$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: RaTkjPLEZKHwqbaAq5NxzjC/1skf5iIkHV8ROULMu5I= Subject key identifier: 26:30:4B:BC:3F:B9:82:BE:D9:24:8A:32:EA:91:D0:0E:07:65:98:B1 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 2986D05B9754D2F839439F3339F4D774611359B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 061D Signing time: Wed 25 Mar 2026 22:30:43 +0000 Manifest this update: Wed 25 Mar 2026 22:25:43 +0000 Manifest next update: Sun 29 Mar 2026 04:27:43 +0000 Files and hashes: 1: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) 2: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: 5PGTQ82qm10iiqwqCu9KXGx2jDotpMpVFWV8OCWnbmY=) 3: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 4: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) 5: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: rG7dqYKT5nt6ouasj9v32371Q08WX8SI0GPAVSyDUks=) 6: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: +IIJxBpeN9s39BMtYHb6s35QyWRYbIZNR8USGg37234=) 7: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: YSMhsGgSxUexXfUzO8M+1dzvbXdKTz+R7UgsWo9f99w=) 8: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: csagUYvIDaf5Cj51yxO5e7I2uSWrnLxv+I2NSLVzC7Q=) 9: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) 10: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 94uZfDP3/cmZBGyV4igX6qKqeZFUHxxCGuoH16tPVQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:86:d0:5b:97:54:d2:f8:39:43:9f:33:39:f4:d7:74:61:13:59:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Mar 25 22:25:43 2026 GMT Not After : Mar 29 04:27:43 2026 GMT Subject: CN=26304BBC3FB982BED9248A32EA91D00E076598B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:20:23:9b:ab:29:2a:04:e8:c4:dc:e2:8e:f9: e3:4c:a5:b0:d3:59:bb:94:fc:8b:34:a0:36:a6:e1: ba:1e:48:9c:68:6b:1d:90:4e:99:c2:4b:6d:67:d4: cc:e8:9a:b0:03:1e:ce:3b:86:96:af:68:ac:ef:8b: ec:51:a6:6b:1d:d1:ad:70:8d:e4:58:eb:84:83:51: ae:08:4e:99:1d:a2:90:f8:52:96:ee:68:27:9d:63: 13:b3:7e:39:9f:59:f2:f5:87:56:bb:0f:c9:a0:c3: 7c:e4:49:55:66:d2:c2:9e:d4:6e:96:e9:bc:48:d5: 91:28:39:d0:ee:0f:dd:a8:fc:c7:9a:7a:e0:c6:c1: 87:70:0c:92:26:53:6a:df:8b:0e:60:01:a4:64:50: 3e:86:8c:62:4f:54:6b:ff:4b:c0:cc:09:ba:7a:c4: c7:c0:e7:fa:2a:db:52:7f:79:04:f0:d0:c2:91:57: 41:01:64:26:86:96:45:cd:dc:a5:b3:e4:32:f2:18: a6:c5:99:97:84:e9:c5:81:c1:3c:6d:ca:2d:d1:8f: 71:cc:01:94:d0:e0:aa:b2:96:01:88:36:50:ba:bd: ce:35:40:51:9f:d9:0a:34:85:00:45:8f:0f:f6:5d: 52:a4:61:7c:55:39:8a:20:1f:bf:6c:16:a9:d2:ff: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:30:4B:BC:3F:B9:82:BE:D9:24:8A:32:EA:91:D0:0E:07:65:98:B1 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f5:74:50:76:17:91:03:46:74:c8:fc:21:96:ad:25:d9:0b: cf:6a:70:f3:bc:6a:64:6d:00:85:d7:f4:a9:f4:0d:4a:23:bd: e4:a8:6b:93:c3:68:8a:aa:9e:2f:8c:d9:e0:7b:db:ab:51:b0: 28:8c:ab:62:a5:97:8b:50:b2:a0:5e:f8:a5:33:97:68:f2:19: b6:98:b0:04:e7:14:b6:65:74:bd:b5:0f:44:53:4e:39:b4:27: f6:a4:03:49:c9:4d:79:09:d2:83:6e:46:b1:b3:6e:fb:94:49: dc:ed:47:54:08:7b:78:a1:5d:e2:05:a6:48:7a:90:f5:3c:6b: b4:ac:72:bd:9a:98:6c:bb:59:51:fe:39:c0:5b:00:92:88:2c: 53:fd:12:00:75:c2:ba:6c:43:88:23:45:6a:79:0c:5e:90:8e: 65:4a:2c:2a:07:90:df:15:33:f7:29:06:ee:eb:51:a3:e6:63: 66:b2:5c:19:fe:76:81:b2:e5:d9:a0:0e:d2:fb:79:fe:66:23: 74:22:8b:75:a4:01:ef:94:75:e8:18:a9:67:06:2a:96:fc:0a: 57:96:1b:b4:b5:1e:87:fd:4e:f3:45:aa:c3:12:3c:49:11:33: 8c:3e:37:d6:18:26:6e:04:94:66:ca:0e:e6:7d:d8:09:61:fb: ef:55:e8:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYbQW5dU0vg5Q58zOfTXdGETWbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNjAzMjUyMjI1NDNaFw0yNjAzMjkwNDI3NDNaMDMxMTAvBgNV BAMTKDI2MzA0QkJDM0ZCOTgyQkVEOTI0OEEzMkVBOTFEMDBFMDc2NTk4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuICObqykqBOjE3OKO+eNMpbDT WbuU/Is0oDam4boeSJxoax2QTpnCS21n1MzomrADHs47hpavaKzvi+xRpmsd0a1w jeRY64SDUa4ITpkdopD4UpbuaCedYxOzfjmfWfL1h1a7D8mgw3zkSVVm0sKe1G6W 6bxI1ZEoOdDuD92o/MeaeuDGwYdwDJImU2rfiw5gAaRkUD6GjGJPVGv/S8DMCbp6 xMfA5/oq21J/eQTw0MKRV0EBZCaGlkXN3KWz5DLyGKbFmZeE6cWBwTxtyi3Rj3HM AZTQ4KqylgGINlC6vc41QFGf2Qo0hQBFjw/2XVKkYXxVOYogH79sFqnS/5H5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJjBLvD+5gr7ZJIoy6pHQDgdlmLEwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI71dFB2F5EDRnTI/CGWrSXZC89qcPO8amRt AIXX9Kn0DUojveSoa5PDaIqqni+M2eB726tRsCiMq2Kll4tQsqBe+KUzl2jyGbaY sATnFLZldL21D0RTTjm0J/akA0nJTXkJ0oNuRrGzbvuUSdztR1QIe3ihXeIFpkh6 kPU8a7Sscr2amGy7WVH+OcBbAJKILFP9EgB1wrpsQ4gjRWp5DF6QjmVKLCoHkN8V M/cpBu7rUaPmY2ayXBn+doGy5dmgDtL7ef5mI3Qii3WkAe+UdegYqWcGKpb8CleW G7S1Hof9TvNFqsMSPEkRM4w+N9YYJm4ElGbKDuZ92Alh++9V6C8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:58 2026 by rpki-client