu1Bu8CuoWiC+Miy1lT/+D o0Wx+W6VWXlOzhAXBcz3mx75CLIpzspEwnqDD3alr+uJBX+HTzfA407Ey68JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPnNPydEdvDpajD/QE9FT8uUxfpswHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2hJzVYaa8dR4u52LvduYXj1ySSp4Yf4T9M CxvqO2tXOS8D9jP0ECbu4/aLj4dorKQfG9x12f8W6qw3yjq+pW7jczYaAkns4Jtq 38i2fUAA4g8++LC7j9ufNCPTyUXknDe6c8Sna+BwQYZx8CvpecuXtfdyfndEpkAY drNhDWqmEAx+YgIP33h5hASNvN75J4gx3voqK8XFsHVOtzOvOUIT0xwA/oCCmpyv GfAHawzpCAlNq23Z1LXmhAEqCm1bnCIEoeLnV4qG3NMHZAQC99kKnieJR2CO5LPd 2ODBheaAYHkYW6Pk1pOLyA31aOaQlGOCc8VXBFnR1aB5UbilgFY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:37:59 2026 by rpki-client