$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: XtclUJfsu89Vz3mSCnRaR+QTvbNkkE8ZMrhg0EWYqQg= Subject key identifier: 85:C2:8E:BC:B7:5D:09:35:9A:B2:A9:FA:90:17:07:3E:55:41:99:51 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 600C6ACD770B2197CBF902F66BE679F1D6F27DF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01DF Signing time: Sat 28 Feb 2026 19:43:01 +0000 Manifest this update: Sat 28 Feb 2026 19:38:01 +0000 Manifest next update: Tue 03 Mar 2026 21:19:01 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: hTMhFpyCQFUqahvHac3PbyQvEBFh/2YhQZ3DB9bPPjE=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: fsYVvbhFBHuzeoQGvYjne/hVj6hpk03mgW6DTh0fEaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0c:6a:cd:77:0b:21:97:cb:f9:02:f6:6b:e6:79:f1:d6:f2:7d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Feb 28 19:38:01 2026 GMT Not After : Mar 3 21:19:01 2026 GMT Subject: CN=85C28EBCB75D09359AB2A9FA9017073E55419951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:3b:2f:44:46:e0:a7:15:93:48:34:2d:1c: 45:28:28:0f:84:84:11:ab:bf:9d:a4:fd:09:77:cd: db:04:8f:0b:5d:29:65:11:3f:0b:b5:3e:6d:24:27: 5b:98:2c:3c:e9:33:70:cf:0c:1b:23:da:5e:0f:d2: 37:86:51:03:81:70:73:4e:45:34:b6:31:2b:20:f7: 8e:90:60:66:d9:8b:5e:bb:bb:2b:c7:be:06:c5:23: c3:ce:d0:8c:3d:1d:cd:27:a4:21:fe:39:6d:a9:ee: 5e:5a:69:63:c9:d1:17:b9:60:87:36:e5:d2:22:4b: c6:82:a5:15:f3:2b:08:49:9f:ef:5c:4e:16:2b:af: 0f:80:51:c4:78:b8:f8:14:73:d7:3e:eb:1e:85:c6: 8a:73:33:60:50:74:11:ec:ac:a3:66:b1:b2:ab:3b: 7d:db:a1:45:4d:5c:88:7e:4e:40:4a:89:41:e7:e0: 11:9d:1b:be:8e:44:eb:15:91:67:5c:f3:38:2a:de: 3e:88:06:45:14:b0:e5:ac:37:d3:83:d6:b9:ed:46: 4f:36:65:b8:bd:39:6c:11:b4:35:55:47:e4:97:0a: eb:dd:e9:a9:b0:8c:5a:35:5a:6c:26:b1:c4:38:0d: fc:43:b6:da:df:72:d8:fa:f8:b7:00:54:93:cf:77: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C2:8E:BC:B7:5D:09:35:9A:B2:A9:FA:90:17:07:3E:55:41:99:51 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bb:cd:fc:ca:2b:2c:b3:ae:0d:71:ef:8c:71:3b:dd:18:6b: 4e:83:59:01:f6:a8:7d:e0:00:47:d0:86:dd:cd:52:d9:d0:97: 72:44:62:d9:27:b5:90:6a:1d:ba:ea:be:b9:9f:bc:91:fb:6c: c0:8a:64:4b:19:c1:f5:10:83:cd:e3:21:ae:ff:7d:69:14:87: 73:4c:4b:bf:0c:84:41:07:89:a2:5e:a4:74:4d:61:72:7b:23: b6:ef:7a:04:cf:c2:10:68:28:53:09:dc:ec:4a:b8:74:be:7c: 26:73:dd:14:64:f7:26:1c:51:ca:2e:d0:3d:25:1c:3b:c8:d8: 62:54:63:58:1d:9d:9c:fb:bc:0e:48:5b:50:3f:c8:ec:ce:d0: 43:31:83:5a:54:da:4b:c5:56:79:26:11:07:ce:17:01:74:34: bf:80:67:fc:f0:cb:8a:54:db:60:2f:6e:9d:55:70:84:b1:8e: 43:89:1c:11:91:12:8c:47:ac:fa:d6:fa:a2:c9:f0:85:49:83: 15:2a:84:98:71:67:c9:48:72:cb:86:49:f5:92:11:ac:83:db: 0c:24:03:70:8b:ed:c0:48:95:b9:c0:be:64:57:d9:aa:c6:5c: 71:31:1f:ab:95:78:d7:08:8a:f2:66:3d:c1:03:c8:6d:c5:d1: 40:c8:8d:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAxqzXcLIZfL+QL2a+Z58dbyffUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNjAyMjgxOTM4MDFaFw0yNjAzMDMyMTE5MDFaMDMxMTAvBgNV BAMTKDg1QzI4RUJDQjc1RDA5MzU5QUIyQTlGQTkwMTcwNzNFNTU0MTk5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSTsvREbgpxWTSDQtHEUoKA+E hBGrv52k/Ql3zdsEjwtdKWURPwu1Pm0kJ1uYLDzpM3DPDBsj2l4P0jeGUQOBcHNO RTS2MSsg946QYGbZi167uyvHvgbFI8PO0Iw9Hc0npCH+OW2p7l5aaWPJ0Re5YIc2 5dIiS8aCpRXzKwhJn+9cThYrrw+AUcR4uPgUc9c+6x6FxopzM2BQdBHsrKNmsbKr O33boUVNXIh+TkBKiUHn4BGdG76OROsVkWdc8zgq3j6IBkUUsOWsN9OD1rntRk82 Zbi9OWwRtDVVR+SXCuvd6amwjFo1WmwmscQ4DfxDttrfctj6+LcAVJPPd8exAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhcKOvLddCTWasqn6kBcHPlVBmVEwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe7zfzKKyyzrg1x74xxO90Ya06DWQH2qH3g AEfQht3NUtnQl3JEYtkntZBqHbrqvrmfvJH7bMCKZEsZwfUQg83jIa7/fWkUh3NM S78MhEEHiaJepHRNYXJ7I7bvegTPwhBoKFMJ3OxKuHS+fCZz3RRk9yYcUcou0D0l HDvI2GJUY1gdnZz7vA5IW1A/yOzO0EMxg1pU2kvFVnkmEQfOFwF0NL+AZ/zwy4pU 22Avbp1VcISxjkOJHBGREoxHrPrW+qLJ8IVJgxUqhJhxZ8lIcsuGSfWSEayD2wwk A3CL7cBIlbnAvmRX2arGXHExH6uVeNcIivJmPcEDyG3F0UDIjS0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:13 2026 by rpki-client