$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: wDGS7hZkD9KVdzo20/aRJh+LPySMh0jnFxfDj+tBPv4= Subject key identifier: 4E:B4:1D:39:2B:4C:85:85:93:98:1A:43:82:98:BC:EA:0B:C0:F3:93 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 6D7102094303E57474EB7C09C77C8D044E9DB478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 03D1 Signing time: Sun 01 Mar 2026 15:20:48 +0000 Manifest this update: Sun 01 Mar 2026 15:15:48 +0000 Manifest next update: Wed 04 Mar 2026 23:07:48 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: U+MMQdYGghAaDk3JxIN90ImQN+Dj4TC/b3AEYJIp9tc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:71:02:09:43:03:e5:74:74:eb:7c:09:c7:7c:8d:04:4e:9d:b4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Mar 1 15:15:48 2026 GMT Not After : Mar 4 23:07:48 2026 GMT Subject: CN=4EB41D392B4C858593981A438298BCEA0BC0F393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d8:b1:99:cc:75:b8:34:74:a9:82:31:d8:07: d2:be:a4:df:07:53:6e:4c:f3:dc:f7:91:1d:27:a0: 15:fd:e6:cf:da:29:40:b9:3b:ee:3e:e0:a1:91:9d: f9:be:0d:28:5d:4f:a9:3d:27:bd:b8:da:52:77:89: 7d:2b:6d:93:a1:86:ad:42:e9:cc:7b:a7:35:7c:77: 47:c7:e9:c7:fa:08:89:33:95:04:17:0e:db:87:14: 94:4f:89:fe:0f:7a:09:f0:80:9c:96:d8:b0:d6:0e: 7e:ec:6b:e6:ec:94:f5:1a:da:fc:36:b6:d1:f8:0d: 4e:b6:ef:95:65:cd:48:07:28:83:13:e4:99:ff:2f: 75:8b:4d:18:5b:2d:08:2a:96:0e:75:11:cf:59:20: ba:e6:23:97:55:43:31:17:82:ac:d7:a8:78:f4:7c: 6c:a8:c5:91:a8:a2:9e:3b:46:56:f4:22:c7:52:03: 9b:f2:49:68:0e:ab:3e:be:a0:00:35:3c:65:ec:ec: 76:c1:15:11:ff:2a:7b:fc:6d:07:f1:46:b5:63:64: 97:d7:8a:d1:39:a8:28:9b:82:a9:71:e0:ed:60:82: 62:15:f2:b8:b9:25:be:9a:db:51:a2:e8:78:c0:15: 69:79:f3:2a:e2:87:39:5d:bd:dd:8d:4c:32:e4:d5: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B4:1D:39:2B:4C:85:85:93:98:1A:43:82:98:BC:EA:0B:C0:F3:93 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3f:fa:3e:0a:86:6c:1f:58:6a:ef:b0:0e:04:cc:c1:2a:f2: 78:ca:3c:c2:ee:7f:23:a5:6f:b9:b9:24:b0:d5:58:57:dd:29: b3:87:33:e4:9e:58:86:9a:19:77:f7:e8:56:57:4f:41:26:ec: 69:8e:82:10:5d:12:4e:d0:77:49:40:88:60:c1:76:4b:25:1a: e3:4a:03:6a:84:47:5b:12:69:0b:05:25:45:91:c1:6b:66:a8: 9a:a2:45:cb:0c:2b:46:17:97:3c:a5:96:b6:c0:07:1a:d0:86: b4:24:7b:60:a2:fb:c3:3e:b4:e7:40:68:8e:c2:22:ce:e1:4f: 83:d2:e0:83:af:db:fb:aa:6e:bc:6a:4f:a7:5e:3f:08:47:bb: 4b:6c:24:62:a2:c3:9d:c0:04:c5:76:8c:21:b9:ff:c1:18:96: 71:a4:a0:3e:e8:54:bb:54:fd:fa:0a:29:dc:74:da:06:40:54: 77:ca:12:63:27:99:e0:73:88:f1:d2:33:2e:06:27:12:42:a8: 6e:68:4f:fb:dc:a4:f9:7e:ed:bf:cd:4f:d0:ae:8e:b9:f9:03: 1b:9d:0d:e3:9e:c6:d3:2c:2d:95:52:2d:31:6a:5f:68:de:e1: df:21:5a:c5:d7:04:e0:80:2b:13:b2:a4:be:ac:23:f5:6d:84: e5:f9:7d:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXECCUMD5XR063wJx3yNBE6dtHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNjAzMDExNTE1NDhaFw0yNjAzMDQyMzA3NDhaMDMxMTAvBgNV BAMTKDRFQjQxRDM5MkI0Qzg1ODU5Mzk4MUE0MzgyOThCQ0VBMEJDMEYzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2LGZzHW4NHSpgjHYB9K+pN8H U25M89z3kR0noBX95s/aKUC5O+4+4KGRnfm+DShdT6k9J7242lJ3iX0rbZOhhq1C 6cx7pzV8d0fH6cf6CIkzlQQXDtuHFJRPif4PegnwgJyW2LDWDn7sa+bslPUa2vw2 ttH4DU6275VlzUgHKIMT5Jn/L3WLTRhbLQgqlg51Ec9ZILrmI5dVQzEXgqzXqHj0 fGyoxZGoop47Rlb0IsdSA5vySWgOqz6+oAA1PGXs7HbBFRH/Knv8bQfxRrVjZJfX itE5qCibgqlx4O1ggmIV8ri5Jb6a21Gi6HjAFWl58yrihzldvd2NTDLk1Wx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrQdOStMhYWTmBpDgpi86gvA85MwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABE/+j4KhmwfWGrvsA4EzMEq8njKPMLufyOl b7m5JLDVWFfdKbOHM+SeWIaaGXf36FZXT0Em7GmOghBdEk7Qd0lAiGDBdkslGuNK A2qER1sSaQsFJUWRwWtmqJqiRcsMK0YXlzyllrbABxrQhrQke2Ci+8M+tOdAaI7C Is7hT4PS4IOv2/uqbrxqT6dePwhHu0tsJGKiw53ABMV2jCG5/8EYlnGkoD7oVLtU /foKKdx02gZAVHfKEmMnmeBziPHSMy4GJxJCqG5oT/vcpPl+7b/NT9Cujrn5Axud DeOextMsLZVSLTFqX2je4d8hWsXXBOCAKxOypL6sI/VthOX5ffA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:27:54 2026 by rpki-client