$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft File: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft (raw, json) Hash identifier: r9m5H8X0zkVvTi/G8osVr3Z4cMuFwivtduXt8TucnL0= Subject key identifier: B0:7F:29:52:B0:4E:C2:FD:0A:CE:2B:66:78:80:E5:A8:0B:31:F6:7A Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Certificate serial: 4C57E70D6CF581005DBDDCFE1EB29797FE68F43C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft Manifest number: 027E Signing time: Tue 24 Mar 2026 09:52:18 +0000 Manifest this update: Tue 24 Mar 2026 09:47:18 +0000 Manifest next update: Fri 27 Mar 2026 18:47:18 +0000 Files and hashes: 1: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: qoBpMRmpRtbQKjYwfY3kpPKBcu0qLy5Xmpu8A4tgZ7k=) 2: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl (hash: JJ45kb1g+o29vR5SWdnpXTunMEpyNLMPPmq8VUWt3gc=) 3: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: SFQmtlEqNhmx25kRgKhycgtd/3jV5zQ3nNu6Q6CPubo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:57:e7:0d:6c:f5:81:00:5d:bd:dc:fe:1e:b2:97:97:fe:68:f4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Validity Not Before: Mar 24 09:47:18 2026 GMT Not After : Mar 27 18:47:18 2026 GMT Subject: CN=B07F2952B04EC2FD0ACE2B667880E5A80B31F67A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:4a:ba:54:a2:ef:08:60:21:be:9f:4c:17: 07:d3:9a:28:13:0b:dd:a8:68:59:13:e0:51:2f:30: 32:d8:80:6c:1a:c8:80:48:fd:d6:41:ab:77:21:1d: 4e:5c:64:e5:7e:3f:a5:98:55:a4:51:c7:38:36:d1: ad:13:93:92:c0:3b:36:78:b2:f0:80:cc:b1:d8:7b: 4b:ad:00:3c:14:d2:70:e5:72:cb:41:e4:3c:30:37: 76:28:d2:6f:b1:f5:7e:da:1c:d6:e8:71:2d:c8:87: 51:6b:a5:1a:ed:c7:2e:c7:76:a1:1b:d7:7f:d3:f8: 6e:93:4b:ad:86:2e:a7:40:c2:bd:f7:8a:66:34:6b: 13:2c:e1:14:80:7f:51:8b:0f:1a:48:fe:8c:6f:9b: fb:6f:66:de:bf:3c:ba:3d:f4:ff:a2:05:a1:16:1d: 83:3c:65:ee:6a:19:8d:6e:c0:62:3a:9c:fb:b4:e8: 9d:34:96:fb:c4:09:65:9c:85:f5:95:cb:d2:71:4a: b8:e0:6a:fc:0c:37:1a:86:07:57:b8:a8:db:80:77: b6:2a:b3:9c:0b:b0:6b:ef:53:f6:d0:74:2f:9e:d5: a4:2f:3b:2b:8e:e4:bc:55:36:2a:d2:54:0a:19:69: 67:51:46:37:cf:7b:cc:b5:2c:71:1d:c9:f8:77:ae: 56:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7F:29:52:B0:4E:C2:FD:0A:CE:2B:66:78:80:E5:A8:0B:31:F6:7A X509v3 Authority Key Identifier: keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7c:9b:a2:00:93:37:97:1a:36:ca:a9:a1:46:6a:a7:0f:fd: 30:4c:cd:80:98:07:87:80:43:28:e8:c3:b7:87:60:dd:e1:e1: 40:78:ff:f5:c3:47:03:78:3b:d8:01:5f:a7:8a:ac:db:27:c6: d8:c7:4e:d6:74:e6:37:8b:c0:76:4a:d8:a6:e9:9b:2e:b8:00: 7d:bd:f7:6e:19:7a:c7:6e:62:21:fb:d0:eb:d9:e0:41:a6:a0: b5:ac:1f:75:c3:68:a1:f5:45:0d:07:50:f6:d6:d1:e9:35:fa: 3a:89:74:3b:59:63:97:07:12:51:d1:90:7e:5f:10:fb:e4:3c: d7:74:99:7e:80:6d:8c:c5:30:0f:25:34:98:7b:bb:0a:50:9f: 41:93:e1:16:0f:c0:5f:cd:11:0a:e1:12:27:d6:d7:b3:b9:a4: b9:59:25:45:97:fb:39:84:80:5e:71:06:4b:9f:36:e8:11:75: 11:c4:6e:4c:36:4f:53:4d:29:8b:8b:bb:86:a0:d2:61:0a:18: b8:fa:29:8f:47:a4:76:86:4e:01:80:04:e7:68:da:8e:a6:1a: 84:5e:56:18:c0:54:22:87:43:bc:c4:91:7a:93:e8:d6:1d:e2: 51:44:e7:fa:48:88:e8:1a:28:47:e1:54:ad:00:ea:e3:97:f2: 48:90:1a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFfnDWz1gQBdvdz+HrKXl/5o9DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF MEVDMjJGNjAeFw0yNjAzMjQwOTQ3MThaFw0yNjAzMjcxODQ3MThaMDMxMTAvBgNV BAMTKEIwN0YyOTUyQjA0RUMyRkQwQUNFMkI2Njc4ODBFNUE4MEIzMUY2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKU0q6VKLvCGAhvp9MFwfTmigT C92oaFkT4FEvMDLYgGwayIBI/dZBq3chHU5cZOV+P6WYVaRRxzg20a0Tk5LAOzZ4 svCAzLHYe0utADwU0nDlcstB5DwwN3Yo0m+x9X7aHNbocS3Ih1FrpRrtxy7HdqEb 13/T+G6TS62GLqdAwr33imY0axMs4RSAf1GLDxpI/oxvm/tvZt6/PLo99P+iBaEW HYM8Ze5qGY1uwGI6nPu06J00lvvECWWchfWVy9JxSrjgavwMNxqGB1e4qNuAd7Yq s5wLsGvvU/bQdC+e1aQvOyuO5LxVNirSVAoZaWdRRjfPe8y1LHEdyfh3rlZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsH8pUrBOwv0KzitmeIDlqAsx9nowHwYDVR0j BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRD NTVFMEVDMjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ8m6IAkzeXGjbKqaFGaqcP/TBMzYCYB4eA Qyjow7eHYN3h4UB4//XDRwN4O9gBX6eKrNsnxtjHTtZ05jeLwHZK2Kbpmy64AH29 924ZesduYiH70OvZ4EGmoLWsH3XDaKH1RQ0HUPbW0ek1+jqJdDtZY5cHElHRkH5f EPvkPNd0mX6AbYzFMA8lNJh7uwpQn0GT4RYPwF/NEQrhEifW17O5pLlZJUWX+zmE gF5xBkufNugRdRHEbkw2T1NNKYuLu4ag0mEKGLj6KY9HpHaGTgGABOdo2o6mGoRe VhjAVCKHQ7zEkXqT6NYd4lFE5/pIiOgaKEfhVK0A6uOX8kiQGmg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:13 2026 by rpki-client