$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: +CtDaEkKo/PPyEdWEaQhTQk99Xxc7ZwShm+e9c86GGg= Subject key identifier: EE:03:4E:0E:0A:B6:5E:26:C2:64:85:34:22:F8:C5:6D:42:7C:B8:67 Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 343671C455A1B08424BED7F80E8860D4AC3E4DF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 022C Signing time: Wed 25 Mar 2026 18:42:19 +0000 Manifest this update: Wed 25 Mar 2026 18:37:19 +0000 Manifest next update: Sat 28 Mar 2026 18:52:19 +0000 Files and hashes: 1: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: pbo0fDoks7C4BfevLjP/DxJibR8twMqyGN7LLxhkD9w=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: mvjYp+1vrLLE5z7eCg/M+MdscRpVan6q1wn/N7ffyk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:36:71:c4:55:a1:b0:84:24:be:d7:f8:0e:88:60:d4:ac:3e:4d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Mar 25 18:37:19 2026 GMT Not After : Mar 28 18:52:19 2026 GMT Subject: CN=EE034E0E0AB65E26C264853422F8C56D427CB867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:cc:e8:4e:72:68:0d:35:fe:fa:68:a1:14: f9:fd:98:ea:cb:aa:4a:71:0c:81:90:7f:88:36:a6: c2:14:fa:7f:55:f2:6b:5b:6e:f5:9e:0b:40:55:ba: da:fe:80:83:28:e9:f5:2d:4e:67:da:4b:a1:86:11: 6e:f9:cd:2b:30:17:80:e2:6f:31:23:61:f6:13:34: f5:03:19:c9:58:84:c4:70:22:8f:ad:04:26:a8:ad: 10:76:f3:15:5a:eb:38:a3:7d:07:d6:68:33:0b:0d: 6e:f9:f5:35:6e:60:45:dc:29:64:71:85:67:67:e4: cf:1c:46:45:32:0a:6e:f6:dd:03:1d:32:5d:27:73: 91:e6:dc:d0:5d:21:13:49:e9:64:f2:b1:5c:44:eb: 52:ee:97:64:c5:96:08:a5:e3:3a:b0:44:df:dc:a3: 1b:ef:c3:06:56:c0:3b:ed:c1:7e:98:51:22:15:71: cc:17:98:61:08:3f:01:ca:e8:73:e8:20:44:98:06: 6b:89:c0:c2:27:80:30:f2:50:3d:ef:80:b1:e8:f0: b3:3a:2d:17:6e:a1:fc:db:05:6e:7d:d1:63:20:ba: da:6d:fd:6b:19:27:42:a9:11:b5:01:99:da:e9:b0: b0:0c:33:d6:2f:1a:a1:0b:d0:ea:41:b0:ae:bf:72: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:03:4E:0E:0A:B6:5E:26:C2:64:85:34:22:F8:C5:6D:42:7C:B8:67 X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:06:57:26:a7:8e:83:ac:7e:b3:c0:27:e6:85:12:cb:9c:7b: de:a6:c7:5b:60:5c:ae:11:34:a3:08:40:70:38:0c:d7:7a:7a: 2e:6c:84:3f:a6:79:24:96:b0:3c:5e:33:32:10:cb:08:c8:3e: 49:ec:a5:4b:13:39:9c:f3:bb:1e:49:f0:b1:85:1c:a3:c2:be: 35:a4:d4:7d:1b:17:58:f6:47:31:d3:97:56:d9:e1:ef:07:c2: 7f:93:f6:e4:f5:9e:c0:d2:56:ee:9d:f6:83:92:bb:d2:7b:99: 03:8c:18:1e:a3:e2:88:7a:41:21:6d:1b:2a:61:8d:49:35:6d: e8:bd:53:b7:10:0e:f2:85:9e:40:5d:a6:62:98:fc:43:2b:b0: 19:f1:07:c0:60:d1:8c:90:1f:16:9b:05:10:84:e4:51:76:5d: 73:7c:c0:e8:e0:d4:0e:03:d4:60:d8:21:74:60:4d:d3:eb:94: 70:fe:f8:b7:53:ce:ff:41:3f:e7:d0:60:b6:ca:d4:a2:40:44: dc:7c:fe:7b:e0:fa:48:f1:b2:87:fc:9a:1a:b8:8b:85:64:d3: c7:58:5a:19:49:60:2c:ce:3f:b1:40:4e:17:57:33:5b:ae:8b: 4e:0d:fc:63:08:55:ae:04:b2:c7:cf:e3:bf:a1:6b:f4:b2:59: e9:f6:11:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDZxxFWhsIQkvtf4Dohg1Kw+TfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNjAzMjUxODM3MTlaFw0yNjAzMjgxODUyMTlaMDMxMTAvBgNV BAMTKEVFMDM0RTBFMEFCNjVFMjZDMjY0ODUzNDIyRjhDNTZENDI3Q0I4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIMzoTnJoDTX++mihFPn9mOrL qkpxDIGQf4g2psIU+n9V8mtbbvWeC0BVutr+gIMo6fUtTmfaS6GGEW75zSswF4Di bzEjYfYTNPUDGclYhMRwIo+tBCaorRB28xVa6zijfQfWaDMLDW759TVuYEXcKWRx hWdn5M8cRkUyCm723QMdMl0nc5Hm3NBdIRNJ6WTysVxE61Lul2TFlgil4zqwRN/c oxvvwwZWwDvtwX6YUSIVccwXmGEIPwHK6HPoIESYBmuJwMIngDDyUD3vgLHo8LM6 LRduofzbBW590WMgutpt/WsZJ0KpEbUBmdrpsLAMM9YvGqEL0OpBsK6/cnArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7gNODgq2XibCZIU0IvjFbUJ8uGcwHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIGVyanjoOsfrPAJ+aFEsuce96mx1tgXK4R NKMIQHA4DNd6ei5shD+meSSWsDxeMzIQywjIPknspUsTOZzzux5J8LGFHKPCvjWk 1H0bF1j2RzHTl1bZ4e8Hwn+T9uT1nsDSVu6d9oOSu9J7mQOMGB6j4oh6QSFtGyph jUk1bei9U7cQDvKFnkBdpmKY/EMrsBnxB8Bg0YyQHxabBRCE5FF2XXN8wOjg1A4D 1GDYIXRgTdPrlHD++LdTzv9BP+fQYLbK1KJARNx8/nvg+kjxsof8mhq4i4Vk08dY WhlJYCzOP7FAThdXM1uui04N/GMIVa4EssfP47+ha/SyWen2ERg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:52 2026 by rpki-client