$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: iKBN+gCoCRm39xeA1xOY/kXKus7a7U/WbZzRt2pYVV8= Subject key identifier: A0:CD:2B:4D:34:47:92:9F:FE:2C:37:F2:AF:10:82:64:C0:C4:A1:95 Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 30E5108CC81FCA529BC9E3B80F015DDD697890DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 6B Signing time: Wed 25 Mar 2026 00:21:37 +0000 Manifest this update: Wed 25 Mar 2026 00:16:37 +0000 Manifest next update: Sat 28 Mar 2026 01:09:37 +0000 Files and hashes: 1: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: Su7erbMyYL1O1HwAn9c4DvZ0ys5O54TmscbJAVenEK0=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e5:10:8c:c8:1f:ca:52:9b:c9:e3:b8:0f:01:5d:dd:69:78:90:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Mar 25 00:16:37 2026 GMT Not After : Mar 28 01:09:37 2026 GMT Subject: CN=A0CD2B4D3447929FFE2C37F2AF108264C0C4A195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:9d:45:23:f3:71:9a:2e:fd:9a:af:b9:e2: f0:14:de:83:7c:00:40:b9:55:bd:f4:a2:d3:ed:cd: 21:73:f3:25:b0:59:00:d2:06:3b:0f:81:ff:80:f4: ff:61:f3:86:c0:d6:e1:80:91:7b:6f:19:c5:f7:e1: 05:b4:96:47:c1:c7:0f:9c:6e:16:70:bd:a3:b2:8b: 4d:34:03:bf:d9:61:f1:a6:ff:5a:9e:ee:80:fa:a4: a3:ee:8c:6a:e4:ea:cf:9d:bd:44:44:cb:10:66:60: 7f:3a:89:42:97:1d:82:f2:30:9c:20:95:ae:5e:ff: bc:f5:cb:00:05:16:4b:75:3b:df:20:e8:52:a5:c2: e3:28:96:ed:b2:a9:9a:18:d6:49:c7:55:d9:d4:cd: 5d:bc:1b:5c:5f:47:82:5d:70:7b:4a:57:41:fc:9d: 15:00:16:a2:64:7d:bd:7b:f5:5d:fa:a4:02:de:94: da:c4:2a:69:aa:e8:6c:ca:b8:b0:4a:a2:af:9c:2c: fe:70:0d:ab:9e:8a:d9:93:64:e8:5f:d3:5e:13:87: ab:ad:c5:49:41:bd:cc:4e:c7:14:f6:a0:22:74:e0: 4d:5c:35:66:03:2a:b4:7c:02:4e:a9:c5:2b:a1:c6: 78:fc:aa:69:d4:09:85:89:51:8c:db:f7:b5:55:f1: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CD:2B:4D:34:47:92:9F:FE:2C:37:F2:AF:10:82:64:C0:C4:A1:95 X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:2d:16:be:83:43:73:18:1e:1f:a1:60:03:90:f6:60:2d: 27:51:b8:71:03:be:a8:f6:f8:32:44:55:49:63:a0:76:72:f4: 85:e3:60:65:4e:a3:bd:89:4a:4d:c7:f9:7c:0f:80:29:ea:e3: a8:56:b9:c7:94:5a:2b:28:c5:4b:ad:f1:82:d3:28:36:32:37: 4a:72:97:15:46:ad:a1:c0:4c:ca:d6:f9:10:89:d4:4f:0a:87: 9f:42:61:0c:c3:c4:c7:14:63:81:3b:ee:fa:1f:c3:ff:6d:76: e9:2a:cf:9e:78:16:32:39:dd:00:41:cc:76:36:c7:c7:a4:17: 4d:ea:b6:ab:d8:e5:52:c9:04:2b:16:84:97:34:2d:ff:19:0b: 15:b6:7c:78:7b:97:d8:7b:78:0d:e0:eb:41:1d:a0:16:be:52: 3e:e6:93:46:3e:42:3a:63:26:96:69:89:cb:9c:c8:05:8e:70: 0d:4e:f1:3f:9a:da:9c:97:d8:df:9e:fe:59:5a:43:5f:30:84: a1:1c:54:da:ae:16:3b:d4:9c:91:6d:93:cd:13:45:d5:4a:39: b7:8a:30:80:50:e0:11:3a:fc:bc:58:16:eb:25:e4:8d:84:ec: 79:26:69:bd:94:52:dd:3a:45:13:ea:50:8c:fd:6e:b6:98:6a: 65:5f:4e:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOUQjMgfylKbyeO4DwFd3Wl4kNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNjAzMjUwMDE2MzdaFw0yNjAzMjgwMTA5MzdaMDMxMTAvBgNV BAMTKEEwQ0QyQjREMzQ0NzkyOUZGRTJDMzdGMkFGMTA4MjY0QzBDNEExOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4a51FI/Nxmi79mq+54vAU3oN8 AEC5Vb30otPtzSFz8yWwWQDSBjsPgf+A9P9h84bA1uGAkXtvGcX34QW0lkfBxw+c bhZwvaOyi000A7/ZYfGm/1qe7oD6pKPujGrk6s+dvUREyxBmYH86iUKXHYLyMJwg la5e/7z1ywAFFkt1O98g6FKlwuMolu2yqZoY1knHVdnUzV28G1xfR4JdcHtKV0H8 nRUAFqJkfb179V36pALelNrEKmmq6GzKuLBKoq+cLP5wDaueitmTZOhf014Th6ut xUlBvcxOxxT2oCJ04E1cNWYDKrR8Ak6pxSuhxnj8qmnUCYWJUYzb97VV8YzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoM0rTTRHkp/+LDfyrxCCZMDEoZUwHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1LLRa+g0NzGB4foWADkPZgLSdRuHEDvqj2 +DJEVUljoHZy9IXjYGVOo72JSk3H+XwPgCnq46hWuceUWisoxUut8YLTKDYyN0py lxVGraHATMrW+RCJ1E8Kh59CYQzDxMcUY4E77vofw/9tdukqz554FjI53QBBzHY2 x8ekF03qtqvY5VLJBCsWhJc0Lf8ZCxW2fHh7l9h7eA3g60EdoBa+Uj7mk0Y+Qjpj JpZpicucyAWOcA1O8T+a2pyX2N+e/llaQ18whKEcVNquFjvUnJFtk80TRdVKObeK MIBQ4BE6/LxYFusl5I2E7Hkmab2UUt06RRPqUIz9braYamVfTvU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:26:27 2026 by rpki-client