$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: ADe2fBCDtZBElFixDNGCGK2PjTOoQd4LN6kvOSaYWDo= Subject key identifier: BA:5E:3C:4B:6C:43:D5:8E:DB:3C:F9:E9:CD:8B:3A:17:D4:F2:FF:A3 Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 368437884407E3A1CB6C945D3B508A23384DC625 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 0223 Signing time: Tue 24 Mar 2026 09:30:45 +0000 Manifest this update: Tue 24 Mar 2026 09:25:44 +0000 Manifest next update: Fri 27 Mar 2026 17:35:44 +0000 Files and hashes: 1: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: VHLDU/rCLMP5jEq0vdx3vRHq8gBH9YMtoAFWWFLLuno=) 2: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: gaD/R1MyT1OCaNXTIKhlORndCZRlEesLA+SKOsU2e8w=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:84:37:88:44:07:e3:a1:cb:6c:94:5d:3b:50:8a:23:38:4d:c6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Mar 24 09:25:44 2026 GMT Not After : Mar 27 17:35:44 2026 GMT Subject: CN=BA5E3C4B6C43D58EDB3CF9E9CD8B3A17D4F2FFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:2a:33:2d:ca:5c:2d:83:bc:d2:99:04:76: 2e:0c:ab:cc:a5:70:63:66:8e:8b:35:09:8c:6a:72: ca:98:ca:da:3f:e5:f2:4f:f4:7b:f7:7d:db:ab:4a: 67:f9:ad:f4:2a:16:cb:e1:20:af:01:a3:22:70:a0: 8c:0d:3f:aa:5f:81:8a:62:53:1a:3f:a4:31:8b:c5: 64:69:82:b3:a4:ef:a0:ff:a9:d0:78:20:40:f6:ae: 85:d9:d9:21:f0:6d:d6:ab:5f:c7:3b:6b:56:0f:03: de:e8:d6:3c:04:a0:c7:2e:a2:9a:0f:29:c0:7d:3e: c3:29:92:9f:1a:5b:b8:6a:81:40:5a:e5:9f:a9:8f: 62:15:4a:e9:47:c3:00:6f:62:e1:ed:e4:14:70:19: 43:9a:6e:08:e8:14:b0:59:19:b0:b4:dc:b2:93:1f: 83:f7:e3:d6:17:74:e2:2e:14:b6:05:d7:3e:fc:7f: 3c:7c:e0:3c:ec:de:20:f7:ca:f2:d7:a5:44:f5:82: 43:c0:83:56:7e:29:63:69:dc:eb:c0:4c:27:f7:56: d7:be:c6:8b:f7:bd:24:98:12:16:2d:37:87:2b:5e: 13:1d:29:7b:9d:1a:db:a9:d6:fe:7f:64:44:c3:0e: f9:6d:c4:8a:a9:70:fc:74:a1:bc:9e:48:8b:35:d3: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5E:3C:4B:6C:43:D5:8E:DB:3C:F9:E9:CD:8B:3A:17:D4:F2:FF:A3 X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:78:60:9c:6e:88:90:4e:4a:cf:9c:a9:87:46:6f:63:db:d9: 90:08:6f:c4:69:6e:ff:c6:17:cb:cd:5a:49:34:2b:a2:bf:a0: 60:5b:b0:c9:b3:e7:16:f2:9d:4a:f7:5e:5e:c5:0d:1e:8a:ea: d0:10:f6:2e:1d:bf:bc:eb:78:6d:28:d2:bd:63:20:75:9f:54: 02:eb:ab:25:07:b2:7d:98:ac:3b:6c:7c:48:5b:c6:e6:09:f9: ff:99:81:da:5c:82:c5:ae:9e:8a:7f:36:2f:48:1c:f3:8a:1c: 58:db:2e:d0:8f:67:3b:e8:94:eb:4a:6f:55:48:75:aa:74:0f: 0f:6e:5a:94:76:64:55:63:7a:76:1f:69:18:eb:08:7d:50:dd: a6:dd:1d:14:7a:50:93:52:a1:bf:57:72:db:3d:70:af:ef:32: ef:40:1b:7b:06:f3:9a:e9:39:45:df:31:81:08:ff:88:72:f7: 27:1f:c1:8e:47:da:3e:dc:3e:87:c4:bb:a1:02:75:d6:4e:35: a2:ce:c6:6a:d8:ce:52:89:de:40:d4:73:84:97:cd:8a:cd:8d: 27:9e:da:a7:d4:41:1d:93:d3:97:db:05:02:43:c9:b7:69:76: e6:a8:5a:64:38:eb:44:0a:56:f1:8b:4b:2f:cb:e9:7d:04:01: 3d:e4:a7:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoQ3iEQH46HLbJRdO1CKIzhNxiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNjAzMjQwOTI1NDRaFw0yNjAzMjcxNzM1NDRaMDMxMTAvBgNV BAMTKEJBNUUzQzRCNkM0M0Q1OEVEQjNDRjlFOUNEOEIzQTE3RDRGMkZGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdSozLcpcLYO80pkEdi4Mq8yl cGNmjos1CYxqcsqYyto/5fJP9Hv3fdurSmf5rfQqFsvhIK8BoyJwoIwNP6pfgYpi Uxo/pDGLxWRpgrOk76D/qdB4IED2roXZ2SHwbdarX8c7a1YPA97o1jwEoMcuopoP KcB9PsMpkp8aW7hqgUBa5Z+pj2IVSulHwwBvYuHt5BRwGUOabgjoFLBZGbC03LKT H4P349YXdOIuFLYF1z78fzx84Dzs3iD3yvLXpUT1gkPAg1Z+KWNp3OvATCf3Vte+ xov3vSSYEhYtN4crXhMdKXudGtup1v5/ZETDDvltxIqpcPx0obyeSIs1039/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUul48S2xD1Y7bPPnpzYs6F9Ty/6MwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF4YJxuiJBOSs+cqYdGb2Pb2ZAIb8Rpbv/G F8vNWkk0K6K/oGBbsMmz5xbynUr3Xl7FDR6K6tAQ9i4dv7zreG0o0r1jIHWfVALr qyUHsn2YrDtsfEhbxuYJ+f+ZgdpcgsWunop/Ni9IHPOKHFjbLtCPZzvolOtKb1VI dap0Dw9uWpR2ZFVjenYfaRjrCH1Q3abdHRR6UJNSob9Xcts9cK/vMu9AG3sG85rp OUXfMYEI/4hy9ycfwY5H2j7cPofEu6ECddZONaLOxmrYzlKJ3kDUc4SXzYrNjSee 2qfUQR2T05fbBQJDybdpduaoWmQ460QKVvGLSy/L6X0EAT3kp6I= -----END CERTIFICATE-----Generated at Thu Mar 26 17:06:01 2026 by rpki-client