$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: +kSY7BJzhpLEw9XDq2JIu0CVXbHLQtS8PkjGqeiE9RE= Subject key identifier: 86:43:1B:41:F3:38:D6:0E:49:2E:15:43:7B:83:12:3E:48:B9:F4:DB Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 3F0306E79D1D24356F05C6329D4EA37E03C68CBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0554 Signing time: Wed 25 Feb 2026 17:20:41 +0000 Manifest this update: Wed 25 Feb 2026 17:15:41 +0000 Manifest next update: Sat 28 Feb 2026 17:42:41 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: hkPSeaa6DgFL/e4shZYmdHbCRebvu7PwE5YJsMyJuKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Feb 2026 17:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:03:06:e7:9d:1d:24:35:6f:05:c6:32:9d:4e:a3:7e:03:c6:8c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Feb 25 17:15:41 2026 GMT Not After : Feb 28 17:42:41 2026 GMT Subject: CN=86431B41F338D60E492E15437B83123E48B9F4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:30:6c:5a:5e:5a:6a:42:4e:50:dd:bb:8f: 9a:d9:f2:8a:66:ca:68:3f:b8:a2:5f:e6:f6:07:50: e8:79:4e:86:9a:9a:f1:52:a3:57:37:3c:fa:3b:13: a8:0d:60:11:0b:81:f3:a4:9e:80:72:93:7b:10:a8: f6:bf:f0:d5:88:9f:93:e3:fc:3b:12:3d:a8:34:33: c6:60:7d:74:69:c5:90:c6:0d:17:83:bb:bf:80:4c: 99:4b:0f:db:db:50:92:bd:17:6e:5d:97:b8:67:29: 3b:17:1e:7f:8e:d4:e8:34:64:82:de:10:c0:44:85: ba:53:86:c0:de:c0:ce:83:2d:7a:e4:f1:da:ca:0c: 55:e1:c6:94:4a:23:28:71:7f:cc:a8:90:c8:3d:c1: 8a:30:e2:36:3e:b4:1e:f0:d0:6f:49:e6:b8:e3:d0: 65:17:fb:c8:7d:58:0d:f7:4c:2d:9b:62:31:f6:2a: 43:d8:9f:1f:76:4b:25:f1:93:2c:2b:6e:7c:9a:a4: a2:46:5f:67:9c:03:95:00:aa:dd:7f:74:3f:9f:29: b1:b1:c7:74:ae:bf:b0:c5:aa:06:72:49:68:61:f3: d0:f5:3a:8e:80:3e:28:97:8a:ca:23:dd:c6:16:93: 66:a0:37:8b:a8:c2:fe:bf:09:24:2f:f9:89:98:44: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:1B:41:F3:38:D6:0E:49:2E:15:43:7B:83:12:3E:48:B9:F4:DB X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b7:bc:b7:80:b5:10:ec:92:ae:0b:cf:9b:1c:c0:e3:8f:97: 0d:29:de:37:5f:cb:7e:22:14:8f:c3:1e:b9:14:5f:87:a3:92: e3:36:02:4c:7f:8e:99:af:95:c4:b1:7a:89:a6:87:de:5f:67: 09:e1:61:b9:62:aa:31:24:c8:aa:2c:b6:43:88:6a:3c:8a:a7: c1:e2:c7:d3:7e:ac:ab:e2:f9:7a:16:17:da:b2:e6:12:32:0c: 47:5c:62:2f:04:d9:20:7f:d6:75:32:69:0d:d6:d6:e8:06:25: 66:86:07:2b:64:7d:d4:01:f4:9f:60:42:36:09:95:45:17:b3: 3a:33:08:bd:79:27:f3:34:e2:89:54:ab:a8:b3:7c:19:d7:0a: 2d:a5:38:5d:52:0f:ec:55:ef:4a:96:14:b5:18:30:78:48:59: 05:d5:6a:b9:3b:99:b4:e5:e1:91:47:dc:9a:06:69:e3:fc:37: af:ff:7f:d4:54:33:fc:69:41:7f:45:e1:1f:1e:ce:58:10:d3: 4f:2b:1f:0c:d9:eb:d5:25:cc:a1:ee:ff:f0:e1:d6:e2:c6:8b: c6:38:c6:5d:d7:87:08:39:36:bd:bd:33:d5:fe:2c:86:7d:34: 66:78:ad:52:e1:e4:69:ae:90:51:8f:08:27:a9:c4:c2:af:6a: d9:1a:bb:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwMG550dJDVvBcYynU6jfgPGjLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNjAyMjUxNzE1NDFaFw0yNjAyMjgxNzQyNDFaMDMxMTAvBgNV BAMTKDg2NDMxQjQxRjMzOEQ2MEU0OTJFMTU0MzdCODMxMjNFNDhCOUY0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNzBsWl5aakJOUN27j5rZ8opm ymg/uKJf5vYHUOh5ToaamvFSo1c3PPo7E6gNYBELgfOknoByk3sQqPa/8NWIn5Pj /DsSPag0M8ZgfXRpxZDGDReDu7+ATJlLD9vbUJK9F25dl7hnKTsXHn+O1Og0ZILe EMBEhbpThsDewM6DLXrk8drKDFXhxpRKIyhxf8yokMg9wYow4jY+tB7w0G9J5rjj 0GUX+8h9WA33TC2bYjH2KkPYnx92SyXxkywrbnyapKJGX2ecA5UAqt1/dD+fKbGx x3Suv7DFqgZySWhh89D1Oo6APiiXisoj3cYWk2agN4uowv6/CSQv+YmYRC4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhkMbQfM41g5JLhVDe4MSPki59NswHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm3vLeAtRDskq4Lz5scwOOPlw0p3jdfy34i FI/DHrkUX4ejkuM2Akx/jpmvlcSxeommh95fZwnhYbliqjEkyKostkOIajyKp8Hi x9N+rKvi+XoWF9qy5hIyDEdcYi8E2SB/1nUyaQ3W1ugGJWaGBytkfdQB9J9gQjYJ lUUXszozCL15J/M04olUq6izfBnXCi2lOF1SD+xV70qWFLUYMHhIWQXVark7mbTl 4ZFH3JoGaeP8N6//f9RUM/xpQX9F4R8ezlgQ008rHwzZ69UlzKHu//Dh1uLGi8Y4 xl3Xhwg5Nr29M9X+LIZ9NGZ4rVLh5GmukFGPCCepxMKvatkauxo= -----END CERTIFICATE-----Generated at Fri Feb 27 03:27:44 2026 by rpki-client