$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: k+y7hcK0Q7/bo/DKLl9u2zHnQd4y7dKdd3qAvv2YsWg= Subject key identifier: EC:AB:CF:E2:5F:1B:47:37:29:8F:40:D7:66:B3:DF:58:03:A6:46:66 Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 2EF654245F68100F77E702804C4D07714214B1A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: C8 Signing time: Mon 02 Mar 2026 01:02:25 +0000 Manifest this update: Mon 02 Mar 2026 00:57:25 +0000 Manifest next update: Thu 05 Mar 2026 06:20:25 +0000 Files and hashes: 1: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XhWdokRSZKsmkPslfMXYqoYsZmB36DXqHyY6n5ueEW4=) 2: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: GOKg9RSCe07Sx9GP7mLWYk+y2Rm870vCrIk4OhiKGTc=) 3: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: IC6YGEY4qvEr1N3Ch4GEV6VNNMBPX/WCJJFWoInrWhg=) 4: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: LRVa/+g9Phm4DS1KM+ftjtti7KXy6ccI0ROhTKpj7KU=) 5: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: M7vZQHPEWxI5UNs6yi6gKlm3olQkDzTXBE8xEqwNtQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f6:54:24:5f:68:10:0f:77:e7:02:80:4c:4d:07:71:42:14:b1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Mar 2 00:57:25 2026 GMT Not After : Mar 5 06:20:25 2026 GMT Subject: CN=ECABCFE25F1B4737298F40D766B3DF5803A64666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:e5:ae:06:f6:18:7d:74:77:c2:56:3a:c3: 48:1d:53:00:29:fe:d9:24:a4:34:56:8d:0c:84:fc: 31:b5:17:14:52:e7:d6:b9:bf:6c:0b:e2:03:5b:87: a1:84:08:4a:3c:fe:f8:ce:c3:90:c0:5f:b1:46:df: 5f:92:fd:47:c1:15:ea:8a:c5:61:f4:d1:3d:6b:29: 42:ed:81:b4:a8:ed:73:90:8f:51:93:94:9d:a4:4c: af:b0:e2:03:2a:6d:19:cb:4a:a3:51:b4:6f:8e:dc: e8:87:b7:ab:c5:fb:c7:1c:19:94:3f:67:b0:48:65: c4:ce:00:06:03:d5:cf:30:d4:e1:86:d3:7b:71:04: 08:53:04:f4:0d:af:47:6c:e2:71:bc:a8:be:e0:d4: 46:d4:98:1e:31:35:02:f1:72:eb:db:5d:0e:4c:0c: ce:95:4e:e9:13:c2:03:87:35:90:b4:91:d3:2e:80: 95:96:6a:8f:40:4b:dd:71:56:e2:4b:a7:a2:42:7a: e8:46:2e:99:ca:aa:36:3a:93:db:93:ea:f0:a7:1c: 94:17:e3:28:83:55:0a:09:3e:81:0e:1c:8c:65:9a: 75:f6:64:b9:9f:5b:5e:ca:4f:39:a9:0a:e5:78:e4: 79:3a:33:0f:f2:af:85:b0:d2:b6:2a:00:ee:d8:01: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AB:CF:E2:5F:1B:47:37:29:8F:40:D7:66:B3:DF:58:03:A6:46:66 X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:74:8b:06:37:f1:40:d7:f5:5b:c0:0c:b8:9d:7a:c0:b9:5d: 46:d5:7a:08:a9:fd:89:5f:be:f3:14:53:ae:da:9e:7f:19:f0: 6f:fe:d0:ce:fd:cf:63:8d:5e:66:87:87:15:7d:34:d6:1a:83: bc:f5:8a:ff:db:a7:25:22:11:71:40:11:80:40:fc:30:ea:c1: 0f:20:bc:98:64:cd:55:d6:4e:6c:1d:d0:e7:d6:9e:d7:42:d8: 51:1e:21:79:d2:00:e3:51:1a:7f:ae:1f:41:c5:f3:99:0c:07: df:da:a0:cb:3d:64:cd:6a:b2:15:65:87:d1:1e:48:71:3c:ea: 98:26:48:78:ae:75:8b:65:d8:69:8a:02:be:5b:29:8c:1c:1d: 62:17:bf:ca:37:13:dd:0c:30:e6:49:dc:bd:68:b8:38:bf:50: 90:ba:fd:a0:28:ec:f7:61:9c:c9:9e:24:d5:9e:12:7f:d8:37: 5e:35:5a:3d:f5:0e:b6:64:7e:5e:d1:ad:8e:46:fe:c8:83:be: 78:20:62:0e:9d:f3:60:18:c8:ac:f2:9c:40:b9:f9:c0:46:2a: 1d:1f:f3:f0:c4:d9:bf:86:da:95:25:63:dd:49:39:6a:ab:88: 82:78:a3:a7:aa:c8:e2:73:f0:98:7a:4d:30:1f:f1:d4:e2:6c: 04:5b:54:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvZUJF9oEA935wKATE0HcUIUsaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNjAzMDIwMDU3MjVaFw0yNjAzMDUwNjIwMjVaMDMxMTAvBgNV BAMTKEVDQUJDRkUyNUYxQjQ3MzcyOThGNDBENzY2QjNERjU4MDNBNjQ2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBuWuBvYYfXR3wlY6w0gdUwAp /tkkpDRWjQyE/DG1FxRS59a5v2wL4gNbh6GECEo8/vjOw5DAX7FG31+S/UfBFeqK xWH00T1rKULtgbSo7XOQj1GTlJ2kTK+w4gMqbRnLSqNRtG+O3OiHt6vF+8ccGZQ/ Z7BIZcTOAAYD1c8w1OGG03txBAhTBPQNr0ds4nG8qL7g1EbUmB4xNQLxcuvbXQ5M DM6VTukTwgOHNZC0kdMugJWWao9AS91xVuJLp6JCeuhGLpnKqjY6k9uT6vCnHJQX 4yiDVQoJPoEOHIxlmnX2ZLmfW17KTzmpCuV45Hk6Mw/yr4Ww0rYqAO7YAXFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KvP4l8bRzcpj0DXZrPfWAOmRmYwHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABV0iwY38UDX9VvADLidesC5XUbVegip/Ylf vvMUU67ann8Z8G/+0M79z2ONXmaHhxV9NNYag7z1iv/bpyUiEXFAEYBA/DDqwQ8g vJhkzVXWTmwd0OfWntdC2FEeIXnSAONRGn+uH0HF85kMB9/aoMs9ZM1qshVlh9Ee SHE86pgmSHiudYtl2GmKAr5bKYwcHWIXv8o3E90MMOZJ3L1ouDi/UJC6/aAo7Pdh nMmeJNWeEn/YN141Wj31DrZkfl7RrY5G/siDvnggYg6d82AYyKzynEC5+cBGKh0f 8/DE2b+G2pUlY91JOWqriIJ4o6eqyOJz8Jh6TTAf8dTibARbVNA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:09 2026 by rpki-client