$ rpki-client -vvf repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft File: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft (raw, json) Hash identifier: +tABmUwnHyDq0tW7xnDqzs2XWvTlYeNd5vLCPI87DDE= Subject key identifier: 06:C7:4E:E6:89:EB:4F:1B:28:F5:89:2E:B3:2B:04:27:DB:A5:52:E8 Authority key identifier: C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 Certificate issuer: /CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Certificate serial: 656EE5B5D88C0D8FF5563573CA0D945DE60CE61D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft Manifest number: F9 Signing time: Tue 24 Mar 2026 15:21:36 +0000 Manifest this update: Tue 24 Mar 2026 15:16:36 +0000 Manifest next update: Sat 28 Mar 2026 01:45:36 +0000 Files and hashes: 1: C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl (hash: 0WT8O5SLBWfOvjpfwKPq1MwBIrvyd7f/Y/mnj5kz/rU=) 2: 3130332e37352e3233372e302f32342d3234203d3e203634333130.roa (hash: WLCShlxfdsF203Qx2wOYYjy6P8cT8pTLxL//5fp4yiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6e:e5:b5:d8:8c:0d:8f:f5:56:35:73:ca:0d:94:5d:e6:0c:e6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5 Validity Not Before: Mar 24 15:16:36 2026 GMT Not After : Mar 28 01:45:36 2026 GMT Subject: CN=06C74EE689EB4F1B28F5892EB32B0427DBA552E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:dd:05:df:00:76:91:60:0e:9a:b2:12:4b: a9:84:ff:fb:17:17:f3:ab:99:90:fb:ff:77:cf:1f: cc:9a:a5:c2:40:69:75:52:c8:8b:9b:b6:da:43:21: fe:49:89:b8:a5:b2:eb:80:f5:6e:ac:aa:d9:b5:ae: c9:7e:0d:b0:11:1a:51:75:24:38:f3:c7:f1:6a:84: 48:f0:c5:db:42:2f:5a:9f:3f:46:82:70:c4:45:09: cb:6c:d0:bf:5e:6a:86:ff:e0:38:92:f5:d2:bf:18: 7e:3b:7e:18:ce:29:ba:d3:8b:d9:42:bb:6d:28:6b: e8:2e:14:5d:a6:ec:70:0d:34:5b:73:42:0f:2d:36: 3e:af:e2:d7:23:cb:db:9f:c4:5a:d9:0e:c5:f6:ea: b7:80:32:bb:b0:62:01:d9:72:3f:75:4b:c3:57:fa: 20:e5:3c:fb:a6:1d:79:21:15:0a:65:e5:e9:b3:6b: cc:a6:aa:43:15:05:2c:fe:91:26:8f:34:eb:03:d1: f3:f4:34:1c:89:c8:a9:55:7e:eb:a2:ba:54:bb:bc: 3e:b8:4f:d8:bb:e5:1e:97:4c:20:1a:4c:b1:b5:81: 76:bd:dc:a2:37:79:90:4f:ba:e0:8e:4f:99:fb:a2: 9d:71:15:c4:81:97:e5:62:06:88:22:5a:0d:6c:ec: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C7:4E:E6:89:EB:4F:1B:28:F5:89:2E:B3:2B:04:27:DB:A5:52:E8 X509v3 Authority Key Identifier: keyid:C0:C8:E7:24:3E:4E:8D:EC:D7:A8:EA:1D:61:FD:42:41:08:E8:D3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8116fbc9-b31c-4225-a697-4fedbc234db6/0/C0C8E7243E4E8DECD7A8EA1D61FD424108E8D3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0f:05:ae:7e:b0:82:b8:72:f4:c1:9d:76:00:75:4d:ac:0a: 11:d4:d9:fc:d9:8d:46:5d:bf:57:ed:9e:4b:4a:07:8c:0f:51: 55:a2:f1:48:4e:fb:5f:6a:87:b5:48:8b:04:0c:8f:b1:57:3a: 08:72:d8:44:f7:1f:85:f9:9b:3f:df:a8:72:bb:ed:db:c9:c8: a2:65:0e:dd:f8:85:2c:ac:96:a7:a0:1f:25:24:bc:80:d4:a6: e0:56:af:4e:41:db:76:a5:0f:fc:0e:0f:f5:10:fc:23:10:25: 01:15:af:24:81:3d:c0:ee:91:9b:96:05:e6:9d:ba:ae:8e:13: 50:13:5a:9c:b0:45:9e:3a:9b:81:3f:92:87:70:90:bd:ce:86: 10:77:83:a3:70:6c:6f:db:13:14:8f:7c:9e:07:37:74:86:e0: e3:33:62:b3:37:0b:3c:90:4a:66:00:f5:d5:4d:46:8d:63:08: 64:6c:ca:03:84:a2:cb:52:40:c2:95:c5:57:d0:90:4d:c2:5a: d7:e3:14:2b:b0:17:ec:b1:c1:e3:4d:62:cb:cd:f9:61:8b:c7: d0:bc:34:92:04:83:96:bf:03:cf:f1:da:6d:d8:4c:08:08:1c: 7d:80:40:b5:09:ef:90:08:24:df:c9:16:b6:db:5a:00:37:c4: 84:10:62:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZW7ltdiMDY/1VjVzyg2UXeYM5h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEw OEU4RDNENTAeFw0yNjAzMjQxNTE2MzZaFw0yNjAzMjgwMTQ1MzZaMDMxMTAvBgNV BAMTKDA2Qzc0RUU2ODlFQjRGMUIyOEY1ODkyRUIzMkIwNDI3REJBNTUyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuN0F3wB2kWAOmrISS6mE//sX F/OrmZD7/3fPH8yapcJAaXVSyIubttpDIf5JibilsuuA9W6sqtm1rsl+DbARGlF1 JDjzx/FqhEjwxdtCL1qfP0aCcMRFCcts0L9eaob/4DiS9dK/GH47fhjOKbrTi9lC u20oa+guFF2m7HANNFtzQg8tNj6v4tcjy9ufxFrZDsX26reAMruwYgHZcj91S8NX +iDlPPumHXkhFQpl5emza8ymqkMVBSz+kSaPNOsD0fP0NByJyKlVfuuiulS7vD64 T9i75R6XTCAaTLG1gXa93KI3eZBPuuCOT5n7op1xFcSBl+ViBogiWg1s7LbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBsdO5onrTxso9YkusysEJ9ulUugwHwYDVR0j BBgwFoAUwMjnJD5OjezXqOodYf1CQQjo09UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTE2ZmJjOS1iMzFjLTQyMjUtYTY5Ny00ZmVkYmMyMzRkYjYvMC9DMEM4RTcyNDNF NEU4REVDRDdBOEVBMUQ2MUZENDI0MTA4RThEM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQyNDEwOEU4 RDNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExNmZiYzktYjMxYy00MjI1LWE2 OTctNGZlZGJjMjM0ZGI2LzAvQzBDOEU3MjQzRTRFOERFQ0Q3QThFQTFENjFGRDQy NDEwOEU4RDNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIPBa5+sIK4cvTBnXYAdU2sChHU2fzZjUZd v1ftnktKB4wPUVWi8UhO+19qh7VIiwQMj7FXOghy2ET3H4X5mz/fqHK77dvJyKJl Dt34hSyslqegHyUkvIDUpuBWr05B23alD/wOD/UQ/CMQJQEVrySBPcDukZuWBead uq6OE1ATWpywRZ46m4E/kodwkL3OhhB3g6NwbG/bExSPfJ4HN3SG4OMzYrM3CzyQ SmYA9dVNRo1jCGRsygOEostSQMKVxVfQkE3CWtfjFCuwF+yxweNNYsvN+WGLx9C8 NJIEg5a/A8/x2m3YTAgIHH2AQLUJ75AIJN/JFrbbWgA3xIQQYtA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:18 2026 by rpki-client