$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: NTUS8Io3AQOiSY1vFzz6FzTI1+mX/vy85I6KsVLD1E4= Subject key identifier: EC:A3:A0:7A:24:BA:D5:69:93:5E:C5:06:D1:6D:97:75:91:CC:0D:2F Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 497D0037FA25A0DE104662C4D415FE28B3098BE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 028B Signing time: Tue 24 Mar 2026 06:22:07 +0000 Manifest this update: Tue 24 Mar 2026 06:17:07 +0000 Manifest next update: Fri 27 Mar 2026 10:07:07 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: HjDV7HX8wOu5m0eMg8q+akxWvSpof1zlaUROo0Obykc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7d:00:37:fa:25:a0:de:10:46:62:c4:d4:15:fe:28:b3:09:8b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Mar 24 06:17:07 2026 GMT Not After : Mar 27 10:07:07 2026 GMT Subject: CN=ECA3A07A24BAD569935EC506D16D977591CC0D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:11:dc:b7:9d:52:f1:14:3f:71:83:e7:c1: a2:3a:39:47:7b:89:79:1f:83:97:26:d5:0a:3a:a2: ad:90:c3:98:98:96:3c:78:ca:5d:6e:67:6d:52:b2: 6c:f1:55:8f:df:18:41:ce:fa:6f:13:1f:d9:6b:c7: 8b:15:71:df:d7:8a:a2:a0:45:00:7c:4c:32:17:ab: 76:cd:29:e7:b6:0f:09:14:79:77:54:43:d4:11:78: d7:b7:dd:6f:8f:33:0b:59:f8:af:d6:81:5a:d3:7b: 3d:3f:64:0a:4b:4d:63:6e:25:84:f4:46:29:7d:5e: eb:51:d5:9a:45:e9:b0:16:32:30:80:15:f7:31:f8: 4f:0d:d6:05:54:e7:3a:d2:2b:7e:be:cb:ee:be:79: 89:e7:63:32:6c:5e:7d:73:a0:f6:08:5f:60:c7:74: 3e:df:27:54:79:5b:c0:65:e7:23:86:32:73:ca:19: cf:17:05:e0:b6:90:66:fe:ac:99:77:fb:98:7e:98: ee:98:98:05:c4:20:a6:a7:6b:c9:78:94:35:5f:e9: 0a:20:bd:d2:86:ee:5f:96:dd:6f:21:6d:5e:b1:ba: 95:a3:ba:dc:f3:ec:06:04:88:87:32:12:b3:34:95: 1a:70:d2:d0:4e:3e:f8:77:f1:1b:0e:22:01:4f:f1: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A3:A0:7A:24:BA:D5:69:93:5E:C5:06:D1:6D:97:75:91:CC:0D:2F X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:88:d3:aa:a0:15:59:0b:c6:58:12:30:87:f9:6b:2d:4f:10: 5a:b9:9c:4c:5e:51:0a:83:e7:bd:f7:49:55:f5:55:b6:b9:86: a9:a5:6c:fc:16:e3:5f:e0:e5:3e:cf:18:bb:b4:b8:85:7c:9d: ae:ad:0e:cb:5a:c1:4e:f3:1d:96:c5:1f:ff:b8:a4:90:31:3b: 06:e5:4d:2a:85:df:64:f5:ba:d8:1d:29:1d:2d:49:07:22:d2: 62:95:38:5a:1b:71:dd:c5:97:cf:4a:63:91:07:68:e5:2e:48: 4d:00:c1:9d:b1:b5:e5:8a:a8:c5:23:1c:fc:7c:4e:f6:96:83: 5c:71:22:1c:96:0b:5c:7b:43:b6:e3:0c:3c:7d:c0:84:40:61: 23:76:c5:4c:25:7a:87:6a:20:12:da:1d:14:c3:08:19:6e:46: ce:32:30:47:49:7a:78:a6:c5:40:ec:59:38:d8:02:3b:8e:57: 2f:75:d6:87:98:61:c8:fb:a4:c4:43:80:b9:6a:74:72:9c:15: b9:a9:65:27:88:7b:b0:38:ec:1d:a8:e2:83:fa:99:e8:da:4d: bf:d8:54:0d:3d:09:3c:66:80:3f:84:12:63:ea:32:3f:37:2a: 0d:d8:bb:7c:39:ad:20:44:d2:3a:de:7b:df:96:43:3e:20:ab: c9:7c:af:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSX0AN/oloN4QRmLE1BX+KLMJi+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNjAzMjQwNjE3MDdaFw0yNjAzMjcxMDA3MDdaMDMxMTAvBgNV BAMTKEVDQTNBMDdBMjRCQUQ1Njk5MzVFQzUwNkQxNkQ5Nzc1OTFDQzBEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXRHct51S8RQ/cYPnwaI6OUd7 iXkfg5cm1Qo6oq2Qw5iYljx4yl1uZ21SsmzxVY/fGEHO+m8TH9lrx4sVcd/XiqKg RQB8TDIXq3bNKee2DwkUeXdUQ9QReNe33W+PMwtZ+K/WgVrTez0/ZApLTWNuJYT0 Ril9XutR1ZpF6bAWMjCAFfcx+E8N1gVU5zrSK36+y+6+eYnnYzJsXn1zoPYIX2DH dD7fJ1R5W8Bl5yOGMnPKGc8XBeC2kGb+rJl3+5h+mO6YmAXEIKana8l4lDVf6Qog vdKG7l+W3W8hbV6xupWjutzz7AYEiIcyErM0lRpw0tBOPvh38RsOIgFP8ZShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KOgeiS61WmTXsUG0W2XdZHMDS8wHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESI06qgFVkLxlgSMIf5ay1PEFq5nExeUQqD 5733SVX1Vba5hqmlbPwW41/g5T7PGLu0uIV8na6tDstawU7zHZbFH/+4pJAxOwbl TSqF32T1utgdKR0tSQci0mKVOFobcd3Fl89KY5EHaOUuSE0AwZ2xteWKqMUjHPx8 TvaWg1xxIhyWC1x7Q7bjDDx9wIRAYSN2xUwleodqIBLaHRTDCBluRs4yMEdJenim xUDsWTjYAjuOVy911oeYYcj7pMRDgLlqdHKcFbmpZSeIe7A47B2o4oP6mejaTb/Y VA09CTxmgD+EEmPqMj83Kg3Yu3w5rSBE0jree9+WQz4gq8l8r5A= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:10 2026 by rpki-client