$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: oDkY5R+C2DsS/ki+w4cZ3znDYkBcxD+wpfxPQMbDDIk= Subject key identifier: 78:3B:53:C2:BE:D0:C0:48:A3:AF:56:C0:E6:78:42:3D:AA:43:5A:AD Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 7B03E09112089E3ABD54DF72FB612EFF3413FB29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 0567 Signing time: Tue 24 Mar 2026 16:02:32 +0000 Manifest this update: Tue 24 Mar 2026 15:57:32 +0000 Manifest next update: Fri 27 Mar 2026 23:42:32 +0000 Files and hashes: 1: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 2: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 3: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 4: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: Qys86wqa86HWGwf1OFWLuyNnlqYw6WKUyavRlSl0GMM=) 5: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 6: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 7: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 8: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 9: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 10: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 11: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 12: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:03:e0:91:12:08:9e:3a:bd:54:df:72:fb:61:2e:ff:34:13:fb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Mar 24 15:57:32 2026 GMT Not After : Mar 27 23:42:32 2026 GMT Subject: CN=783B53C2BED0C048A3AF56C0E678423DAA435AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:55:a7:ab:39:fc:00:62:aa:9e:29:ac:b2: bb:89:95:b2:c5:4c:3b:e6:02:4c:24:5a:b8:9d:7b: 0e:7b:84:86:a1:e8:a1:b6:78:d3:ef:8f:7c:fb:44: a0:c9:97:3d:87:28:92:46:a3:bc:ba:39:68:c1:04: 98:d2:41:35:dd:b9:e9:f4:5b:27:da:0d:1a:c8:e1: dd:c8:a2:5f:e3:ac:6b:2e:d0:f8:60:c7:92:e5:98: 95:e3:50:1f:dc:f9:2a:2e:86:b3:b3:7b:04:9d:8f: f9:9f:30:bc:82:db:41:15:a2:48:f7:bb:14:f0:39: 75:6e:66:0a:74:4c:db:6f:cd:c4:a0:3d:14:8f:9e: 20:70:3a:71:ba:16:f4:d7:02:fc:89:03:0c:11:23: 87:4a:9c:e1:32:db:5b:12:09:00:d4:76:7d:9b:b1: 2f:d8:a9:3f:df:81:94:e1:d9:fd:09:04:4d:36:d2: 8d:e8:cd:40:3f:d9:51:40:10:a6:03:e0:74:51:44: a9:dd:ff:7a:ea:6e:ea:f3:3d:59:e9:3b:5f:23:a7: 64:05:e2:ec:74:15:d6:fe:f5:05:45:ff:6d:53:a7: 2a:46:69:28:79:fa:7b:45:15:4a:84:7e:a1:bf:b6: 16:13:39:31:e2:cf:05:5e:6b:34:3c:50:9c:1b:f4: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3B:53:C2:BE:D0:C0:48:A3:AF:56:C0:E6:78:42:3D:AA:43:5A:AD X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:68:41:80:ff:70:4d:c4:0d:91:d7:de:d4:9f:77:07:8c: 31:ad:6c:ce:66:54:eb:72:a3:01:44:db:89:27:66:fd:c5:65: 6b:04:f3:0f:ce:7c:8b:8e:74:8d:3f:ba:a2:04:d7:3d:18:62: db:88:fb:00:7d:26:9c:71:37:7c:4e:9e:5c:3d:e2:83:e9:11: 46:64:bb:e3:83:13:70:8f:0a:bc:b4:a9:5b:38:40:88:12:14: ea:4e:dc:05:5c:e5:99:ff:17:7d:c7:16:60:3e:90:51:dc:78: 9b:a8:29:df:a8:61:e8:72:bd:3d:e6:05:84:5b:2a:d3:0f:84: 17:ba:da:ea:0c:dc:5f:58:ef:cd:61:21:f4:da:07:7e:29:39: ce:ac:06:4f:aa:6c:58:fc:30:96:bc:51:85:b9:d7:23:86:0c: ee:d9:55:f0:1c:7f:59:75:82:4d:1f:aa:97:e0:a7:4a:94:90: 74:8b:f4:5a:b6:ab:3e:53:de:61:9c:11:39:9b:1a:72:64:10: bf:a9:d3:a6:b3:55:95:34:b6:0b:f1:26:79:6b:81:12:bb:49: 1b:e2:aa:6c:b0:df:02:1e:48:c3:6b:c6:07:aa:fc:06:06:74: 7b:30:61:97:f8:ac:fe:08:1d:44:4c:ef:30:81:b9:fe:4f:6c: 62:1c:f1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewPgkRIInjq9VN9y+2Eu/zQT+ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNjAzMjQxNTU3MzJaFw0yNjAzMjcyMzQyMzJaMDMxMTAvBgNV BAMTKDc4M0I1M0MyQkVEMEMwNDhBM0FGNTZDMEU2Nzg0MjNEQUE0MzVBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLVWnqzn8AGKqnimssruJlbLF TDvmAkwkWridew57hIah6KG2eNPvj3z7RKDJlz2HKJJGo7y6OWjBBJjSQTXduen0 WyfaDRrI4d3Iol/jrGsu0Phgx5LlmJXjUB/c+SouhrOzewSdj/mfMLyC20EVokj3 uxTwOXVuZgp0TNtvzcSgPRSPniBwOnG6FvTXAvyJAwwRI4dKnOEy21sSCQDUdn2b sS/YqT/fgZTh2f0JBE020o3ozUA/2VFAEKYD4HRRRKnd/3rqburzPVnpO18jp2QF 4ux0Fdb+9QVF/21TpypGaSh5+ntFFUqEfqG/thYTOTHizwVeazQ8UJwb9FbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDtTwr7QwEijr1bA5nhCPapDWq0wHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvfaEGA/3BNxA2R197Un3cHjDGtbM5mVOty owFE24knZv3FZWsE8w/OfIuOdI0/uqIE1z0YYtuI+wB9JpxxN3xOnlw94oPpEUZk u+ODE3CPCry0qVs4QIgSFOpO3AVc5Zn/F33HFmA+kFHceJuoKd+oYehyvT3mBYRb KtMPhBe62uoM3F9Y781hIfTaB34pOc6sBk+qbFj8MJa8UYW51yOGDO7ZVfAcf1l1 gk0fqpfgp0qUkHSL9Fq2qz5T3mGcETmbGnJkEL+p06azVZU0tgvxJnlrgRK7SRvi qmyw3wIeSMNrxgeq/AYGdHswYZf4rP4IHURM7zCBuf5PbGIc8Ss= -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:43 2026 by rpki-client