$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: rtVoVAKfzYWCgDWDOh3cgmT5rl6ldn72iLY9kB82dOg= Subject key identifier: 53:C3:92:22:8C:06:E5:F8:0A:06:60:66:4A:50:A5:69:FE:95:7D:25 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 0783F56ADA832C8797E05313496AD461C589A579 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01E8 Signing time: Wed 25 Mar 2026 19:11:55 +0000 Manifest this update: Wed 25 Mar 2026 19:06:55 +0000 Manifest next update: Sat 28 Mar 2026 22:21:55 +0000 Files and hashes: 1: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: 9NfzsJNOwaXmEYqNx5B/SI9SkemhbYZaZ2sKHloBGrE=) 2: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: 2+rMUTRr6geT36w1LGs/+72amdtzbZ4S57uwVaFP0y0=) 3: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: ct+DOZjTg6HlumxD8dP014jWapOHq8Dy/EadsYOLkOI=) 4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: JbsU6wwYGkCof1Bi7HjS1vBbLGm7iyh5iGfgHGG7xPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:83:f5:6a:da:83:2c:87:97:e0:53:13:49:6a:d4:61:c5:89:a5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Mar 25 19:06:55 2026 GMT Not After : Mar 28 22:21:55 2026 GMT Subject: CN=53C392228C06E5F80A0660664A50A569FE957D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:c4:7f:8e:87:6a:7a:c2:2c:da:bd:c3:c3: a7:12:71:23:c1:34:60:4b:01:3f:b7:00:20:c6:da: 29:b8:10:b1:26:03:33:99:39:e7:b5:6f:e6:55:00: ea:6a:20:40:75:c6:f9:a7:d1:8c:ae:e2:91:11:c2: 1d:41:fb:e8:67:d1:c5:3d:f7:97:51:00:1f:41:27: 67:c9:06:6c:a2:dd:bc:43:4b:ea:73:e8:52:fb:4a: cb:15:af:d1:d8:6c:54:70:f8:36:2c:a7:5f:2a:ae: 57:71:59:9a:13:ea:7f:68:3e:09:33:2f:c1:f8:8d: 8f:49:a8:0d:88:64:e7:11:2f:1f:ab:40:bd:47:84: 0b:bc:05:cc:6e:0c:ff:06:4f:2d:3f:0e:87:89:62: d2:64:55:e2:2a:3a:9e:84:47:50:21:43:27:f8:e2: 76:41:e1:fc:37:4f:47:3d:99:65:bb:40:50:c1:52: 02:d5:5c:b9:43:ad:c3:0b:2b:3d:b5:2d:0d:62:73: e5:fe:fc:ad:db:b5:14:5d:f1:ef:c1:11:79:55:4e: c6:54:7e:99:39:79:50:19:7d:f0:88:a3:3c:6b:32: 66:0a:5d:8c:b7:56:43:c9:30:44:75:56:b8:eb:42: f0:10:e0:d0:c3:7f:ea:86:c7:d3:22:e1:63:18:e2: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:92:22:8C:06:E5:F8:0A:06:60:66:4A:50:A5:69:FE:95:7D:25 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:7c:b4:66:ec:58:8f:17:13:e3:36:7d:70:12:b7:42:cc: 49:c1:bd:f0:e7:63:0e:e4:70:41:79:e3:34:6c:9c:3a:aa:ba: 98:ca:b8:2e:1e:07:8b:79:c5:be:13:17:d9:b7:1b:22:d0:79: f1:21:f1:0b:b5:13:64:36:77:cf:22:c7:36:97:bf:b9:51:2b: 2e:65:74:08:a0:8b:14:a3:af:3b:31:95:c4:f9:fa:5d:7b:c0: c8:65:f4:5b:2e:a8:8f:2c:86:e2:83:8e:59:63:54:f6:5d:33: df:e1:08:9e:c6:4b:a1:a7:b3:29:a4:08:4e:8b:56:0d:6b:a7: af:9f:87:0c:8b:53:a3:ae:71:a9:f3:eb:83:93:90:c2:59:b2: 72:7c:6d:5c:0f:ba:75:b5:50:fa:9e:1a:f0:fc:7d:3a:59:ab: c4:7d:cd:ec:91:84:83:3e:c6:e2:81:a1:2d:5d:1c:da:b9:e3: 44:6c:bf:3f:02:50:a0:27:7d:28:f5:e0:c6:5f:f1:80:6e:dd: e0:d1:d1:a8:ed:09:0d:f6:67:13:15:b1:f8:f5:4e:25:91:61: e4:85:8b:f4:28:11:54:00:ff:75:78:4f:c8:38:ca:2a:20:f4: 0b:d5:76:6d:3c:e3:a0:f5:ed:9b:3e:86:bd:21:98:4c:97:68: a6:9f:d6:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4P1atqDLIeX4FMTSWrUYcWJpXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNjAzMjUxOTA2NTVaFw0yNjAzMjgyMjIxNTVaMDMxMTAvBgNV BAMTKDUzQzM5MjIyOEMwNkU1RjgwQTA2NjA2NjRBNTBBNTY5RkU5NTdEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3cR/jodqesIs2r3Dw6cScSPB NGBLAT+3ACDG2im4ELEmAzOZOee1b+ZVAOpqIEB1xvmn0Yyu4pERwh1B++hn0cU9 95dRAB9BJ2fJBmyi3bxDS+pz6FL7SssVr9HYbFRw+DYsp18qrldxWZoT6n9oPgkz L8H4jY9JqA2IZOcRLx+rQL1HhAu8BcxuDP8GTy0/DoeJYtJkVeIqOp6ER1AhQyf4 4nZB4fw3T0c9mWW7QFDBUgLVXLlDrcMLKz21LQ1ic+X+/K3btRRd8e/BEXlVTsZU fpk5eVAZffCIozxrMmYKXYy3VkPJMER1VrjrQvAQ4NDDf+qGx9Mi4WMY4sXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8OSIowG5fgKBmBmSlClaf6VfSUwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkUfLRm7FiPFxPjNn1wErdCzEnBvfDnYw7k cEF54zRsnDqqupjKuC4eB4t5xb4TF9m3GyLQefEh8Qu1E2Q2d88ixzaXv7lRKy5l dAigixSjrzsxlcT5+l17wMhl9FsuqI8shuKDjlljVPZdM9/hCJ7GS6GnsymkCE6L Vg1rp6+fhwyLU6Oucanz64OTkMJZsnJ8bVwPunW1UPqeGvD8fTpZq8R9zeyRhIM+ xuKBoS1dHNq540Rsvz8CUKAnfSj14MZf8YBu3eDR0ajtCQ32ZxMVsfj1TiWRYeSF i/QoEVQA/3V4T8g4yiog9AvVdm0846D17Zs+hr0hmEyXaKaf1iA= -----END CERTIFICATE-----Generated at Fri Mar 27 05:05:35 2026 by rpki-client