$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: MGA/GXSpEqGAFG19sGEOICA9AS01Z9h37pFFkt/sHeM= Subject key identifier: 3B:0C:F1:40:91:DE:CA:03:FD:57:CA:AF:16:04:FF:D9:09:9B:96:B7 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 3F9B39BC0A56DEAF30A140780D293A3C127F7DF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 01B2 Signing time: Sat 28 Feb 2026 09:22:20 +0000 Manifest this update: Sat 28 Feb 2026 09:17:20 +0000 Manifest next update: Tue 03 Mar 2026 17:18:20 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) 2: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: 7pcGDRF2RM9PZl27jqE1JQxWlecL5xhrGn1GgQuNQ94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9b:39:bc:0a:56:de:af:30:a1:40:78:0d:29:3a:3c:12:7f:7d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Feb 28 09:17:20 2026 GMT Not After : Mar 3 17:18:20 2026 GMT Subject: CN=3B0CF14091DECA03FD57CAAF1604FFD9099B96B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:6f:2f:ae:72:0f:9a:07:87:0b:d1:73:e8: 35:3a:a5:04:45:28:a8:d1:1b:5f:8f:2f:bb:6d:20: 7f:89:76:42:3e:fa:24:e5:4e:2a:f6:12:9d:24:9f: 90:56:f7:cd:b9:30:20:f2:b6:be:f0:ec:f1:79:9d: 0c:41:ed:85:b8:11:fd:f0:55:d1:f2:61:b1:f7:ce: b8:9a:2b:35:2f:49:29:1c:5f:5f:63:0c:c5:c4:61: 56:29:de:3c:89:53:ee:27:9e:15:1c:61:88:a6:c5: cc:f2:3d:47:88:b9:96:80:a5:9f:d0:99:fa:f0:3f: 1f:63:e6:b3:43:f4:ca:f5:8a:84:0a:35:16:65:b0: 46:34:5f:7a:29:b7:be:46:a1:22:90:8a:6c:f3:0b: c0:cc:dc:66:fe:6f:d7:93:d4:9b:f3:27:c2:f2:e9: 70:c0:3b:35:87:96:81:bb:8b:31:27:d7:19:b8:aa: e9:68:be:0b:da:c7:e8:f3:30:c4:b3:c8:5a:9e:ff: 7c:cc:f1:47:42:f4:2d:6c:1a:24:fd:11:50:ce:d5: e4:e5:44:df:be:f4:47:06:0e:e1:ce:3c:47:66:c3: 26:94:d5:6a:74:9f:51:8a:6c:39:11:1c:71:f8:6e: 5d:84:49:3c:99:fb:c3:4f:ae:7a:30:ef:37:b2:2c: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0C:F1:40:91:DE:CA:03:FD:57:CA:AF:16:04:FF:D9:09:9B:96:B7 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:eb:32:b8:fa:93:7b:ca:8b:e1:cf:34:35:4a:ab:df:4c:a0: 3e:5c:b0:ec:eb:bf:95:c1:0e:0d:53:96:8c:0c:3d:56:1e:f3: b4:98:b3:20:74:bb:0b:f5:6b:e4:fb:20:e0:f8:af:3f:c8:df: 4e:c1:13:a9:b4:48:fb:9d:09:e0:e2:04:8c:42:60:39:75:c0: 9d:9c:c8:50:96:f4:55:1f:89:0e:b9:69:0c:3b:0c:61:57:ac: 60:3a:0f:96:c7:11:c5:08:38:de:39:f3:34:a0:88:df:3b:f1: 55:b9:c4:1d:70:a9:57:2c:8e:f0:c4:5c:3e:a2:46:59:a4:01: 3e:76:1b:b3:7a:f6:d7:7b:40:7d:a2:6a:aa:c3:de:ff:cd:61: 8e:2c:9c:c4:e8:2e:33:c8:d3:61:64:14:b8:f1:cd:73:ec:fa: ac:29:c5:85:a8:cd:ba:98:c4:67:66:43:da:c9:77:80:57:f2: ab:31:27:c5:08:fd:b6:e9:1c:5a:12:d1:ab:32:d6:eb:54:2d: f9:ca:6d:5e:69:61:9f:20:29:48:c7:e0:a0:a0:17:9b:3f:f4: 01:08:aa:5c:83:3c:5a:5a:19:3d:45:ae:dc:3d:e2:9a:b8:a8: 38:0d:73:3d:aa:06:26:b2:49:4c:70:87:99:da:7b:5a:a7:5a: 77:70:f0:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5s5vApW3q8woUB4DSk6PBJ/ffMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNjAyMjgwOTE3MjBaFw0yNjAzMDMxNzE4MjBaMDMxMTAvBgNV BAMTKDNCMENGMTQwOTFERUNBMDNGRDU3Q0FBRjE2MDRGRkQ5MDk5Qjk2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDm8vrnIPmgeHC9Fz6DU6pQRF KKjRG1+PL7ttIH+JdkI++iTlTir2Ep0kn5BW9825MCDytr7w7PF5nQxB7YW4Ef3w VdHyYbH3zriaKzUvSSkcX19jDMXEYVYp3jyJU+4nnhUcYYimxczyPUeIuZaApZ/Q mfrwPx9j5rND9Mr1ioQKNRZlsEY0X3opt75GoSKQimzzC8DM3Gb+b9eT1JvzJ8Ly 6XDAOzWHloG7izEn1xm4qulovgvax+jzMMSzyFqe/3zM8UdC9C1sGiT9EVDO1eTl RN++9EcGDuHOPEdmwyaU1Wp0n1GKbDkRHHH4bl2ESTyZ+8NPrnow7zeyLBSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwzxQJHeygP9V8qvFgT/2QmblrcwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPrMrj6k3vKi+HPNDVKq99MoD5csOzrv5XB Dg1TlowMPVYe87SYsyB0uwv1a+T7IOD4rz/I307BE6m0SPudCeDiBIxCYDl1wJ2c yFCW9FUfiQ65aQw7DGFXrGA6D5bHEcUION458zSgiN878VW5xB1wqVcsjvDEXD6i RlmkAT52G7N69td7QH2iaqrD3v/NYY4snMToLjPI02FkFLjxzXPs+qwpxYWozbqY xGdmQ9rJd4BX8qsxJ8UI/bbpHFoS0asy1utULfnKbV5pYZ8gKUjH4KCgF5s/9AEI qlyDPFpaGT1Frtw94pq4qDgNcz2qBiaySUxwh5nae1qnWndw8Ic= -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:54 2026 by rpki-client