$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: 8tPp+/FGTslNMqz5Bg6coAoPsv8XWEbBXXuKoZ9h7+c= Subject key identifier: 3A:53:3F:0E:4A:5F:94:CD:EE:17:6A:42:2B:C3:49:46:CD:50:42:72 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 2AD7BD8705ABC9EB423F7AA479B4A1B20DE55E00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 0333 Signing time: Sun 01 Mar 2026 20:40:43 +0000 Manifest this update: Sun 01 Mar 2026 20:35:43 +0000 Manifest next update: Thu 05 Mar 2026 05:11:43 +0000 Files and hashes: 1: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) 2: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=) 4: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: I5ZBOKAkwv6e1TbHfF/yMtHON26UV7O+TCfKRzZ0Tp0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d7:bd:87:05:ab:c9:eb:42:3f:7a:a4:79:b4:a1:b2:0d:e5:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Mar 1 20:35:43 2026 GMT Not After : Mar 5 05:11:43 2026 GMT Subject: CN=3A533F0E4A5F94CDEE176A422BC34946CD504272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:b5:6e:1d:82:65:16:e5:eb:04:b0:18:9a: 0e:b4:49:00:72:03:8c:6c:0b:91:d5:9e:23:b0:5d: 15:c4:98:a5:4a:1e:cb:30:0f:d3:0a:17:1d:6b:b3: c0:33:6c:60:eb:9a:1b:63:5e:72:f4:2d:e4:72:90: 29:4e:7f:0f:a9:d1:8d:e9:6a:da:5f:b8:3f:e6:b0: d5:06:75:26:80:2d:4d:38:e8:31:ec:f0:36:17:10: 3e:1c:71:9a:37:b9:16:fd:2e:82:c1:8f:e0:79:44: e1:f0:6e:81:a1:2a:bd:19:99:8f:b7:20:9c:b0:b0: 40:8a:e6:63:0b:3b:c9:3e:2a:f1:9a:74:a2:92:c3: c9:6b:c3:2e:eb:7f:47:3c:b9:3c:9f:dd:91:65:cb: c8:22:c1:5d:2b:79:59:96:c1:d8:67:a9:84:ec:12: 1b:cd:88:fd:18:8d:2c:90:aa:1d:34:c7:e7:5a:3c: 5a:c0:84:e3:6a:7d:b5:f8:09:1b:5e:1d:f1:2d:dc: 18:8b:c8:df:18:b6:93:de:6e:65:cd:2d:50:aa:c1: a4:b1:94:cd:95:c4:e4:2b:a6:13:5a:06:41:12:c2: 84:10:e1:57:de:ab:a2:45:62:04:39:bc:47:a3:22: 3c:4b:aa:fc:f3:87:e9:85:3f:43:99:36:78:c3:c4: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:53:3F:0E:4A:5F:94:CD:EE:17:6A:42:2B:C3:49:46:CD:50:42:72 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3a:d4:6e:14:a9:27:17:ab:31:ad:8e:13:5a:2a:12:3c:6d: d1:63:77:7a:4d:36:67:af:22:46:e1:44:29:6d:c4:d3:51:09: 2f:9b:3c:fe:b9:0e:5b:08:38:93:bd:3b:9b:b3:b5:9b:fe:49: 9a:cf:3c:71:a2:f3:a7:ae:6b:10:8c:3c:59:a4:f7:8a:a1:bc: e2:42:4b:8e:58:1a:b1:14:af:dc:ad:4f:ca:fe:e1:6e:dd:25: 35:bd:86:45:6f:a7:29:c6:09:9e:1b:c5:06:36:40:ad:a8:5a: 78:d5:d0:b2:01:66:bc:39:16:94:26:90:f3:51:84:69:8a:9b: 74:75:cc:70:75:0a:34:ab:b7:f3:1f:d7:09:8c:8d:9b:5e:40: df:bf:a1:30:55:84:33:19:9c:c4:30:9c:00:62:84:98:4c:59: fe:0b:f8:c1:61:50:c6:8c:77:8d:8a:9a:42:5b:ac:8c:f0:de: 17:b2:5d:42:47:64:18:7d:6d:11:8d:b5:7b:c3:3c:ff:ad:ac: 0d:6a:0d:c3:4b:a2:78:ec:bb:ac:fb:bf:c0:c7:fb:12:a1:16: 0b:c8:03:c0:54:20:ff:6b:d5:e3:a9:f7:09:39:d2:b7:99:13: 7c:fd:6f:05:76:6d:5c:18:1e:70:9f:a0:e7:53:18:e6:57:52: 1f:8a:c9:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKte9hwWryetCP3qkebShsg3lXgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNjAzMDEyMDM1NDNaFw0yNjAzMDUwNTExNDNaMDMxMTAvBgNV BAMTKDNBNTMzRjBFNEE1Rjk0Q0RFRTE3NkE0MjJCQzM0OTQ2Q0Q1MDQyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCP7VuHYJlFuXrBLAYmg60SQBy A4xsC5HVniOwXRXEmKVKHsswD9MKFx1rs8AzbGDrmhtjXnL0LeRykClOfw+p0Y3p atpfuD/msNUGdSaALU046DHs8DYXED4ccZo3uRb9LoLBj+B5ROHwboGhKr0ZmY+3 IJywsECK5mMLO8k+KvGadKKSw8lrwy7rf0c8uTyf3ZFly8giwV0reVmWwdhnqYTs EhvNiP0YjSyQqh00x+daPFrAhONqfbX4CRteHfEt3BiLyN8YtpPebmXNLVCqwaSx lM2VxOQrphNaBkESwoQQ4Vfeq6JFYgQ5vEejIjxLqvzzh+mFP0OZNnjDxOG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlM/DkpflM3uF2pCK8NJRs1QQnIwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo61G4UqScXqzGtjhNaKhI8bdFjd3pNNmev IkbhRCltxNNRCS+bPP65DlsIOJO9O5uztZv+SZrPPHGi86euaxCMPFmk94qhvOJC S45YGrEUr9ytT8r+4W7dJTW9hkVvpynGCZ4bxQY2QK2oWnjV0LIBZrw5FpQmkPNR hGmKm3R1zHB1CjSrt/Mf1wmMjZteQN+/oTBVhDMZnMQwnABihJhMWf4L+MFhUMaM d42KmkJbrIzw3heyXUJHZBh9bRGNtXvDPP+trA1qDcNLonjsu6z7v8DH+xKhFgvI A8BUIP9r1eOp9wk50reZE3z9bwV2bVwYHnCfoOdTGOZXUh+KybM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:13 2026 by rpki-client