$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: bER11dTta6qGN3Z296lDUF6T52XJ0ww3mibmDBnP1DI= Subject key identifier: 5E:9A:55:48:90:06:03:B3:C4:0C:A7:A3:4F:D2:24:C8:6A:73:52:7A Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 201772783E07BC7171727D515CEBBD7AA5EBE82D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 025E Signing time: Thu 26 Mar 2026 01:12:33 +0000 Manifest this update: Thu 26 Mar 2026 01:07:33 +0000 Manifest next update: Sun 29 Mar 2026 11:13:33 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: IgizShDVF3XIdFoYQysMBd+RMZoTyStrHHHFv+jVVho=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: R/amL0CvL4AlTslDloKd2xM3+Qme4CSPRPe81CkHZrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:17:72:78:3e:07:bc:71:71:72:7d:51:5c:eb:bd:7a:a5:eb:e8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Mar 26 01:07:33 2026 GMT Not After : Mar 29 11:13:33 2026 GMT Subject: CN=5E9A5548900603B3C40CA7A34FD224C86A73527A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:9d:52:8a:98:29:c5:ec:9c:44:7f:5f:f3: 6d:2d:58:b0:8c:8d:72:1a:fa:5d:d3:1f:00:ff:67: 67:df:1c:95:d2:e8:04:c0:e4:3e:4c:73:d5:90:d3: f1:e8:87:79:15:59:02:c8:18:08:c9:80:fa:a5:ab: db:66:64:8c:bb:04:b4:a5:27:fe:94:8f:ee:a2:db: bc:52:bb:42:19:d6:57:fc:f4:fb:68:a7:a7:9d:71: 44:59:d1:86:b7:9f:9e:9c:02:4c:c6:8c:77:58:65: 99:e8:ac:4c:03:87:8c:f1:f4:b9:50:75:29:50:69: c0:28:5f:20:6e:f2:14:38:a5:ee:c3:95:2b:ee:48: 0e:34:54:69:86:6d:f3:35:a4:d1:d2:6b:0d:4d:54: f4:dc:cd:95:b4:ee:3f:31:47:cd:45:85:0a:4e:18: 98:14:5d:f2:e5:c2:84:ce:cf:bc:de:01:b1:a2:16: bf:f1:87:7c:f1:e2:88:bc:7f:f5:e8:f9:a7:90:36: b5:10:a5:88:4c:a5:fd:14:f7:12:9b:1f:c0:82:88: 88:fc:1c:e9:84:29:f6:e8:fe:cc:66:1a:4d:0e:4b: f4:64:d7:3a:5e:3e:93:43:30:6b:58:b2:c8:9b:9a: f4:d5:80:9a:10:83:cf:55:a4:0f:ae:12:ff:77:22: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9A:55:48:90:06:03:B3:C4:0C:A7:A3:4F:D2:24:C8:6A:73:52:7A X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4f:b5:14:cf:66:5c:15:e0:0b:74:f2:16:99:88:ab:2c:da: 3e:fd:2d:2f:e9:91:a1:d3:5b:53:cd:02:57:29:41:91:99:23: 60:77:5c:74:4d:4e:d8:16:aa:f2:b9:68:4c:85:70:d1:08:d0: b8:0b:70:81:06:e1:47:db:ee:e2:18:88:bd:b0:07:58:c3:90: 3b:73:a5:96:6e:e8:d0:bc:54:00:e3:37:2b:cd:4b:5d:ca:99: b3:8f:6a:84:78:f3:1f:b5:07:3f:d4:9d:d2:fd:e8:63:78:fb: ab:67:89:de:15:50:bf:c5:93:16:e1:5e:69:9d:9c:0d:fd:65: d0:e0:6d:47:12:3a:8a:01:f3:93:bb:86:01:84:56:14:6c:ca: 42:92:41:dc:fe:a4:49:e5:af:c6:73:e3:76:c7:9b:aa:89:52: 6e:64:95:34:1c:c1:94:3c:8f:74:c8:79:e3:4f:b4:23:2b:68: 6d:0e:95:33:21:78:ed:43:5e:f2:85:79:d4:df:7c:dd:4e:84: 63:19:2e:fd:52:29:b0:4e:47:ab:7d:4f:b0:5b:b4:be:58:47: 1f:5c:ef:5f:93:75:3a:69:61:1c:e2:6f:b8:db:68:65:bd:d0: 80:df:f2:36:93:1c:27:19:30:34:88:61:11:f9:e9:aa:bc:37: 3c:03:e6:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBdyeD4HvHFxcn1RXOu9eqXr6C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNjAzMjYwMTA3MzNaFw0yNjAzMjkxMTEzMzNaMDMxMTAvBgNV BAMTKDVFOUE1NTQ4OTAwNjAzQjNDNDBDQTdBMzRGRDIyNEM4NkE3MzUyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5p1SipgpxeycRH9f820tWLCM jXIa+l3THwD/Z2ffHJXS6ATA5D5Mc9WQ0/Hoh3kVWQLIGAjJgPqlq9tmZIy7BLSl J/6Uj+6i27xSu0IZ1lf89Ptop6edcURZ0Ya3n56cAkzGjHdYZZnorEwDh4zx9LlQ dSlQacAoXyBu8hQ4pe7DlSvuSA40VGmGbfM1pNHSaw1NVPTczZW07j8xR81FhQpO GJgUXfLlwoTOz7zeAbGiFr/xh3zx4oi8f/Xo+aeQNrUQpYhMpf0U9xKbH8CCiIj8 HOmEKfbo/sxmGk0OS/Rk1zpePpNDMGtYssibmvTVgJoQg89VpA+uEv93IjZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXppVSJAGA7PEDKejT9IkyGpzUnowHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJPtRTPZlwV4At08haZiKss2j79LS/pkaHT W1PNAlcpQZGZI2B3XHRNTtgWqvK5aEyFcNEI0LgLcIEG4Ufb7uIYiL2wB1jDkDtz pZZu6NC8VADjNyvNS13KmbOPaoR48x+1Bz/UndL96GN4+6tnid4VUL/FkxbhXmmd nA39ZdDgbUcSOooB85O7hgGEVhRsykKSQdz+pEnlr8Zz43bHm6qJUm5klTQcwZQ8 j3TIeeNPtCMraG0OlTMheO1DXvKFedTffN1OhGMZLv1SKbBOR6t9T7BbtL5YRx9c 71+TdTppYRzib7jbaGW90IDf8jaTHCcZMDSIYRH56aq8NzwD5uw= -----END CERTIFICATE-----Generated at Fri Mar 27 01:11:37 2026 by rpki-client