$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: 0JRUHInDzAHMdebc1x5XWtbiyvA1y5PLkxNRqXyW6+U= Subject key identifier: F9:40:11:9F:32:92:3D:24:EF:72:42:6F:40:18:1D:C5:C6:6B:20:17 Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 2CCC8395A0FB2449035ABD5022FE79BBA453DD1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 022E Signing time: Tue 24 Mar 2026 02:52:14 +0000 Manifest this update: Tue 24 Mar 2026 02:47:14 +0000 Manifest next update: Fri 27 Mar 2026 14:16:14 +0000 Files and hashes: 1: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: AlVmqpfL/WFpHYoBKjxWx/LAHevtz/DHHIwmIJ22kko=) 2: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2CDFzM/b08FBAmMsE5mkOznd4mOppWCjC4ZNYfj8Grs=) 3: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: N8p+xXIE2Z6/wy6nuVC3hEw5+UHSYeK9HykIvi1ywXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cc:83:95:a0:fb:24:49:03:5a:bd:50:22:fe:79:bb:a4:53:dd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Mar 24 02:47:14 2026 GMT Not After : Mar 27 14:16:14 2026 GMT Subject: CN=F940119F32923D24EF72426F40181DC5C66B2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:e6:df:37:c7:4e:7d:87:08:cb:c8:0a:76: c6:e2:11:14:d0:af:39:1f:5e:4d:4d:52:f2:17:74: 10:7f:34:86:e2:17:03:74:61:54:11:9c:41:e4:62: 65:38:b1:32:56:13:0c:97:d1:ec:9f:04:da:ff:37: 41:20:26:fd:89:4d:ff:76:b7:fc:7d:d8:f3:38:01: 7e:07:b4:2c:f3:18:ac:a7:42:60:c3:04:ed:82:91: de:5c:6c:05:af:53:19:b5:82:78:b1:9c:56:ab:d6: 68:40:f9:b1:50:bd:8e:c6:8f:38:74:74:5a:db:9f: d8:bd:6f:6f:4f:b5:ef:62:84:e6:b5:5b:e8:46:54: 6f:37:d2:b4:07:7b:dc:75:e2:4c:cf:f9:c4:aa:e6: 24:e4:29:6f:cb:7e:c1:1b:82:cd:c1:2d:b5:d8:df: 61:2e:d4:d7:2e:1e:e7:78:40:33:f1:87:67:23:f3: 84:23:27:b4:15:79:99:88:72:7d:dd:40:fb:6e:5c: 88:6e:eb:16:66:2f:ca:5e:fa:b7:7a:fe:49:36:14: 92:d9:87:16:ad:c9:5b:90:fd:5d:40:a7:86:d3:83: f0:ae:78:0e:1e:e8:92:1b:be:5c:f2:cd:92:10:33: 78:97:2b:85:9b:ce:8a:9f:59:e9:73:5c:25:97:ac: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:40:11:9F:32:92:3D:24:EF:72:42:6F:40:18:1D:C5:C6:6B:20:17 X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:8d:51:69:d0:7f:0c:2f:23:07:97:f0:c9:1c:2d:64:3c: ad:bd:cc:aa:09:22:47:22:37:86:19:b1:51:47:d5:06:65:80: ca:91:83:01:38:78:90:4c:b1:e4:54:62:fd:78:c2:ef:75:55: 0e:77:31:04:7a:b7:5a:c6:00:88:5c:48:c7:fa:85:29:09:eb: d1:15:d6:f5:73:09:66:aa:2e:4f:82:41:bf:0f:20:74:a7:f9: bc:b9:bc:c7:f2:f9:c0:d5:39:95:1f:55:b8:db:07:e9:7f:63: ee:fc:e8:50:ba:09:0d:25:01:f1:59:d4:5c:9b:4d:dc:a9:22: 56:dc:3d:cc:b9:c4:7b:da:96:fe:94:48:30:ef:2a:a4:ff:27: f0:25:47:46:36:87:f5:1f:e4:65:d0:28:18:a6:82:d1:5c:10: 92:94:25:aa:72:fa:8f:fd:b1:45:bd:53:fc:60:97:ea:3f:f9: 4f:65:30:f3:c2:e0:d7:ed:d0:8c:1f:d5:24:3a:c6:66:42:34: 01:59:aa:ec:91:09:45:ca:fe:8a:3e:2f:cb:1b:ca:2e:dc:02: 60:8e:6e:8c:1e:ff:57:21:8d:40:4e:41:b3:5c:7f:6a:6f:8f: 51:83:44:78:66:34:b4:72:dc:ab:a3:04:59:cd:db:6a:15:08: 7f:15:53:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMyDlaD7JEkDWr1QIv55u6RT3R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNjAzMjQwMjQ3MTRaFw0yNjAzMjcxNDE2MTRaMDMxMTAvBgNV BAMTKEY5NDAxMTlGMzI5MjNEMjRFRjcyNDI2RjQwMTgxREM1QzY2QjIwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/ebfN8dOfYcIy8gKdsbiERTQ rzkfXk1NUvIXdBB/NIbiFwN0YVQRnEHkYmU4sTJWEwyX0eyfBNr/N0EgJv2JTf92 t/x92PM4AX4HtCzzGKynQmDDBO2Ckd5cbAWvUxm1gnixnFar1mhA+bFQvY7Gjzh0 dFrbn9i9b29Pte9ihOa1W+hGVG830rQHe9x14kzP+cSq5iTkKW/LfsEbgs3BLbXY 32Eu1NcuHud4QDPxh2cj84QjJ7QVeZmIcn3dQPtuXIhu6xZmL8pe+rd6/kk2FJLZ hxatyVuQ/V1Ap4bTg/CueA4e6JIbvlzyzZIQM3iXK4WbzoqfWelzXCWXrOnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+UARnzKSPSTvckJvQBgdxcZrIBcwHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5YjVFp0H8MLyMHl/DJHC1kPK29zKoJIkci N4YZsVFH1QZlgMqRgwE4eJBMseRUYv14wu91VQ53MQR6t1rGAIhcSMf6hSkJ69EV 1vVzCWaqLk+CQb8PIHSn+by5vMfy+cDVOZUfVbjbB+l/Y+786FC6CQ0lAfFZ1Fyb TdypIlbcPcy5xHvalv6USDDvKqT/J/AlR0Y2h/Uf5GXQKBimgtFcEJKUJapy+o/9 sUW9U/xgl+o/+U9lMPPC4Nft0Iwf1SQ6xmZCNAFZquyRCUXK/oo+L8sbyi7cAmCO bowe/1chjUBOQbNcf2pvj1GDRHhmNLRy3KujBFnN22oVCH8VU7s= -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:38 2026 by rpki-client