$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: 8Wilf6wJB04TXa+xGFY3+fCiONtrBAJlXQVRz83YdnI= Subject key identifier: 08:98:57:2F:3C:A0:15:22:30:0B:55:44:1E:33:94:68:18:FE:D3:AB Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 08DE44CAE630F6B69BF6C50A8463379FBEDB006F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 0290 Signing time: Wed 25 Mar 2026 23:21:52 +0000 Manifest this update: Wed 25 Mar 2026 23:16:52 +0000 Manifest next update: Sun 29 Mar 2026 10:50:52 +0000 Files and hashes: 1: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: 6Z9bkmlfgqsUTYfKq97Oh/BHytH3s0tFErBCec+1sfI=) 2: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 3: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) 4: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: cSbzW37UFSp4uDE4SjobLjyIHBQEPum3WY749moxuxA=) 5: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) 6: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) 7: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:de:44:ca:e6:30:f6:b6:9b:f6:c5:0a:84:63:37:9f:be:db:00:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Mar 25 23:16:52 2026 GMT Not After : Mar 29 10:50:52 2026 GMT Subject: CN=0898572F3CA01522300B55441E33946818FED3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:c0:cd:fe:cc:63:e2:18:c2:7e:9d:64:9a: ca:04:3d:31:dc:07:8c:50:38:9e:cc:fc:f3:a3:6e: c9:fc:ee:c7:96:68:66:43:23:3a:57:4b:de:69:32: ae:94:ee:5e:39:27:55:5f:53:e8:c1:45:b7:cb:e8: 22:ad:09:1c:fc:12:74:5d:60:d3:a3:38:63:65:38: 50:ee:c9:3d:40:9b:6e:bb:4d:9d:cf:32:d7:05:eb: 75:c1:d8:8f:87:ce:95:be:c3:da:b8:54:5a:a9:96: b3:f0:94:52:04:59:1d:e7:24:73:36:b2:72:ef:7e: 89:26:19:55:ae:45:38:15:c4:c9:6c:74:06:29:20: ef:5f:16:a7:52:4f:4f:e0:93:a1:2f:aa:02:ce:9a: 95:53:7e:61:aa:83:5b:65:23:5a:5c:3e:86:6f:59: 41:05:aa:77:6c:5e:4e:85:d0:9a:ad:95:d6:bc:4e: e3:9d:1a:00:c3:10:61:f9:1d:7d:b3:f4:70:3c:7f: a7:89:d0:1f:e4:17:d4:0a:cf:4a:e0:ac:2b:b9:40: ba:7f:d0:aa:e4:00:f1:b6:62:4c:aa:04:27:28:2f: 5a:71:d0:2c:41:5f:3c:e8:2e:dd:0f:8d:7c:99:88: f4:d8:2a:b8:1c:22:3a:55:b3:87:5e:f7:f0:47:b7: e8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:57:2F:3C:A0:15:22:30:0B:55:44:1E:33:94:68:18:FE:D3:AB X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7e:b6:16:d1:22:ab:44:6a:dd:71:aa:43:ea:b6:42:f3:14: 2a:3c:a0:9f:2c:fa:9a:51:29:6b:ba:92:25:ba:39:e3:41:f0: cc:36:cf:11:42:0b:2c:76:53:da:36:87:97:4e:80:ca:d9:b0: 69:69:51:d7:55:64:24:bb:e1:78:0f:31:9e:fe:4d:0d:6f:73: 2e:4d:20:97:c7:21:a7:20:67:a7:1c:3e:b7:0e:8a:95:39:dc: 60:a4:e8:d3:e1:00:aa:ca:8d:4c:70:04:20:57:83:6d:86:88: 3e:75:52:b7:99:d9:18:50:67:63:d5:14:96:65:9f:fe:ac:4c: 86:9a:08:2b:cc:4e:fa:8c:24:b0:a4:1f:41:e7:4a:e9:cc:46: f0:26:68:81:c2:c6:2a:27:84:69:5c:cc:1d:a3:c3:42:77:c9: 48:c8:40:f5:09:b6:e7:3a:ee:a1:62:8d:07:e7:45:c9:e4:2d: 9f:03:0c:7a:65:47:f8:bd:3d:ee:24:0b:8c:af:5f:89:5d:95: 8f:b4:a7:3c:49:38:3a:0f:9c:12:5d:d3:b4:09:6e:70:f4:3f: f2:04:8a:03:7e:e7:f3:62:db:c5:a3:e8:90:fa:64:54:af:50: e7:b7:fd:f2:26:2d:0a:d1:e9:51:b3:a9:f9:2e:8d:d2:4f:c9: 1d:03:b3:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCN5EyuYw9rab9sUKhGM3n77bAG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNjAzMjUyMzE2NTJaFw0yNjAzMjkxMDUwNTJaMDMxMTAvBgNV BAMTKDA4OTg1NzJGM0NBMDE1MjIzMDBCNTU0NDFFMzM5NDY4MThGRUQzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZsDN/sxj4hjCfp1kmsoEPTHc B4xQOJ7M/POjbsn87seWaGZDIzpXS95pMq6U7l45J1VfU+jBRbfL6CKtCRz8EnRd YNOjOGNlOFDuyT1Am267TZ3PMtcF63XB2I+HzpW+w9q4VFqplrPwlFIEWR3nJHM2 snLvfokmGVWuRTgVxMlsdAYpIO9fFqdST0/gk6EvqgLOmpVTfmGqg1tlI1pcPoZv WUEFqndsXk6F0Jqtlda8TuOdGgDDEGH5HX2z9HA8f6eJ0B/kF9QKz0rgrCu5QLp/ 0KrkAPG2YkyqBCcoL1px0CxBXzzoLt0PjXyZiPTYKrgcIjpVs4de9/BHt+gpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJhXLzygFSIwC1VEHjOUaBj+06swHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ+thbRIqtEat1xqkPqtkLzFCo8oJ8s+ppR KWu6kiW6OeNB8Mw2zxFCCyx2U9o2h5dOgMrZsGlpUddVZCS74XgPMZ7+TQ1vcy5N IJfHIacgZ6ccPrcOipU53GCk6NPhAKrKjUxwBCBXg22GiD51UreZ2RhQZ2PVFJZl n/6sTIaaCCvMTvqMJLCkH0HnSunMRvAmaIHCxionhGlczB2jw0J3yUjIQPUJtuc6 7qFijQfnRcnkLZ8DDHplR/i9Pe4kC4yvX4ldlY+0pzxJODoPnBJd07QJbnD0P/IE igN+5/Ni28Wj6JD6ZFSvUOe3/fImLQrR6VGzqfkujdJPyR0Ds5k= -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:24 2026 by rpki-client