$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: 5ypGFq4MvZYRJmbPQAKEjxJJ/MvabUaAVAYzHgquWYU= Subject key identifier: F8:40:82:5E:2C:8F:93:9A:9C:2D:1C:4A:76:B7:EA:77:1A:A4:E2:FF Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 15CF4D365C23E40AEB56F2AB7938AFAD2570949D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 010D Signing time: Sat 28 Feb 2026 05:01:10 +0000 Manifest this update: Sat 28 Feb 2026 04:56:10 +0000 Manifest next update: Tue 03 Mar 2026 16:23:10 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: yEczOyOxam6vTRk/yEg8vBKc6nsNC7s1q6XFu9layXA=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cf:4d:36:5c:23:e4:0a:eb:56:f2:ab:79:38:af:ad:25:70:94:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Feb 28 04:56:10 2026 GMT Not After : Mar 3 16:23:10 2026 GMT Subject: CN=F840825E2C8F939A9C2D1C4A76B7EA771AA4E2FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:bf:d5:5c:9a:d4:08:52:f2:bf:e7:e9:54: 33:7c:06:8f:50:62:5c:cc:17:1c:2b:2c:02:83:e8: 21:9f:f0:2b:e1:98:7a:1e:9c:d4:ef:2d:b5:67:4d: 00:a8:0a:1d:94:f2:2b:63:c7:71:a7:d5:3d:4c:cc: 63:29:a4:9e:68:72:1d:46:ff:40:89:a5:1a:35:c5: 44:2f:26:10:18:25:79:29:6a:2c:ca:f8:d2:7a:57: 42:dd:6e:a9:3d:b6:5d:28:74:0f:85:e6:4b:89:d4: 56:2a:5d:da:75:ec:0e:8f:fa:1e:25:06:e6:e6:6f: 2f:4b:1f:0e:f8:65:72:f9:d1:03:e1:72:25:84:e3: cb:35:27:ff:8d:8e:e8:f6:f2:4c:38:08:d9:51:46: f0:ff:62:15:92:96:50:03:de:58:6b:38:27:8f:3f: de:ec:cf:0d:94:50:7e:bd:f5:19:ef:f8:d9:f2:c1: b0:1e:73:1a:e9:9f:c2:87:76:0c:fa:34:19:ac:98: 1f:cf:76:da:cf:fb:b8:42:07:9d:cc:0d:ad:b0:9c: ce:4d:26:66:fb:2c:be:c4:27:81:c2:89:7a:58:be: 7d:a4:0f:0b:dc:32:3d:92:51:43:bf:66:66:85:f4: 11:1f:52:22:f1:d3:1d:10:d3:dc:5f:4e:03:ed:c8: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:40:82:5E:2C:8F:93:9A:9C:2D:1C:4A:76:B7:EA:77:1A:A4:E2:FF X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:1d:93:c0:4f:cd:43:aa:34:c2:97:b0:97:74:0d:71:b9:ad: e0:30:d2:72:de:b1:7b:05:e0:cc:5e:b8:06:96:df:25:71:12: 9a:bb:5e:16:22:10:07:c4:63:1a:3b:c6:f8:70:e9:a1:a8:77: 6f:04:1f:0c:bb:45:64:44:24:5b:1c:7d:55:79:f1:fa:8b:a9: 57:0f:76:46:2f:b4:0b:57:87:9d:cc:0c:1c:6d:6a:11:d3:eb: 58:0d:10:7b:47:8b:f1:19:5e:c9:08:f7:48:ad:5e:75:bf:36: b0:ea:3b:b5:9b:4f:6f:cf:89:59:7b:74:28:f9:c6:ff:81:46: 37:6e:a7:c8:c3:d8:ed:54:84:39:0a:c1:5b:28:01:d1:42:de: 65:cc:b0:a5:e4:82:d4:99:f7:f4:46:a4:67:4a:48:85:75:48: 03:ae:ca:2c:9d:b4:6d:36:3f:01:0d:5c:39:e0:d7:65:ca:eb: e4:30:d9:b8:af:48:59:b0:9d:51:d9:d4:73:76:f6:03:79:d5: 1a:f6:cf:8e:f3:e9:15:ca:0b:61:2c:10:34:0b:ce:6b:8f:4f: db:32:fe:77:f8:b2:df:b9:a5:f0:39:75:67:89:9f:5a:e7:ff: 05:61:09:ea:04:11:81:ac:1d:40:6a:e0:2b:51:9a:73:cc:ae: eb:89:dc:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFc9NNlwj5ArrVvKreTivrSVwlJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNjAyMjgwNDU2MTBaFw0yNjAzMDMxNjIzMTBaMDMxMTAvBgNV BAMTKEY4NDA4MjVFMkM4RjkzOUE5QzJEMUM0QTc2QjdFQTc3MUFBNEUyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIL/VXJrUCFLyv+fpVDN8Bo9Q YlzMFxwrLAKD6CGf8CvhmHoenNTvLbVnTQCoCh2U8itjx3Gn1T1MzGMppJ5och1G /0CJpRo1xUQvJhAYJXkpaizK+NJ6V0Ldbqk9tl0odA+F5kuJ1FYqXdp17A6P+h4l Bubmby9LHw74ZXL50QPhciWE48s1J/+Njuj28kw4CNlRRvD/YhWSllAD3lhrOCeP P97szw2UUH699Rnv+NnywbAecxrpn8KHdgz6NBmsmB/PdtrP+7hCB53MDa2wnM5N Jmb7LL7EJ4HCiXpYvn2kDwvcMj2SUUO/ZmaF9BEfUiLx0x0Q09xfTgPtyJYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ECCXiyPk5qcLRxKdrfqdxqk4v8wHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMdk8BPzUOqNMKXsJd0DXG5reAw0nLesXsF 4MxeuAaW3yVxEpq7XhYiEAfEYxo7xvhw6aGod28EHwy7RWREJFscfVV58fqLqVcP dkYvtAtXh53MDBxtahHT61gNEHtHi/EZXskI90itXnW/NrDqO7WbT2/PiVl7dCj5 xv+BRjdup8jD2O1UhDkKwVsoAdFC3mXMsKXkgtSZ9/RGpGdKSIV1SAOuyiydtG02 PwENXDng12XK6+Qw2bivSFmwnVHZ1HN29gN51Rr2z47z6RXKC2EsEDQLzmuPT9sy /nf4st+5pfA5dWeJn1rn/wVhCeoEEYGsHUBq4CtRmnPMruuJ3E4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:31:30 2026 by rpki-client