$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json) Hash identifier: smPiI1FnGkZzW72UArk8c3vOkqUv58v32mO1wkMt7Hk= Subject key identifier: BA:AE:5C:FC:7C:E1:47:BC:1F:CA:D2:46:07:F3:D3:60:FA:D5:87:01 Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Certificate serial: FB29E78DC1A9920E1D66AB0FA479CA2264A846 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft Manifest number: 0411 Signing time: Sat 28 Feb 2026 12:40:07 +0000 Manifest this update: Sat 28 Feb 2026 12:35:07 +0000 Manifest next update: Tue 03 Mar 2026 17:39:07 +0000 Files and hashes: 1: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 7+14GGdnKYA1ZHAWIx7SieKlT4Qpyh9xXAdG5rCu8fQ=) 2: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: gVPQrVQX9oWdBIjWPQSJvyIQ3AEVj+vaeGmFfblKRbs=) 3: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: gNg3pSVKH2ZGTQUKj2gYHIgoAzjmyWJ8bVXnPWnC+00=) 4: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: EiSArCgcIeqW/6ye+lpgIHKBne0btPg850jNZ3vBrJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: fb:29:e7:8d:c1:a9:92:0e:1d:66:ab:0f:a4:79:ca:22:64:a8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05 Validity Not Before: Feb 28 12:35:07 2026 GMT Not After : Mar 3 17:39:07 2026 GMT Subject: CN=BAAE5CFC7CE147BC1FCAD24607F3D360FAD58701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f5:80:3e:46:80:28:e4:61:d4:a2:8d:cc:07: c5:d3:f9:8e:04:dd:88:c7:94:91:3f:a9:83:35:13: 21:0f:0e:19:0e:59:f6:d0:5d:fa:72:8a:d3:2e:83: 62:37:4b:8f:5c:0c:46:80:a5:e7:b6:da:17:13:d7: 76:92:4b:eb:e5:47:0c:b0:0a:7c:a0:a6:4a:49:8f: 0f:eb:e7:16:91:b3:cd:81:fb:f4:28:21:91:f7:a7: df:14:a9:4e:5d:ad:76:a3:75:73:05:5f:7b:62:12: 83:2e:d2:ce:d5:0e:05:5a:47:47:ee:34:b2:16:1c: 9a:c0:eb:4e:eb:37:0d:16:67:64:a8:4d:04:f6:26: de:c8:56:11:e3:34:be:83:56:ac:5d:dc:ac:6e:51: 45:78:20:d4:8c:f1:bf:6b:33:80:8f:7b:0e:e0:f2: 5d:7a:b4:46:5c:f2:5b:26:27:7b:6c:3a:d4:24:55: 04:ba:06:71:7d:20:b8:b9:7b:26:ff:0b:e8:b8:3a: 44:69:f6:55:45:99:12:36:23:fa:be:21:50:c5:39: 79:a4:e2:cf:8f:62:aa:75:a0:a9:f3:78:a8:93:4e: cd:67:fb:b6:96:8f:33:c3:6c:d6:6d:71:cd:f3:89: 56:74:5e:40:43:de:88:55:9c:68:5a:a0:c5:93:27: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AE:5C:FC:7C:E1:47:BC:1F:CA:D2:46:07:F3:D3:60:FA:D5:87:01 X509v3 Authority Key Identifier: keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:6a:6b:06:d9:fa:d8:0a:59:e6:dc:9b:7a:76:ba:9f:e3: f6:06:16:2b:61:d4:97:e3:c9:75:e4:a3:c3:14:97:0f:22:53: 8a:f9:8d:b3:dd:e3:bf:43:07:47:23:8c:34:cb:73:07:7f:7b: f8:04:1e:13:1d:1e:e8:ec:29:12:a6:01:24:3e:f5:e0:4d:db: 0c:cc:4e:54:0e:d2:74:3d:74:69:50:9e:6c:90:47:e6:aa:70: a7:65:0b:35:fb:aa:98:db:e2:9c:df:b9:92:09:3f:1f:79:05: 21:50:27:e4:2d:61:cb:8e:14:38:bc:33:1a:4e:23:24:af:54: 3f:aa:6d:79:66:2a:32:5f:b8:ec:e5:b4:90:a8:23:f0:64:48: e9:4e:0d:4e:d0:3f:40:9f:cd:4d:8b:69:e3:70:94:56:ee:a6: 1a:f7:df:38:95:aa:f6:0c:89:d7:f1:9c:4d:66:83:48:de:55: 7a:0c:05:bc:e1:9a:f4:bc:ad:88:97:52:f1:6f:83:4d:e9:42: bd:ce:51:f0:60:36:9e:49:d2:e3:8b:4f:d3:8e:d7:2d:40:0d: a5:c2:6a:b8:e4:b5:bb:40:2f:0e:08:12:24:c9:f6:23:94:48: 8a:31:60:95:69:a7:a2:ec:1f:9a:34:fa:cb:e8:4e:f7:3c:bd: 99:9b:25:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPsp543BqZIOHWarD6R5yiJkqEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIy QzBFMkUwNTAeFw0yNjAyMjgxMjM1MDdaFw0yNjAzMDMxNzM5MDdaMDMxMTAvBgNV BAMTKEJBQUU1Q0ZDN0NFMTQ3QkMxRkNBRDI0NjA3RjNEMzYwRkFENTg3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9YA+RoAo5GHUoo3MB8XT+Y4E 3YjHlJE/qYM1EyEPDhkOWfbQXfpyitMug2I3S49cDEaApee22hcT13aSS+vlRwyw CnygpkpJjw/r5xaRs82B+/QoIZH3p98UqU5drXajdXMFX3tiEoMu0s7VDgVaR0fu NLIWHJrA607rNw0WZ2SoTQT2Jt7IVhHjNL6DVqxd3KxuUUV4INSM8b9rM4CPew7g 8l16tEZc8lsmJ3tsOtQkVQS6BnF9ILi5eyb/C+i4OkRp9lVFmRI2I/q+IVDFOXmk 4s+PYqp1oKnzeKiTTs1n+7aWjzPDbNZtcc3ziVZ0XkBD3ohVnGhaoMWTJ9snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuq5c/HzhR7wfytJGB/PTYPrVhwEwHwYDVR0j BBgwFoAUyKwiEqJy7OrojVIyByV4kiwOLgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFlOTIzOC00MjY3LTQ4ZWYtYjAyZS0xZDdkMDQ0MDA5NDEvMC9DOEFDMjIxMkEy NzJFQ0VBRTg4RDUyMzIwNzI1Nzg5MjJDMEUyRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4OTIyQzBF MkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxZTkyMzgtNDI2Ny00OGVmLWIw MmUtMWQ3ZDA0NDAwOTQxLzAvQzhBQzIyMTJBMjcyRUNFQUU4OEQ1MjMyMDcyNTc4 OTIyQzBFMkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsdamsG2frYClnm3Jt6drqf4/YGFith1Jfj yXXko8MUlw8iU4r5jbPd479DB0cjjDTLcwd/e/gEHhMdHujsKRKmASQ+9eBN2wzM TlQO0nQ9dGlQnmyQR+aqcKdlCzX7qpjb4pzfuZIJPx95BSFQJ+QtYcuOFDi8MxpO IySvVD+qbXlmKjJfuOzltJCoI/BkSOlODU7QP0CfzU2LaeNwlFbuphr33ziVqvYM idfxnE1mg0jeVXoMBbzhmvS8rYiXUvFvg03pQr3OUfBgNp5J0uOLT9OO1y1ADaXC arjktbtALw4IEiTJ9iOUSIoxYJVpp6LsH5o0+svoTvc8vZmbJSY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:34:03 2026 by rpki-client