$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: WoVMKV/FXjI+a6syEszXHxfBlSC8q5D8VjpCG1yijVE= Subject key identifier: 69:8F:D7:FD:78:EF:75:E7:E1:06:53:52:11:F0:90:1A:3F:0A:58:2E Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 2F8898CAE72EF9BF67D9161DF990A7E545D661FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 10:52:21 +0000 Manifest this update: Sun 01 Mar 2026 10:47:21 +0000 Manifest next update: Wed 04 Mar 2026 19:27:21 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: vCW5hEK3W62WM8Cp+l1VXmApbAZ7PL6gEtnXqxKW4YY=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:88:98:ca:e7:2e:f9:bf:67:d9:16:1d:f9:90:a7:e5:45:d6:61:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Mar 1 10:47:21 2026 GMT Not After : Mar 4 19:27:21 2026 GMT Subject: CN=698FD7FD78EF75E7E106535211F0901A3F0A582E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:dc:76:fc:60:bc:ad:dd:9e:9d:87:15:5d:30: 4b:2f:3e:06:84:76:25:8f:5b:4b:97:69:24:f2:5e: 54:35:ea:49:3a:d3:e2:bf:6c:ad:43:e3:9c:0f:16: d3:9a:0f:99:37:37:b6:3f:55:94:97:f9:69:17:17: f5:d4:0a:a8:ec:28:82:b6:fe:c9:18:a2:12:20:a5: aa:f0:1d:03:66:4e:60:b8:14:67:1a:ea:b3:f4:d1: d0:f5:8b:c4:34:d4:24:71:4f:7f:d6:07:fb:d0:46: 4a:3a:12:b4:67:79:01:c2:1c:9b:f3:b0:e6:ab:22: 2f:e2:9a:15:af:92:e9:28:f0:25:b9:79:a8:22:be: 5b:74:48:ba:77:d2:50:21:a1:82:f0:b1:53:68:10: 0f:3c:8a:ce:5b:d8:e8:54:43:25:b8:7d:e3:60:a8: 64:f7:23:80:ee:58:e1:b1:81:37:37:14:d2:d8:bb: a3:f1:46:ab:db:43:eb:7b:7a:13:bf:85:6b:9f:46: f1:20:8b:c6:a9:af:8a:b5:25:5c:a2:8d:56:fb:2c: 60:2a:38:73:b2:df:1b:95:81:13:01:6c:0d:f4:4a: 22:70:f6:e8:0b:dd:55:5b:93:bb:a1:7e:94:bc:a8: 1f:3a:a1:aa:ca:8c:a4:01:58:11:2a:ef:54:ca:9f: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8F:D7:FD:78:EF:75:E7:E1:06:53:52:11:F0:90:1A:3F:0A:58:2E X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:4b:a9:bc:50:88:4e:81:e5:53:1b:81:51:68:65:3f:5d:e3: c4:bb:f6:49:9b:4c:b0:10:95:2f:32:37:81:4c:a8:bd:3b:dd: b5:6d:78:2a:08:9f:d6:2c:c0:83:ac:62:d7:c1:07:77:92:14: 53:1e:9d:49:90:43:4c:95:41:7e:6e:a2:67:ca:e4:7b:f7:7c: f7:fc:f7:8a:08:56:5d:59:92:07:dd:6b:11:bf:be:6d:a0:6c: c9:00:dc:b0:c6:5c:43:af:91:3e:52:36:42:51:1b:15:ad:22: db:5c:bc:b2:ba:57:7a:0a:80:d2:d4:64:18:d4:6b:05:66:14: a9:18:63:2f:d1:7d:03:00:2d:08:1c:b0:53:1f:47:90:68:39: 26:e6:1d:10:9f:4a:0b:f3:f4:d3:f6:ae:0a:bb:81:dc:fe:56: 0c:b2:ad:3a:94:3c:22:08:fc:a0:50:40:c5:a1:6c:18:e6:69: d2:ba:98:c3:b8:72:91:a4:7b:64:09:bc:7c:ee:aa:a7:e7:f9: 5b:d1:8b:a3:fd:45:d5:2e:95:96:2f:60:70:da:5d:1d:28:bd: d4:0e:08:29:2a:bc:51:03:e1:35:d5:69:33:3a:e1:40:5b:8a: e3:fe:27:4d:c2:35:49:90:1a:06:a9:b9:bf:a5:ad:af:09:a5: 36:e9:d7:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4iYyucu+b9n2RYd+ZCn5UXWYf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNjAzMDExMDQ3MjFaFw0yNjAzMDQxOTI3MjFaMDMxMTAvBgNV BAMTKDY5OEZEN0ZENzhFRjc1RTdFMTA2NTM1MjExRjA5MDFBM0YwQTU4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD63Hb8YLyt3Z6dhxVdMEsvPgaE diWPW0uXaSTyXlQ16kk60+K/bK1D45wPFtOaD5k3N7Y/VZSX+WkXF/XUCqjsKIK2 /skYohIgparwHQNmTmC4FGca6rP00dD1i8Q01CRxT3/WB/vQRko6ErRneQHCHJvz sOarIi/imhWvkuko8CW5eagivlt0SLp30lAhoYLwsVNoEA88is5b2OhUQyW4feNg qGT3I4DuWOGxgTc3FNLYu6PxRqvbQ+t7ehO/hWufRvEgi8apr4q1JVyijVb7LGAq OHOy3xuVgRMBbA30SiJw9ugL3VVbk7uhfpS8qB86oarKjKQBWBEq71TKnxvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaY/X/XjvdefhBlNSEfCQGj8KWC4wHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1LqbxQiE6B5VMbgVFoZT9d48S79kmbTLAQ lS8yN4FMqL073bVteCoIn9YswIOsYtfBB3eSFFMenUmQQ0yVQX5uomfK5Hv3fPf8 94oIVl1ZkgfdaxG/vm2gbMkA3LDGXEOvkT5SNkJRGxWtIttcvLK6V3oKgNLUZBjU awVmFKkYYy/RfQMALQgcsFMfR5BoOSbmHRCfSgvz9NP2rgq7gdz+VgyyrTqUPCII /KBQQMWhbBjmadK6mMO4cpGke2QJvHzuqqfn+VvRi6P9RdUulZYvYHDaXR0ovdQO CCkqvFED4TXVaTM64UBbiuP+J03CNUmQGgapub+lra8JpTbp108= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:37 2026 by rpki-client