$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: hlA9ePGQXU5CuFHmNs45QE4uu1DP9sZB4n0Iptbh3pE= Subject key identifier: E8:D1:D6:4E:67:2C:73:BC:71:27:82:42:18:A2:09:61:64:F6:27:13 Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 1C2DB7124A075AC49D4753D7B3B7204F45FBCCCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 0265 Signing time: Wed 25 Mar 2026 22:50:44 +0000 Manifest this update: Wed 25 Mar 2026 22:45:44 +0000 Manifest next update: Sun 29 Mar 2026 09:39:44 +0000 Files and hashes: 1: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=) 2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: WTqqW4cwushoWLyLWupS3yHzTC5AqZ4B8ENJ6k7wzI4=) 3: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: liWqdMVl1/YwNeN3CBQNj8G0J0IdC+nDeNKYdsP0wco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2d:b7:12:4a:07:5a:c4:9d:47:53:d7:b3:b7:20:4f:45:fb:cc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Mar 25 22:45:44 2026 GMT Not After : Mar 29 09:39:44 2026 GMT Subject: CN=E8D1D64E672C73BC7127824218A2096164F62713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:f9:45:8a:34:bf:82:ea:bb:8e:46:2f:88: 28:e3:bb:a3:04:82:9f:a7:98:dd:3d:3f:ad:bd:47: 6d:94:d9:fc:98:71:35:6f:e2:35:fb:e4:99:f5:f5: cc:2e:c6:9d:67:16:2f:c0:77:63:f3:3b:cf:5b:e0: 6a:8b:e5:fd:8b:04:a0:8f:40:f3:b9:a0:b1:e7:21: ec:d9:14:f3:33:08:0f:55:fb:e4:6f:60:eb:d4:d4: 41:0e:5e:69:aa:9a:5b:4c:0b:ee:06:c2:d3:f4:fd: 0e:f8:9f:b9:05:ea:25:e2:ee:bc:92:9a:dc:d3:bb: cc:5d:77:cd:ad:9c:5d:bc:e8:3e:47:96:67:f4:80: 55:a9:db:ce:8f:1b:3c:b7:55:21:b0:37:b4:76:19: 0d:9e:2b:7e:5e:10:a0:f5:05:c6:3d:49:83:de:65: 64:04:3f:c5:a8:e3:2f:ca:d1:90:fc:7f:64:31:ea: ff:69:0b:5a:e5:f8:a6:35:ee:ec:ac:f0:a3:16:34: 64:88:f2:b9:a1:ac:f9:d5:51:9d:ea:c2:a0:4e:1d: 67:5c:47:61:73:d3:81:c5:46:7b:02:81:b4:30:79: 31:27:f8:ea:49:9e:a1:72:39:da:ee:6c:43:f2:bf: 71:e4:f6:9c:ea:db:24:24:13:ae:fe:ea:b9:3e:de: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D1:D6:4E:67:2C:73:BC:71:27:82:42:18:A2:09:61:64:F6:27:13 X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ca:29:85:3b:e1:f3:85:d4:a9:f4:c4:90:56:99:cb:51:00: 34:53:55:a2:4e:46:6b:35:93:2b:18:60:9d:62:ed:b0:0d:15: b5:31:d6:59:30:d8:f8:41:95:7f:21:b0:ea:5f:db:f1:d8:b9: 82:ed:15:40:28:a0:63:95:45:8a:c8:1f:6f:41:93:1b:01:56: d9:ea:7c:c1:f5:58:e7:c4:be:19:e0:c0:a2:61:a8:8a:ca:94: 24:03:33:3a:82:d7:72:fd:2f:82:ae:0c:bc:ed:22:dc:e0:3d: 6e:a9:0a:4f:c9:59:55:88:d2:81:eb:e8:37:01:03:cb:37:ba: 4b:c5:42:b3:94:1c:34:2d:36:cf:c7:26:4a:31:77:61:6f:d8: f0:b1:57:bb:68:0b:d4:98:04:65:97:eb:12:6c:24:c9:4f:42: b7:1b:14:9e:47:4c:0d:b6:8f:86:ba:2b:c8:20:a4:ef:f1:f1: 3e:42:d6:5a:05:e5:b4:e1:f9:c5:72:7c:12:64:e8:56:30:c2: 46:83:d3:f3:6c:d3:20:32:7b:62:de:6c:6c:8e:63:ab:f2:6b: d6:a1:03:cf:e7:4b:3a:0e:ef:a8:16:e3:71:c5:bf:e0:99:a2: a4:07:7d:74:fc:99:6d:fa:40:93:93:f4:9b:d4:42:2b:da:25: d9:04:7d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHC23EkoHWsSdR1PXs7cgT0X7zMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNjAzMjUyMjQ1NDRaFw0yNjAzMjkwOTM5NDRaMDMxMTAvBgNV BAMTKEU4RDFENjRFNjcyQzczQkM3MTI3ODI0MjE4QTIwOTYxNjRGNjI3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYPlFijS/guq7jkYviCjju6ME gp+nmN09P629R22U2fyYcTVv4jX75Jn19cwuxp1nFi/Ad2PzO89b4GqL5f2LBKCP QPO5oLHnIezZFPMzCA9V++RvYOvU1EEOXmmqmltMC+4GwtP0/Q74n7kF6iXi7ryS mtzTu8xdd82tnF286D5Hlmf0gFWp286PGzy3VSGwN7R2GQ2eK35eEKD1BcY9SYPe ZWQEP8Wo4y/K0ZD8f2Qx6v9pC1rl+KY17uys8KMWNGSI8rmhrPnVUZ3qwqBOHWdc R2Fz04HFRnsCgbQweTEn+OpJnqFyOdrubEPyv3Hk9pzq2yQkE67+6rk+3pGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NHWTmcsc7xxJ4JCGKIJYWT2JxMwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzKKYU74fOF1Kn0xJBWmctRADRTVaJORms1 kysYYJ1i7bANFbUx1lkw2PhBlX8hsOpf2/HYuYLtFUAooGOVRYrIH29BkxsBVtnq fMH1WOfEvhngwKJhqIrKlCQDMzqC13L9L4KuDLztItzgPW6pCk/JWVWI0oHr6DcB A8s3ukvFQrOUHDQtNs/HJkoxd2Fv2PCxV7toC9SYBGWX6xJsJMlPQrcbFJ5HTA22 j4a6K8ggpO/x8T5C1loF5bTh+cVyfBJk6FYwwkaD0/Ns0yAye2LebGyOY6vya9ah A8/nSzoO76gW43HFv+CZoqQHfXT8mW36QJOT9JvUQivaJdkEfVU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:44:43 2026 by rpki-client