$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: 6K6bbZ+3pwz4kXfakie01/Ld28WFPRe3KleFckl/FBA= Subject key identifier: 26:62:CF:CC:52:0A:41:2B:A4:89:CF:99:1B:41:CF:BC:F0:75:B5:00 Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 06DD9450C5BFEBFC87F44D62E8B15397D1645551 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 032B Signing time: Wed 25 Mar 2026 21:11:47 +0000 Manifest this update: Wed 25 Mar 2026 21:06:47 +0000 Manifest next update: Sun 29 Mar 2026 02:08:47 +0000 Files and hashes: 1: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=) 2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=) 3: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: 7OWsU5tPfxlcRfc7a8UwiClgmiBvaGUPdDX8An/uxhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dd:94:50:c5:bf:eb:fc:87:f4:4d:62:e8:b1:53:97:d1:64:55:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Mar 25 21:06:47 2026 GMT Not After : Mar 29 02:08:47 2026 GMT Subject: CN=2662CFCC520A412BA489CF991B41CFBCF075B500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:bc:4a:1e:9f:b6:b9:5c:52:54:08:eb:cc: e5:e7:9c:77:2a:b0:cd:33:84:25:26:54:da:d5:26: a7:aa:a6:b1:20:7f:f9:70:24:03:98:f7:98:f3:12: 34:7b:8e:8f:22:1f:4e:2b:6f:71:3b:2d:97:b8:9b: b4:25:2c:e2:43:67:2b:5a:3a:5d:be:7f:7a:4c:da: 9c:22:28:40:cc:f3:ae:95:08:ce:6a:77:a2:60:f3: fe:aa:61:d0:34:23:f5:f5:2a:4c:b5:66:83:91:97: a2:05:8b:81:f8:4c:8a:65:e8:42:d2:e3:be:e7:e8: d8:cb:85:27:0e:89:94:6c:7d:28:33:a0:98:26:20: 55:33:37:62:33:ef:c1:4b:10:82:95:69:d6:0a:f4: e1:4c:39:3e:e8:81:c0:a3:dc:71:5a:9d:d7:a7:54: 23:ae:8c:11:1c:ee:aa:fb:98:38:50:8c:59:c5:5f: c1:ed:13:0a:94:07:e1:da:86:9e:54:25:71:39:05: 88:1b:21:06:94:a9:e1:91:90:df:46:7a:57:4c:a5: 16:11:71:ef:64:df:a2:b5:5b:bd:c6:3d:08:fc:cb: db:9d:03:41:c6:c9:9c:cc:d7:7e:81:cb:a5:49:84: 8b:81:d2:20:32:91:17:1f:39:9c:73:bd:5a:27:fe: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:62:CF:CC:52:0A:41:2B:A4:89:CF:99:1B:41:CF:BC:F0:75:B5:00 X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2d:22:a4:b6:17:90:e0:75:5e:f8:a0:7e:19:70:15:cd:b8: 9c:b1:63:2d:aa:c5:d1:e2:32:d5:2a:4a:fb:d4:c7:97:a2:35: 31:11:0d:d1:c2:23:22:c8:2c:5f:5c:76:98:aa:99:cf:1a:43: 97:c4:d8:6b:ec:9d:85:3c:c4:60:e8:46:af:7b:20:7a:76:af: 57:5f:ce:d2:fd:09:24:78:0b:1f:81:ac:78:05:4b:27:b4:55: 0d:12:8c:36:82:ed:b8:cd:5d:c1:fd:72:a0:8e:d8:de:47:9e: 39:0d:7a:94:ea:a6:96:4d:2a:91:06:4e:e0:2a:0d:9c:ef:57: 6f:5c:c3:d6:66:d5:d7:61:be:e8:02:69:b7:b7:a8:b7:02:e1: f4:3c:95:88:d7:d3:99:b7:b8:f4:8e:b7:53:70:56:59:50:db: cc:b3:86:78:db:34:03:f6:e1:b8:90:2c:85:a8:ac:6a:32:4e: 38:5d:d1:a6:9f:8a:34:52:17:b2:49:4c:47:ef:9d:c1:72:2b: ae:4e:4f:f7:b8:bf:cd:27:d9:f5:61:2e:0d:c2:fb:6d:05:e4: 5b:72:3c:e1:0a:79:44:98:e9:21:d7:fc:05:0f:06:0f:a6:4f: 2b:66:63:c8:26:4d:5f:fb:2f:c8:70:a9:48:b0:0c:0f:4c:a1: 07:2c:51:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBt2UUMW/6/yH9E1i6LFTl9FkVVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNjAzMjUyMTA2NDdaFw0yNjAzMjkwMjA4NDdaMDMxMTAvBgNV BAMTKDI2NjJDRkNDNTIwQTQxMkJBNDg5Q0Y5OTFCNDFDRkJDRjA3NUI1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJs7xKHp+2uVxSVAjrzOXnnHcq sM0zhCUmVNrVJqeqprEgf/lwJAOY95jzEjR7jo8iH04rb3E7LZe4m7QlLOJDZyta Ol2+f3pM2pwiKEDM866VCM5qd6Jg8/6qYdA0I/X1Kky1ZoORl6IFi4H4TIpl6ELS 477n6NjLhScOiZRsfSgzoJgmIFUzN2Iz78FLEIKVadYK9OFMOT7ogcCj3HFanden VCOujBEc7qr7mDhQjFnFX8HtEwqUB+Hahp5UJXE5BYgbIQaUqeGRkN9GeldMpRYR ce9k36K1W73GPQj8y9udA0HGyZzM136By6VJhIuB0iAykRcfOZxzvVon/qKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmLPzFIKQSukic+ZG0HPvPB1tQAwHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYtIqS2F5DgdV74oH4ZcBXNuJyxYy2qxdHi MtUqSvvUx5eiNTERDdHCIyLILF9cdpiqmc8aQ5fE2GvsnYU8xGDoRq97IHp2r1df ztL9CSR4Cx+BrHgFSye0VQ0SjDaC7bjNXcH9cqCO2N5HnjkNepTqppZNKpEGTuAq DZzvV29cw9Zm1ddhvugCabe3qLcC4fQ8lYjX05m3uPSOt1NwVllQ28yzhnjbNAP2 4biQLIWorGoyTjhd0aafijRSF7JJTEfvncFyK65OT/e4v80n2fVhLg3C+20F5Fty POEKeUSY6SHX/AUPBg+mTytmY8gmTV/7L8hwqUiwDA9MoQcsUTw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:44 2026 by rpki-client