$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: h4xKdoGXcO+KlveG/lTv8PckDEAc/v8k0WJydXEaN2I= Subject key identifier: AF:0B:90:5B:E6:C9:B8:05:AA:1B:E5:EA:80:40:17:A9:3F:04:86:D1 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 6D71494D6970E2BF4C99D561942E3FB793D6035F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 0160 Signing time: Wed 25 Mar 2026 22:52:14 +0000 Manifest this update: Wed 25 Mar 2026 22:47:14 +0000 Manifest next update: Sun 29 Mar 2026 06:24:14 +0000 Files and hashes: 1: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: JcnToFV1Tdf0hSLWS9PFNPrwPJ5SIH11d0CkEuHYi9g=) 2: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: jXMriQHrL0hYlKWCZEOfPK8TcJ8i6ueX+VlCKA87In4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:71:49:4d:69:70:e2:bf:4c:99:d5:61:94:2e:3f:b7:93:d6:03:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Mar 25 22:47:14 2026 GMT Not After : Mar 29 06:24:14 2026 GMT Subject: CN=AF0B905BE6C9B805AA1BE5EA804017A93F0486D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:21:3f:f0:6f:38:96:9c:1d:10:39:9e:e7: c6:a1:f0:25:a2:df:15:82:1b:6e:bb:22:98:2b:6d: 12:8d:9e:b0:ea:e8:07:c5:75:0d:e4:b9:44:1d:f7: 2d:ac:05:94:77:0e:7b:39:32:6f:c8:24:0f:ad:e9: 68:f4:8f:48:b7:27:09:e7:de:59:31:53:8b:b1:84: ca:4e:02:4d:eb:5d:c1:08:dc:e7:bf:17:74:ac:41: 1f:87:a6:98:42:2a:a0:cb:ae:59:10:93:f5:4f:74: 18:ed:10:80:35:e2:12:64:f0:a0:d7:b6:95:4f:88: 26:57:83:b1:eb:0f:77:bc:24:34:0e:57:44:84:9f: 2e:50:72:53:5e:9a:4e:42:18:7b:90:a3:c9:3f:b1: 9b:1a:c0:15:e8:f1:dd:66:22:4b:17:67:e9:bd:ef: ef:16:51:d0:98:a6:e0:6e:35:4a:7e:ab:58:29:c6: 4a:b1:14:e4:3f:bc:c0:f8:cf:8d:27:dc:4a:ba:d5: a1:8b:e6:b5:8c:cb:de:40:6b:af:3c:28:de:30:a6: e3:d3:49:b3:1f:f9:cf:a2:a9:cd:25:5c:a1:66:a8: 94:d8:c9:62:e5:5d:12:14:d4:a4:ad:ff:f1:dc:52: ec:14:f0:c1:c5:c8:0e:37:45:a6:61:fa:8a:52:ae: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0B:90:5B:E6:C9:B8:05:AA:1B:E5:EA:80:40:17:A9:3F:04:86:D1 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e2:d5:bb:e9:e4:50:cd:e0:f2:68:ef:2b:57:7e:be:53:81: d1:59:d9:bc:17:bb:d1:ab:77:42:38:30:dc:b8:f0:64:f1:c3: 7c:70:84:ca:ce:e4:c3:b3:b7:44:7b:3b:5f:3b:28:ec:85:99: 6a:6d:e8:10:20:2b:85:d4:60:4c:5a:ca:f1:a6:36:48:27:dd: 7d:28:39:8f:85:9e:ab:20:9c:06:4e:a2:35:a4:0f:52:5b:c9: 07:cd:de:91:3b:91:f7:33:e8:70:07:a6:2c:0f:e9:3a:73:f4: 13:1a:a1:9b:f5:81:21:ce:a1:ba:8e:2d:a8:7a:f1:ed:ab:11: 59:01:83:69:0c:4d:69:89:9c:16:03:5d:ab:9f:44:af:c4:b9: 33:6e:bf:83:f0:a6:10:c0:6b:35:48:ef:5d:f5:43:34:21:5e: 71:ea:39:b0:52:4c:12:7c:b1:19:9c:70:cb:99:cd:91:7d:37: 46:95:90:f6:b0:3e:a6:76:ab:15:23:15:04:7f:9e:97:18:41: f3:9a:9f:c1:38:ad:39:20:85:83:f0:f5:3b:e0:11:8a:8f:ac: 0e:4d:1e:b0:76:0b:fe:d8:90:92:4c:ee:b9:79:6f:eb:6b:49: 31:14:93:c3:37:3a:ca:87:e2:94:0c:9c:15:ef:46:80:e1:b2: 6e:c5:cf:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXFJTWlw4r9MmdVhlC4/t5PWA18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNjAzMjUyMjQ3MTRaFw0yNjAzMjkwNjI0MTRaMDMxMTAvBgNV BAMTKEFGMEI5MDVCRTZDOUI4MDVBQTFCRTVFQTgwNDAxN0E5M0YwNDg2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXRSE/8G84lpwdEDme58ah8CWi 3xWCG267IpgrbRKNnrDq6AfFdQ3kuUQd9y2sBZR3Dns5Mm/IJA+t6Wj0j0i3Jwnn 3lkxU4uxhMpOAk3rXcEI3Oe/F3SsQR+HpphCKqDLrlkQk/VPdBjtEIA14hJk8KDX tpVPiCZXg7HrD3e8JDQOV0SEny5QclNemk5CGHuQo8k/sZsawBXo8d1mIksXZ+m9 7+8WUdCYpuBuNUp+q1gpxkqxFOQ/vMD4z40n3Eq61aGL5rWMy95Aa688KN4wpuPT SbMf+c+iqc0lXKFmqJTYyWLlXRIU1KSt//HcUuwU8MHFyA43RaZh+opSrqStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrwuQW+bJuAWqG+XqgEAXqT8EhtEwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbi1bvp5FDN4PJo7ytXfr5TgdFZ2bwXu9Gr d0I4MNy48GTxw3xwhMrO5MOzt0R7O187KOyFmWpt6BAgK4XUYExayvGmNkgn3X0o OY+FnqsgnAZOojWkD1JbyQfN3pE7kfcz6HAHpiwP6Tpz9BMaoZv1gSHOobqOLah6 8e2rEVkBg2kMTWmJnBYDXaufRK/EuTNuv4PwphDAazVI7131QzQhXnHqObBSTBJ8 sRmccMuZzZF9N0aVkPawPqZ2qxUjFQR/npcYQfOan8E4rTkghYPw9TvgEYqPrA5N HrB2C/7YkJJM7rl5b+trSTEUk8M3OsqH4pQMnBXvRoDhsm7Fz8s= -----END CERTIFICATE-----Generated at Fri Mar 27 02:45:43 2026 by rpki-client