$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: jfLIMoSh1xdehJnNo6ilcr0lTBn9+tk5i70TdeHRcu8= Subject key identifier: B5:46:94:9D:77:1E:F6:2C:98:26:00:99:32:27:78:DF:FD:72:D4:70 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 01C9FB9A47B0450C2C1AFF6FB4E971A88AEDF495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: F3 Signing time: Wed 25 Mar 2026 04:41:01 +0000 Manifest this update: Wed 25 Mar 2026 04:36:01 +0000 Manifest next update: Sat 28 Mar 2026 08:27:01 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: 6KAKbhHkpd7mDvnqnb4X99iHCmONLFpbNj4tjQ4eC5k=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c9:fb:9a:47:b0:45:0c:2c:1a:ff:6f:b4:e9:71:a8:8a:ed:f4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Mar 25 04:36:01 2026 GMT Not After : Mar 28 08:27:01 2026 GMT Subject: CN=B546949D771EF62C98260099322778DFFD72D470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:20:06:fc:bb:19:47:08:2d:de:45:06:97: 97:c8:45:79:94:2e:f6:69:99:c1:43:3e:24:36:08: 36:63:69:ff:c2:a0:2e:6d:dd:90:a9:7f:7b:ee:f6: 89:62:ec:9a:21:16:4c:8d:28:8f:6a:d8:c4:2b:29: b1:fc:a4:d8:48:27:d1:be:71:e3:5c:d5:6d:d4:22: ed:d5:c6:c4:ea:f0:37:51:88:0c:31:56:03:c7:22: 03:b1:2c:17:c9:ba:e0:ca:ff:2e:c8:54:b1:ac:d8: bc:40:e7:69:f3:1b:78:f4:f4:db:0a:af:4d:c8:d3: 8f:23:6a:a3:de:dc:da:30:80:6e:5b:75:fc:65:5a: 78:69:48:28:87:89:77:73:58:bb:d6:30:a9:df:2a: 50:40:d1:c1:56:b0:a7:4d:2e:97:01:de:b7:ea:ce: f4:53:a5:38:57:ec:e7:3c:ee:e0:6e:b0:77:a2:85: 13:48:09:d5:0f:1c:fd:71:e9:60:5c:37:bf:61:7d: 3d:a3:03:df:62:47:66:34:56:0b:e4:15:21:1e:12: 29:6b:e2:c7:84:28:83:16:b1:ea:09:a3:c0:89:d5: 9e:5c:44:04:82:24:78:7c:dd:b7:1f:81:f4:ee:57: 1f:54:71:eb:ba:ae:3c:e7:cc:08:f2:6d:7c:2f:b2: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:46:94:9D:77:1E:F6:2C:98:26:00:99:32:27:78:DF:FD:72:D4:70 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c9:87:05:a3:c7:c8:91:d8:30:92:4a:6f:04:96:bc:3a:5a: 40:38:5e:f7:07:6a:1b:d5:7d:18:db:71:4f:1b:41:60:c7:9e: b7:c5:47:31:1b:17:2b:49:5b:24:f6:16:7e:f8:b0:c8:4f:2e: 7d:e9:f5:e8:9f:fc:02:f6:62:44:b7:28:60:b3:0c:ff:76:82: 17:1d:f5:fe:c0:68:5e:96:1e:79:a6:97:f2:9e:67:55:d4:01: 31:2b:75:ae:69:6e:4c:93:2a:25:a7:66:b1:4c:0b:a9:36:36: 6a:30:e0:8c:cb:d7:b6:8d:bb:e4:93:28:c6:b4:94:76:56:05: 80:42:99:02:87:73:34:c3:fe:1a:36:f3:e8:a3:5f:ea:df:73: dc:34:0b:22:77:a9:5d:10:72:b0:33:13:be:48:bb:b5:15:6c: b5:3e:41:2c:c6:ea:a5:16:d6:f4:85:ab:cc:9a:fa:45:a8:5f: cd:7b:27:1c:2e:b4:ac:11:b6:54:fd:6a:e0:74:f1:70:e2:bf: 62:b5:93:46:df:09:27:54:d5:26:d3:47:ba:d8:a9:fe:aa:af: c2:4c:62:4b:df:fb:fc:b9:e4:75:4b:48:64:b4:81:ad:37:72: 40:54:7a:4c:2e:d8:da:3a:90:af:91:b8:49:a8:63:9d:be:25: d5:f9:1b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcn7mkewRQwsGv9vtOlxqIrt9JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNjAzMjUwNDM2MDFaFw0yNjAzMjgwODI3MDFaMDMxMTAvBgNV BAMTKEI1NDY5NDlENzcxRUY2MkM5ODI2MDA5OTMyMjc3OERGRkQ3MkQ0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdHyAG/LsZRwgt3kUGl5fIRXmU LvZpmcFDPiQ2CDZjaf/CoC5t3ZCpf3vu9oli7JohFkyNKI9q2MQrKbH8pNhIJ9G+ ceNc1W3UIu3VxsTq8DdRiAwxVgPHIgOxLBfJuuDK/y7IVLGs2LxA52nzG3j09NsK r03I048jaqPe3NowgG5bdfxlWnhpSCiHiXdzWLvWMKnfKlBA0cFWsKdNLpcB3rfq zvRTpThX7Oc87uBusHeihRNICdUPHP1x6WBcN79hfT2jA99iR2Y0VgvkFSEeEilr 4seEKIMWseoJo8CJ1Z5cRASCJHh83bcfgfTuVx9Uceu6rjznzAjybXwvshN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtUaUnXce9iyYJgCZMid43/1y1HAwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3JhwWjx8iR2DCSSm8Elrw6WkA4XvcHahvV fRjbcU8bQWDHnrfFRzEbFytJWyT2Fn74sMhPLn3p9eif/AL2YkS3KGCzDP92ghcd 9f7AaF6WHnmml/KeZ1XUATErda5pbkyTKiWnZrFMC6k2Nmow4IzL17aNu+STKMa0 lHZWBYBCmQKHczTD/ho28+ijX+rfc9w0CyJ3qV0QcrAzE75Iu7UVbLU+QSzG6qUW 1vSFq8ya+kWoX817JxwutKwRtlT9auB08XDiv2K1k0bfCSdU1SbTR7rYqf6qr8JM Ykvf+/y55HVLSGS0ga03ckBUekwu2No6kK+RuEmoY52+JdX5G7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:50 2026 by rpki-client