$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: t76djKYXs7Wso8KC+oyjVcgOYDmC7npHqq2I0GA3RyE= Subject key identifier: 9A:93:3B:FF:7E:BD:16:E0:C5:75:FE:1C:41:6D:59:F1:3C:6F:FA:DF Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 7583A5194D038BCD6BB6AAEB224BC840753C0EEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 01FB Signing time: Sat 28 Feb 2026 04:41:15 +0000 Manifest this update: Sat 28 Feb 2026 04:36:15 +0000 Manifest next update: Tue 03 Mar 2026 15:47:15 +0000 Files and hashes: 1: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: Ovv2ETM/TwcVTfyu6Kr+ausDEpr6HmSaSG285SkzGoE=) 2: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: jbeNAM8uIrcuyXo9L60I9mV9bFqM+96eyJHSvni2ZAo=) 3: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: PymGJBtcf2BbEhLIvNoHiy1Mb2P/x61Bs29YxaHSsg8=) 4: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: Gb7BtMa3ZwQg1TqLmijU1iSRdOGqKu707FAgIn+V6/Q=) 5: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 6: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: /38osmS1ovCsNqWoBte+rgzduLMxUE6ppFENnBxm0Os=) 7: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: JOV5uAZ1LlebTEnlk2i5y3RR7XOlWGQdER1Cy74QP7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:83:a5:19:4d:03:8b:cd:6b:b6:aa:eb:22:4b:c8:40:75:3c:0e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Feb 28 04:36:15 2026 GMT Not After : Mar 3 15:47:15 2026 GMT Subject: CN=9A933BFF7EBD16E0C575FE1C416D59F13C6FFADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:79:4d:3d:2c:1c:fb:8b:14:77:62:c4:cb: fa:af:2b:69:ff:e1:b3:90:f1:f0:24:ce:0b:05:15: b7:86:7c:48:16:c8:ef:35:f6:bf:10:ca:08:8c:79: f1:87:2a:c1:2b:4a:05:57:61:e2:97:f0:ef:80:ff: 2e:2d:ab:4e:3a:c4:5b:48:11:ba:ba:e5:9e:b6:c2: d4:cf:5c:f9:0a:f8:03:e9:ed:6c:df:2f:05:75:c3: 67:77:7f:91:62:02:38:fc:76:07:29:f1:53:52:d8: 93:50:d8:dd:8e:3f:b8:58:7f:bf:00:79:60:3a:c5: a8:bd:9d:2c:3b:82:36:35:fe:1a:31:2e:10:1b:c6: 17:f4:b7:60:d3:03:06:91:1b:56:37:17:90:be:4d: 9f:a4:84:f6:12:02:97:57:c2:47:b7:81:81:79:16: c0:22:ba:df:2b:21:cd:9d:7c:04:ca:8a:9d:66:16: 0e:4d:10:65:13:66:31:18:59:e5:ad:2a:4d:14:e7: ac:f8:61:5f:8a:03:73:80:19:37:f2:35:92:23:28: 0b:7a:d8:13:e3:59:a5:46:bc:24:48:92:78:98:c7: a5:83:33:c0:51:81:95:76:95:d7:0c:c4:ab:6a:57: ca:d2:4d:2d:25:af:42:28:e5:90:3d:ab:7a:a8:63: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:93:3B:FF:7E:BD:16:E0:C5:75:FE:1C:41:6D:59:F1:3C:6F:FA:DF X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:23:d5:c7:8d:d7:d9:fb:db:1c:33:b0:68:dd:66:41:4d:03: 77:e9:0c:a3:00:09:92:5f:6c:81:a1:2e:27:81:ee:94:fb:8f: a9:65:80:d4:c3:b2:52:82:8c:35:ed:1f:97:bf:f1:ef:75:2c: ae:f9:46:01:27:75:6a:d3:0e:15:49:82:16:01:b7:95:02:fb: a3:cf:a1:18:1f:39:fa:4c:43:cb:98:03:f7:9b:cc:e1:62:ab: a8:1d:04:88:e0:9a:63:5d:45:ab:df:1a:e1:96:af:02:f5:e5: 73:95:23:37:22:fb:1c:5b:d5:4c:3b:a2:7b:83:f0:b0:47:e8: 48:6a:9d:8e:14:5a:12:ef:91:52:46:b8:e5:a3:bf:36:64:ec: 24:8e:d0:4b:92:65:cd:e6:5a:bf:87:cb:bd:47:40:84:d6:f4: 6b:11:5b:21:54:8c:43:b7:39:ff:2e:8f:7a:17:dd:f9:c7:54: 2c:ff:73:2e:9d:78:a6:5c:d6:a1:9a:fd:3b:9e:41:a9:8c:e3: b2:fc:63:38:30:aa:e0:31:35:44:77:70:a4:f7:3d:ee:9e:81: be:64:c5:0e:e5:60:ad:8a:90:d7:41:0b:10:5f:cc:db:38:2b: f6:22:af:02:75:ac:5c:da:5f:29:67:23:76:e2:d1:b4:28:d9: 76:be:80:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYOlGU0Di81rtqrrIkvIQHU8DuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNjAyMjgwNDM2MTVaFw0yNjAzMDMxNTQ3MTVaMDMxMTAvBgNV BAMTKDlBOTMzQkZGN0VCRDE2RTBDNTc1RkUxQzQxNkQ1OUYxM0M2RkZBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC953lNPSwc+4sUd2LEy/qvK2n/ 4bOQ8fAkzgsFFbeGfEgWyO819r8QygiMefGHKsErSgVXYeKX8O+A/y4tq046xFtI Ebq65Z62wtTPXPkK+APp7WzfLwV1w2d3f5FiAjj8dgcp8VNS2JNQ2N2OP7hYf78A eWA6xai9nSw7gjY1/hoxLhAbxhf0t2DTAwaRG1Y3F5C+TZ+khPYSApdXwke3gYF5 FsAiut8rIc2dfATKip1mFg5NEGUTZjEYWeWtKk0U56z4YV+KA3OAGTfyNZIjKAt6 2BPjWaVGvCRIkniYx6WDM8BRgZV2ldcMxKtqV8rSTS0lr0Io5ZA9q3qoY0rdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmpM7/369FuDFdf4cQW1Z8Txv+t8wHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUj1ceN19n72xwzsGjdZkFNA3fpDKMACZJf bIGhLieB7pT7j6llgNTDslKCjDXtH5e/8e91LK75RgEndWrTDhVJghYBt5UC+6PP oRgfOfpMQ8uYA/ebzOFiq6gdBIjgmmNdRavfGuGWrwL15XOVIzci+xxb1Uw7onuD 8LBH6EhqnY4UWhLvkVJGuOWjvzZk7CSO0EuSZc3mWr+Hy71HQITW9GsRWyFUjEO3 Of8uj3oX3fnHVCz/cy6deKZc1qGa/TueQamM47L8YzgwquAxNUR3cKT3Pe6egb5k xQ7lYK2KkNdBCxBfzNs4K/YirwJ1rFzaXylnI3bi0bQo2Xa+gF4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:45 2026 by rpki-client