$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: nE/RHBvMGoNUWN0IEKUHiTlIwvUh/mopthoGfPwQLHE= Subject key identifier: 5D:65:92:93:C1:CF:DF:7F:46:02:FC:3A:5E:54:2A:69:D6:7D:03:B4 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 5CD6885B1C207F889BF41897A181328919077576 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0561 Signing time: Thu 26 Mar 2026 06:10:44 +0000 Manifest this update: Thu 26 Mar 2026 06:05:44 +0000 Manifest next update: Sun 29 Mar 2026 17:15:44 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: YmyWTsq4pXDt/Svd1ZolsTRPO+2ve8WL9pi6thFshq4=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d6:88:5b:1c:20:7f:88:9b:f4:18:97:a1:81:32:89:19:07:75:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Mar 26 06:05:44 2026 GMT Not After : Mar 29 17:15:44 2026 GMT Subject: CN=5D659293C1CFDF7F4602FC3A5E542A69D67D03B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:28:0f:98:df:f4:e9:51:70:3e:d3:16:90: 82:bc:c1:80:8c:1d:b0:07:7b:52:2d:a0:bd:0c:30: 02:de:c6:35:8a:26:38:8e:20:d7:4c:71:fb:b6:04: 90:13:65:0f:2e:61:9c:5a:23:93:63:05:92:ed:d3: a3:03:4a:8b:5b:62:2b:45:be:11:f1:40:ed:7f:43: b0:0c:e4:87:ce:73:25:a4:0a:62:f1:60:f7:a8:ca: a9:cb:94:25:84:44:5b:80:41:ec:36:5d:2a:b5:6f: bf:04:0e:60:7a:e4:d2:53:ce:17:18:79:bc:bd:ef: 36:c0:7b:7f:de:3a:35:81:c7:5d:cc:53:e5:43:3a: 4d:d8:19:0a:2e:9c:8c:b0:3e:69:1e:db:89:0f:2f: 1e:b9:e4:b0:94:73:0d:c2:fb:33:a8:b8:93:a5:6d: 19:87:bc:88:6d:78:78:c6:08:fa:c5:93:3c:0b:56: ba:43:0c:9d:84:9d:18:f6:cb:ad:ff:e9:ba:f2:de: 33:d8:37:54:f5:5f:8b:04:38:9a:34:e9:cb:6c:cd: b9:5e:50:79:bd:e4:dc:41:d0:83:f1:26:1f:9e:86: fa:d6:c7:98:2c:01:b2:ae:e5:06:66:94:f2:22:ee: 0c:5d:df:ad:99:bc:78:0b:ea:bd:c6:2a:23:8c:51: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:92:93:C1:CF:DF:7F:46:02:FC:3A:5E:54:2A:69:D6:7D:03:B4 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:46:fa:0b:3a:ec:b2:d2:dc:f7:5e:63:62:91:0f:05:03:72: 9b:17:ea:0a:11:d9:b2:37:dc:5f:12:be:d5:e5:a9:ff:de:c0: 55:37:b7:6b:15:f4:c0:1a:34:d8:f6:c6:45:f3:92:93:f0:f7: fc:24:4f:0c:49:a4:e7:fb:e2:7c:c8:2e:2e:2c:37:b4:62:1d: 9b:b7:1e:7c:b7:de:c1:0c:83:d5:9a:8a:0c:6d:07:7c:4a:bb: f4:ef:05:47:0c:8f:0c:fa:5f:ea:fa:b0:50:e1:80:3f:ac:dd: b1:c2:41:46:45:87:43:cb:ea:cc:a8:f3:f4:32:75:16:f5:fa: bb:ef:9d:a3:b0:0e:90:e0:3e:27:b7:3c:9c:85:bb:be:02:eb: 61:40:1b:fd:8d:a3:87:42:ed:13:4f:19:77:2c:b6:45:6e:aa: 87:fd:4a:72:11:52:c0:a3:73:ea:51:a8:52:4d:62:78:1d:82: 63:8d:41:0d:31:2b:b3:03:48:c9:fb:71:4b:89:e8:3a:ca:71: b3:e7:a3:03:fc:25:92:c6:4d:b1:86:16:c3:23:43:98:2a:00: 9f:bf:ce:e2:92:46:4f:a2:b9:30:4f:ff:85:68:94:2f:0a:e1: 71:8e:94:6f:47:de:1c:de:83:c7:ad:49:77:e7:2b:c3:a2:09: 3a:92:d1:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNaIWxwgf4ib9BiXoYEyiRkHdXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNjAzMjYwNjA1NDRaFw0yNjAzMjkxNzE1NDRaMDMxMTAvBgNV BAMTKDVENjU5MjkzQzFDRkRGN0Y0NjAyRkMzQTVFNTQyQTY5RDY3RDAzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgSgPmN/06VFwPtMWkIK8wYCM HbAHe1ItoL0MMALexjWKJjiOINdMcfu2BJATZQ8uYZxaI5NjBZLt06MDSotbYitF vhHxQO1/Q7AM5IfOcyWkCmLxYPeoyqnLlCWERFuAQew2XSq1b78EDmB65NJTzhcY eby97zbAe3/eOjWBx13MU+VDOk3YGQounIywPmke24kPLx655LCUcw3C+zOouJOl bRmHvIhteHjGCPrFkzwLVrpDDJ2EnRj2y63/6bry3jPYN1T1X4sEOJo06ctszble UHm95NxB0IPxJh+ehvrWx5gsAbKu5QZmlPIi7gxd362ZvHgL6r3GKiOMUUWFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWWSk8HP339GAvw6XlQqadZ9A7QwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJG+gs67LLS3PdeY2KRDwUDcpsX6goR2bI3 3F8SvtXlqf/ewFU3t2sV9MAaNNj2xkXzkpPw9/wkTwxJpOf74nzILi4sN7RiHZu3 Hny33sEMg9WaigxtB3xKu/TvBUcMjwz6X+r6sFDhgD+s3bHCQUZFh0PL6syo8/Qy dRb1+rvvnaOwDpDgPie3PJyFu74C62FAG/2No4dC7RNPGXcstkVuqof9SnIRUsCj c+pRqFJNYngdgmONQQ0xK7MDSMn7cUuJ6DrKcbPnowP8JZLGTbGGFsMjQ5gqAJ+/ zuKSRk+iuTBP/4VolC8K4XGOlG9H3hzeg8etSXfnK8OiCTqS0U0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:06 2026 by rpki-client