$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: 2EF1a48y26yZYrf1c34PgAV8/x7CSTHqg7ipG8JjfbU= Subject key identifier: BA:0B:83:70:9F:31:62:43:D8:8C:6D:A9:5A:9E:2A:14:5E:DF:37:4E Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 2118870E9A6C3ED7D0EE6AC46DC75C556608F740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 050A Signing time: Thu 26 Mar 2026 05:01:38 +0000 Manifest this update: Thu 26 Mar 2026 04:56:38 +0000 Manifest next update: Sun 29 Mar 2026 05:11:38 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: shtmTa57+pxWxFUP615U/s617hiWKy/m/Dpc5lxTH4w=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: niYDI48HT470kpBT/qFUYftwREZVJmKxEi6IacpE9d8=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: yZdB1+Hb4ph9w/wvrnMAOAc9P831jd2qxlkZfuEjv8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:18:87:0e:9a:6c:3e:d7:d0:ee:6a:c4:6d:c7:5c:55:66:08:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Mar 26 04:56:38 2026 GMT Not After : Mar 29 05:11:38 2026 GMT Subject: CN=BA0B83709F316243D88C6DA95A9E2A145EDF374E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:f9:5a:3c:b2:4c:ba:da:9a:60:b9:03:09: cd:44:b9:67:5a:1c:b2:0a:99:35:16:bd:49:07:11: e6:3b:00:9e:8a:f6:20:f9:48:9c:76:f8:a2:df:34: 81:bc:2c:63:3f:7b:7f:4b:bf:d8:a3:e7:26:e9:fc: 6f:06:44:fb:bb:dc:f7:6e:f3:c9:77:98:be:bf:74: 29:33:d4:16:fd:11:36:81:6a:fb:88:61:b7:43:0a: 02:20:16:fa:11:f4:79:ed:39:77:c0:22:7e:ca:67: 4a:43:3a:d7:b3:ca:8f:10:5a:a9:6b:9d:b3:b6:95: 4a:25:1b:f4:81:41:f8:f2:20:87:64:db:f9:25:7d: f1:9c:36:3c:6b:58:4d:cd:3e:9f:ec:29:9f:9d:79: 36:09:2c:15:64:9e:38:3b:9e:09:c5:16:0f:b8:e9: 86:a2:ee:2c:bc:da:c6:a6:ea:69:60:ba:e5:69:ba: 62:4c:74:a5:78:d9:ce:7a:c8:5b:69:d7:40:5a:ff: 21:c5:c4:40:2b:3b:8c:84:e8:49:9d:81:c6:33:34: 32:ae:1c:7f:9b:71:a9:1a:0d:81:79:8a:0c:42:d8: 1f:e8:54:09:f2:d4:74:87:d6:af:f4:91:80:74:1c: ea:20:2c:43:31:d1:43:98:3c:b7:8b:a1:62:f4:ac: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0B:83:70:9F:31:62:43:D8:8C:6D:A9:5A:9E:2A:14:5E:DF:37:4E X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:11:b5:70:aa:e9:1b:fe:16:24:d2:44:32:0f:1c:19:a0:e2: c1:77:d0:47:85:de:5a:65:4a:4f:48:80:d4:57:fa:50:f0:74: ab:b9:dc:45:8a:09:a0:ec:a2:14:a7:73:d1:a8:4e:a8:3e:79: 75:56:29:e0:54:6d:77:b8:45:e5:c8:56:26:fe:09:1c:0e:04: e7:b4:1a:3f:29:71:8f:11:a7:1c:c6:74:4e:f6:fa:a5:2a:a6: f5:96:93:2b:59:d0:f7:83:94:ec:d8:05:a6:39:24:b6:e1:21: ac:fe:39:92:d8:5c:9f:cb:25:ff:67:14:d3:e6:97:a9:95:60: b5:91:c4:d6:3e:79:bd:7b:1d:6b:2e:a9:5c:be:39:28:01:d5: e9:0b:2f:c4:14:a4:a6:57:e3:ef:88:96:c7:75:1a:bc:e7:86: 11:b9:ed:0c:68:31:a2:16:60:b6:d2:74:f3:25:b9:8c:d7:4f: a8:21:76:75:97:5a:97:99:52:f1:f5:fa:b5:df:e3:d1:35:6c: 3d:e4:dc:0e:bf:93:c7:0b:fe:ea:39:a1:f1:aa:e6:03:0e:34: 3f:aa:e6:e2:fa:ed:16:05:16:b0:33:00:4e:f5:f8:e5:dd:c1: 7f:06:54:47:e5:41:1a:62:be:87:37:2d:00:2b:d7:ea:7c:2f: ca:4b:6d:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRiHDppsPtfQ7mrEbcdcVWYI90AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNjAzMjYwNDU2MzhaFw0yNjAzMjkwNTExMzhaMDMxMTAvBgNV BAMTKEJBMEI4MzcwOUYzMTYyNDNEODhDNkRBOTVBOUUyQTE0NUVERjM3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoS/laPLJMutqaYLkDCc1EuWda HLIKmTUWvUkHEeY7AJ6K9iD5SJx2+KLfNIG8LGM/e39Lv9ij5ybp/G8GRPu73Pdu 88l3mL6/dCkz1Bb9ETaBavuIYbdDCgIgFvoR9HntOXfAIn7KZ0pDOtezyo8QWqlr nbO2lUolG/SBQfjyIIdk2/klffGcNjxrWE3NPp/sKZ+deTYJLBVknjg7ngnFFg+4 6Yai7iy82sam6mlguuVpumJMdKV42c56yFtp10Ba/yHFxEArO4yE6EmdgcYzNDKu HH+bcakaDYF5igxC2B/oVAny1HSH1q/0kYB0HOogLEMx0UOYPLeLoWL0rO9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuguDcJ8xYkPYjG2pWp4qFF7fN04wHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsRtXCq6Rv+FiTSRDIPHBmg4sF30EeF3lpl Sk9IgNRX+lDwdKu53EWKCaDsohSnc9GoTqg+eXVWKeBUbXe4ReXIVib+CRwOBOe0 Gj8pcY8RpxzGdE72+qUqpvWWkytZ0PeDlOzYBaY5JLbhIaz+OZLYXJ/LJf9nFNPm l6mVYLWRxNY+eb17HWsuqVy+OSgB1ekLL8QUpKZX4++Ilsd1GrznhhG57QxoMaIW YLbSdPMluYzXT6ghdnWXWpeZUvH1+rXf49E1bD3k3A6/k8cL/uo5ofGq5gMOND+q 5uL67RYFFrAzAE71+OXdwX8GVEflQRpivoc3LQAr1+p8L8pLbZY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:57 2026 by rpki-client