$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json) Hash identifier: ciQSjFdAX6Y1pXGhheD6BV/4coSRhChTDZJT60j0ZKA= Subject key identifier: BB:50:C4:24:51:97:DA:F4:C5:81:8A:7D:1E:78:F2:0D:3F:4F:06:EB Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 2C675188478C1B0E64454ACD03C242B0DD747F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft Manifest number: 0129 Signing time: Sat 28 Feb 2026 06:01:29 +0000 Manifest this update: Sat 28 Feb 2026 05:56:29 +0000 Manifest next update: Tue 03 Mar 2026 14:47:29 +0000 Files and hashes: 1: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: H9DEVnymmmLbeMTvb2I7x89/+QXkA6yxEjiQJw7PWCk=) 2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: 7TI4pzLcqyxuF39YuyeEo0KkPf4qVThK/j4OGDR/rss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:67:51:88:47:8c:1b:0e:64:45:4a:cd:03:c2:42:b0:dd:74:7f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: Feb 28 05:56:29 2026 GMT Not After : Mar 3 14:47:29 2026 GMT Subject: CN=BB50C4245197DAF4C5818A7D1E78F20D3F4F06EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:02:4a:88:3f:73:b2:40:f5:d2:f6:d8:10: ca:e7:fb:d5:b9:c1:af:e5:f6:c7:25:6e:97:fe:51: 26:45:bd:a8:d8:7a:6c:ee:f1:2a:c9:2f:3c:d2:f8: b4:05:3a:0f:2b:ae:0e:b9:f0:6e:07:56:9d:c8:2a: 63:bd:4b:b4:70:61:ad:e4:85:8b:b7:4f:17:cc:29: 51:bf:44:d8:73:ab:ec:23:5f:af:37:bb:24:6d:f0: 2c:ca:45:70:a9:c7:10:8a:07:f9:2a:4b:d8:aa:b1: be:db:5a:07:6b:c6:42:6c:4b:9d:32:0e:5f:41:7f: 3e:5c:d1:bd:ff:bd:f4:fc:bb:32:54:2d:19:08:a1: 4f:18:ae:6e:bb:07:fe:3b:29:e4:4b:23:bd:95:87: fa:b0:b7:b9:94:5d:a0:65:d1:77:88:a0:a9:86:c2: 09:08:f6:e0:62:ab:cb:f6:51:ae:dc:67:b6:fc:cb: 3d:b6:b1:79:ba:3e:42:c1:ff:0a:f5:29:73:64:bd: a1:2b:a3:e9:e2:76:46:0a:6d:2e:7a:6c:62:74:c9: db:db:79:54:a3:6d:e7:6f:ef:9d:5f:3c:23:f6:31: 02:17:99:a1:42:e0:77:08:b9:88:b6:f8:8e:47:86: 10:c5:55:5e:4a:68:70:65:a0:bc:d0:1e:47:b8:ba: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:50:C4:24:51:97:DA:F4:C5:81:8A:7D:1E:78:F2:0D:3F:4F:06:EB X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6f:59:92:ab:4c:79:2c:af:2b:dc:3f:af:71:d7:12:54:84: e7:43:a3:cf:e0:7a:31:5c:65:1b:19:57:46:6c:e6:4b:8e:53: ef:c2:30:2b:0e:4c:13:fc:9c:4b:0c:35:e8:93:83:0e:3b:77: fb:9b:2f:29:47:98:d1:a7:2d:59:a9:87:84:5d:50:43:7c:26: dd:a2:fe:db:f8:79:fe:6d:d5:65:a4:47:27:bf:b6:e9:14:bb: 1c:e2:5f:64:5e:f3:12:48:a0:68:fa:b5:0d:df:a5:6e:50:5b: b3:32:09:0a:e3:cf:e5:0b:e9:f5:3a:57:24:fa:0f:14:fc:72: 5a:40:9d:07:6f:a8:86:cb:5d:f2:f0:ce:63:82:09:bf:50:7a: 89:57:90:50:f1:73:00:22:46:98:01:37:cb:e0:21:ef:8f:f8: 4a:6e:3f:16:3b:9b:97:9b:a9:0a:0c:e4:a1:30:e4:0c:a6:80: 1a:37:32:55:d9:56:7c:0b:8e:17:ca:25:69:a7:6d:48:a8:a4: de:3e:7b:ac:eb:ac:f1:9a:01:cd:44:0a:fb:52:49:c4:99:bb: 0b:0f:19:f0:fd:b3:ba:2d:6c:f5:76:93:3a:23:2e:36:fd:6d: a9:d6:6e:53:11:ab:38:c2:06:d6:53:44:22:bd:81:b5:a0:19: bb:f0:10:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGdRiEeMGw5kRUrNA8JCsN10fw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNjAyMjgwNTU2MjlaFw0yNjAzMDMxNDQ3MjlaMDMxMTAvBgNV BAMTKEJCNTBDNDI0NTE5N0RBRjRDNTgxOEE3RDFFNzhGMjBEM0Y0RjA2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KgJKiD9zskD10vbYEMrn+9W5 wa/l9sclbpf+USZFvajYemzu8SrJLzzS+LQFOg8rrg658G4HVp3IKmO9S7RwYa3k hYu3TxfMKVG/RNhzq+wjX683uyRt8CzKRXCpxxCKB/kqS9iqsb7bWgdrxkJsS50y Dl9Bfz5c0b3/vfT8uzJULRkIoU8Yrm67B/47KeRLI72Vh/qwt7mUXaBl0XeIoKmG wgkI9uBiq8v2Ua7cZ7b8yz22sXm6PkLB/wr1KXNkvaEro+nidkYKbS56bGJ0ydvb eVSjbedv751fPCP2MQIXmaFC4HcIuYi2+I5HhhDFVV5KaHBloLzQHke4uub3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu1DEJFGX2vTFgYp9HnjyDT9PBuswHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4 MDlBMzFDNzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1vWZKrTHksryvcP69x1xJUhOdDo8/gejFc ZRsZV0Zs5kuOU+/CMCsOTBP8nEsMNeiTgw47d/ubLylHmNGnLVmph4RdUEN8Jt2i /tv4ef5t1WWkRye/tukUuxziX2Re8xJIoGj6tQ3fpW5QW7MyCQrjz+UL6fU6VyT6 DxT8clpAnQdvqIbLXfLwzmOCCb9QeolXkFDxcwAiRpgBN8vgIe+P+EpuPxY7m5eb qQoM5KEw5AymgBo3MlXZVnwLjhfKJWmnbUiopN4+e6zrrPGaAc1ECvtSScSZuwsP GfD9s7otbPV2kzojLjb9banWblMRqzjCBtZTRCK9gbWgGbvwEBo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:01 2026 by rpki-client