$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: 0GiRbqJfsbcp5bGst3WfD18iokEiUoX9sYxwm5y8Sks= Subject key identifier: D0:3B:93:48:23:CD:A8:9D:E1:BA:5B:DA:8A:2D:3D:A9:91:8B:C5:82 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 1AF9C669DF29AFAB85137E449231D9558A27B5EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 049E Signing time: Sun 01 Mar 2026 04:43:02 +0000 Manifest this update: Sun 01 Mar 2026 04:38:02 +0000 Manifest next update: Wed 04 Mar 2026 13:11:02 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: eSqVjcHaDw7UpkgTw0TNSA6zLv3LD032CF0SY7+hUEk=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f9:c6:69:df:29:af:ab:85:13:7e:44:92:31:d9:55:8a:27:b5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Mar 1 04:38:02 2026 GMT Not After : Mar 4 13:11:02 2026 GMT Subject: CN=D03B934823CDA89DE1BA5BDA8A2D3DA9918BC582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:e3:88:4e:12:ee:0d:88:4e:af:4a:ad:37: 62:47:1b:d4:9e:fa:4c:30:ce:5b:72:f4:cd:92:5d: e6:82:fa:1b:ef:a7:52:6a:44:23:53:7a:07:bf:78: ac:d6:b3:e7:2a:2f:35:df:cf:9c:3d:8d:fa:88:47: f5:85:c1:92:1b:97:20:37:8c:41:0d:98:43:ba:7b: 15:09:d9:ad:e3:5e:c4:58:31:06:0d:4c:db:8c:3d: 89:c6:c1:8d:fb:18:44:a0:ae:35:3d:c1:4a:cb:dd: d2:4b:ec:27:5c:0a:b4:42:e7:ef:71:d5:bb:0f:b8: 8f:78:cf:a6:92:74:eb:1b:d2:00:43:f4:14:2d:cd: db:bc:82:6f:02:a4:b9:ab:08:29:89:ea:5d:42:a5: 68:1c:4c:55:33:84:00:10:23:7f:22:2c:07:0c:79: f3:00:01:2d:77:94:a6:d0:a9:a9:01:eb:0f:20:e5: d0:1b:c4:70:20:72:6d:06:ef:5f:69:73:7a:c8:68: ee:ad:e8:9c:f9:8f:45:e6:cc:b5:bf:bf:cc:1c:c6: b2:c3:3e:5a:44:fc:ef:22:ec:f8:22:76:f9:3e:13: ab:aa:5e:33:e2:68:74:f6:07:9f:4e:db:0d:e3:c5: a9:59:2b:f9:0b:7c:97:28:1e:20:08:a7:2d:0f:ad: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3B:93:48:23:CD:A8:9D:E1:BA:5B:DA:8A:2D:3D:A9:91:8B:C5:82 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:db:6c:87:74:95:50:54:0e:a4:32:87:48:42:08:b1:d8:e4: fd:1a:af:0c:ee:12:27:c0:21:bb:22:60:ae:0b:07:91:89:9d: aa:69:67:d8:8a:f3:89:1b:5d:c0:18:c4:54:29:ad:ac:7b:b7: 04:5f:9a:42:ee:de:a9:fc:05:4e:dc:fa:b0:d1:ad:60:c5:11: 1f:0c:f8:5a:81:05:c3:3d:d9:28:80:ac:db:e9:af:59:4a:7e: a7:c0:1d:b3:f5:b2:7f:23:dc:09:77:b4:b2:ff:5a:15:4a:05: 77:35:72:45:94:75:79:f1:5a:bf:a3:d2:45:12:fd:98:b8:ea: 0e:03:82:e9:c7:3d:95:49:b1:03:3c:48:a4:26:92:58:43:56: 79:52:1f:f1:04:5e:a9:ae:e7:a9:ba:16:96:30:fd:09:55:f3: 72:86:f9:9a:11:53:3a:fc:09:87:33:0a:7a:c8:29:95:5b:63: 70:22:a9:09:0c:28:23:f1:e3:8c:fb:7f:f4:cc:6c:45:c3:2f: ee:d7:9c:df:6c:49:e0:8d:4e:31:57:93:50:04:3d:5e:cb:f1: f9:2d:ab:5a:6e:4f:92:35:84:02:25:22:5c:aa:80:32:b9:0d: 8d:cc:79:10:a5:65:16:d1:28:cc:8b:af:86:85:12:88:d5:75: 72:bc:8f:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvnGad8pr6uFE35EkjHZVYonte8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNjAzMDEwNDM4MDJaFw0yNjAzMDQxMzExMDJaMDMxMTAvBgNV BAMTKEQwM0I5MzQ4MjNDREE4OURFMUJBNUJEQThBMkQzREE5OTE4QkM1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+OOIThLuDYhOr0qtN2JHG9Se +kwwzlty9M2SXeaC+hvvp1JqRCNTege/eKzWs+cqLzXfz5w9jfqIR/WFwZIblyA3 jEENmEO6exUJ2a3jXsRYMQYNTNuMPYnGwY37GESgrjU9wUrL3dJL7CdcCrRC5+9x 1bsPuI94z6aSdOsb0gBD9BQtzdu8gm8CpLmrCCmJ6l1CpWgcTFUzhAAQI38iLAcM efMAAS13lKbQqakB6w8g5dAbxHAgcm0G719pc3rIaO6t6Jz5j0XmzLW/v8wcxrLD PlpE/O8i7Pgidvk+E6uqXjPiaHT2B59O2w3jxalZK/kLfJcoHiAIpy0PraKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0DuTSCPNqJ3hulvaii09qZGLxYIwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvbbId0lVBUDqQyh0hCCLHY5P0arwzuEifA IbsiYK4LB5GJnappZ9iK84kbXcAYxFQprax7twRfmkLu3qn8BU7c+rDRrWDFER8M +FqBBcM92SiArNvpr1lKfqfAHbP1sn8j3Al3tLL/WhVKBXc1ckWUdXnxWr+j0kUS /Zi46g4DgunHPZVJsQM8SKQmklhDVnlSH/EEXqmu56m6FpYw/QlV83KG+ZoRUzr8 CYczCnrIKZVbY3AiqQkMKCPx44z7f/TMbEXDL+7XnN9sSeCNTjFXk1AEPV7L8fkt q1puT5I1hAIlIlyqgDK5DY3MeRClZRbRKMyLr4aFEojVdXK8j1Y= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:11 2026 by rpki-client