$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: c/eKAwQ/jKai+xo1bdocDSGmAJp84Ev6to/TZNBpMOI= Subject key identifier: 9E:87:76:4A:B1:AE:48:4E:BA:C4:AC:E3:2B:5F:90:20:BC:C0:0C:68 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 0E1A5ED18A18B38B92FC31AFAE4D07F69B3F955C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 038B Signing time: Tue 24 Mar 2026 15:00:03 +0000 Manifest this update: Tue 24 Mar 2026 14:55:03 +0000 Manifest next update: Fri 27 Mar 2026 18:08:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: qlG5rH8K8/4AclvFlS5Bs5KHT/kDi4GVlGyiL1X7yMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:5e:d1:8a:18:b3:8b:92:fc:31:af:ae:4d:07:f6:9b:3f:95:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Mar 24 14:55:03 2026 GMT Not After : Mar 27 18:08:03 2026 GMT Subject: CN=9E87764AB1AE484EBAC4ACE32B5F9020BCC00C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:80:86:1c:99:39:89:b8:c1:d1:7d:91:91: a6:91:6e:36:54:16:f1:35:b0:c6:66:00:ad:38:f4: d1:a3:98:7d:55:4e:3c:d0:ce:52:c2:21:4a:cb:6f: 01:88:f1:60:2a:c8:73:c0:c3:9a:87:25:08:ff:1c: 4b:a6:55:6c:f4:f5:24:f7:e6:12:f2:b5:bb:43:f1: 43:eb:c5:13:59:75:3f:57:20:0f:c3:67:f9:4a:7f: 98:83:35:93:1e:ba:bb:de:70:9b:0c:57:ae:47:d3: dc:e4:30:1e:e4:ce:0e:64:c5:69:38:aa:16:b9:5a: 89:60:7e:4a:b9:f3:0d:11:33:f4:18:8a:d9:d8:c5: b0:b3:dd:d1:e3:68:2d:d4:e0:3e:24:40:8c:19:54: fa:15:89:ee:ff:ae:f5:b0:f5:21:b0:4a:05:8f:31: 1a:76:6f:e1:b6:43:ce:37:a1:44:3a:f6:f0:aa:32: 52:aa:65:50:a1:14:a9:64:33:46:eb:92:7b:81:a0: 0d:8e:80:c3:ab:45:f3:d6:f1:81:6f:4c:e8:ae:1d: 75:2a:0d:37:ea:94:85:96:cc:ad:31:34:e2:69:05: 18:43:3e:61:b8:97:94:20:96:c5:6d:62:25:02:74: ed:64:a3:1d:e6:68:de:dc:a3:f5:f4:b9:1f:ca:24: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:87:76:4A:B1:AE:48:4E:BA:C4:AC:E3:2B:5F:90:20:BC:C0:0C:68 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d1:ac:8a:61:e8:e3:76:a0:94:02:6b:12:ec:0a:75:00:84: 4c:71:31:5e:14:55:4f:4f:80:67:e6:b4:8c:56:6b:be:a4:72: db:58:84:02:c6:0b:67:1f:7b:e5:de:b8:43:9b:fa:3d:47:7a: 77:d1:21:74:e6:12:48:1d:b9:df:24:69:e3:99:2a:a8:4b:a1: 66:b0:15:72:63:6e:c5:6c:07:19:94:a8:69:32:3d:e6:8f:00: bc:80:78:0c:16:01:7a:e8:82:a6:75:00:2c:18:af:b1:0c:e0: 3a:48:f1:e3:37:d6:69:9b:82:e0:9a:cb:50:14:c0:73:a6:40: a5:dd:3f:82:f8:6a:3f:ae:75:a9:51:d0:e9:8d:24:0f:ce:46: b6:ec:24:c7:32:b4:44:e9:4d:d5:4d:9b:e1:65:23:6c:48:b7: 93:35:c6:19:c5:d1:6e:29:51:17:51:9a:a9:6a:8d:68:49:83: 0e:9c:60:e5:13:66:3b:87:59:b6:b2:74:45:3c:b7:8b:3f:7c: e0:10:c1:81:71:82:95:96:ba:e8:f4:e7:e4:be:db:08:8c:16: 1a:80:d4:5a:e4:e3:ea:57:77:40:3d:e8:38:44:bc:2a:d9:1f: e9:af:02:44:0c:9e:02:5a:31:d7:0e:00:7c:ea:f5:94:47:1b: 69:64:12:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhpe0YoYs4uS/DGvrk0H9ps/lVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNjAzMjQxNDU1MDNaFw0yNjAzMjcxODA4MDNaMDMxMTAvBgNV BAMTKDlFODc3NjRBQjFBRTQ4NEVCQUM0QUNFMzJCNUY5MDIwQkNDMDBDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57oCGHJk5ibjB0X2RkaaRbjZU FvE1sMZmAK049NGjmH1VTjzQzlLCIUrLbwGI8WAqyHPAw5qHJQj/HEumVWz09ST3 5hLytbtD8UPrxRNZdT9XIA/DZ/lKf5iDNZMeurvecJsMV65H09zkMB7kzg5kxWk4 qha5Wolgfkq58w0RM/QYitnYxbCz3dHjaC3U4D4kQIwZVPoVie7/rvWw9SGwSgWP MRp2b+G2Q843oUQ69vCqMlKqZVChFKlkM0brknuBoA2OgMOrRfPW8YFvTOiuHXUq DTfqlIWWzK0xNOJpBRhDPmG4l5QglsVtYiUCdO1kox3maN7co/X0uR/KJKPJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnod2SrGuSE66xKzjK1+QILzADGgwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfRrIph6ON2oJQCaxLsCnUAhExxMV4UVU9P gGfmtIxWa76kcttYhALGC2cfe+XeuEOb+j1HenfRIXTmEkgdud8kaeOZKqhLoWaw FXJjbsVsBxmUqGkyPeaPALyAeAwWAXrogqZ1ACwYr7EM4DpI8eM31mmbguCay1AU wHOmQKXdP4L4aj+udalR0OmNJA/ORrbsJMcytETpTdVNm+FlI2xIt5M1xhnF0W4p URdRmqlqjWhJgw6cYOUTZjuHWbaydEU8t4s/fOAQwYFxgpWWuuj05+S+2wiMFhqA 1Frk4+pXd0A96DhEvCrZH+mvAkQMngJaMdcOAHzq9ZRHG2lkEnw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:13 2026 by rpki-client