$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: ExOl0y1USNv2C7EQmx2HVZiTuVNn3w2JGnyfXQK41gc= Subject key identifier: 70:80:CD:73:BE:75:F1:E7:72:CB:D7:79:11:20:82:B5:89:6E:F2:4B Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 792B5CC95AFB4CD39AA0C2BBCF9793636F3583A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 0117 Signing time: Fri 06 Mar 2026 08:02:46 +0000 Manifest this update: Fri 06 Mar 2026 07:57:46 +0000 Manifest next update: Mon 09 Mar 2026 10:43:46 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: Ks8S9IjcOHboP+AfsgjH0fws1lFohNe39UXRMlXkMVw=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2b:5c:c9:5a:fb:4c:d3:9a:a0:c2:bb:cf:97:93:63:6f:35:83:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Mar 6 07:57:46 2026 GMT Not After : Mar 9 10:43:46 2026 GMT Subject: CN=7080CD73BE75F1E772CBD779112082B5896EF24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:40:db:3a:84:03:19:ea:67:7d:35:27:8c: 7e:d8:63:b5:1e:6f:1d:1e:e8:24:58:ba:28:53:0c: 33:d5:2d:7d:f4:5b:25:36:69:30:c0:88:19:72:c2: 3d:64:2e:ce:15:94:d1:a5:5b:6e:7f:85:61:d0:ee: 24:66:46:a8:a5:70:f1:df:51:22:42:15:97:cf:64: b0:e8:9a:4a:a4:d2:97:9f:d8:2c:2f:07:96:00:1a: 20:79:1d:31:7f:5c:7e:7c:70:47:c8:82:0f:64:1f: 54:6a:1a:f3:9c:56:68:a7:a4:e1:21:ca:46:31:ca: c5:26:92:8f:df:6f:e1:f5:4f:e8:b7:2b:4b:2a:3b: 01:d9:10:db:ea:89:22:86:94:c1:a4:91:fd:1b:34: 21:26:52:de:7a:81:eb:d5:0b:a6:94:7f:87:6a:b7: 6f:bb:8d:9e:31:1a:31:fc:62:ae:19:af:ac:fa:35: 17:4d:6f:e6:c6:27:55:c9:61:c7:ea:05:d8:0e:79: f9:69:19:fa:a8:f2:d5:2f:22:0f:9e:0b:3c:28:62: 8a:5b:a1:7b:72:58:63:0a:e1:7c:2c:91:d3:b4:60: 74:ef:c4:92:18:19:a9:52:3a:f5:63:e8:2e:56:cf: ac:33:2d:21:9c:f9:a3:08:dc:48:bc:63:e6:4d:c8: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:CD:73:BE:75:F1:E7:72:CB:D7:79:11:20:82:B5:89:6E:F2:4B X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0d:1b:70:70:0d:53:a3:5f:fc:f7:6f:15:1f:c2:e9:c6:67: 3d:16:c6:68:ff:40:b3:e5:45:96:58:0b:0b:0e:55:57:a5:1b: 5c:f7:fe:68:c0:b8:12:c2:e6:17:c2:d5:4c:08:1e:fa:3d:1d: 6d:ea:a9:30:bc:ac:19:a9:25:08:09:9c:95:5d:4b:92:8b:cc: 98:02:5f:3c:88:d6:1d:bf:cf:ec:c3:15:62:3c:8c:72:79:6e: e3:60:0c:05:fe:33:b4:55:65:9d:9a:a5:0d:63:84:43:c6:93: 44:bf:3b:2c:2d:16:f5:cc:ff:f6:9c:0d:27:db:4f:a8:0a:72: 46:bf:2e:78:b4:c0:66:c8:d1:4c:07:cb:8b:f0:5d:74:e2:05: f8:98:e5:21:09:3f:4c:6c:cd:3e:75:92:23:e7:05:1a:de:4d: 3e:2b:4f:49:0d:5f:4a:97:fb:19:c0:fe:58:06:db:4b:c6:4c: 75:43:82:d1:c4:bd:a5:1f:60:e2:95:22:6b:71:dc:3e:6f:72: 3d:ce:b5:f9:15:d5:6a:97:3d:44:a5:54:16:44:6f:08:67:70: 1f:5d:9a:14:b2:ba:e5:89:5b:25:de:8a:79:e0:26:a3:26:ed: c3:4d:e1:1d:5e:cc:63:db:05:d6:79:c7:48:48:cc:38:c3:6c: e9:f6:ad:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeStcyVr7TNOaoMK7z5eTY281g6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjAzMDYwNzU3NDZaFw0yNjAzMDkxMDQzNDZaMDMxMTAvBgNV BAMTKDcwODBDRDczQkU3NUYxRTc3MkNCRDc3OTExMjA4MkI1ODk2RUYyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVI0DbOoQDGepnfTUnjH7YY7Ue bx0e6CRYuihTDDPVLX30WyU2aTDAiBlywj1kLs4VlNGlW25/hWHQ7iRmRqilcPHf USJCFZfPZLDomkqk0pef2CwvB5YAGiB5HTF/XH58cEfIgg9kH1RqGvOcVminpOEh ykYxysUmko/fb+H1T+i3K0sqOwHZENvqiSKGlMGkkf0bNCEmUt56gevVC6aUf4dq t2+7jZ4xGjH8Yq4Zr6z6NRdNb+bGJ1XJYcfqBdgOeflpGfqo8tUvIg+eCzwoYopb oXtyWGMK4XwskdO0YHTvxJIYGalSOvVj6C5Wz6wzLSGc+aMI3Ei8Y+ZNyNK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcIDNc7518edyy9d5ESCCtYlu8kswHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkNG3BwDVOjX/z3bxUfwunGZz0Wxmj/QLPl RZZYCwsOVVelG1z3/mjAuBLC5hfC1UwIHvo9HW3qqTC8rBmpJQgJnJVdS5KLzJgC XzyI1h2/z+zDFWI8jHJ5buNgDAX+M7RVZZ2apQ1jhEPGk0S/OywtFvXM//acDSfb T6gKcka/Lni0wGbI0UwHy4vwXXTiBfiY5SEJP0xszT51kiPnBRreTT4rT0kNX0qX +xnA/lgG20vGTHVDgtHEvaUfYOKVImtx3D5vcj3OtfkV1WqXPUSlVBZEbwhncB9d mhSyuuWJWyXeinngJqMm7cNN4R1ezGPbBdZ5x0hIzDjDbOn2rXs= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:16 2026 by rpki-client