$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: A9cqGW32wk61lri8winYFg4wqgfMDihpmZGXR/XiYtA= Subject key identifier: 73:9D:07:10:09:4D:67:DD:CD:8A:B7:5B:95:F4:5B:48:39:FD:A6:5B Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 17A6D2C673560D2920F70D8D7A5FBC1001CC439C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0181 Signing time: Wed 25 Mar 2026 19:23:43 +0000 Manifest this update: Wed 25 Mar 2026 19:18:43 +0000 Manifest next update: Sat 28 Mar 2026 22:22:43 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 2: 3137352e3131312e39382e302f32342d3234203d3e20313534343130.roa (hash: tp/Jlsq88hd2XOTMKJfCJaaLDtcVuVyDPXkT0pr4Y9I=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: t6n7AN/5tGwHmy89IzytuveWes+kCIMPeJV3vhRLlHo=) 4: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (hash: zwjrrSSocCPkwpeZnvOXQTY6ZFKjf2v0QrVmVjzP5Ng=) 5: 3137352e3131312e39392e302f32342d3234203d3e20313534343130.roa (hash: A681M7W/Os54i9ou3p8OuHLz8QinEihQYy8uf/E43+0=) 6: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a6:d2:c6:73:56:0d:29:20:f7:0d:8d:7a:5f:bc:10:01:cc:43:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Mar 25 19:18:43 2026 GMT Not After : Mar 28 22:22:43 2026 GMT Subject: CN=739D0710094D67DDCD8AB75B95F45B4839FDA65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:a4:18:9c:29:70:41:55:be:23:0a:9e:a6: 79:0a:c4:0b:65:41:58:5b:fe:4e:74:29:69:dd:b6: 2b:86:8f:a7:7c:93:2e:5b:b3:76:a3:25:08:d9:c0: 1a:ef:79:c4:93:e9:40:36:b7:7c:e0:a3:0a:4d:53: 28:77:93:0e:49:e8:27:0a:ce:49:a1:50:64:8e:4a: 47:e3:87:a7:c3:af:2e:98:e0:5f:82:d9:b5:8f:ae: fb:ee:40:b1:4c:5a:d8:b9:96:92:60:37:cc:fe:c9: 68:23:b7:aa:74:22:90:c4:24:34:e1:6e:3f:f4:19: b2:12:26:9e:d4:d3:99:71:67:fb:85:53:67:3c:d3: 89:06:71:01:69:da:53:5d:f4:ff:a1:26:94:7e:46: a7:d3:9d:4a:9c:74:56:51:77:80:7a:b4:35:20:77: c3:5d:6b:5c:af:cd:52:b3:9f:f5:b6:e7:ee:f0:1a: 77:d1:4c:37:e6:e7:86:99:af:65:39:99:d6:5f:fa: 27:dd:5d:b3:66:c6:3a:9c:02:b9:b2:99:3f:30:5f: 45:b9:36:fd:bc:7e:53:94:d7:ea:4d:98:8a:06:c7: bc:e9:bf:2e:b2:77:ef:04:0b:dc:5a:b7:69:72:95: 70:8c:f7:05:2e:e0:34:77:90:13:8e:b4:fc:31:09: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9D:07:10:09:4D:67:DD:CD:8A:B7:5B:95:F4:5B:48:39:FD:A6:5B X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c8:89:7c:78:b7:ed:14:23:46:d2:53:fd:81:c6:63:7c:54: 7b:ef:06:cf:c6:b3:18:ae:c9:3b:09:75:b5:b5:44:b2:58:c3: 6c:28:e1:6e:b0:af:af:57:2c:95:be:c1:18:00:48:02:70:41: a8:e4:58:05:fd:c1:73:70:10:92:50:69:b7:80:83:d5:ac:31: 09:dc:80:c1:0c:9d:8e:3f:d8:1d:a0:cc:fd:f5:ba:64:18:f2: 2b:7d:87:ef:96:42:8d:1c:29:ef:b2:7c:ee:fe:24:39:d2:c8: 04:62:1e:e8:5b:8c:d5:61:33:c9:9b:4d:fe:d7:cd:1e:b5:16: 44:fc:d6:da:24:d2:48:d6:84:d2:44:34:fb:dd:70:16:38:d6: d0:6b:ff:80:af:4d:41:52:32:9e:3d:e1:09:99:fb:b4:13:c3: 2c:0f:6a:5e:16:6d:db:a0:38:e6:83:3d:d6:98:9b:55:21:98: 58:fd:de:c2:3e:e0:53:c9:66:2c:83:86:58:df:77:2c:db:20: f1:0f:15:ce:29:86:b0:56:2f:9e:74:f1:1d:c7:4c:0c:ca:61: 8b:32:66:a0:3b:b4:21:b1:f6:34:08:61:8d:f4:39:11:a5:4b: d3:31:32:8e:9b:b7:08:ea:37:fd:9a:7d:f4:ed:6c:a0:f3:76: 9d:d4:fb:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6bSxnNWDSkg9w2Nel+8EAHMQ5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNjAzMjUxOTE4NDNaFw0yNjAzMjgyMjIyNDNaMDMxMTAvBgNV BAMTKDczOUQwNzEwMDk0RDY3RERDRDhBQjc1Qjk1RjQ1QjQ4MzlGREE2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0KQYnClwQVW+IwqepnkKxAtl QVhb/k50KWndtiuGj6d8ky5bs3ajJQjZwBrvecST6UA2t3zgowpNUyh3kw5J6CcK zkmhUGSOSkfjh6fDry6Y4F+C2bWPrvvuQLFMWti5lpJgN8z+yWgjt6p0IpDEJDTh bj/0GbISJp7U05lxZ/uFU2c804kGcQFp2lNd9P+hJpR+RqfTnUqcdFZRd4B6tDUg d8Nda1yvzVKzn/W25+7wGnfRTDfm54aZr2U5mdZf+ifdXbNmxjqcArmymT8wX0W5 Nv28flOU1+pNmIoGx7zpvy6yd+8EC9xat2lylXCM9wUu4DR3kBOOtPwxCbsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc50HEAlNZ93NirdblfRbSDn9plswHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjIiXx4t+0UI0bSU/2BxmN8VHvvBs/Gsxiu yTsJdbW1RLJYw2wo4W6wr69XLJW+wRgASAJwQajkWAX9wXNwEJJQabeAg9WsMQnc gMEMnY4/2B2gzP31umQY8it9h++WQo0cKe+yfO7+JDnSyARiHuhbjNVhM8mbTf7X zR61FkT81tok0kjWhNJENPvdcBY41tBr/4CvTUFSMp494QmZ+7QTwywPal4Wbdug OOaDPdaYm1UhmFj93sI+4FPJZiyDhljfdyzbIPEPFc4phrBWL5508R3HTAzKYYsy ZqA7tCGx9jQIYY30ORGlS9MxMo6btwjqN/2affTtbKDzdp3U+44= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:50 2026 by rpki-client