$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: 6a2SN8R2YaP63uxEUIknl/k5raWdEdZ+41OtT0wISQw= Subject key identifier: 5A:49:7D:44:84:2D:8F:2A:A2:1C:8F:11:DD:8F:0C:EF:7D:7D:06:44 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 412293FF10E668FBFF1D961F4639CF84E1B9EBD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 026B Signing time: Thu 26 Mar 2026 00:03:13 +0000 Manifest this update: Wed 25 Mar 2026 23:58:13 +0000 Manifest next update: Sun 29 Mar 2026 04:33:13 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: l2B2aK7iKjtGlm+JZBsaRQ0Oiz1msVZD+MDO3SYRf38=) 2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: kwPcai66/SsH5aQYH6Va3wxZojOObXBei8Oj7LlHWfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:22:93:ff:10:e6:68:fb:ff:1d:96:1f:46:39:cf:84:e1:b9:eb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Mar 25 23:58:13 2026 GMT Not After : Mar 29 04:33:13 2026 GMT Subject: CN=5A497D44842D8F2AA21C8F11DD8F0CEF7D7D0644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:39:76:76:e9:0e:8a:ff:47:32:93:62:1f: 08:a5:75:a4:ed:f9:0a:b0:40:85:7a:7b:f3:c9:21: ab:07:88:b5:51:09:74:2a:f4:28:bf:06:08:81:aa: 22:46:19:92:2b:34:e1:37:2e:54:75:e7:14:05:4a: 30:e3:30:d6:7d:37:30:a7:7e:16:f7:8b:15:28:14: 5b:62:f1:0e:b5:82:f1:da:84:1f:48:53:af:6b:c7: b2:90:c5:a8:a5:8e:11:7d:fc:75:5e:57:da:1b:eb: 55:cc:1f:04:36:4d:94:19:7d:0c:6a:08:1e:75:52: ad:64:70:93:74:ed:0c:5b:61:bc:b2:c1:d9:84:e4: ba:45:54:52:72:c7:bc:9d:9f:ff:c5:5c:5b:52:89: 29:ce:35:26:fa:0c:99:35:2c:1f:31:70:3b:16:61: bb:fd:f2:f9:d7:54:d2:09:45:1e:91:40:6e:f8:b1: fb:ac:2d:d8:e2:19:5a:9b:28:ac:d9:4d:bc:dc:a7: f7:66:b6:90:66:e6:91:5e:a4:b0:55:1c:cd:f6:a6: 89:5f:7b:2b:2c:d3:0b:ee:fc:92:f2:da:e3:a8:75: 98:30:0f:2f:aa:a6:a7:1c:45:92:7e:42:ec:eb:1d: 74:2a:f7:25:dc:b8:18:e6:12:08:82:b0:c2:32:ec: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:49:7D:44:84:2D:8F:2A:A2:1C:8F:11:DD:8F:0C:EF:7D:7D:06:44 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8c:93:f0:77:f6:0d:0b:3c:70:f9:77:90:02:ff:24:af:05: 33:39:93:1a:86:84:fa:4d:07:78:3e:8b:07:dc:06:eb:58:f3: 92:d4:9e:82:5d:e0:c2:8a:bd:95:97:48:b3:47:68:26:23:73: 24:b9:96:09:ed:4d:f3:48:4c:06:05:fe:4c:f2:a8:d0:f9:f7: e4:d7:d9:11:92:f9:79:fc:5b:b7:ee:2d:f0:b1:3f:ed:37:6f: 6d:fe:8d:28:c7:76:da:95:c6:b1:2c:6f:f3:12:de:76:07:9d: 43:ce:1f:60:2d:25:3f:64:cf:98:0d:f3:95:78:81:45:49:ab: a9:83:69:6a:6f:55:8e:72:2f:63:3c:53:b2:d5:a9:7c:f7:54: 61:63:8c:b4:27:0d:d7:05:b5:7e:16:7d:b0:b4:da:17:50:04: d6:04:00:1a:1c:3b:1c:07:36:60:5f:bc:d7:1e:6e:8e:57:b8: 71:73:c7:96:12:f5:f1:95:3d:cc:2e:b7:25:8d:42:f1:e8:12: 89:3a:e0:0e:e1:0d:6b:13:24:41:5c:43:54:71:22:be:96:01: 77:7a:ae:cb:f8:7e:15:29:cf:95:be:fe:43:a9:53:75:87:ae: 40:c7:86:2c:33:9b:dc:a7:4d:37:ea:89:98:7c:9f:d1:cd:a8: 94:ad:ac:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSKT/xDmaPv/HZYfRjnPhOG569cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNjAzMjUyMzU4MTNaFw0yNjAzMjkwNDMzMTNaMDMxMTAvBgNV BAMTKDVBNDk3RDQ0ODQyRDhGMkFBMjFDOEYxMUREOEYwQ0VGN0Q3RDA2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehDl2dukOiv9HMpNiHwildaTt +QqwQIV6e/PJIasHiLVRCXQq9Ci/BgiBqiJGGZIrNOE3LlR15xQFSjDjMNZ9NzCn fhb3ixUoFFti8Q61gvHahB9IU69rx7KQxailjhF9/HVeV9ob61XMHwQ2TZQZfQxq CB51Uq1kcJN07QxbYbyywdmE5LpFVFJyx7ydn//FXFtSiSnONSb6DJk1LB8xcDsW Ybv98vnXVNIJRR6RQG74sfusLdjiGVqbKKzZTbzcp/dmtpBm5pFepLBVHM32polf eyss0wvu/JLy2uOodZgwDy+qpqccRZJ+QuzrHXQq9yXcuBjmEgiCsMIy7K8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkl9RIQtjyqiHI8R3Y8M7319BkQwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCMk/B39g0LPHD5d5AC/ySvBTM5kxqGhPpN B3g+iwfcButY85LUnoJd4MKKvZWXSLNHaCYjcyS5lgntTfNITAYF/kzyqND59+TX 2RGS+Xn8W7fuLfCxP+03b23+jSjHdtqVxrEsb/MS3nYHnUPOH2AtJT9kz5gN85V4 gUVJq6mDaWpvVY5yL2M8U7LVqXz3VGFjjLQnDdcFtX4WfbC02hdQBNYEABocOxwH NmBfvNcebo5XuHFzx5YS9fGVPcwutyWNQvHoEok64A7hDWsTJEFcQ1RxIr6WAXd6 rsv4fhUpz5W+/kOpU3WHrkDHhiwzm9ynTTfqiZh8n9HNqJStrOU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:45 2026 by rpki-client