$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: WAY/GwbyB0GUnsgSS3me3R1afh7DQakUPNDV2mjCqJE= Subject key identifier: 7A:F6:7A:A0:4D:9F:3E:73:44:FE:3B:46:37:B3:37:E0:2D:6A:EE:5F Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 591ABFFF368B0C0C2770B19E0BA8FC74AFC10A70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 0328 Signing time: Thu 26 Mar 2026 07:21:05 +0000 Manifest this update: Thu 26 Mar 2026 07:16:05 +0000 Manifest next update: Sun 29 Mar 2026 19:17:05 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: BhnOR9CEfq65a6YVIuTA9yrM06TuHjWtVPyrfXRs0Hc=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1a:bf:ff:36:8b:0c:0c:27:70:b1:9e:0b:a8:fc:74:af:c1:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Mar 26 07:16:05 2026 GMT Not After : Mar 29 19:17:05 2026 GMT Subject: CN=7AF67AA04D9F3E7344FE3B4637B337E02D6AEE5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:8e:4d:2d:74:7f:7d:7c:cf:0d:68:18:04: 2d:ed:15:17:1e:1b:3e:dc:03:cc:30:b4:36:41:8e: 5d:75:10:ca:8a:f3:d5:1c:e8:83:93:94:61:b4:79: fb:07:f1:e3:68:5d:ee:f9:f8:b3:24:61:45:38:ed: 49:fb:65:f2:39:e9:dc:21:5d:f3:a7:17:82:5c:a1: 86:39:3a:ce:8d:f7:e1:2f:12:1a:f1:7a:c9:87:20: 60:f5:62:01:af:ff:00:b6:cc:ef:83:f6:87:22:c1: 98:76:e5:e9:0b:21:b6:ee:6e:94:b3:09:89:2c:6f: c6:a2:6e:39:e6:05:ba:29:86:19:3f:03:48:e3:88: dc:bb:22:aa:14:27:30:23:1d:dd:56:95:18:38:f8: 52:4b:26:1c:e1:e0:f5:98:8a:a9:f9:90:4a:ab:26: 71:ae:e0:9d:2a:a4:69:6f:66:1c:20:45:e7:d2:4d: 3b:bb:a0:eb:0c:84:2f:d9:b0:af:7a:ee:ac:86:96: 27:34:a4:43:26:3a:97:27:2a:fd:15:43:dd:18:3c: 99:85:52:2c:76:bb:99:c4:84:8d:dc:01:c2:d5:fe: 48:db:b8:10:f4:d1:d2:87:ac:29:ce:09:a5:46:f9: 96:ba:70:e0:d5:bd:2b:da:f0:d6:7d:47:a5:41:eb: 45:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F6:7A:A0:4D:9F:3E:73:44:FE:3B:46:37:B3:37:E0:2D:6A:EE:5F X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:84:64:b2:b8:02:08:fe:28:07:c0:c1:f5:a9:8c:06:2e:91: a9:c6:96:c5:2f:9b:ae:cb:e0:79:18:b1:60:f1:51:6b:13:a6: 2c:e9:c3:3d:a5:fe:f0:95:d0:29:92:d6:46:e3:c1:2b:3a:be: fa:b3:b0:31:95:63:66:ca:ec:7f:37:08:f3:6b:f8:e2:70:40: ea:f2:28:40:85:8e:f4:e0:de:de:06:df:13:9e:df:62:e8:11: fe:ca:7e:cd:3c:7d:00:38:ed:1a:cf:bd:7b:04:59:bf:a1:52: 76:af:5c:6d:a3:c2:73:d1:f6:ab:a6:16:c4:ec:cd:91:cb:0f: e8:73:4d:6e:c2:7a:af:11:b0:e1:ae:ad:2c:eb:de:fd:b0:ba: 15:27:81:f0:1c:61:3a:87:14:9e:1c:0b:e2:54:b8:9e:f3:62: 41:55:e8:2a:5b:3a:24:d9:38:d0:39:c1:42:6b:3a:13:4f:91: 69:14:9b:ab:2c:94:90:19:68:82:45:4c:7f:47:d1:32:49:54: db:89:5f:e7:b1:4f:91:2d:be:6d:52:6c:36:6c:91:fa:51:e7: e2:97:3e:bd:a1:24:94:98:27:f7:cc:09:c3:c6:a1:f4:84:af: d1:3e:34:1d:d5:8f:c3:54:c8:f6:29:eb:55:de:e4:22:7f:3b: e7:bb:f1:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRq//zaLDAwncLGeC6j8dK/BCnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNjAzMjYwNzE2MDVaFw0yNjAzMjkxOTE3MDVaMDMxMTAvBgNV BAMTKDdBRjY3QUEwNEQ5RjNFNzM0NEZFM0I0NjM3QjMzN0UwMkQ2QUVFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhs45NLXR/fXzPDWgYBC3tFRce Gz7cA8wwtDZBjl11EMqK89Uc6IOTlGG0efsH8eNoXe75+LMkYUU47Un7ZfI56dwh XfOnF4JcoYY5Os6N9+EvEhrxesmHIGD1YgGv/wC2zO+D9ociwZh25ekLIbbubpSz CYksb8aibjnmBbophhk/A0jjiNy7IqoUJzAjHd1WlRg4+FJLJhzh4PWYiqn5kEqr JnGu4J0qpGlvZhwgRefSTTu7oOsMhC/ZsK967qyGlic0pEMmOpcnKv0VQ90YPJmF Uix2u5nEhI3cAcLV/kjbuBD00dKHrCnOCaVG+Za6cODVvSva8NZ9R6VB60X7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevZ6oE2fPnNE/jtGN7M34C1q7l8wHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCEZLK4Agj+KAfAwfWpjAYukanGlsUvm67L 4HkYsWDxUWsTpizpwz2l/vCV0CmS1kbjwSs6vvqzsDGVY2bK7H83CPNr+OJwQOry KECFjvTg3t4G3xOe32LoEf7Kfs08fQA47RrPvXsEWb+hUnavXG2jwnPR9qumFsTs zZHLD+hzTW7Ceq8RsOGurSzr3v2wuhUngfAcYTqHFJ4cC+JUuJ7zYkFV6CpbOiTZ ONA5wUJrOhNPkWkUm6sslJAZaIJFTH9H0TJJVNuJX+exT5Etvm1SbDZskfpR5+KX Pr2hJJSYJ/fMCcPGofSEr9E+NB3Vj8NUyPYp61Xe5CJ/O+e78Wk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:52 2026 by rpki-client