$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: dzrjwUHyHRsqF6dxvg8++fIcmXT1qvq4WH7Lcg3Etaw= Subject key identifier: 1D:DB:6F:99:19:00:54:7E:27:0E:C8:D9:0B:74:C9:93:30:05:9B:3E Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 6DDD88D9BBBE0E3947169E96266C5CE52DAFF90F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 0251 Signing time: Wed 25 Mar 2026 13:00:43 +0000 Manifest this update: Wed 25 Mar 2026 12:55:43 +0000 Manifest next update: Sat 28 Mar 2026 17:06:43 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) 2: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: H5BPfLvMQwciaIjqmQ4AA8c+8CZDjvvjvhxtMg8VClg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:dd:88:d9:bb:be:0e:39:47:16:9e:96:26:6c:5c:e5:2d:af:f9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Mar 25 12:55:43 2026 GMT Not After : Mar 28 17:06:43 2026 GMT Subject: CN=1DDB6F991900547E270EC8D90B74C99330059B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:20:c9:56:18:9c:30:cb:ed:97:7c:8a:97: 83:bd:24:e4:2e:33:71:ea:38:b1:ef:1b:66:ad:6c: d5:2c:98:a9:22:42:93:c0:a1:da:c6:04:92:90:d1: f3:b7:e9:17:f8:b1:50:8e:c5:e8:98:81:76:04:01: f1:d2:43:7c:1c:f1:f2:8b:ed:e1:e6:38:f4:f8:d0: 5d:b8:e8:2f:f2:7e:ae:0a:cb:5a:85:da:ba:bd:03: f0:72:ac:49:5e:1a:58:0d:5d:3b:0f:07:d7:52:33: b1:7c:f9:75:5f:7a:2e:0e:54:9a:b6:91:4d:76:b8: ca:92:da:aa:03:d2:1c:e7:72:bc:27:6d:46:81:37: 9f:4d:32:e9:e8:f2:db:d0:6c:db:48:a1:ef:5d:f9: 16:56:ba:3e:99:fc:b4:e4:89:0b:d4:dd:19:6a:3e: 12:6f:41:34:f4:d7:1e:44:18:f2:16:61:c5:b3:18: fd:e0:92:83:ef:70:b6:da:a4:2b:b1:73:34:0f:7f: da:1b:00:1a:42:7c:8e:59:09:6f:4b:9a:b7:46:77: 82:9e:2e:7e:c1:83:07:35:81:21:29:87:70:df:1e: ba:12:d7:b0:a0:1f:46:ed:17:80:92:07:15:88:f4: d4:f7:63:0a:96:52:34:06:a4:66:6f:93:50:47:53: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DB:6F:99:19:00:54:7E:27:0E:C8:D9:0B:74:C9:93:30:05:9B:3E X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:ad:48:4e:09:2b:b2:89:fa:98:60:a9:97:12:45:79:d9:a8: 32:ec:01:27:70:4b:40:0c:ab:10:e9:2d:b2:58:bc:a7:71:82: 3f:f5:bd:04:ed:e2:5f:f7:59:1f:f4:2f:72:0b:ef:4c:36:b5: 4d:17:6d:8a:da:15:73:45:c9:23:e0:0d:6a:b1:45:f3:79:2e: 7b:c1:79:50:63:58:e1:37:de:33:b1:08:04:a2:69:27:f0:87: 40:53:1e:d4:8e:41:f0:0c:18:9b:fc:21:6d:95:77:42:40:33: 3c:aa:84:47:84:ff:5f:ac:bb:60:bd:cb:74:4c:1a:94:7f:20: 96:c2:c5:f3:81:a4:38:ac:b2:71:d3:f2:7b:70:c6:1e:8d:d9: 00:7f:73:c7:27:46:68:17:c3:ed:de:dc:69:e7:26:34:d9:80: 2c:29:4a:ba:a2:7a:2a:2a:f7:05:b9:b5:f1:59:08:16:89:d0: 92:4d:fe:57:86:1a:1d:30:ca:9f:33:8e:19:73:dd:97:cd:e9: 74:ba:d1:f1:e5:2f:cd:2a:d3:e3:4f:de:51:2c:a9:3a:07:98: e2:bb:12:12:81:48:b2:e4:e5:bf:17:e6:2c:66:66:04:5e:99: 0a:17:5e:0f:57:83:d0:7e:52:aa:52:e0:eb:c3:81:80:32:07: 4c:e5:fa:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbd2I2bu+DjlHFp6WJmxc5S2v+Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNjAzMjUxMjU1NDNaFw0yNjAzMjgxNzA2NDNaMDMxMTAvBgNV BAMTKDFEREI2Rjk5MTkwMDU0N0UyNzBFQzhEOTBCNzRDOTkzMzAwNTlCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QSDJVhicMMvtl3yKl4O9JOQu M3HqOLHvG2atbNUsmKkiQpPAodrGBJKQ0fO36Rf4sVCOxeiYgXYEAfHSQ3wc8fKL 7eHmOPT40F246C/yfq4Ky1qF2rq9A/ByrEleGlgNXTsPB9dSM7F8+XVfei4OVJq2 kU12uMqS2qoD0hzncrwnbUaBN59NMuno8tvQbNtIoe9d+RZWuj6Z/LTkiQvU3Rlq PhJvQTT01x5EGPIWYcWzGP3gkoPvcLbapCuxczQPf9obABpCfI5ZCW9LmrdGd4Ke Ln7Bgwc1gSEph3DfHroS17CgH0btF4CSBxWI9NT3YwqWUjQGpGZvk1BHU9Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdtvmRkAVH4nDsjZC3TJkzAFmz4wHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGtSE4JK7KJ+phgqZcSRXnZqDLsASdwS0AM qxDpLbJYvKdxgj/1vQTt4l/3WR/0L3IL70w2tU0XbYraFXNFySPgDWqxRfN5LnvB eVBjWOE33jOxCASiaSfwh0BTHtSOQfAMGJv8IW2Vd0JAMzyqhEeE/1+su2C9y3RM GpR/IJbCxfOBpDissnHT8ntwxh6N2QB/c8cnRmgXw+3e3GnnJjTZgCwpSrqieioq 9wW5tfFZCBaJ0JJN/leGGh0wyp8zjhlz3ZfN6XS60fHlL80q0+NP3lEsqToHmOK7 EhKBSLLk5b8X5ixmZgRemQoXXg9Xg9B+UqpS4OvDgYAyB0zl+gM= -----END CERTIFICATE-----Generated at Fri Mar 27 01:08:55 2026 by rpki-client