$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft File: 809C666CC84F942588E109E6E6C454A9CD0524EB.mft (raw, json) Hash identifier: 8xRqy1rZZgk6nVE6CPTh+tJqeu2/rrXsbrTKMNhtKeA= Subject key identifier: E8:49:A2:FF:F8:CE:4A:D0:08:FC:76:60:BF:93:CD:38:DC:13:F7:33 Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Certificate issuer: /CN=809C666CC84F942588E109E6E6C454A9CD0524EB Certificate serial: 2FB68AC5244AFCB077258C6918225F6C1C1A5B6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft Manifest number: 024A Signing time: Tue 24 Mar 2026 20:01:28 +0000 Manifest this update: Tue 24 Mar 2026 19:56:28 +0000 Manifest next update: Sat 28 Mar 2026 06:52:28 +0000 Files and hashes: 1: 809C666CC84F942588E109E6E6C454A9CD0524EB.crl (hash: g50XQ/HiKuGBabjuGn8euaE1DvL07SpnMXil/vnStWE=) 2: 3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (hash: JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b6:8a:c5:24:4a:fc:b0:77:25:8c:69:18:22:5f:6c:1c:1a:5b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Validity Not Before: Mar 24 19:56:28 2026 GMT Not After : Mar 28 06:52:28 2026 GMT Subject: CN=E849A2FFF8CE4AD008FC7660BF93CD38DC13F733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:8c:d2:e9:7a:76:bc:5b:65:7e:32:b5:8f: dc:28:c0:df:3d:43:ee:4a:47:6a:ff:95:4e:57:67: 9b:70:a9:90:22:da:b5:d3:8a:1d:4d:17:23:13:d7: ba:d9:a6:5a:23:03:8f:ce:ee:c5:6d:3b:3d:b4:ea: 56:ea:d3:74:a0:63:ad:b2:a5:28:4c:a7:da:c5:5f: af:ec:1f:0b:a8:c7:c0:b2:a8:b6:ac:79:02:3d:8e: d6:47:0e:6d:ac:bf:45:fa:b0:df:18:60:55:b3:7c: f9:56:9f:01:ce:11:c3:24:f4:5b:87:79:97:93:7b: 8a:00:82:c6:b4:1d:6f:c4:25:cb:75:48:ee:04:25: c2:18:4e:1d:af:19:08:31:c8:a5:7f:18:96:03:73: 6a:37:41:fe:9a:37:6b:03:fd:72:2a:58:0b:75:86: 38:64:af:00:7f:54:78:71:b8:cd:02:72:62:ad:fa: 6f:57:41:4e:cd:37:83:1c:27:84:1c:33:0d:d1:73: d5:8d:02:ec:6d:1f:9e:2f:c2:2e:e1:82:15:bb:96: 4c:be:f6:9f:db:a8:77:4e:04:4e:33:77:f8:ed:a8: 7d:e7:ec:29:05:db:1c:e7:4f:18:b3:0f:3e:d9:a2: 9c:98:68:5d:e1:a0:f4:d0:fc:84:de:a6:0f:5a:44: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:49:A2:FF:F8:CE:4A:D0:08:FC:76:60:BF:93:CD:38:DC:13:F7:33 X509v3 Authority Key Identifier: keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:eb:7e:54:a4:a6:c3:3c:6f:c2:50:0a:2d:4d:ca:f2:26:4c: 59:0d:79:c8:b0:9d:cb:3a:d7:72:cd:2f:6a:07:fa:1c:5a:e3: de:8b:ef:df:e0:70:59:6e:40:e5:3f:94:fc:e9:87:c6:ef:a9: 6b:f7:a9:43:7f:bf:f9:3a:8d:1d:85:15:39:23:a8:da:65:4e: 4d:db:81:ea:1a:fa:e9:8f:34:e4:0d:90:1a:dd:13:44:dd:e9: a5:9b:56:58:31:f3:d2:fc:94:37:cf:7e:e4:3a:39:75:ce:0a: 21:3d:cb:2a:b0:9d:d3:7b:84:2e:2c:69:e4:98:3e:5d:5e:c6: 5a:5e:eb:58:e7:d6:09:27:25:e3:3c:29:be:e0:ef:cc:12:e6: 94:cf:bb:17:06:4c:e5:a0:29:a4:ac:f2:bf:2a:2d:6b:65:9a: 82:cd:ce:43:93:9c:6c:fb:fa:10:38:77:1c:8f:ed:4c:e4:07: e5:7f:57:d5:fb:15:e2:3b:81:9f:60:bc:42:e1:b4:4f:1a:f1: 90:ec:50:f1:24:eb:a0:6e:c3:82:5a:a3:75:25:38:64:f7:6c: 19:da:38:09:ff:02:48:da:ae:82:6e:e4:7c:73:a2:11:c4:09: 7f:04:fa:d4:c3:82:85:2b:9f:00:8a:c2:50:6a:24:a5:5b:a2: c6:23:74:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7aKxSRK/LB3JYxpGCJfbBwaW2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlD RDA1MjRFQjAeFw0yNjAzMjQxOTU2MjhaFw0yNjAzMjgwNjUyMjhaMDMxMTAvBgNV BAMTKEU4NDlBMkZGRjhDRTRBRDAwOEZDNzY2MEJGOTNDRDM4REMxM0Y3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IozS6Xp2vFtlfjK1j9wowN89 Q+5KR2r/lU5XZ5twqZAi2rXTih1NFyMT17rZplojA4/O7sVtOz206lbq03SgY62y pShMp9rFX6/sHwuox8CyqLaseQI9jtZHDm2sv0X6sN8YYFWzfPlWnwHOEcMk9FuH eZeTe4oAgsa0HW/EJct1SO4EJcIYTh2vGQgxyKV/GJYDc2o3Qf6aN2sD/XIqWAt1 hjhkrwB/VHhxuM0CcmKt+m9XQU7NN4McJ4QcMw3Rc9WNAuxtH54vwi7hghW7lky+ 9p/bqHdOBE4zd/jtqH3n7CkF2xznTxizDz7ZopyYaF3hoPTQ/ITepg9aRCWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Emi//jOStAI/HZgv5PNONwT9zMwHwYDVR0j BBgwFoAUgJxmbMhPlCWI4Qnm5sRUqc0FJOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMC84MDlDNjY2Q0M4 NEY5NDI1ODhFMTA5RTZFNkM0NTRBOUNEMDUyNEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0QTlDRDA1 MjRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkNTcyMDEtN2UyZi00OWJiLTk0 MWQtOWZjYWJlODYyM2Y1LzAvODA5QzY2NkNDODRGOTQyNTg4RTEwOUU2RTZDNDU0 QTlDRDA1MjRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHrflSkpsM8b8JQCi1NyvImTFkNeciwncs6 13LNL2oH+hxa496L79/gcFluQOU/lPzph8bvqWv3qUN/v/k6jR2FFTkjqNplTk3b geoa+umPNOQNkBrdE0Td6aWbVlgx89L8lDfPfuQ6OXXOCiE9yyqwndN7hC4saeSY Pl1exlpe61jn1gknJeM8Kb7g78wS5pTPuxcGTOWgKaSs8r8qLWtlmoLNzkOTnGz7 +hA4dxyP7UzkB+V/V9X7FeI7gZ9gvELhtE8a8ZDsUPEk66Buw4Jao3UlOGT3bBna OAn/AkjaroJu5HxzohHECX8E+tTDgoUrnwCKwlBqJKVbosYjdG8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:41 2026 by rpki-client