$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: K41lccdVrYGD37QohlqJtXXvJ7pP/hXnbMlaz3BTqBY= Subject key identifier: D8:4A:8F:4C:4F:DC:6B:56:1D:9E:DF:21:15:17:F0:D2:B8:8E:66:B2 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 114E0221A5EBA442C199E9B5F513F5D84C730F5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 044C Signing time: Wed 25 Mar 2026 20:02:15 +0000 Manifest this update: Wed 25 Mar 2026 19:57:15 +0000 Manifest next update: Sat 28 Mar 2026 22:12:15 +0000 Files and hashes: 1: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 2: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 3: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: O2rYnOkPfQ+n3yzsD/Nm/Z9qDNo+Rc4atLAfK29rEAo=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 5: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4e:02:21:a5:eb:a4:42:c1:99:e9:b5:f5:13:f5:d8:4c:73:0f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Mar 25 19:57:15 2026 GMT Not After : Mar 28 22:12:15 2026 GMT Subject: CN=D84A8F4C4FDC6B561D9EDF211517F0D2B88E66B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:60:6b:eb:85:fe:56:ac:50:3a:7c:dc:23: d7:7b:e1:6a:66:df:8c:95:fc:de:de:e2:fd:e9:12: dc:67:66:66:f6:9e:25:aa:1c:da:fd:9a:7a:b5:45: 3b:f4:d4:2e:7f:56:9e:25:7c:11:b9:5b:62:56:59: f2:5d:c4:c8:2a:af:ad:09:bf:5a:28:b2:45:36:fc: e5:7e:f2:77:79:24:71:45:4d:77:f7:4a:4e:59:a1: f8:3f:20:a7:b7:5a:71:2b:d2:80:1c:35:df:2e:4f: 72:b2:25:5a:8f:99:76:fc:cc:3f:3c:29:0d:f9:9e: 00:23:ee:3f:55:c8:13:6d:0f:bd:ac:d4:2f:0d:1a: e4:33:61:09:13:c3:d5:c6:45:c5:6f:a2:7f:e4:3b: a7:4f:6f:77:6a:3e:16:62:f6:88:02:10:a8:b2:03: ff:60:da:3e:3c:d6:c6:27:e2:d1:e4:c7:b9:5b:45: 30:d6:99:2d:fa:52:a4:dc:7f:6a:74:74:2d:d1:b7: 94:4c:a0:ca:0a:a8:3b:96:9d:01:32:07:89:01:10: e5:39:f3:a3:5a:bb:51:9d:b4:ea:f2:f1:f7:89:d4: 0e:c9:84:e3:37:7f:62:ad:49:28:d5:69:40:a5:b2: d8:f8:e6:11:f3:7d:77:3e:a6:e1:5e:ce:3f:a8:bb: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4A:8F:4C:4F:DC:6B:56:1D:9E:DF:21:15:17:F0:D2:B8:8E:66:B2 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ce:c0:f6:a8:46:6a:69:e3:10:f7:de:44:8a:2a:fd:0a:9e: 41:fe:05:bd:f5:85:06:30:ce:1b:3b:dc:0e:b1:cc:35:d8:29: 10:d5:75:ac:d8:af:06:c5:8e:e7:0f:14:62:15:9c:ee:5c:98: d5:49:d1:8d:ff:bb:22:8a:50:68:3d:5a:9a:8d:f4:1f:bc:2d: cd:ce:20:78:23:ab:6a:11:57:24:e2:e3:4a:c2:7c:12:4f:ee: 9e:3b:ec:c4:82:9d:fa:a0:b8:73:c0:b5:17:ec:fa:7c:95:d6: ee:e9:1d:dc:bb:9d:2c:95:2b:b6:af:4e:ba:a6:cf:25:ad:01: 96:29:31:db:b0:f5:9a:a3:3c:10:2d:c5:35:0a:38:36:ab:c4: 3c:f4:d4:1a:7b:4b:01:08:92:86:da:ef:94:8d:be:f4:cc:a7: 26:d4:d4:a2:54:a9:33:fa:e4:88:c0:27:76:75:4b:6e:56:a0: 64:80:48:09:56:70:94:d2:eb:80:e8:0c:fb:63:87:a8:85:68: ad:9c:e3:9b:11:2d:2b:84:b1:dd:dc:9a:1f:c6:11:25:59:93: 25:0c:4b:da:38:0a:6c:29:c1:7a:b8:b5:8d:c9:65:d1:95:79: 6d:95:1d:83:87:42:eb:99:4d:84:db:f8:fa:dc:45:bb:24:12: 2d:f5:e1:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEU4CIaXrpELBmem19RP12ExzD1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNjAzMjUxOTU3MTVaFw0yNjAzMjgyMjEyMTVaMDMxMTAvBgNV BAMTKEQ4NEE4RjRDNEZEQzZCNTYxRDlFREYyMTE1MTdGMEQyQjg4RTY2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHGBr64X+VqxQOnzcI9d74Wpm 34yV/N7e4v3pEtxnZmb2niWqHNr9mnq1RTv01C5/Vp4lfBG5W2JWWfJdxMgqr60J v1ooskU2/OV+8nd5JHFFTXf3Sk5Zofg/IKe3WnEr0oAcNd8uT3KyJVqPmXb8zD88 KQ35ngAj7j9VyBNtD72s1C8NGuQzYQkTw9XGRcVvon/kO6dPb3dqPhZi9ogCEKiy A/9g2j481sYn4tHkx7lbRTDWmS36UqTcf2p0dC3Rt5RMoMoKqDuWnQEyB4kBEOU5 86Nau1GdtOry8feJ1A7JhOM3f2KtSSjVaUClstj45hHzfXc+puFezj+ou/oBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2EqPTE/ca1Ydnt8hFRfw0riOZrIwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjOwPaoRmpp4xD33kSKKv0KnkH+Bb31hQYw zhs73A6xzDXYKRDVdazYrwbFjucPFGIVnO5cmNVJ0Y3/uyKKUGg9WpqN9B+8Lc3O IHgjq2oRVyTi40rCfBJP7p477MSCnfqguHPAtRfs+nyV1u7pHdy7nSyVK7avTrqm zyWtAZYpMduw9ZqjPBAtxTUKODarxDz01Bp7SwEIkoba75SNvvTMpybU1KJUqTP6 5IjAJ3Z1S25WoGSASAlWcJTS64DoDPtjh6iFaK2c45sRLSuEsd3cmh/GESVZkyUM S9o4CmwpwXq4tY3JZdGVeW2VHYOHQuuZTYTb+PrcRbskEi314ZE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:40 2026 by rpki-client