$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: Fsy1D3m7YHy7iX9f1ZSEQteQ7NhKTHJfLeGVHKYjNBA= Subject key identifier: BA:CD:C2:F1:B8:58:0C:46:F3:67:BD:CC:F5:25:E6:F4:21:90:1E:39 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 56B4D29A0938BB8986091D26A48007682476103A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 00:22:02 +0000 Manifest this update: Wed 25 Mar 2026 00:17:02 +0000 Manifest next update: Sat 28 Mar 2026 09:43:02 +0000 Files and hashes: 1: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: /OGovMb//4lV7SEWjf4IEAxwFNhrYe9eRu6Sqco4Qmo=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 3: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) 4: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) 5: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b4:d2:9a:09:38:bb:89:86:09:1d:26:a4:80:07:68:24:76:10:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Mar 25 00:17:02 2026 GMT Not After : Mar 28 09:43:02 2026 GMT Subject: CN=BACDC2F1B8580C46F367BDCCF525E6F421901E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:98:ed:ff:c1:06:11:05:c7:80:bc:03:34: 2a:f7:9c:c5:cd:b4:20:69:61:52:6d:60:5e:d5:4e: d3:1f:00:f0:46:bc:50:59:b8:a2:c6:59:69:f9:8c: 83:3c:94:fc:c7:4f:ea:0b:ff:4f:81:5e:04:85:34: 05:54:39:f7:b9:0e:ac:24:e0:68:dd:2a:bc:a4:c1: e1:6d:f1:37:14:e7:26:f4:65:9e:57:43:69:e7:ed: 64:3c:ae:db:60:df:88:9a:a6:52:2a:b7:ae:29:74: 06:27:d0:63:3c:da:8e:08:cf:04:8e:7b:0d:52:2a: 5a:78:8c:f8:80:68:ad:d8:b3:e8:4a:cd:31:fd:94: 3e:8e:b9:8e:c7:7e:d2:18:b3:0d:22:e2:4e:3a:6e: 80:8f:bd:1e:53:e7:1b:a3:c1:45:da:55:ae:dd:63: b2:21:af:7c:70:06:39:24:52:0a:43:ba:74:78:9c: 09:39:f9:c0:dd:21:78:45:39:c3:32:65:f0:84:cd: d8:5c:93:9b:6a:89:5a:fa:95:b4:d6:d1:ef:c0:b1: 74:d5:56:b5:8a:6a:f5:b3:f6:40:7a:ee:60:7d:33: 8c:f1:e0:2b:27:43:f4:8a:3b:79:71:f1:5e:d9:4b: 79:9e:54:9c:fa:d8:0a:01:34:0b:d5:88:34:7a:f7: 07:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CD:C2:F1:B8:58:0C:46:F3:67:BD:CC:F5:25:E6:F4:21:90:1E:39 X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4c:ad:db:b6:cd:01:44:23:93:53:d2:3d:0b:86:b6:a2:8a: 8f:e0:7f:4d:73:ed:3e:d8:23:0f:97:f6:c4:84:d7:a1:45:f8: 0a:39:ef:14:a1:72:79:bd:98:04:23:49:3e:4c:4a:c2:af:1d: a7:4e:63:82:00:61:70:ec:eb:20:cf:46:c5:21:fd:26:5d:88: f6:10:21:00:ed:80:09:76:08:1b:0d:60:54:37:52:ed:8c:86: d8:80:20:89:fb:48:8c:9c:2a:d7:11:3c:5f:a8:5c:cf:53:8b: be:7b:2a:af:0d:1f:74:79:17:25:f3:82:65:9f:19:be:a2:40: 6d:3e:f8:28:b4:8c:a5:63:8c:21:08:62:cb:28:a8:89:b5:a2: 7b:95:fd:c2:a7:fa:3a:83:45:55:8d:6c:15:8f:d4:e0:c4:96: f8:36:fd:34:5c:5e:5a:43:ba:f1:db:a6:16:18:0b:40:98:fa: 4a:d5:dc:c9:49:2f:9c:30:d5:5b:60:2d:81:57:78:ef:a0:90: bf:a1:75:0b:c8:eb:39:49:14:e0:d5:0a:6a:90:91:b6:f1:e7: bf:31:08:1f:15:d0:95:93:1b:73:68:11:32:04:5f:8c:24:71: a3:99:08:5c:c5:89:83:87:68:3b:60:4e:fb:e8:44:0c:97:22: 1d:50:0f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrTSmgk4u4mGCR0mpIAHaCR2EDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNjAzMjUwMDE3MDJaFw0yNjAzMjgwOTQzMDJaMDMxMTAvBgNV BAMTKEJBQ0RDMkYxQjg1ODBDNDZGMzY3QkRDQ0Y1MjVFNkY0MjE5MDFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY25jt/8EGEQXHgLwDNCr3nMXN tCBpYVJtYF7VTtMfAPBGvFBZuKLGWWn5jIM8lPzHT+oL/0+BXgSFNAVUOfe5Dqwk 4GjdKrykweFt8TcU5yb0ZZ5XQ2nn7WQ8rttg34iaplIqt64pdAYn0GM82o4IzwSO ew1SKlp4jPiAaK3Ys+hKzTH9lD6OuY7HftIYsw0i4k46boCPvR5T5xujwUXaVa7d Y7Ihr3xwBjkkUgpDunR4nAk5+cDdIXhFOcMyZfCEzdhck5tqiVr6lbTW0e/AsXTV VrWKavWz9kB67mB9M4zx4CsnQ/SKO3lx8V7ZS3meVJz62AoBNAvViDR69wfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUus3C8bhYDEbzZ73M9SXm9CGQHjkwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNMrdu2zQFEI5NT0j0Lhraiio/gf01z7T7Y Iw+X9sSE16FF+Ao57xShcnm9mAQjST5MSsKvHadOY4IAYXDs6yDPRsUh/SZdiPYQ IQDtgAl2CBsNYFQ3Uu2MhtiAIIn7SIycKtcRPF+oXM9Ti757Kq8NH3R5FyXzgmWf Gb6iQG0++Ci0jKVjjCEIYssoqIm1onuV/cKn+jqDRVWNbBWP1ODElvg2/TRcXlpD uvHbphYYC0CY+krV3MlJL5ww1VtgLYFXeO+gkL+hdQvI6zlJFODVCmqQkbbx578x CB8V0JWTG3NoETIEX4wkcaOZCFzFiYOHaDtgTvvoRAyXIh1QD/U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:34 2026 by rpki-client