$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: DIOLzCszg7Hy+YN47k80eeDJXCzwEhtWJMFA7cCDOMI= Subject key identifier: E0:88:7B:CD:11:BC:10:DA:53:95:42:38:3D:77:64:57:E7:A7:FC:A2 Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 0ABA7DD09B9ED6A6C8742C7BE44794535D128917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 054E Signing time: Wed 25 Mar 2026 14:40:52 +0000 Manifest this update: Wed 25 Mar 2026 14:35:52 +0000 Manifest next update: Sat 28 Mar 2026 23:39:52 +0000 Files and hashes: 1: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) 2: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: owCxcEP3Tf1LD2yopQH+Wiro7NQS109Eqjp64nxt/9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ba:7d:d0:9b:9e:d6:a6:c8:74:2c:7b:e4:47:94:53:5d:12:89:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Mar 25 14:35:52 2026 GMT Not After : Mar 28 23:39:52 2026 GMT Subject: CN=E0887BCD11BC10DA539542383D776457E7A7FCA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8c:d5:c6:1d:73:d3:20:81:a9:c4:72:b4:82: 1d:43:cf:4b:a7:3c:7c:4f:af:6d:6e:95:bd:e4:13: 7e:00:19:9f:a6:ee:86:49:99:8b:3a:aa:4c:fa:90: 8a:f2:d4:5b:81:24:1b:ee:74:dd:1e:2a:9e:21:6c: 43:97:3e:89:5d:0e:17:c2:62:04:6d:66:eb:a9:17: 03:a8:09:5f:f2:87:00:55:68:da:c8:28:03:28:8e: 4f:de:4e:9c:59:5f:0b:0f:ad:32:21:67:3a:a7:3c: 0e:8b:b8:a8:61:8b:d5:77:c9:bc:96:dd:0a:d0:bf: 97:33:bb:4d:e8:cf:57:19:2c:72:a0:4f:cf:42:ba: fa:de:1a:54:ac:0a:a4:d3:00:b6:ea:87:87:21:79: 63:0f:b8:c5:0d:75:7b:18:f7:24:4c:a5:19:53:25: 46:5d:6f:ca:89:36:fc:07:ce:f5:02:db:7e:34:c9: 60:8e:7f:9a:cf:11:c9:6b:29:be:8e:ce:a3:ce:81: 12:56:a4:98:a3:2b:ab:dc:e4:74:89:24:0d:ed:7a: 1b:f2:34:f8:1f:6d:43:89:73:ac:20:8a:7b:01:2a: 6e:d7:14:56:69:30:61:0b:21:9f:8d:e2:a2:ea:a2: 55:aa:f6:57:b3:22:04:e6:2c:01:be:e7:9f:45:3d: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:88:7B:CD:11:BC:10:DA:53:95:42:38:3D:77:64:57:E7:A7:FC:A2 X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a2:e5:a4:ab:30:5c:e3:5e:71:96:24:8d:dc:df:0b:58:76: dd:5e:21:9c:a5:49:bc:e2:08:3b:16:b3:3f:61:70:38:3d:87: 31:c3:4c:af:e9:a3:09:70:05:68:d9:b9:17:49:1c:23:a6:d3: 82:c7:88:47:1b:78:fe:ec:af:c5:42:a4:84:50:57:81:36:6e: f1:88:dc:47:69:7f:fe:95:b8:80:36:1a:0a:1b:ed:ff:d1:8b: 77:c7:26:89:8b:42:94:77:8c:d8:d3:71:7f:00:e1:de:14:57: 39:94:47:d4:c0:8f:50:3c:2a:80:b3:c9:cf:12:90:a1:d3:35: 67:d7:af:eb:14:d3:32:fe:14:7d:c0:0b:c8:e6:e5:d2:9d:3f: f9:8a:53:ed:d7:06:6f:d8:e5:ed:d4:85:f8:7b:77:d5:84:a2: ed:31:70:28:fb:8f:18:0b:b8:a3:4c:f2:ab:a6:52:5d:1f:53: 5b:1f:52:7c:fe:8a:ef:b9:48:27:10:2d:ff:e1:8c:be:fc:09: cb:8f:51:29:41:50:77:1f:af:d2:34:cc:1e:d8:23:97:3b:b6: 99:ac:87:21:2c:c0:fb:98:6d:e9:c5:7b:2d:32:72:e7:45:d4: b9:0b:5f:0d:c7:a1:2e:4a:65:04:c0:34:25:f1:90:ba:5c:15: 22:25:21:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrp90Jue1qbIdCx75EeUU10SiRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNjAzMjUxNDM1NTJaFw0yNjAzMjgyMzM5NTJaMDMxMTAvBgNV BAMTKEUwODg3QkNEMTFCQzEwREE1Mzk1NDIzODNENzc2NDU3RTdBN0ZDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjNXGHXPTIIGpxHK0gh1Dz0un PHxPr21ulb3kE34AGZ+m7oZJmYs6qkz6kIry1FuBJBvudN0eKp4hbEOXPoldDhfC YgRtZuupFwOoCV/yhwBVaNrIKAMojk/eTpxZXwsPrTIhZzqnPA6LuKhhi9V3ybyW 3QrQv5czu03oz1cZLHKgT89CuvreGlSsCqTTALbqh4cheWMPuMUNdXsY9yRMpRlT JUZdb8qJNvwHzvUC2340yWCOf5rPEclrKb6OzqPOgRJWpJijK6vc5HSJJA3tehvy NPgfbUOJc6wginsBKm7XFFZpMGELIZ+N4qLqolWq9lezIgTmLAG+559FPb5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Ih7zRG8ENpTlUI4PXdkV+en/KIwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOi5aSrMFzjXnGWJI3c3wtYdt1eIZylSbzi CDsWsz9hcDg9hzHDTK/powlwBWjZuRdJHCOm04LHiEcbeP7sr8VCpIRQV4E2bvGI 3Edpf/6VuIA2Ggob7f/Ri3fHJomLQpR3jNjTcX8A4d4UVzmUR9TAj1A8KoCzyc8S kKHTNWfXr+sU0zL+FH3AC8jm5dKdP/mKU+3XBm/Y5e3Uhfh7d9WEou0xcCj7jxgL uKNM8qumUl0fU1sfUnz+iu+5SCcQLf/hjL78CcuPUSlBUHcfr9I0zB7YI5c7tpms hyEswPuYbenFey0ycudF1LkLXw3HoS5KZQTANCXxkLpcFSIlIUk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:56 2026 by rpki-client