$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: RzETRPHHbqcueNwsWwrbJMwl/cvfveP9VtYS2N9fURo= Subject key identifier: 91:47:86:EC:37:48:BC:B8:74:40:67:8D:FE:42:B7:71:B2:F8:61:DC Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 4AD2DF3878B26F055B275B9A281EC690E20DF031 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 0253 Signing time: Sun 01 Mar 2026 03:12:18 +0000 Manifest this update: Sun 01 Mar 2026 03:07:18 +0000 Manifest next update: Wed 04 Mar 2026 09:14:18 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: xK/m44mpRlhIKpzOaCEqjzYsHag8xBAwr1U+PNofRuY=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d2:df:38:78:b2:6f:05:5b:27:5b:9a:28:1e:c6:90:e2:0d:f0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Mar 1 03:07:18 2026 GMT Not After : Mar 4 09:14:18 2026 GMT Subject: CN=914786EC3748BCB87440678DFE42B771B2F861DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:68:c1:9c:50:d8:e5:bd:9f:db:32:0f:68: 2e:9e:4b:c3:81:f9:a0:ab:82:a8:3c:c2:ae:cf:fc: b5:cd:49:aa:fb:0f:d6:8b:69:90:f9:9a:5f:43:9a: 54:51:32:22:d4:ce:a5:7c:e8:c4:9c:92:bd:8e:2f: 31:b8:e6:a0:cc:68:f2:c0:e5:c3:0b:e1:4b:e3:40: df:de:ef:85:f6:f3:23:2f:cb:bb:d0:d1:7a:8f:41: 02:2a:69:87:8a:fe:b9:5e:87:e9:de:57:d9:ef:05: 95:7d:01:1c:67:e9:52:95:0b:87:30:8b:0d:bc:87: f4:2c:d8:43:7d:72:11:bf:ad:08:9f:6e:67:1c:50: 78:18:00:53:96:28:d2:11:26:6d:58:72:f1:e7:89: c9:4b:28:32:2d:6b:ec:33:f8:79:88:ae:88:28:51: 25:70:b8:db:23:0f:50:18:51:9e:c8:0c:30:5e:45: db:68:70:a4:0a:6d:69:42:c1:cb:c8:79:57:ba:35: 52:57:1e:9f:06:be:22:ee:c9:30:b7:61:41:7f:82: 1c:29:5c:35:01:31:d1:d4:3d:70:a2:d5:d1:fa:df: b1:65:bc:c0:c2:bd:84:6c:c0:fc:67:31:d6:bb:33: 7a:68:8d:ba:b3:7c:b4:7b:60:df:f8:63:04:7b:c9: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:86:EC:37:48:BC:B8:74:40:67:8D:FE:42:B7:71:B2:F8:61:DC X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b8:ab:71:b0:d8:bc:61:87:fb:2b:1c:ce:8e:ec:f2:70:e4: 4d:02:75:34:c9:7c:2b:9d:c0:65:a6:c1:db:12:a9:6f:64:3a: b6:ef:24:a3:67:ae:23:e7:fc:7e:8e:68:21:db:a1:bb:b9:e6: ac:3e:72:f9:7e:ce:1c:53:5e:14:aa:5b:9c:51:2e:1a:3f:80: 07:65:f1:89:5d:c7:49:f2:68:c2:c2:ee:2a:44:a6:41:69:fc: 83:d9:62:fa:63:78:3e:d8:9e:d3:b9:88:c8:99:58:cb:50:77: b3:24:c4:8b:28:d3:23:68:80:12:ff:45:e9:1b:b1:63:5d:8d: 1c:04:c3:9b:e0:8a:74:77:02:67:f6:74:a0:88:ab:b3:98:d6: 50:3b:67:59:8d:78:59:32:4f:b0:0f:76:e1:a9:f2:00:45:81: 0e:87:6c:5c:0d:78:3f:e5:bb:96:36:82:e6:d7:a7:b9:6d:6d: a8:cb:73:a0:76:f3:e4:0d:f8:59:a9:f2:65:af:aa:ba:e9:10: fc:70:3c:3d:f8:b5:02:04:cf:3a:a6:61:0a:31:9e:8d:68:f0: c7:1d:63:ad:e1:86:cf:3e:78:39:b6:16:ac:ee:30:db:9a:f1: e6:44:f0:71:71:ea:e5:e7:39:4c:da:48:8b:4a:c7:54:c3:32: f6:a2:d8:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStLfOHiybwVbJ1uaKB7GkOIN8DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNjAzMDEwMzA3MThaFw0yNjAzMDQwOTE0MThaMDMxMTAvBgNV BAMTKDkxNDc4NkVDMzc0OEJDQjg3NDQwNjc4REZFNDJCNzcxQjJGODYxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwWjBnFDY5b2f2zIPaC6eS8OB +aCrgqg8wq7P/LXNSar7D9aLaZD5ml9DmlRRMiLUzqV86MSckr2OLzG45qDMaPLA 5cML4UvjQN/e74X28yMvy7vQ0XqPQQIqaYeK/rleh+neV9nvBZV9ARxn6VKVC4cw iw28h/Qs2EN9chG/rQifbmccUHgYAFOWKNIRJm1YcvHniclLKDIta+wz+HmIrogo USVwuNsjD1AYUZ7IDDBeRdtocKQKbWlCwcvIeVe6NVJXHp8GviLuyTC3YUF/ghwp XDUBMdHUPXCi1dH637FlvMDCvYRswPxnMda7M3pojbqzfLR7YN/4YwR7yS+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUeG7DdIvLh0QGeN/kK3cbL4YdwwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI64q3Gw2Lxhh/srHM6O7PJw5E0CdTTJfCud wGWmwdsSqW9kOrbvJKNnriPn/H6OaCHbobu55qw+cvl+zhxTXhSqW5xRLho/gAdl 8Yldx0nyaMLC7ipEpkFp/IPZYvpjeD7YntO5iMiZWMtQd7MkxIso0yNogBL/Rekb sWNdjRwEw5vginR3Amf2dKCIq7OY1lA7Z1mNeFkyT7APduGp8gBFgQ6HbFwNeD/l u5Y2gubXp7ltbajLc6B28+QN+Fmp8mWvqrrpEPxwPD34tQIEzzqmYQoxno1o8Mcd Y63hhs8+eDm2FqzuMNua8eZE8HFx6uXnOUzaSItKx1TDMvai2Mw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:24:01 2026 by rpki-client