$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: TaY5cU/yJAc0RDZ76uMVwlGaASOZ/xaGhgMR3tEP9xk= Subject key identifier: 2F:62:D7:4C:1B:F3:F1:0E:C6:60:29:A3:56:AF:CD:69:5A:15:25:8C Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 69D1E569978B48F6FB6105CB816CB20C3FAA88B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0160 Signing time: Wed 25 Mar 2026 13:20:04 +0000 Manifest this update: Wed 25 Mar 2026 13:15:04 +0000 Manifest next update: Sun 29 Mar 2026 01:01:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: 9DGeprSv+HLgilTFXeqHpsupVvpK7XVLS2+i9X/Vnbk=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d1:e5:69:97:8b:48:f6:fb:61:05:cb:81:6c:b2:0c:3f:aa:88:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Mar 25 13:15:04 2026 GMT Not After : Mar 29 01:01:04 2026 GMT Subject: CN=2F62D74C1BF3F10EC66029A356AFCD695A15258C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:71:1a:0d:8e:64:e2:e7:a2:d3:7d:a9:69: ce:d3:e6:1e:fe:85:90:be:91:70:4e:01:d0:0b:68: 11:95:c6:d6:38:05:35:7e:5b:b2:96:fc:ff:be:fa: 3d:82:8d:5a:9a:7f:e1:3a:9d:dc:4e:40:7f:20:6f: 6a:0b:c1:86:96:54:b2:ef:db:7b:35:9b:d0:78:f3: 6f:3d:ef:ad:dd:52:3a:b5:f5:e4:f8:5f:15:06:b1: 0f:73:7a:e5:28:11:d3:eb:2b:98:35:e0:67:44:1d: 8e:ba:ab:91:17:89:d7:e0:73:7a:93:77:2a:79:e2: 64:62:29:14:a2:de:85:af:1e:24:ae:7f:59:78:42: 81:29:ea:ce:56:42:fc:92:da:c8:86:1f:83:b8:d9: e0:d0:81:f6:90:66:ac:55:b6:5c:3d:22:f9:24:a9: 83:2e:1e:58:f8:3d:48:92:be:59:16:73:be:cf:f0: f8:2a:d7:ef:b6:18:e7:c3:7a:13:35:54:99:f2:09: 99:1b:1c:10:25:6a:1f:4c:34:62:59:95:81:c9:f4: 94:6e:14:f6:34:68:4f:1f:98:15:d1:fd:cc:56:7e: 05:ef:ba:c5:e7:cc:ee:bd:ec:fb:7f:9f:7d:cc:d5: 2e:4c:6a:11:68:27:57:62:ac:c8:d2:02:75:55:8a: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:62:D7:4C:1B:F3:F1:0E:C6:60:29:A3:56:AF:CD:69:5A:15:25:8C X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:6b:0c:3d:e8:60:42:64:3b:67:bb:80:69:50:c1:2f:98:95: 46:08:6b:45:e9:e7:df:33:6f:c3:c4:d3:83:6e:a4:10:8b:ea: 8f:e1:66:86:3d:cf:d3:c7:7f:45:c3:90:0c:e1:f9:cf:4b:1c: ee:5b:d6:c6:b9:e8:49:49:b3:cc:cb:45:3b:e8:c7:f6:cb:ae: 17:12:bb:f0:1a:7c:4a:13:2b:a6:04:e7:1e:3d:86:d2:ab:b9: 71:c4:5b:80:c9:18:9a:fd:02:df:a5:e5:9f:de:83:06:f1:d1: 03:0b:db:9e:ca:57:02:52:e7:da:ab:a9:4a:51:02:67:74:d7: 8b:72:0a:42:cb:f9:65:be:52:16:35:2d:a4:f8:8f:91:f0:5f: 9c:6e:58:3d:32:be:bf:da:32:6e:20:cb:d2:67:1f:5d:dc:d0: 68:46:fb:61:a5:24:03:36:5e:e7:8e:ac:70:ed:d6:13:91:0e: 9c:56:3c:6d:4c:36:2e:42:cf:8f:f5:6f:67:0e:de:30:54:99: a1:fe:0d:21:76:fe:66:a6:42:5e:52:0f:c6:ad:de:cc:92:20: d2:30:d5:7c:67:f0:1a:79:f0:d0:34:14:d8:0d:cd:fa:27:57: 1d:84:8d:f4:ac:bd:73:1e:5f:44:8b:2e:97:c5:ff:03:ec:74: e2:78:c2:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadHlaZeLSPb7YQXLgWyyDD+qiLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNjAzMjUxMzE1MDRaFw0yNjAzMjkwMTAxMDRaMDMxMTAvBgNV BAMTKDJGNjJENzRDMUJGM0YxMEVDNjYwMjlBMzU2QUZDRDY5NUExNTI1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4XEaDY5k4uei032pac7T5h7+ hZC+kXBOAdALaBGVxtY4BTV+W7KW/P+++j2CjVqaf+E6ndxOQH8gb2oLwYaWVLLv 23s1m9B48289763dUjq19eT4XxUGsQ9zeuUoEdPrK5g14GdEHY66q5EXidfgc3qT dyp54mRiKRSi3oWvHiSuf1l4QoEp6s5WQvyS2siGH4O42eDQgfaQZqxVtlw9Ivkk qYMuHlj4PUiSvlkWc77P8Pgq1++2GOfDehM1VJnyCZkbHBAlah9MNGJZlYHJ9JRu FPY0aE8fmBXR/cxWfgXvusXnzO697Pt/n33M1S5MahFoJ1dirMjSAnVVin4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL2LXTBvz8Q7GYCmjVq/NaVoVJYwwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNrDD3oYEJkO2e7gGlQwS+YlUYIa0Xp598z b8PE04NupBCL6o/hZoY9z9PHf0XDkAzh+c9LHO5b1sa56ElJs8zLRTvox/bLrhcS u/AafEoTK6YE5x49htKruXHEW4DJGJr9At+l5Z/egwbx0QML257KVwJS59qrqUpR Amd014tyCkLL+WW+UhY1LaT4j5HwX5xuWD0yvr/aMm4gy9JnH13c0GhG+2GlJAM2 XueOrHDt1hORDpxWPG1MNi5Cz4/1b2cO3jBUmaH+DSF2/mamQl5SD8at3sySINIw 1Xxn8Bp58NA0FNgNzfonVx2EjfSsvXMeX0SLLpfF/wPsdOJ4wk4= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:26 2026 by rpki-client