$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: c9UAdKNbnahAwDis8PSUQi3veSRtnumI0yiGexe1ubc= Subject key identifier: BE:81:7C:F9:00:3C:98:1F:6C:74:E5:E7:C8:7D:0A:91:41:56:8F:A9 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 3C11262D4586671485B95B70C8590AEFBE808259 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 0572 Signing time: Wed 25 Mar 2026 18:41:50 +0000 Manifest this update: Wed 25 Mar 2026 18:36:50 +0000 Manifest next update: Sun 29 Mar 2026 00:41:50 +0000 Files and hashes: 1: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=) 2: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: fw3KcIOh0hMZzricWHqwnwgD7pgh4FwR5KRYaNb6Udk=) 3: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: U9D771UuAkGUw+fqOOekyqrm8y2+seArJf4nwvuYawE=) 4: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: pfUFTVsuIPjmnx0LWYbFiwDyhGMbxuFA/hftBufAVsk=) 5: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: 63Tfw81BZTddeb+f1H4wsRimzGD5u+l/4PZBmxazTmA=) 6: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 7: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: UT/qgOwK8olv5pQQFj9edHID/ib1GBwuK0WKe6OXhBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:11:26:2d:45:86:67:14:85:b9:5b:70:c8:59:0a:ef:be:80:82:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Mar 25 18:36:50 2026 GMT Not After : Mar 29 00:41:50 2026 GMT Subject: CN=BE817CF9003C981F6C74E5E7C87D0A9141568FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:ef:79:62:6c:3d:39:68:ce:51:d3:da:dc: ff:c0:ba:5a:da:b2:a6:24:d4:3f:b0:4e:6e:34:7b: 24:fb:8c:35:53:f8:27:08:4e:0b:6a:16:12:9a:6e: 74:a0:87:7c:23:93:09:07:c6:d6:31:2a:2f:db:53: 0b:c9:4f:09:ad:77:6e:a2:cb:cd:08:7c:ec:9f:37: 86:e6:6c:3f:9c:6a:0d:95:a9:6c:62:46:d9:19:0f: 7d:7b:ad:14:74:06:f1:16:65:ad:1c:59:e6:e7:bc: e1:54:e2:51:14:36:9a:18:bd:ca:55:98:1f:c6:ab: 4e:40:21:d3:0a:96:1e:10:6e:ae:10:b2:9f:12:3d: 55:92:35:10:62:c9:c3:84:6c:79:e4:db:e6:dc:5b: 0b:e2:41:4b:41:e0:21:53:4a:b2:a0:b6:ab:6e:c2: 54:79:56:6e:f4:9d:3e:68:eb:a4:34:13:48:81:55: fe:42:03:cf:93:97:93:b5:b6:2e:2b:cf:ec:6e:c2: 20:e8:c5:75:12:93:00:11:d8:9f:0f:ad:ef:8a:73: da:e7:83:eb:32:29:c2:13:02:59:1a:66:75:6d:53: 42:f8:84:54:4a:80:b2:10:af:b8:73:73:54:55:99: 95:5b:c7:d8:91:10:9b:4d:cf:df:74:30:15:c5:1d: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:81:7C:F9:00:3C:98:1F:6C:74:E5:E7:C8:7D:0A:91:41:56:8F:A9 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6f:bd:0e:75:ed:4f:5e:18:c7:13:7a:35:16:74:ea:72:79: 14:57:ea:53:91:28:b6:c3:10:31:69:50:60:68:3c:6f:79:62: de:eb:b9:3b:55:d5:91:c8:aa:16:20:ee:03:c2:b1:56:b4:a7: 45:5f:33:3e:4a:e5:b5:b9:dc:84:66:4c:57:66:58:11:30:f8: b1:56:8e:be:cc:d2:61:25:d3:45:7a:a5:f2:d0:50:a1:25:15: 71:81:e4:97:bc:59:8f:c1:97:5f:c7:92:92:fa:ee:60:ce:e6: 1e:c2:12:c9:92:0a:1e:9c:2d:f1:38:b7:1c:9e:9b:e5:d2:cc: 29:c1:50:c8:db:b4:9d:84:d9:6c:6a:65:93:06:e6:1d:60:fa: a0:85:fb:14:bc:79:b3:4e:2a:16:76:3e:e2:27:91:f6:89:1c: 8b:ae:35:9c:5d:82:38:a5:9f:f0:7e:09:be:a5:df:56:71:cb: 2a:c4:6d:a7:df:2c:c2:e9:15:e0:22:10:a4:44:8e:42:14:ff: a4:ad:fc:38:21:0f:19:57:7d:2f:e7:eb:d0:ef:c9:67:fd:53: 0c:ab:c0:e2:55:24:cf:c6:32:75:35:28:74:2e:3f:d0:92:b0: bd:bd:a4:58:d3:ff:c3:34:7e:b4:11:35:8d:e1:b5:a3:99:b3: 5b:97:d8:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBEmLUWGZxSFuVtwyFkK776AglkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNjAzMjUxODM2NTBaFw0yNjAzMjkwMDQxNTBaMDMxMTAvBgNV BAMTKEJFODE3Q0Y5MDAzQzk4MUY2Qzc0RTVFN0M4N0QwQTkxNDE1NjhGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQ+95Ymw9OWjOUdPa3P/Aulra sqYk1D+wTm40eyT7jDVT+CcITgtqFhKabnSgh3wjkwkHxtYxKi/bUwvJTwmtd26i y80IfOyfN4bmbD+cag2VqWxiRtkZD317rRR0BvEWZa0cWebnvOFU4lEUNpoYvcpV mB/Gq05AIdMKlh4Qbq4Qsp8SPVWSNRBiycOEbHnk2+bcWwviQUtB4CFTSrKgtqtu wlR5Vm70nT5o66Q0E0iBVf5CA8+Tl5O1ti4rz+xuwiDoxXUSkwAR2J8Pre+Kc9rn g+syKcITAlkaZnVtU0L4hFRKgLIQr7hzc1RVmZVbx9iREJtNz990MBXFHWxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoF8+QA8mB9sdOXnyH0KkUFWj6kwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5vvQ517U9eGMcTejUWdOpyeRRX6lORKLbD EDFpUGBoPG95Yt7ruTtV1ZHIqhYg7gPCsVa0p0VfMz5K5bW53IRmTFdmWBEw+LFW jr7M0mEl00V6pfLQUKElFXGB5Je8WY/Bl1/HkpL67mDO5h7CEsmSCh6cLfE4txye m+XSzCnBUMjbtJ2E2WxqZZMG5h1g+qCF+xS8ebNOKhZ2PuInkfaJHIuuNZxdgjil n/B+Cb6l31ZxyyrEbaffLMLpFeAiEKREjkIU/6St/DghDxlXfS/n69DvyWf9Uwyr wOJVJM/GMnU1KHQuP9CSsL29pFjT/8M0frQRNY3htaOZs1uX2CY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:26 2026 by rpki-client