$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: QWnUUevzv7M4eYPekRwBarGh1sbHbCYEEcHKtfbNFcE= Subject key identifier: 02:4C:D3:9F:C8:B9:EB:6C:1E:C8:FC:C0:22:F0:E7:FA:45:F8:4C:3C Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 5EF95478AC1D40B3E7639D6A5A27238B4E86CEE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 025B Signing time: Wed 25 Mar 2026 02:01:57 +0000 Manifest this update: Wed 25 Mar 2026 01:56:57 +0000 Manifest next update: Sat 28 Mar 2026 11:39:57 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: n/hMQb+bHZ4DNGkytgDnOgTjyxqCrfA+LqfIt6+DmkU=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: oDrqqfgam7Z9q9E5EExV9zAvlD6EiX1QGxTTwyoxWlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f9:54:78:ac:1d:40:b3:e7:63:9d:6a:5a:27:23:8b:4e:86:ce:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Mar 25 01:56:57 2026 GMT Not After : Mar 28 11:39:57 2026 GMT Subject: CN=024CD39FC8B9EB6C1EC8FCC022F0E7FA45F84C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:0b:3b:5a:e4:87:6f:fc:7e:ac:0a:d8:c5: a1:56:91:58:0b:9d:c3:ee:07:99:12:dc:40:da:1e: 4e:35:3f:7e:56:10:f1:39:c8:a5:e7:79:f6:4c:d3: 54:8c:01:21:ef:17:b2:4f:91:c0:6d:80:19:26:e3: 1f:d8:c0:5e:cc:6a:73:f7:e5:cb:79:82:ba:bd:95: ed:2f:df:2e:74:b7:98:63:8f:19:3b:64:47:5b:82: 57:02:f5:8b:21:49:77:9f:33:a0:96:31:f3:b2:49: c1:36:db:e8:4b:0f:9f:fe:06:a8:f0:df:d7:00:e2: 93:b2:38:94:2d:6c:5c:bb:2d:01:f6:c7:bd:69:0a: b5:46:84:db:24:db:91:0b:37:cc:e5:df:e5:b2:23: fd:23:87:ae:54:ec:b7:bf:bd:7a:f1:d0:5f:c6:93: 7c:60:66:ee:00:26:84:e0:84:83:00:27:f6:72:c8: 05:2c:28:66:bc:b4:62:d6:51:79:d9:e0:95:ab:d7: 32:8c:59:7b:aa:6a:3f:49:4f:b1:e1:0a:df:d5:ec: 79:63:8b:6b:0a:83:9a:42:54:57:88:f0:10:aa:fc: f6:05:6d:38:91:92:ea:db:f9:49:56:d7:0b:ec:57: 9b:02:f9:ef:84:c3:3b:97:24:ed:75:30:7f:eb:8c: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4C:D3:9F:C8:B9:EB:6C:1E:C8:FC:C0:22:F0:E7:FA:45:F8:4C:3C X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0c:17:b9:85:8f:2e:7c:b2:6c:c0:64:56:e6:32:82:f3:0a: d0:80:f1:a0:0d:60:ee:92:6e:e4:7c:33:e2:cd:1d:2c:4b:24: 55:bc:e9:53:32:fa:eb:df:93:e5:e9:cf:fe:fb:7e:99:19:93: 7f:67:e4:98:90:f5:16:d7:b3:0f:bb:48:c4:a0:80:ad:9a:81: b1:ce:c1:55:a8:cb:c5:43:ff:59:2c:a6:c4:0e:06:e3:1c:4a: fc:74:5f:6d:98:94:e0:6a:92:ec:5f:09:dd:c2:c8:fe:e5:a1: 0a:6f:fd:46:62:7e:f3:36:3d:a8:6e:58:0f:8e:63:06:e6:18: 58:16:be:ad:d8:b6:a8:13:f2:a5:9e:76:cc:91:b8:32:e3:99: 40:0a:4b:db:e5:8a:20:4a:ba:e5:4f:66:b0:0a:ef:da:dc:58: b5:d8:02:fb:2f:98:f4:f8:53:84:ce:59:fd:78:4a:73:ba:1c: 2b:37:2f:8b:7f:b3:78:7b:ad:5c:e0:34:10:53:02:b6:23:24: 2b:ed:0e:b2:4f:70:e7:c5:56:d8:21:78:3f:5e:7d:16:3f:58: 19:3d:b8:8a:b6:54:a9:c1:53:46:02:a7:56:7d:7d:b1:5b:6a: 9e:20:cf:f4:2a:4a:99:4b:c7:a0:43:31:d5:bc:f8:e1:6e:24: 76:c6:8f:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvlUeKwdQLPnY51qWicji06GzukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNjAzMjUwMTU2NTdaFw0yNjAzMjgxMTM5NTdaMDMxMTAvBgNV BAMTKDAyNENEMzlGQzhCOUVCNkMxRUM4RkNDMDIyRjBFN0ZBNDVGODRDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb7gs7WuSHb/x+rArYxaFWkVgL ncPuB5kS3EDaHk41P35WEPE5yKXnefZM01SMASHvF7JPkcBtgBkm4x/YwF7ManP3 5ct5grq9le0v3y50t5hjjxk7ZEdbglcC9YshSXefM6CWMfOyScE22+hLD5/+Bqjw 39cA4pOyOJQtbFy7LQH2x71pCrVGhNsk25ELN8zl3+WyI/0jh65U7Le/vXrx0F/G k3xgZu4AJoTghIMAJ/ZyyAUsKGa8tGLWUXnZ4JWr1zKMWXuqaj9JT7HhCt/V7Hlj i2sKg5pCVFeI8BCq/PYFbTiRkurb+UlW1wvsV5sC+e+EwzuXJO11MH/rjDa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkzTn8i562weyPzAIvDn+kX4TDwwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8MF7mFjy58smzAZFbmMoLzCtCA8aANYO6S buR8M+LNHSxLJFW86VMy+uvfk+Xpz/77fpkZk39n5JiQ9RbXsw+7SMSggK2agbHO wVWoy8VD/1kspsQOBuMcSvx0X22YlOBqkuxfCd3CyP7loQpv/UZifvM2PahuWA+O YwbmGFgWvq3YtqgT8qWedsyRuDLjmUAKS9vliiBKuuVPZrAK79rcWLXYAvsvmPT4 U4TOWf14SnO6HCs3L4t/s3h7rVzgNBBTArYjJCvtDrJPcOfFVtgheD9efRY/WBk9 uIq2VKnBU0YCp1Z9fbFbap4gz/QqSplLx6BDMdW8+OFuJHbGjyc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:06:58 2026 by rpki-client