$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: o3ZoXmhEFFgiqN4cHoec+c0rOcGd06R+45ABaXvPLfg= Subject key identifier: A8:14:31:F7:97:30:6C:37:4E:83:91:97:29:50:26:05:CE:23:9C:34 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 6C4C3846A62640AFBD8BDE250F932E3D4C35D3F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 19:02:27 +0000 Manifest this update: Wed 25 Mar 2026 18:57:27 +0000 Manifest next update: Sun 29 Mar 2026 03:43:27 +0000 Files and hashes: 1: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: RP2gd79Okk0HL9ulbzVZjaVqRq/pHM5NlbzxMPNXZW8=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4c:38:46:a6:26:40:af:bd:8b:de:25:0f:93:2e:3d:4c:35:d3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Mar 25 18:57:27 2026 GMT Not After : Mar 29 03:43:27 2026 GMT Subject: CN=A81431F797306C374E83919729502605CE239C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:74:71:b4:e7:a3:37:fc:36:2f:90:9a:73: e3:c8:be:18:2a:d7:d4:f0:08:86:db:fa:3c:1a:67: c8:c7:1e:97:ee:94:17:de:2c:7a:91:81:84:c6:48: d3:91:a1:77:ed:35:b2:9c:3d:78:99:d1:53:a3:e7: 90:43:a6:b4:67:81:ae:be:9a:63:00:5e:a8:cd:87: 3f:87:e5:f7:9b:09:4c:b4:09:70:cd:6e:02:75:d7: 87:11:62:0b:6d:1c:a9:58:e9:91:6b:7e:ae:bc:e8: 7e:61:87:f6:88:11:b7:d3:31:8c:bc:f0:4b:94:41: 13:fe:02:fb:2a:36:46:83:7a:5b:94:8a:3d:93:42: cc:6d:2f:ed:2e:03:91:71:4b:5d:c5:9f:32:c7:e7: b5:40:d1:02:be:18:a1:4f:c3:e8:43:72:23:8e:ba: 4d:16:e5:23:02:f9:03:ba:ea:b4:5e:ab:82:fb:7f: 95:fd:75:16:cf:d9:dc:c2:85:2c:b2:f2:f8:c8:55: 38:f3:29:89:cc:8a:61:31:dc:5a:38:5f:32:8b:0f: 6b:1d:e6:69:c5:33:d2:80:42:66:1c:49:04:ef:51: f5:8d:39:83:a8:90:60:12:90:ce:b9:85:f3:05:3b: c3:7b:6e:c8:7c:02:5b:99:91:e9:84:75:04:c7:ed: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:31:F7:97:30:6C:37:4E:83:91:97:29:50:26:05:CE:23:9C:34 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ac:a5:07:15:9d:c2:2b:58:06:0f:73:a4:6b:ec:8b:6b:c0: fb:ac:6b:98:42:9f:f3:45:7d:ba:3d:91:98:09:dc:bf:78:b5: 48:86:53:2e:7c:10:20:28:73:ed:13:c3:60:e7:61:fa:7a:3e: 10:ad:7b:68:83:ad:ca:3b:44:d4:3b:7a:1c:b5:e6:c1:7a:42: a9:28:3e:b6:35:75:06:dc:3e:39:a2:dd:b7:2e:7f:9a:ac:29: a2:48:13:41:d0:36:b4:21:14:b6:21:dd:21:9c:a0:c1:f8:15: 36:95:79:c7:dc:fe:7d:db:b3:c3:c3:48:6e:da:64:12:57:ee: 54:73:0f:92:b9:de:2d:7f:25:a7:84:a0:3e:7f:94:cc:e9:e2: b9:a6:b5:03:1f:d9:9c:a0:17:05:4a:e6:3c:8b:61:ca:66:62: e4:57:e8:66:55:f5:38:ee:fe:71:df:c6:ad:15:47:d0:c8:5d: 27:42:bb:ed:30:ef:77:36:07:d4:48:3f:45:ec:fa:51:26:45: 16:80:b4:09:e4:82:31:8c:ff:90:df:71:91:8a:7d:2e:b6:58: e0:7e:c3:46:fd:86:b1:fd:6b:9d:a8:45:14:73:ca:52:f0:1b: 21:f3:66:9a:bc:5b:99:ec:61:5a:93:88:d4:d1:9d:9d:94:cd: 66:d0:ad:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEw4RqYmQK+9i94lD5MuPUw10/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNjAzMjUxODU3MjdaFw0yNjAzMjkwMzQzMjdaMDMxMTAvBgNV BAMTKEE4MTQzMUY3OTczMDZDMzc0RTgzOTE5NzI5NTAyNjA1Q0UyMzlDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCXRxtOejN/w2L5Cac+PIvhgq 19TwCIbb+jwaZ8jHHpfulBfeLHqRgYTGSNORoXftNbKcPXiZ0VOj55BDprRnga6+ mmMAXqjNhz+H5febCUy0CXDNbgJ114cRYgttHKlY6ZFrfq686H5hh/aIEbfTMYy8 8EuUQRP+AvsqNkaDeluUij2TQsxtL+0uA5FxS13FnzLH57VA0QK+GKFPw+hDciOO uk0W5SMC+QO66rReq4L7f5X9dRbP2dzChSyy8vjIVTjzKYnMimEx3Fo4XzKLD2sd 5mnFM9KAQmYcSQTvUfWNOYOokGASkM65hfMFO8N7bsh8AluZkemEdQTH7VcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBQx95cwbDdOg5GXKVAmBc4jnDQwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+spQcVncIrWAYPc6Rr7ItrwPusa5hCn/NF fbo9kZgJ3L94tUiGUy58ECAoc+0Tw2DnYfp6PhCte2iDrco7RNQ7ehy15sF6Qqko PrY1dQbcPjmi3bcuf5qsKaJIE0HQNrQhFLYh3SGcoMH4FTaVecfc/n3bs8PDSG7a ZBJX7lRzD5K53i1/JaeEoD5/lMzp4rmmtQMf2ZygFwVK5jyLYcpmYuRX6GZV9Tju /nHfxq0VR9DIXSdCu+0w73c2B9RIP0Xs+lEmRRaAtAnkgjGM/5DfcZGKfS62WOB+ w0b9hrH9a52oRRRzylLwGyHzZpq8W5nsYVqTiNTRnZ2UzWbQrZo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:48 2026 by rpki-client