$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: R5OXTK9ezO6BsK+NUXgSJpet5D4i+Dxcu4HzKfGls1s= Subject key identifier: 7D:01:9A:7A:CA:27:62:B5:61:F8:5B:8D:E0:61:4C:6C:D7:77:16:4B Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 5B071E076A5B0ABA16444E9182F000A7755A1B4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 01D4 Signing time: Tue 24 Mar 2026 17:20:52 +0000 Manifest this update: Tue 24 Mar 2026 17:15:52 +0000 Manifest next update: Fri 27 Mar 2026 19:41:52 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: i7fFsmSBkeSKbyW/TTm9TcNtd1h8Ec2ngRNSViv1V60=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: O8oToQbCdpURNfYoOl5dCZIq+hqP58nevD/1P61SmpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:07:1e:07:6a:5b:0a:ba:16:44:4e:91:82:f0:00:a7:75:5a:1b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Mar 24 17:15:52 2026 GMT Not After : Mar 27 19:41:52 2026 GMT Subject: CN=7D019A7ACA2762B561F85B8DE0614C6CD777164B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:7f:a5:53:2a:dc:f9:26:cd:65:06:ee:8b: 9e:26:fe:7e:1d:d8:ec:0d:f6:23:67:2f:12:23:03: ce:40:45:74:cf:de:93:9a:c6:2b:c6:1d:57:9d:dd: 2f:36:4e:5a:01:3c:32:80:79:6a:74:ec:dd:47:d8: 1f:af:07:04:fc:67:c7:3b:09:d5:2e:ff:51:49:d5: 5b:9a:b3:d5:97:5e:26:f6:db:6a:b9:38:bb:c8:48: b9:6f:ba:ca:3b:31:e3:f5:8f:22:75:c8:83:ec:24: 35:f3:06:c1:b6:24:86:0b:de:47:ef:d8:4b:c3:eb: df:cd:76:2d:e6:af:30:ef:11:a3:64:51:29:ce:dc: 61:90:4d:e2:53:97:8e:83:f9:51:e6:af:29:fd:77: 1b:35:bf:ae:8c:f6:41:b2:c0:51:c4:45:73:f8:af: da:cb:ea:09:02:58:6b:30:93:3e:2f:ed:85:59:f6: 5d:ac:bc:04:72:bd:13:b1:74:90:b8:ab:74:77:70: f6:ff:98:33:ce:8e:40:a3:6a:be:0f:94:c5:fd:41: 31:6b:bd:c9:0d:08:a9:d1:ba:a1:a8:c2:25:c9:74: 4d:e8:c2:b3:5a:b2:53:14:d0:99:9d:22:fe:dd:66: d1:99:af:29:1e:9e:ba:42:e6:c1:b9:12:c3:3d:3b: 77:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:01:9A:7A:CA:27:62:B5:61:F8:5B:8D:E0:61:4C:6C:D7:77:16:4B X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:01:04:20:6b:4e:b9:7d:0f:5c:18:e5:6c:9b:fa:d0:f3:04: 50:dc:45:b7:42:43:a7:a4:c9:3b:45:7e:75:3d:13:7d:e1:9d: f0:64:d2:12:34:74:9a:3d:19:71:76:cc:03:a2:5c:61:65:8b: 7f:f0:2b:88:db:e4:c0:ef:6a:f6:5f:84:d6:1f:56:4a:71:41: bb:6d:9b:05:1f:c5:13:f4:c7:5f:52:5d:c0:49:96:3b:44:e3: 78:31:77:69:c9:c3:e4:ac:81:ae:7d:e4:54:d3:3e:8d:77:60: ef:fd:a7:d7:72:16:8a:92:7b:77:06:86:ec:9f:f4:5b:71:64: e6:5e:f1:01:32:e8:e7:a1:56:08:38:4d:6a:9e:25:f0:65:f2: c7:61:eb:98:cb:ac:e8:23:69:dc:40:11:2d:0a:13:a6:11:fe: 28:d4:88:9d:66:fe:62:a7:88:9c:1c:69:65:b2:bb:8d:dd:02: c5:56:fb:aa:bd:39:0f:9d:aa:4b:80:92:7a:f4:da:34:ad:be: 82:a4:bc:ac:02:5e:53:5c:a9:37:05:ae:4d:9b:eb:94:c7:ab: 9a:f1:c2:4c:b9:c0:a0:c9:46:85:68:f8:51:c2:2e:13:87:b8: 99:d6:9d:2c:b7:81:9d:db:3e:1e:28:a7:65:d4:98:44:77:be: cf:18:85:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwceB2pbCroWRE6RgvAAp3VaG08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNjAzMjQxNzE1NTJaFw0yNjAzMjcxOTQxNTJaMDMxMTAvBgNV BAMTKDdEMDE5QTdBQ0EyNzYyQjU2MUY4NUI4REUwNjE0QzZDRDc3NzE2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrn+lUyrc+SbNZQbui54m/n4d 2OwN9iNnLxIjA85ARXTP3pOaxivGHVed3S82TloBPDKAeWp07N1H2B+vBwT8Z8c7 CdUu/1FJ1Vuas9WXXib222q5OLvISLlvuso7MeP1jyJ1yIPsJDXzBsG2JIYL3kfv 2EvD69/Ndi3mrzDvEaNkUSnO3GGQTeJTl46D+VHmryn9dxs1v66M9kGywFHERXP4 r9rL6gkCWGswkz4v7YVZ9l2svARyvROxdJC4q3R3cPb/mDPOjkCjar4PlMX9QTFr vckNCKnRuqGowiXJdE3owrNaslMU0JmdIv7dZtGZrykenrpC5sG5EsM9O3dpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQGaesonYrVh+FuN4GFMbNd3FkswHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8BBCBrTrl9D1wY5Wyb+tDzBFDcRbdCQ6ek yTtFfnU9E33hnfBk0hI0dJo9GXF2zAOiXGFli3/wK4jb5MDvavZfhNYfVkpxQbtt mwUfxRP0x19SXcBJljtE43gxd2nJw+Ssga595FTTPo13YO/9p9dyFoqSe3cGhuyf 9FtxZOZe8QEy6OehVgg4TWqeJfBl8sdh65jLrOgjadxAES0KE6YR/ijUiJ1m/mKn iJwcaWWyu43dAsVW+6q9OQ+dqkuAknr02jStvoKkvKwCXlNcqTcFrk2b65THq5rx wky5wKDJRoVo+FHCLhOHuJnWnSy3gZ3bPh4op2XUmER3vs8YhaY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:35 2026 by rpki-client