$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: TWZlOCHKukGt85f/kPrM+e1QDG4bCelXHeoMRwCoALE= Subject key identifier: 80:BA:B5:53:DA:48:59:45:19:DF:B5:4C:C9:2D:35:AF:1F:8B:63:86 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 54DCFDDF2DB4165F7EB80850C3AD63D5EDE73DAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0248 Signing time: Wed 25 Mar 2026 04:32:37 +0000 Manifest this update: Wed 25 Mar 2026 04:27:37 +0000 Manifest next update: Sat 28 Mar 2026 14:56:37 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: DsywE0YrXipeZVF3ToVESj8WmgpjBDz3hptrixzEeH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:dc:fd:df:2d:b4:16:5f:7e:b8:08:50:c3:ad:63:d5:ed:e7:3d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Mar 25 04:27:37 2026 GMT Not After : Mar 28 14:56:37 2026 GMT Subject: CN=80BAB553DA48594519DFB54CC92D35AF1F8B6386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a6:42:1a:7b:69:d9:02:fc:1a:91:55:ea:8f: f1:14:4d:79:53:27:f2:1f:b3:4e:6c:fb:ef:39:fd: f6:ea:6d:88:6e:76:f8:01:9f:7a:28:07:10:87:90: 53:39:9a:ee:0d:d4:54:52:c4:d0:51:dd:0a:a5:b6: 82:ea:12:c4:68:76:10:1f:24:30:56:e4:73:12:fd: 1f:94:d7:57:7c:70:05:ae:2e:0d:7d:57:41:db:6a: cd:ee:cd:06:d3:b6:cb:23:3e:74:7b:0b:ed:f0:86: bb:6e:b4:19:5e:75:87:06:58:f9:f3:19:f4:9d:97: 88:b0:6a:d4:ab:8d:e8:62:1e:af:40:9e:1c:eb:d9: 68:b3:cb:0e:13:12:32:94:c9:90:12:3e:f4:6f:3d: 2d:d8:12:46:99:64:6c:6b:55:b5:cc:a8:88:22:42: f5:f2:0f:1e:27:d6:89:86:62:2c:2f:98:e6:bc:c6: 6b:98:b2:2a:1f:c0:7f:de:62:71:ff:b7:08:3b:1b: 0e:2f:99:62:97:a0:3f:ba:c1:22:7a:7e:d3:c0:a6: a7:38:62:65:24:bd:74:11:7d:c3:b2:6e:35:81:43: 1a:bd:f6:2c:b4:70:94:a2:ed:34:db:bb:b1:4b:05: b8:b8:57:29:23:ea:49:59:e3:a3:2c:23:0e:ab:e4: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:B5:53:DA:48:59:45:19:DF:B5:4C:C9:2D:35:AF:1F:8B:63:86 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7b:ea:fa:21:68:d5:0f:a7:b7:cf:88:d0:18:27:c1:11:f7: c8:4e:ed:ea:9d:98:d3:03:31:5b:fb:e9:b9:c2:a9:e8:f4:e6: bb:45:11:6c:d8:36:31:fb:7c:66:d9:89:9a:0d:34:a7:89:f8: 62:b0:9c:59:6f:b4:49:b9:5a:b7:c9:a4:f9:e9:7a:d4:b9:cb: aa:3e:22:71:b3:92:d4:10:5a:4e:82:9a:95:43:8f:19:72:52: 63:f2:2e:0a:e9:e2:85:18:6d:12:bc:e7:ab:37:cf:7d:60:71: c9:9b:09:72:fd:40:74:70:93:0f:88:6f:5a:2b:da:b9:81:2b: 6d:69:60:49:cb:f5:c0:f8:38:10:7b:90:a9:17:ab:a8:3e:d2: eb:e5:db:e8:fa:e8:af:75:c0:93:47:7d:71:0a:92:23:b6:30: b6:77:89:65:5a:bb:0e:28:0c:7b:87:e5:fc:54:df:75:ae:db: 72:8f:27:a1:0b:a7:5b:e7:d2:66:7f:eb:8a:b2:a5:81:54:ea: cb:31:2c:1c:c7:09:b7:ba:c4:d5:51:2f:ce:b1:80:f2:c8:6c: 32:47:05:ac:3a:4e:e2:d7:7e:dd:d2:ce:96:80:c4:a6:a3:19: b3:01:b5:ba:12:cc:82:c3:4f:ed:7f:e1:9d:3f:86:cd:5b:83: 20:d5:ea:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNz93y20Fl9+uAhQw61j1e3nPaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNjAzMjUwNDI3MzdaFw0yNjAzMjgxNDU2MzdaMDMxMTAvBgNV BAMTKDgwQkFCNTUzREE0ODU5NDUxOURGQjU0Q0M5MkQzNUFGMUY4QjYzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupkIae2nZAvwakVXqj/EUTXlT J/Ifs05s++85/fbqbYhudvgBn3ooBxCHkFM5mu4N1FRSxNBR3QqltoLqEsRodhAf JDBW5HMS/R+U11d8cAWuLg19V0Hbas3uzQbTtssjPnR7C+3whrtutBledYcGWPnz GfSdl4iwatSrjehiHq9Anhzr2Wizyw4TEjKUyZASPvRvPS3YEkaZZGxrVbXMqIgi QvXyDx4n1omGYiwvmOa8xmuYsiofwH/eYnH/twg7Gw4vmWKXoD+6wSJ6ftPApqc4 YmUkvXQRfcOybjWBQxq99iy0cJSi7TTbu7FLBbi4Vykj6klZ46MsIw6r5LGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLq1U9pIWUUZ37VMyS01rx+LY4YwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFB76vohaNUPp7fPiNAYJ8ER98hO7eqdmNMD MVv76bnCqej05rtFEWzYNjH7fGbZiZoNNKeJ+GKwnFlvtEm5WrfJpPnpetS5y6o+ InGzktQQWk6CmpVDjxlyUmPyLgrp4oUYbRK856s3z31gccmbCXL9QHRwkw+Ib1or 2rmBK21pYEnL9cD4OBB7kKkXq6g+0uvl2+j66K91wJNHfXEKkiO2MLZ3iWVauw4o DHuH5fxU33Wu23KPJ6ELp1vn0mZ/64qypYFU6ssxLBzHCbe6xNVRL86xgPLIbDJH Baw6TuLXft3SzpaAxKajGbMBtboSzILDT+1/4Z0/hs1bgyDV6mo= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:42 2026 by rpki-client