$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: ZN8nwTmSWyGqcURmwSdkgebxFI9nfiDu7tiME1ixZS4= Subject key identifier: 4A:82:63:12:38:43:F6:E0:24:C3:5B:82:6B:2E:4F:1E:5B:86:14:D1 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 41A7AC6704DB0591C4F6DF25BE0FC172A0F3D0C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 021C Signing time: Tue 24 Mar 2026 22:11:53 +0000 Manifest this update: Tue 24 Mar 2026 22:06:53 +0000 Manifest next update: Sat 28 Mar 2026 07:51:53 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: URK+J6zSPct/IFl7CkP4gpbhqk/7JMwFzvHRGEK0bjs=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a7:ac:67:04:db:05:91:c4:f6:df:25:be:0f:c1:72:a0:f3:d0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Mar 24 22:06:53 2026 GMT Not After : Mar 28 07:51:53 2026 GMT Subject: CN=4A8263123843F6E024C35B826B2E4F1E5B8614D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ae:99:a0:9b:d3:90:5c:53:cf:4e:c3:0a:24: c0:55:09:d9:c1:3b:4a:a5:57:7a:38:9a:7e:71:84: be:9e:08:71:bd:b0:e9:88:c1:1c:ac:f9:a0:44:30: 6d:00:77:86:32:71:33:f1:e7:53:1e:5d:57:8c:df: 32:99:02:09:93:ad:33:96:16:fc:ed:68:18:7d:ea: df:a8:dc:86:8e:6c:6a:eb:ad:a0:31:d2:a4:49:ff: 5c:3e:bb:a1:1e:e3:df:d5:62:36:3d:2e:e7:da:12: af:2a:19:a9:a6:28:8b:81:ac:25:b4:66:e5:6d:a5: 2d:44:8d:a9:ec:59:35:6d:d4:f4:08:90:cd:ef:26: 51:2d:e8:d0:09:3c:85:7f:9f:19:4e:3b:01:15:a8: a7:42:a4:57:a3:37:dc:46:05:f7:59:50:58:50:dc: b1:1b:f6:e8:6c:f1:87:44:68:37:50:1b:44:11:5c: 1b:f3:6a:fa:3e:92:f8:dd:46:53:c7:21:1c:df:8d: 1c:ec:07:38:19:b1:fe:67:07:4f:1e:ef:71:20:4e: c8:0d:b9:81:53:61:6d:94:9d:62:81:00:66:25:73: cd:76:e1:90:94:1f:df:5d:01:da:30:c5:c1:8c:9b: 59:9e:7f:c2:d2:6d:5a:61:8e:8e:e5:a7:9a:f3:7d: bd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:63:12:38:43:F6:E0:24:C3:5B:82:6B:2E:4F:1E:5B:86:14:D1 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f1:8c:a4:44:66:74:d3:d3:c5:6c:11:27:9d:27:79:3d:11: 95:29:ff:6b:87:70:36:c7:44:0a:d0:8a:cd:de:5d:4d:6f:ea: 14:15:31:f9:d5:6a:66:cd:6f:b2:1b:c2:0b:33:ae:f7:ff:b1: 84:7b:23:5c:c0:ae:70:09:96:16:c3:3d:85:1b:88:da:f8:92: 64:7b:e4:f5:56:16:94:90:07:16:ae:bd:c7:41:63:c1:d7:a7: be:de:a7:46:43:0a:65:05:c5:93:35:18:5e:a0:49:d7:88:3b: 7d:76:b7:af:a6:b0:d3:d1:f8:e9:a8:c0:01:73:76:10:df:00: a3:02:e8:62:93:0d:49:26:3c:fd:43:f4:1a:fe:06:1e:76:bf: ec:e2:95:cb:88:f1:d4:9b:a1:21:c6:5d:bb:58:a8:a9:53:92: 87:55:0c:c7:71:02:87:c6:7a:a2:6d:f5:1b:50:5c:f6:c7:86: ba:55:83:46:59:32:c4:71:63:3b:eb:71:eb:42:cc:7f:63:2f: 70:98:ae:bd:23:bc:77:f1:fa:fe:a8:1b:7c:e5:6b:bd:a4:1d: 9f:32:1a:8d:e0:48:ef:e6:d4:24:18:bc:34:da:db:8c:14:8a: d0:7c:aa:17:e5:79:be:db:76:c1:7d:bc:25:e2:38:e5:a1:5f: 00:16:1e:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaesZwTbBZHE9t8lvg/BcqDz0MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNjAzMjQyMjA2NTNaFw0yNjAzMjgwNzUxNTNaMDMxMTAvBgNV BAMTKDRBODI2MzEyMzg0M0Y2RTAyNEMzNUI4MjZCMkU0RjFFNUI4NjE0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkrpmgm9OQXFPPTsMKJMBVCdnB O0qlV3o4mn5xhL6eCHG9sOmIwRys+aBEMG0Ad4YycTPx51MeXVeM3zKZAgmTrTOW FvztaBh96t+o3IaObGrrraAx0qRJ/1w+u6Ee49/VYjY9LufaEq8qGammKIuBrCW0 ZuVtpS1EjansWTVt1PQIkM3vJlEt6NAJPIV/nxlOOwEVqKdCpFejN9xGBfdZUFhQ 3LEb9uhs8YdEaDdQG0QRXBvzavo+kvjdRlPHIRzfjRzsBzgZsf5nB08e73EgTsgN uYFTYW2UnWKBAGYlc8124ZCUH99dAdowxcGMm1mef8LSbVphjo7lp5rzfb2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSoJjEjhD9uAkw1uCay5PHluGFNEwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALxjKREZnTT08VsESedJ3k9EZUp/2uHcDbH RArQis3eXU1v6hQVMfnVambNb7Ibwgszrvf/sYR7I1zArnAJlhbDPYUbiNr4kmR7 5PVWFpSQBxauvcdBY8HXp77ep0ZDCmUFxZM1GF6gSdeIO312t6+msNPR+OmowAFz dhDfAKMC6GKTDUkmPP1D9Br+Bh52v+zilcuI8dSboSHGXbtYqKlTkodVDMdxAofG eqJt9RtQXPbHhrpVg0ZZMsRxYzvrcetCzH9jL3CYrr0jvHfx+v6oG3zla72kHZ8y Go3gSO/m1CQYvDTa24wUitB8qhfleb7bdsF9vCXiOOWhXwAWHi4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:07 2026 by rpki-client