$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: ooTDR84Pj8QY7+TE/U9icosyWjNk0l35sz2F3zyN51Q= Subject key identifier: BD:DD:73:9D:6F:83:10:EE:0C:9E:9F:A5:7C:71:61:6B:88:9A:08:CF Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 171528B6F9301711AD50D1313C0B1755603E0045 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0189 Signing time: Sat 28 Feb 2026 00:04:10 +0000 Manifest this update: Fri 27 Feb 2026 23:59:10 +0000 Manifest next update: Tue 03 Mar 2026 07:23:10 +0000 Files and hashes: 1: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: dbxrQTgZv3GXn+UMmlKIl7zz9zo4NUqYuZDIWrYrKEU=) 2: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) 3: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: SqBfzD8qrydh1QxYaX040hP7h4GbvhgEPqSPpnq0WR8=) 4: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 07:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:15:28:b6:f9:30:17:11:ad:50:d1:31:3c:0b:17:55:60:3e:00:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Feb 27 23:59:10 2026 GMT Not After : Mar 3 07:23:10 2026 GMT Subject: CN=BDDD739D6F8310EE0C9E9FA57C71616B889A08CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:a2:10:82:c3:b2:81:7b:42:ec:45:01:6a: 96:89:2d:ce:5a:f2:46:e2:6a:80:a8:80:64:02:8d: 5b:82:95:6a:e1:8f:88:18:9b:84:27:00:3f:2d:f8: 1e:db:11:d3:c5:48:3e:75:6e:03:ea:fc:be:59:70: 15:40:bd:38:87:80:39:7b:87:51:0e:b5:d2:a9:c7: e5:b6:5d:bc:25:14:33:db:fa:06:e2:6f:0b:62:63: ca:36:3c:5d:d3:11:96:6b:a6:35:b0:93:c9:6c:40: fe:e1:d9:94:d8:25:44:7a:ce:fd:ca:24:8f:2c:fe: 26:c1:51:99:07:0e:a0:9f:65:93:72:db:6b:5f:26: 4f:55:6a:7c:eb:41:ba:09:b8:7e:3b:f1:dc:5a:1b: b3:2c:fc:d5:91:fd:57:5f:be:85:df:a3:36:9f:5d: d9:69:b2:32:76:2f:be:ec:11:86:dc:76:53:a8:6c: 28:55:b1:bd:aa:6d:7b:e2:f8:23:02:28:16:51:e7: 39:5a:9a:08:8b:70:8c:06:18:f8:7c:0b:ee:3f:c1: ff:85:0f:36:bb:a5:ba:71:24:db:e9:3f:dd:3f:a2: 34:ba:02:7e:0b:f0:4b:8b:dc:b9:71:3a:75:c7:87: 03:2d:2d:5e:9e:91:9d:a5:f6:66:7d:40:d9:e5:f1: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:73:9D:6F:83:10:EE:0C:9E:9F:A5:7C:71:61:6B:88:9A:08:CF X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cd:6d:32:d9:82:7e:ef:32:e3:1e:ef:5a:23:ec:c8:e2:27: d2:45:1d:12:8c:1a:bb:8f:79:30:80:3b:a7:58:1d:bf:17:ef: 4e:55:e6:bc:b8:d6:5d:04:38:7d:d5:c1:bd:af:6b:d7:b1:d6: 39:ba:f3:88:65:f8:a2:00:4a:08:00:95:9b:f9:df:ab:df:67: 96:8f:5d:62:10:8b:fe:5d:50:96:3e:d4:44:65:c4:bd:13:74: 81:16:26:6b:ac:75:1f:70:ce:c7:fb:1e:00:aa:29:c3:f8:5f: 23:7d:57:8f:8a:cc:31:dc:2a:be:eb:62:e8:17:21:cf:3c:7e: f0:6c:4f:84:6f:4d:2d:95:62:e3:8a:64:1a:3f:21:08:d1:38: dc:5c:aa:89:40:57:5f:7c:8f:c0:93:e5:ba:73:fa:bb:d9:03: aa:2a:95:c3:59:14:b7:41:3b:7c:fc:a7:a9:f8:93:83:50:4a: d8:bc:52:6b:07:39:d7:4b:98:c5:83:be:3e:c5:81:1c:6c:5b: e7:79:6b:48:dc:fb:36:2d:9b:5f:bf:d0:75:30:6c:df:52:ed: 33:72:90:0a:e2:fe:d7:c8:3a:91:f0:99:3b:ac:ea:8f:f9:66: 02:8b:b7:5e:c8:45:ba:25:67:e5:ac:d2:07:98:60:14:f4:73: 5a:d7:23:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxUotvkwFxGtUNExPAsXVWA+AEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNjAyMjcyMzU5MTBaFw0yNjAzMDMwNzIzMTBaMDMxMTAvBgNV BAMTKEJEREQ3MzlENkY4MzEwRUUwQzlFOUZBNTdDNzE2MTZCODg5QTA4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdaIQgsOygXtC7EUBapaJLc5a 8kbiaoCogGQCjVuClWrhj4gYm4QnAD8t+B7bEdPFSD51bgPq/L5ZcBVAvTiHgDl7 h1EOtdKpx+W2XbwlFDPb+gbibwtiY8o2PF3TEZZrpjWwk8lsQP7h2ZTYJUR6zv3K JI8s/ibBUZkHDqCfZZNy22tfJk9VanzrQboJuH478dxaG7Ms/NWR/VdfvoXfozaf XdlpsjJ2L77sEYbcdlOobChVsb2qbXvi+CMCKBZR5zlamgiLcIwGGPh8C+4/wf+F Dza7pbpxJNvpP90/ojS6An4L8EuL3LlxOnXHhwMtLV6ekZ2l9mZ9QNnl8cpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvd1znW+DEO4Mnp+lfHFha4iaCM8wHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILNbTLZgn7vMuMe71oj7MjiJ9JFHRKMGruP eTCAO6dYHb8X705V5ry41l0EOH3Vwb2va9ex1jm684hl+KIASggAlZv536vfZ5aP XWIQi/5dUJY+1ERlxL0TdIEWJmusdR9wzsf7HgCqKcP4XyN9V4+KzDHcKr7rYugX Ic88fvBsT4RvTS2VYuOKZBo/IQjRONxcqolAV198j8CT5bpz+rvZA6oqlcNZFLdB O3z8p6n4k4NQSti8UmsHOddLmMWDvj7FgRxsW+d5a0jc+zYtm1+/0HUwbN9S7TNy kAri/tfIOpHwmTus6o/5ZgKLt17IRbolZ+Ws0geYYBT0c1rXIwE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:59 2026 by rpki-client