$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: LYoUtu+NqW9GROsgLa36WFSgUYnSwAAhGyyoHheRYYM= Subject key identifier: 59:42:EE:48:9F:8E:0D:72:92:41:E0:3E:A8:6D:D8:6E:BF:F4:4A:36 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 0168BD6C7DDA269ECCD5D66DE730F2F7709E28F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 9D Signing time: Sat 28 Feb 2026 17:11:48 +0000 Manifest this update: Sat 28 Feb 2026 17:06:48 +0000 Manifest next update: Tue 03 Mar 2026 21:14:48 +0000 Files and hashes: 1: 3230322e39302e3139342e302f32342d3234203d3e203435333233.roa (hash: E3gl245QWUOSrRvQIfs41ST6vQLNBujKh2hLnsJBzx8=) 2: 3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa (hash: 1xGJ7Y9+wtKG60b+Nh0uIMBhRuIEyt2WbpPoMcvYL7o=) 3: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: r5F71RPvAMPHJIRuyUF+b9or4WD3k2qKbOdVHLt3FzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:68:bd:6c:7d:da:26:9e:cc:d5:d6:6d:e7:30:f2:f7:70:9e:28:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Feb 28 17:06:48 2026 GMT Not After : Mar 3 21:14:48 2026 GMT Subject: CN=5942EE489F8E0D729241E03EA86DD86EBFF44A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:b9:f5:a2:26:d3:fd:bb:dc:7e:d1:6f:ec: ec:97:f8:86:00:68:25:e0:06:46:f1:21:69:64:98: 9e:a0:e8:60:73:df:64:07:f2:05:4c:98:a9:b4:79: 8f:2f:7d:9a:61:4c:8c:c5:96:35:b9:00:00:86:9b: 50:67:ae:0e:4d:5b:18:22:ad:c4:35:12:df:3a:f7: 44:3b:b1:34:07:7b:3c:b5:c2:b5:b4:d1:dc:1a:6b: 26:c9:42:59:6b:64:d9:87:7e:ea:5c:16:e0:49:e6: 72:70:30:71:51:54:f8:9e:00:be:c7:e3:7b:23:bb: 59:f0:6d:a5:58:e6:df:f1:35:da:13:96:bf:97:48: ee:2e:9d:e8:e2:f4:2a:29:a7:cd:08:af:fe:e0:15: 3a:1c:e4:6b:e7:71:c9:4e:f7:f2:7f:91:72:ee:0a: dd:2b:ec:3a:6b:b5:14:a4:84:f5:88:c7:9f:d3:58: 88:ec:d7:d4:d0:c2:3d:52:d8:cc:6f:af:f6:c7:d7: f5:38:ab:cc:ae:2a:82:fd:d5:ca:d6:b2:75:df:01: d4:be:ac:48:f4:06:90:f6:d5:c8:8b:de:40:c8:d0: 5a:43:b5:16:76:b5:08:d4:47:07:b7:f4:23:ab:00: ef:0d:62:58:16:9b:ce:a2:70:e2:d5:c1:37:ad:68: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:42:EE:48:9F:8E:0D:72:92:41:E0:3E:A8:6D:D8:6E:BF:F4:4A:36 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:04:e3:5d:15:77:1f:4e:d5:06:67:01:2d:89:fb:43:e9: 65:bf:89:42:9a:c0:dd:b4:9c:ef:16:e3:6f:cc:ed:01:4b:c2: 13:33:68:ab:55:e0:0a:10:a6:e5:79:66:d9:18:b7:73:6c:b6: a2:d1:ab:16:78:97:16:bc:15:2b:a3:5c:6d:85:cc:a2:62:85: 81:c9:eb:76:5e:df:bb:02:9f:0c:ef:a5:9f:52:d7:0a:b2:6e: 38:19:03:bc:ff:72:50:5b:0c:9c:63:fb:e4:18:66:71:f1:ff: c1:77:f6:ab:84:c0:e7:e7:02:54:ad:77:82:32:30:c2:d5:fa: 8a:a3:13:33:70:90:ab:af:f7:0c:11:ff:8b:2b:f0:79:c7:45: 75:57:80:ef:99:33:36:7a:23:6a:59:70:2b:42:8d:fb:ec:36: 30:a4:dc:e5:2c:86:24:84:e7:5c:e7:b0:c1:0d:42:51:24:97: 85:ee:eb:30:28:ec:02:9c:76:6f:18:b7:e8:8a:6b:6a:91:8f: ed:e4:af:6e:f1:1b:c6:38:0c:7d:e1:10:d0:4e:fa:a2:13:41: ec:e3:74:b2:41:c4:6b:07:a9:1c:4d:80:c0:f6:e0:92:78:8a: fc:7c:ea:4a:38:d4:11:e9:e4:40:65:03:9d:e7:04:09:73:29: 77:b3:0f:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWi9bH3aJp7M1dZt5zDy93CeKPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNjAyMjgxNzA2NDhaFw0yNjAzMDMyMTE0NDhaMDMxMTAvBgNV BAMTKDU5NDJFRTQ4OUY4RTBENzI5MjQxRTAzRUE4NkREODZFQkZGNDRBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Urn1oibT/bvcftFv7OyX+IYA aCXgBkbxIWlkmJ6g6GBz32QH8gVMmKm0eY8vfZphTIzFljW5AACGm1Bnrg5NWxgi rcQ1Et8690Q7sTQHezy1wrW00dwaaybJQllrZNmHfupcFuBJ5nJwMHFRVPieAL7H 43sju1nwbaVY5t/xNdoTlr+XSO4uneji9Copp80Ir/7gFToc5GvncclO9/J/kXLu Ct0r7DprtRSkhPWIx5/TWIjs19TQwj1S2Mxvr/bH1/U4q8yuKoL91crWsnXfAdS+ rEj0BpD21ciL3kDI0FpDtRZ2tQjURwe39COrAO8NYlgWm86icOLVwTetaJdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWULuSJ+ODXKSQeA+qG3Ybr/0SjYwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT6BONdFXcfTtUGZwEtiftD6WW/iUKawN20 nO8W42/M7QFLwhMzaKtV4AoQpuV5ZtkYt3NstqLRqxZ4lxa8FSujXG2FzKJihYHJ 63Ze37sCnwzvpZ9S1wqybjgZA7z/clBbDJxj++QYZnHx/8F39quEwOfnAlStd4Iy MMLV+oqjEzNwkKuv9wwR/4sr8HnHRXVXgO+ZMzZ6I2pZcCtCjfvsNjCk3OUshiSE 51znsMENQlEkl4Xu6zAo7AKcdm8Yt+iKa2qRj+3kr27xG8Y4DH3hENBO+qITQezj dLJBxGsHqRxNgMD24JJ4ivx86ko41BHp5EBlA53nBAlzKXezD6w= -----END CERTIFICATE-----Generated at Mon Mar 2 07:40:46 2026 by rpki-client