$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: TXYQ9CsfLKw+nk4yRcWkDfTrESXrjlB893cl6m50qgc= Subject key identifier: 8E:04:53:6F:7C:B9:4C:29:90:69:53:B4:DD:37:C3:75:AC:0E:8E:C4 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 298E530C8AE6E05D82A2106871F60FAACEC1700A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 0561 Signing time: Wed 25 Mar 2026 14:22:27 +0000 Manifest this update: Wed 25 Mar 2026 14:17:26 +0000 Manifest next update: Sat 28 Mar 2026 20:24:26 +0000 Files and hashes: 1: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 2: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 3: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 4: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: KtwamhDzHziiUzKPbBgEqfxciWw2HxGM2uV6zuHP6Xo=) 5: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8e:53:0c:8a:e6:e0:5d:82:a2:10:68:71:f6:0f:aa:ce:c1:70:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Mar 25 14:17:26 2026 GMT Not After : Mar 28 20:24:26 2026 GMT Subject: CN=8E04536F7CB94C29906953B4DD37C375AC0E8EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:37:13:1b:c7:ec:79:67:d5:0a:27:5a:d1: 59:39:2b:df:23:e0:14:b0:a5:7e:c0:96:4f:d3:15: 6b:ca:3c:6f:1b:82:18:04:c6:49:87:78:c1:97:c8: 95:17:02:6e:3a:b0:f9:90:63:82:73:e0:8b:04:06: 61:62:98:33:53:30:fd:c4:9e:4d:9c:8c:cd:eb:53: 38:8d:a7:c8:bf:e1:f1:20:4e:4f:46:51:fa:9a:3c: 1c:1c:45:62:5e:34:89:f8:cb:9b:5e:7e:61:9d:84: ce:82:9b:37:e4:e9:3c:f3:7c:7a:f2:88:2b:da:bf: ba:8c:98:c1:8a:5a:aa:45:c9:d6:b0:45:d3:2e:12: c2:b0:11:aa:83:72:79:7c:73:1a:2e:c2:46:b7:5f: 29:64:67:c8:61:a1:eb:be:bf:8d:4d:72:97:9c:22: 6c:76:3d:02:67:02:54:9b:0a:93:05:9b:7f:24:2a: 5d:1e:57:3d:da:43:0e:9e:8d:d7:d0:05:1d:84:6e: 75:86:70:d7:82:e7:8f:19:a5:05:30:80:8b:fd:6e: 65:e7:bf:20:92:87:78:72:fb:ac:e3:9f:b7:e8:a5: 68:82:7d:53:6a:1a:14:3d:10:7a:b4:58:3b:4b:20: 49:d3:fa:1b:b7:77:67:6b:93:17:b3:78:8b:35:94: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:53:6F:7C:B9:4C:29:90:69:53:B4:DD:37:C3:75:AC:0E:8E:C4 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:96:9c:b7:77:99:8c:1c:b8:0b:3d:d5:f3:04:ac:c5:71:38: 3b:ef:16:1f:cb:38:ba:04:e9:50:86:9b:39:01:eb:13:95:31: 71:a9:a4:e1:40:90:0c:03:30:9e:eb:ec:2e:fa:15:e8:82:d3: d3:67:b5:d5:ea:48:12:45:49:aa:c8:a5:2d:37:4d:82:87:b3: a4:9b:8c:6b:a2:94:bf:e1:de:02:81:38:43:df:89:40:e9:a6: 75:4a:08:9e:43:40:39:1d:a5:ea:6c:15:ac:20:00:01:77:d9: a2:95:f9:34:13:f4:06:11:3e:0c:79:aa:ee:81:26:df:51:46: 49:81:ab:9d:60:09:55:0f:d3:93:eb:88:de:13:01:a0:5f:55: aa:18:fd:a1:14:ca:05:d4:7e:a5:d7:62:14:c4:37:e0:85:dd: ba:f2:97:4d:ca:5a:d6:c0:ba:b4:d0:1d:a1:46:f9:35:fd:48: b9:bb:8c:56:b9:73:96:7d:77:55:36:43:ba:1c:ce:8b:bf:2f: 58:44:4b:2c:57:06:0a:24:05:d6:93:46:9c:48:36:62:d4:fa: 61:56:e1:09:d3:12:75:10:69:26:f9:32:d8:e1:14:bb:a9:01: b8:47:b2:5d:2c:63:db:ea:09:9a:28:e4:da:6a:c1:7f:47:4f: b8:dc:02:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKY5TDIrm4F2CohBocfYPqs7BcAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNjAzMjUxNDE3MjZaFw0yNjAzMjgyMDI0MjZaMDMxMTAvBgNV BAMTKDhFMDQ1MzZGN0NCOTRDMjk5MDY5NTNCNEREMzdDMzc1QUMwRThFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTjcTG8fseWfVCida0Vk5K98j 4BSwpX7Alk/TFWvKPG8bghgExkmHeMGXyJUXAm46sPmQY4Jz4IsEBmFimDNTMP3E nk2cjM3rUziNp8i/4fEgTk9GUfqaPBwcRWJeNIn4y5tefmGdhM6Cmzfk6TzzfHry iCvav7qMmMGKWqpFydawRdMuEsKwEaqDcnl8cxouwka3XylkZ8hhoeu+v41Ncpec Imx2PQJnAlSbCpMFm38kKl0eVz3aQw6ejdfQBR2EbnWGcNeC548ZpQUwgIv9bmXn vyCSh3hy+6zjn7fopWiCfVNqGhQ9EHq0WDtLIEnT+hu3d2drkxezeIs1lOAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgRTb3y5TCmQaVO03TfDdawOjsQwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+WnLd3mYwcuAs91fMErMVxODvvFh/LOLoE 6VCGmzkB6xOVMXGppOFAkAwDMJ7r7C76FeiC09NntdXqSBJFSarIpS03TYKHs6Sb jGuilL/h3gKBOEPfiUDppnVKCJ5DQDkdpepsFawgAAF32aKV+TQT9AYRPgx5qu6B Jt9RRkmBq51gCVUP05PriN4TAaBfVaoY/aEUygXUfqXXYhTEN+CF3bryl03KWtbA urTQHaFG+TX9SLm7jFa5c5Z9d1U2Q7oczou/L1hESyxXBgokBdaTRpxINmLU+mFW 4QnTEnUQaSb5MtjhFLupAbhHsl0sY9vqCZoo5NpqwX9HT7jcAt0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:37 2026 by rpki-client