$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: QNJnjobrxy0xjcIRuqrRhQiXWO0fKAVcCBluV1+rDw0= Subject key identifier: 24:12:F3:85:36:4F:E2:99:EF:27:53:58:C9:C0:DA:26:4C:69:36:8B Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 73D286367DC01F05079D771E397B5EC1A2730E31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 036B Signing time: Tue 24 Mar 2026 13:22:45 +0000 Manifest this update: Tue 24 Mar 2026 13:17:45 +0000 Manifest next update: Fri 27 Mar 2026 22:42:45 +0000 Files and hashes: 1: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: ub4/LVxcVIB49uZJGARi1ge1JVWE1nvLZ/54chjNQu0=) 2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d2:86:36:7d:c0:1f:05:07:9d:77:1e:39:7b:5e:c1:a2:73:0e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Mar 24 13:17:45 2026 GMT Not After : Mar 27 22:42:45 2026 GMT Subject: CN=2412F385364FE299EF275358C9C0DA264C69368B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:64:b4:6d:d7:f0:c6:c4:02:e7:2b:54:b7: a2:d8:7c:1d:92:1d:90:58:a6:d4:04:ed:91:b7:85: 46:4f:dc:34:81:99:dd:2a:c8:1f:bd:db:34:b8:b8: 66:51:66:98:17:10:17:87:13:64:31:b3:14:e6:7f: 42:94:ab:5c:02:6a:cd:74:60:d5:fa:ea:fe:e7:8f: 51:12:c5:b7:81:6a:92:18:c2:8e:a5:63:59:20:c8: 0a:45:4c:f2:e8:0d:b5:b2:3a:37:c3:b6:9b:3b:ae: e6:52:c0:54:d5:41:72:f1:8c:2e:57:43:dc:86:09: a1:d3:61:7b:76:d0:10:7b:2c:44:5b:01:e2:0a:45: c0:8a:c7:3e:35:ff:0e:44:0d:74:12:28:71:0a:b9: 54:68:45:7b:c3:0d:64:95:af:8a:a8:04:4f:87:b1: c6:d7:ac:47:59:ad:16:5c:1f:06:69:5c:57:a4:e5: 94:25:5c:3a:47:65:cf:d8:66:11:d1:2d:a2:6b:18: 07:af:8a:63:02:1c:da:0c:99:96:3a:47:17:7d:1d: df:4e:49:25:90:67:17:01:03:ba:bb:be:f7:25:63: 81:88:f4:09:ab:f7:c9:da:6c:74:5a:25:c7:ef:5f: 9f:d3:e8:42:af:ba:29:0c:bb:6e:91:f3:c2:98:79: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:F3:85:36:4F:E2:99:EF:27:53:58:C9:C0:DA:26:4C:69:36:8B X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:be:9c:36:88:c9:5c:b0:74:1b:8b:f3:b5:d9:0d:59:ca:5b: f3:d2:a4:23:b2:16:73:f7:d7:88:75:73:1d:95:c6:56:98:1c: 5d:43:f5:9e:ff:22:a9:77:d5:bf:dd:72:42:7a:24:74:78:bf: 7f:31:70:cf:1f:1c:96:1d:25:41:2b:74:6e:03:91:75:c9:b2: d7:e4:3c:cf:14:b3:45:f6:f8:ab:30:33:61:ff:ef:bb:d0:46: 6a:7b:c8:ee:7f:69:03:2d:31:c5:2e:66:7d:c4:30:88:c6:a7: 50:3a:ac:a2:68:2d:70:ee:91:7a:4c:3e:67:35:9a:ef:81:a5: 1d:80:be:de:ca:a5:00:53:cd:b7:18:9a:5a:63:e5:0a:9e:24: ad:21:40:3f:7c:73:20:c5:87:65:14:74:25:cc:a9:ba:bf:3a: 33:1b:19:37:66:93:f4:48:52:4c:bc:c4:8a:18:87:ba:ce:5b: 4e:5b:48:3f:ed:63:c2:e9:62:4a:d3:53:1a:75:71:41:9b:3e: 6f:9b:95:70:b4:50:93:53:8d:88:fe:9e:43:22:ef:c3:5c:dc: 18:56:bc:d4:15:f9:a6:6a:e6:9d:92:7d:8e:0f:27:3f:0c:87: 00:90:4c:a4:12:61:ad:22:52:f4:31:bd:24:e3:f2:ff:0d:fa: 9a:d7:a0:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9KGNn3AHwUHnXceOXtewaJzDjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNjAzMjQxMzE3NDVaFw0yNjAzMjcyMjQyNDVaMDMxMTAvBgNV BAMTKDI0MTJGMzg1MzY0RkUyOTlFRjI3NTM1OEM5QzBEQTI2NEM2OTM2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPWS0bdfwxsQC5ytUt6LYfB2S HZBYptQE7ZG3hUZP3DSBmd0qyB+92zS4uGZRZpgXEBeHE2QxsxTmf0KUq1wCas10 YNX66v7nj1ESxbeBapIYwo6lY1kgyApFTPLoDbWyOjfDtps7ruZSwFTVQXLxjC5X Q9yGCaHTYXt20BB7LERbAeIKRcCKxz41/w5EDXQSKHEKuVRoRXvDDWSVr4qoBE+H scbXrEdZrRZcHwZpXFek5ZQlXDpHZc/YZhHRLaJrGAevimMCHNoMmZY6Rxd9Hd9O SSWQZxcBA7q7vvclY4GI9Amr98nabHRaJcfvX5/T6EKvuikMu26R88KYeRxLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJBLzhTZP4pnvJ1NYycDaJkxpNoswHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu+nDaIyVywdBuL87XZDVnKW/PSpCOyFnP3 14h1cx2VxlaYHF1D9Z7/Iql31b/dckJ6JHR4v38xcM8fHJYdJUErdG4DkXXJstfk PM8Us0X2+KswM2H/77vQRmp7yO5/aQMtMcUuZn3EMIjGp1A6rKJoLXDukXpMPmc1 mu+BpR2Avt7KpQBTzbcYmlpj5QqeJK0hQD98cyDFh2UUdCXMqbq/OjMbGTdmk/RI Uky8xIoYh7rOW05bSD/tY8LpYkrTUxp1cUGbPm+blXC0UJNTjYj+nkMi78Nc3BhW vNQV+aZq5p2SfY4PJz8MhwCQTKQSYa0iUvQxvSTj8v8N+prXoIo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:44 2026 by rpki-client