$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: GkEdPhrbRzC5nnxrTe1JnDXlLN3U9+cr4vxsuO2vPAo= Subject key identifier: 14:65:05:3B:50:D7:4C:EE:55:7A:56:F2:58:8C:2B:20:B1:88:0B:54 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 55AA19CE2220B150CC5D362D56ABEE0A024A0466 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 02FB Signing time: Tue 24 Mar 2026 04:32:41 +0000 Manifest this update: Tue 24 Mar 2026 04:27:41 +0000 Manifest next update: Fri 27 Mar 2026 13:22:41 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=) 2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: GBQUjSISkEvtVibtJDNm29NwSYLPo/4xy/IrIfREEPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:aa:19:ce:22:20:b1:50:cc:5d:36:2d:56:ab:ee:0a:02:4a:04:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Mar 24 04:27:41 2026 GMT Not After : Mar 27 13:22:41 2026 GMT Subject: CN=1465053B50D74CEE557A56F2588C2B20B1880B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:54:27:c7:46:05:9e:2a:03:4c:14:8b:07: b9:d7:13:0f:1d:06:01:f5:53:d0:60:c9:9c:c5:26: f3:a6:7f:ae:6f:29:01:e4:d8:34:65:db:f5:b2:14: 4f:f5:72:1a:53:af:18:82:db:4b:5c:69:b9:fb:71: 9d:ea:37:0d:aa:56:a8:95:98:6c:e5:73:f9:61:e9: 29:a9:e0:5a:51:5f:2b:3b:a3:f0:05:bb:18:f7:be: 7a:a8:9c:25:8f:60:b7:33:2b:88:fc:1e:8d:da:68: a8:bd:41:8c:6a:e4:da:bf:fb:7f:70:17:6b:12:9f: 20:8a:42:a5:f1:53:98:e1:61:68:69:aa:10:c5:7c: 87:00:5d:61:55:bb:3a:c8:4f:76:44:ab:d4:eb:06: 56:61:76:c2:a5:04:ba:f2:0c:f6:03:76:ea:06:31: e1:6c:ce:75:07:2c:b5:e3:d9:21:47:0e:08:7c:7a: 39:5e:86:b0:0a:a4:2f:e7:7e:ff:61:61:a1:0f:77: f0:ca:18:ac:d7:14:1b:ec:78:c8:1b:c9:a8:b1:d1: 42:17:14:7c:3a:2d:e7:7d:8d:35:21:25:77:cc:5c: 54:af:ca:24:27:bb:be:cb:f5:13:70:49:db:c3:91: 2c:ba:2e:bf:4b:fd:7a:91:cd:33:3c:61:b5:ac:1f: 4f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:05:3B:50:D7:4C:EE:55:7A:56:F2:58:8C:2B:20:B1:88:0B:54 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:28:eb:f3:ea:a5:0a:b4:ab:84:d2:56:9e:e3:85:d4:a8:ad: c5:c2:b1:a4:9a:22:de:78:15:e3:ba:6e:c1:19:a3:9c:c6:fa: 44:95:4a:3e:40:9c:c1:17:6d:f3:4f:18:4c:71:df:96:a7:bd: 5e:93:e6:c2:07:0b:e5:03:81:89:1a:c8:7d:26:77:e7:4b:02: b3:43:34:77:21:b5:13:1d:c8:2b:3d:67:08:2f:48:28:bc:bb: 24:d6:77:0d:c8:62:8a:42:f7:1b:45:32:b0:38:3f:25:c0:13: 10:1c:2d:4c:6c:86:10:39:fb:1d:e6:d7:a9:92:11:db:ab:62: e5:44:40:24:7b:8f:60:db:87:e4:da:34:2b:48:89:62:16:12: 8a:2d:a2:65:b1:d4:7a:d5:54:0e:9f:7c:02:d2:94:50:1e:60: 55:b4:3c:66:39:54:e4:f3:d3:3e:f7:9a:58:fc:79:c4:aa:99: 20:7f:f9:77:70:21:73:1c:8a:46:7f:af:26:9c:a1:54:95:9e: 48:61:18:25:96:38:d5:9a:6b:3a:6a:af:95:f8:bf:d8:c7:f9: 5e:46:8f:b2:cf:60:55:4d:e0:3f:a1:84:81:3c:11:e2:31:36: a4:48:7e:d4:b4:71:47:2f:f7:fe:21:fa:0d:66:74:06:74:b0: 3d:0f:9e:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVaoZziIgsVDMXTYtVqvuCgJKBGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNjAzMjQwNDI3NDFaFw0yNjAzMjcxMzIyNDFaMDMxMTAvBgNV BAMTKDE0NjUwNTNCNTBENzRDRUU1NTdBNTZGMjU4OEMyQjIwQjE4ODBCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RFQnx0YFnioDTBSLB7nXEw8d BgH1U9BgyZzFJvOmf65vKQHk2DRl2/WyFE/1chpTrxiC20tcabn7cZ3qNw2qVqiV mGzlc/lh6Smp4FpRXys7o/AFuxj3vnqonCWPYLczK4j8Ho3aaKi9QYxq5Nq/+39w F2sSnyCKQqXxU5jhYWhpqhDFfIcAXWFVuzrIT3ZEq9TrBlZhdsKlBLryDPYDduoG MeFsznUHLLXj2SFHDgh8ejlehrAKpC/nfv9hYaEPd/DKGKzXFBvseMgbyaix0UIX FHw6Led9jTUhJXfMXFSvyiQnu77L9RNwSdvDkSy6Lr9L/XqRzTM8YbWsH08xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFGUFO1DXTO5VelbyWIwrILGIC1QwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgo6/PqpQq0q4TSVp7jhdSorcXCsaSaIt54 FeO6bsEZo5zG+kSVSj5AnMEXbfNPGExx35anvV6T5sIHC+UDgYkayH0md+dLArND NHchtRMdyCs9ZwgvSCi8uyTWdw3IYopC9xtFMrA4PyXAExAcLUxshhA5+x3m16mS EdurYuVEQCR7j2Dbh+TaNCtIiWIWEootomWx1HrVVA6ffALSlFAeYFW0PGY5VOTz 0z73mlj8ecSqmSB/+XdwIXMcikZ/ryacoVSVnkhhGCWWONWaazpqr5X4v9jH+V5G j7LPYFVN4D+hhIE8EeIxNqRIftS0cUcv9/4h+g1mdAZ0sD0PnhE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:47 2026 by rpki-client