$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: 7Io4g9oQvqsjtRTwxPi701MURdtTpY7qpCEQDg3BJ2w= Subject key identifier: 91:61:7F:F6:2B:9B:66:32:1E:50:76:B5:77:5B:70:79:7A:22:AB:85 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 7EC5C122F7707B8A78F8D034EF512AE064002889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: E8 Signing time: Thu 26 Mar 2026 07:51:25 +0000 Manifest this update: Thu 26 Mar 2026 07:46:25 +0000 Manifest next update: Sun 29 Mar 2026 16:06:25 +0000 Files and hashes: 1: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: ojh9jRiYDBQB8s3fguNz5d961lCDE5c+j1HVC67On9I=) 2: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) 3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) 4: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c5:c1:22:f7:70:7b:8a:78:f8:d0:34:ef:51:2a:e0:64:00:28:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Mar 26 07:46:25 2026 GMT Not After : Mar 29 16:06:25 2026 GMT Subject: CN=91617FF62B9B66321E5076B5775B70797A22AB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:1e:d5:8f:39:f1:30:91:11:1f:2a:a8:ba: 26:56:13:15:bd:49:40:b1:02:f2:d5:ba:d0:d1:cf: 90:37:7b:2b:7d:1b:1b:0a:cc:c9:f5:e6:94:8a:e6: 4c:e5:95:19:30:2a:7c:4e:fb:6c:ed:56:5c:54:c5: 3e:4d:7e:73:c1:3f:b8:9b:85:61:ae:52:8e:e7:11: 2a:bd:23:7a:36:32:b1:ea:eb:5d:40:06:fc:04:ad: 44:2f:6a:e1:c7:29:3b:78:f6:c0:a7:31:0c:a0:97: 60:45:73:25:c0:57:b0:c8:11:53:85:dd:43:d9:7e: 52:e8:24:a9:08:37:a1:b0:39:80:40:37:e3:ce:f6: a4:eb:ca:25:18:bb:c8:a8:83:87:07:78:15:98:24: 04:30:d6:17:52:df:52:b6:c3:f1:cf:dc:d9:f0:33: 9a:35:2b:76:32:31:7d:20:a0:8d:15:d2:cc:76:74: 20:d7:72:66:7e:9c:ab:23:64:86:9d:48:cd:db:78: 89:fa:51:f9:2d:04:b5:10:53:6f:18:a0:15:ed:7b: 4e:3b:cf:b7:dd:05:b9:65:29:3d:46:cb:27:70:a1: 9a:a9:91:63:84:a8:af:98:04:f5:0e:26:8f:f6:be: 62:98:af:39:02:6b:6d:9f:71:87:60:98:e5:85:c2: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:61:7F:F6:2B:9B:66:32:1E:50:76:B5:77:5B:70:79:7A:22:AB:85 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:51:cd:cb:13:ad:e3:fc:10:40:dd:2d:5e:66:37:94:f3:c4: 09:97:b1:50:98:a8:23:f3:7f:38:bc:e7:bc:e8:36:b3:8c:83: 63:9a:5b:ea:28:32:31:49:52:5a:32:74:6a:1d:1b:cf:0d:6e: 40:f4:f2:9d:90:41:f5:58:af:35:aa:b1:45:d5:47:d8:76:f5: b3:a6:8f:5b:56:d9:88:d3:20:2c:ab:65:a9:1f:e4:fb:d2:3f: aa:40:48:7f:ca:46:5a:a6:ea:1d:94:ba:fd:7e:66:9d:2d:d9: 6a:b0:b7:5c:68:bc:a9:9b:43:e6:67:1c:d9:30:e1:ba:88:0e: 34:58:46:b3:ee:58:f8:cd:b3:7b:47:97:95:0d:0e:be:ac:51: 7a:10:b5:c6:81:8f:d5:37:40:cc:33:bb:c2:dd:10:2b:bd:3c: 25:46:5d:b1:bb:d6:9c:1e:9f:c4:cd:6d:3a:0a:0d:8b:60:46: d7:79:4c:44:0a:41:7f:41:69:fb:91:f8:90:d8:bd:49:ff:5f: be:a0:9b:ab:d9:7f:19:1c:a8:46:7d:a6:19:af:c5:c6:25:87: 84:94:38:9b:a8:91:3d:54:18:ae:f5:97:31:df:2d:45:3a:30: 26:5a:1c:e7:47:df:6f:71:ac:b9:63:6f:dd:2d:38:9b:52:95: a7:9f:fb:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsXBIvdwe4p4+NA071Eq4GQAKIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNjAzMjYwNzQ2MjVaFw0yNjAzMjkxNjA2MjVaMDMxMTAvBgNV BAMTKDkxNjE3RkY2MkI5QjY2MzIxRTUwNzZCNTc3NUI3MDc5N0EyMkFCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkB7VjznxMJERHyqouiZWExW9 SUCxAvLVutDRz5A3eyt9GxsKzMn15pSK5kzllRkwKnxO+2ztVlxUxT5NfnPBP7ib hWGuUo7nESq9I3o2MrHq611ABvwErUQvauHHKTt49sCnMQygl2BFcyXAV7DIEVOF 3UPZflLoJKkIN6GwOYBAN+PO9qTryiUYu8iog4cHeBWYJAQw1hdS31K2w/HP3Nnw M5o1K3YyMX0goI0V0sx2dCDXcmZ+nKsjZIadSM3beIn6UfktBLUQU28YoBXte047 z7fdBbllKT1GyydwoZqpkWOEqK+YBPUOJo/2vmKYrzkCa22fcYdgmOWFwk+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkWF/9iubZjIeUHa1d1tweXoiq4UwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5RzcsTreP8EEDdLV5mN5TzxAmXsVCYqCPz fzi857zoNrOMg2OaW+ooMjFJUloydGodG88NbkD08p2QQfVYrzWqsUXVR9h29bOm j1tW2YjTICyrZakf5PvSP6pASH/KRlqm6h2Uuv1+Zp0t2Wqwt1xovKmbQ+ZnHNkw 4bqIDjRYRrPuWPjNs3tHl5UNDr6sUXoQtcaBj9U3QMwzu8LdECu9PCVGXbG71pwe n8TNbToKDYtgRtd5TEQKQX9BafuR+JDYvUn/X76gm6vZfxkcqEZ9phmvxcYlh4SU OJuokT1UGK71lzHfLUU6MCZaHOdH329xrLljb90tOJtSlaef+6c= -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:37 2026 by rpki-client