$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: 6rwxuIGxUWl7InYfAsVm7yHYRZOj8cZRFdQRaFRx7wA= Subject key identifier: 62:52:04:3F:37:48:0D:66:D3:FF:1F:B8:B0:F5:29:F8:4D:0A:A3:1D Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 47EE60A2FBA35C81FB08DFCBF565951471640BAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 0259 Signing time: Tue 24 Mar 2026 04:31:20 +0000 Manifest this update: Tue 24 Mar 2026 04:26:20 +0000 Manifest next update: Fri 27 Mar 2026 13:32:20 +0000 Files and hashes: 1: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: REaDPruYHdpHhDc/drGoPIfumem5LNzM9p4PaGphkJw=) 2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: ICdvINkILNoezpXS4hNV2DoVPsk+RYrVNgwPVBZPvUo=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: rfvWdPfJDLIYs6uNr68F470gBmctz7tC2fHbouL5TpQ=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: M8fCe5D8d2IyMGkvGFHQzCu5uqFZk9IhypXImoxO/WY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ee:60:a2:fb:a3:5c:81:fb:08:df:cb:f5:65:95:14:71:64:0b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Mar 24 04:26:20 2026 GMT Not After : Mar 27 13:32:20 2026 GMT Subject: CN=6252043F37480D66D3FF1FB8B0F529F84D0AA31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:c9:10:5d:6e:d6:e6:c6:b5:46:a0:09:30: f4:ca:7f:f1:16:c2:25:bf:26:2c:2e:92:7f:ed:ae: 37:4b:97:30:72:4e:50:50:45:9a:4c:d5:e4:ed:ba: d0:62:dc:3f:d7:af:df:70:e4:00:b1:7b:32:48:eb: 8b:8e:8e:33:ab:cb:3e:c0:e6:7f:cc:9c:ea:d5:cd: 25:f5:c2:81:95:b1:6c:28:17:c8:31:2f:ec:a4:41: c4:2a:fa:72:33:1a:98:0d:a3:34:35:f2:34:7c:92: 6e:e1:5b:a0:32:cb:d1:98:d3:db:dd:b4:91:17:7f: 37:6f:74:c0:43:f8:9a:a4:c7:8a:f8:9e:92:d4:e8: 34:b2:b7:42:f0:0a:1f:ea:c7:f4:9f:d4:91:96:4b: 23:53:c9:3d:83:bb:ac:d9:91:f0:b8:89:98:68:bd: c5:6a:92:4e:2d:73:bb:14:2e:26:37:37:d0:d4:15: 01:bb:dd:e3:0b:e7:7a:d6:f6:61:28:62:1a:b4:69: f0:04:b3:85:39:59:78:1e:49:01:ff:ae:02:e3:c7: 9a:a8:79:ca:19:d3:90:92:b7:88:0e:bc:86:4a:11: ae:98:fa:15:61:71:27:aa:60:72:a4:73:35:88:94: 96:d7:93:cb:e8:18:10:d7:d6:ae:bf:ec:20:4e:f8: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:52:04:3F:37:48:0D:66:D3:FF:1F:B8:B0:F5:29:F8:4D:0A:A3:1D X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1c:3d:88:cb:d5:9b:f3:8d:f4:9e:2e:85:97:6d:b5:d4:a7: c2:33:fa:2d:b3:96:32:03:ab:60:e7:dc:fd:9f:0a:05:6b:ae: 66:ca:da:0b:21:63:3e:84:85:70:ce:d1:db:f6:3b:5f:84:b0: cf:ab:f3:76:43:84:5f:95:0f:9d:5d:ce:40:ed:ca:0e:bf:50: 84:d4:d7:ac:9a:a9:22:9e:82:dc:a7:7a:38:95:c8:ee:d9:04: d4:f2:30:0e:f0:b1:50:73:f6:8f:78:92:f4:3c:09:8a:3f:0c: fe:02:31:0a:9f:a5:a7:3e:a1:96:54:8c:ba:26:c8:6d:84:53: 54:8c:25:58:66:f6:14:19:29:4d:2f:68:3e:d4:33:40:41:e5: 7c:b3:41:d0:1c:8d:8d:ef:1e:72:fc:2f:c5:16:3b:a8:60:77: 97:ad:e1:ea:fc:ac:d2:00:81:6a:be:68:89:a4:12:90:ce:35: c2:59:14:03:8b:ff:5f:37:90:c2:b4:41:50:80:45:ec:43:51: 9b:65:73:8c:2a:2d:3e:3c:cd:e5:2b:3a:a0:f7:70:3a:77:02: 0b:e5:a7:13:5d:37:c5:7a:e5:bb:c8:f0:20:17:ed:b8:f8:00: d7:74:dd:43:2b:9f:81:99:93:5a:73:4d:12:6d:7c:af:8d:5d: 3c:09:df:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+5govujXIH7CN/L9WWVFHFkC60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNjAzMjQwNDI2MjBaFw0yNjAzMjcxMzMyMjBaMDMxMTAvBgNV BAMTKDYyNTIwNDNGMzc0ODBENjZEM0ZGMUZCOEIwRjUyOUY4NEQwQUEzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAMkQXW7W5sa1RqAJMPTKf/EW wiW/Jiwukn/trjdLlzByTlBQRZpM1eTtutBi3D/Xr99w5ACxezJI64uOjjOryz7A 5n/MnOrVzSX1woGVsWwoF8gxL+ykQcQq+nIzGpgNozQ18jR8km7hW6Ayy9GY09vd tJEXfzdvdMBD+Jqkx4r4npLU6DSyt0LwCh/qx/Sf1JGWSyNTyT2Du6zZkfC4iZho vcVqkk4tc7sULiY3N9DUFQG73eML53rW9mEoYhq0afAEs4U5WXgeSQH/rgLjx5qo ecoZ05CSt4gOvIZKEa6Y+hVhcSeqYHKkczWIlJbXk8voGBDX1q6/7CBO+L13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYlIEPzdIDWbT/x+4sPUp+E0Kox0wHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMcPYjL1ZvzjfSeLoWXbbXUp8Iz+i2zljID q2Dn3P2fCgVrrmbK2gshYz6EhXDO0dv2O1+EsM+r83ZDhF+VD51dzkDtyg6/UITU 16yaqSKegtynejiVyO7ZBNTyMA7wsVBz9o94kvQ8CYo/DP4CMQqfpac+oZZUjLom yG2EU1SMJVhm9hQZKU0vaD7UM0BB5XyzQdAcjY3vHnL8L8UWO6hgd5et4er8rNIA gWq+aImkEpDONcJZFAOL/183kMK0QVCARexDUZtlc4wqLT48zeUrOqD3cDp3Agvl pxNdN8V65bvI8CAX7bj4ANd03UMrn4GZk1pzTRJtfK+NXTwJ3yo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:06 2026 by rpki-client