$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: xyI/UYRsAsyew4crSMl0AF54n9ouK+9gauCM2PIp/PE= Subject key identifier: 7B:B2:A1:43:95:D8:2D:98:DE:A2:30:3F:11:AB:08:0A:E4:06:31:E4 Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 0EA0B2101236D630341B5AC32BE99C5283EFCD1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 02AC Signing time: Sat 28 Feb 2026 11:30:49 +0000 Manifest this update: Sat 28 Feb 2026 11:25:49 +0000 Manifest next update: Tue 03 Mar 2026 15:51:49 +0000 Files and hashes: 1: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 3: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: uvUBKnlLHPkdoid44he9ulqX2Mx7v3QwqIMECJ9g2tY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a0:b2:10:12:36:d6:30:34:1b:5a:c3:2b:e9:9c:52:83:ef:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Feb 28 11:25:49 2026 GMT Not After : Mar 3 15:51:49 2026 GMT Subject: CN=7BB2A14395D82D98DEA2303F11AB080AE40631E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:a9:58:b3:34:91:8f:7f:ba:87:2a:6f:3d: 73:67:02:9b:0c:78:55:26:ff:76:99:38:c1:08:17: 75:91:2e:13:7e:82:aa:b2:7e:74:3c:bc:9e:31:bd: 8e:04:cb:ae:5a:f5:50:1d:2a:09:43:a9:27:1a:1d: b9:be:22:44:43:f9:50:59:66:bf:44:6e:77:f9:a5: d1:97:94:f1:c4:3b:bb:79:a1:1c:81:8d:89:e0:76: 85:c7:d0:34:12:38:0c:35:df:31:41:36:50:b6:66: 5f:7e:8a:49:1b:06:1d:20:d7:43:5a:c5:86:af:32: 3e:01:d2:ef:ba:b6:ba:8a:5d:e2:1e:98:0f:27:84: d7:50:88:d6:81:aa:73:66:c4:c4:d7:48:2b:b3:7b: 18:b5:47:3f:d5:11:b0:36:cb:17:93:a5:cd:98:8d: 01:67:ed:52:6e:3d:93:c6:fe:ae:f6:7e:b5:43:d6: 7c:48:4f:8c:9a:65:71:0e:e9:fb:c6:7a:08:1f:10: 29:97:10:0f:3a:20:e8:27:14:33:97:9d:a1:d5:69: 87:51:4d:e9:e1:70:b5:e1:9f:84:83:a9:dc:91:89: e1:1c:0b:56:b8:3b:72:91:c4:56:8e:e7:22:a6:fe: 7b:33:08:51:36:6c:9f:91:ae:83:19:3c:2e:8c:c8: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B2:A1:43:95:D8:2D:98:DE:A2:30:3F:11:AB:08:0A:E4:06:31:E4 X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c9:6d:0f:51:13:ed:bf:98:c0:a0:54:06:3b:1b:4e:a0:a6: a9:cf:8b:1a:32:c8:0b:2f:b2:10:b1:72:fd:2f:9c:7c:8a:0e: 8c:86:a2:c9:0f:90:ab:97:bd:33:74:bd:83:c8:3c:e5:5e:05: 0b:6e:4b:1e:e0:b3:4d:a6:7c:4f:89:1b:42:86:76:18:9b:ad: 77:0d:e0:7c:88:53:69:1f:42:97:67:19:87:45:02:3d:d7:26: c1:9b:7f:c6:43:48:26:86:6e:fe:52:36:8b:1f:83:eb:6b:52: 13:43:10:aa:3e:73:4d:25:cf:ce:c5:6e:1a:42:05:9b:e0:b1: 72:c0:83:30:a2:02:aa:e5:c5:c2:e4:81:67:1e:33:8f:cd:18: c7:28:c7:bd:81:22:56:e6:03:e8:ea:f2:76:34:30:a8:b2:b5: 08:fa:b6:5c:6b:1f:87:43:51:70:3b:4e:88:c4:00:37:48:0a: 2e:5d:d0:bd:85:b5:b5:23:2c:74:ce:80:a6:f9:1d:5e:7c:a9: 0c:9c:4d:d7:87:1f:87:35:5b:c6:4a:64:c9:87:da:e7:bd:fa: 51:95:8d:9c:23:45:a8:da:57:fd:59:a6:34:95:b6:7f:cb:3c: a6:67:1c:5b:5f:41:3b:2e:06:39:18:a6:ab:ac:75:d7:5c:2f: cf:66:70:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqCyEBI21jA0G1rDK+mcUoPvzRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNjAyMjgxMTI1NDlaFw0yNjAzMDMxNTUxNDlaMDMxMTAvBgNV BAMTKDdCQjJBMTQzOTVEODJEOThERUEyMzAzRjExQUIwODBBRTQwNjMxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn46lYszSRj3+6hypvPXNnApsM eFUm/3aZOMEIF3WRLhN+gqqyfnQ8vJ4xvY4Ey65a9VAdKglDqScaHbm+IkRD+VBZ Zr9Ebnf5pdGXlPHEO7t5oRyBjYngdoXH0DQSOAw13zFBNlC2Zl9+ikkbBh0g10Na xYavMj4B0u+6trqKXeIemA8nhNdQiNaBqnNmxMTXSCuzexi1Rz/VEbA2yxeTpc2Y jQFn7VJuPZPG/q72frVD1nxIT4yaZXEO6fvGeggfECmXEA86IOgnFDOXnaHVaYdR TenhcLXhn4SDqdyRieEcC1a4O3KRxFaO5yKm/nszCFE2bJ+RroMZPC6MyHm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7KhQ5XYLZjeojA/EasICuQGMeQwHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbJbQ9RE+2/mMCgVAY7G06gpqnPixoyyAsv shCxcv0vnHyKDoyGoskPkKuXvTN0vYPIPOVeBQtuSx7gs02mfE+JG0KGdhibrXcN 4HyIU2kfQpdnGYdFAj3XJsGbf8ZDSCaGbv5SNosfg+trUhNDEKo+c00lz87FbhpC BZvgsXLAgzCiAqrlxcLkgWceM4/NGMcox72BIlbmA+jq8nY0MKiytQj6tlxrH4dD UXA7TojEADdICi5d0L2FtbUjLHTOgKb5HV58qQycTdeHH4c1W8ZKZMmH2ue9+lGV jZwjRajaV/1ZpjSVtn/LPKZnHFtfQTsuBjkYpqusdddcL89mcGo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:12 2026 by rpki-client