$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: /e1kva2H6yWg/mVs1Pwhpe59Iua1bsl+1klclXjlRYY= Subject key identifier: F5:CE:9D:55:6D:00:D1:27:04:6B:E5:31:D0:B9:A8:F9:67:80:6A:D5 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 251014D125BF42CB2A6EDDCFABF4374C95D79FA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 033E Signing time: Thu 26 Mar 2026 14:10:45 +0000 Manifest this update: Thu 26 Mar 2026 14:05:45 +0000 Manifest next update: Sun 29 Mar 2026 20:29:45 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: zLmj1JqiFLwIrYXEATCizo36+CvtfKNWS61Ts1my79s=) 2: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:10:14:d1:25:bf:42:cb:2a:6e:dd:cf:ab:f4:37:4c:95:d7:9f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Mar 26 14:05:45 2026 GMT Not After : Mar 29 20:29:45 2026 GMT Subject: CN=F5CE9D556D00D127046BE531D0B9A8F967806AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:23:8f:c1:0d:47:3f:84:ed:08:6d:bd:d8: af:8c:7b:0e:1d:8b:27:9a:94:41:2c:a9:32:7d:f1: 62:bd:7e:b9:84:3c:87:8d:ff:51:e2:57:f8:7e:df: c6:d6:9d:ee:a8:36:21:9e:cd:a8:7e:8b:21:c8:d2: 6a:eb:c8:6b:66:80:72:4d:63:c4:24:67:1d:6b:55: 90:fa:55:1b:c1:3a:4f:92:9c:c3:89:84:fd:3b:e3: d2:23:89:90:72:65:d8:29:91:84:4f:9e:7e:17:fd: e5:8b:c2:a7:d2:2e:72:ca:dc:6d:fa:05:5d:b3:71: cf:18:29:9a:27:c4:2f:3e:53:7d:45:a8:a2:3e:1c: 00:06:fe:ea:d8:d9:19:82:34:37:6c:da:8d:75:66: cb:5c:ee:e4:e4:8d:a7:d7:6c:34:3f:76:b3:7e:74: 72:12:69:42:13:4f:71:31:8b:01:d4:37:29:75:8e: 6a:c4:30:68:b9:79:df:37:96:86:e9:72:27:8f:ff: 63:7f:15:e0:f2:3c:b5:80:5c:19:95:40:b3:9c:31: df:bc:a2:9e:b5:05:4c:b6:a2:d9:91:85:9e:a4:78: fb:a6:37:4d:fb:fa:c2:09:1d:b7:ac:d6:f0:31:46: 9a:b0:2b:ff:ab:b0:62:bc:93:51:6f:5f:cf:9b:13: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:9D:55:6D:00:D1:27:04:6B:E5:31:D0:B9:A8:F9:67:80:6A:D5 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bc:f9:26:40:84:92:c3:1f:15:04:e7:e2:f9:57:46:df:b3: cd:cf:c0:21:a8:90:4c:a5:39:a3:5c:43:44:18:6e:42:50:36: 3f:0f:5b:f4:fa:e7:3b:f7:d7:f1:dd:36:fe:63:fb:57:5e:7c: a3:6d:34:89:89:86:9c:be:a9:bc:ba:7d:3d:87:d9:5e:10:d8: 82:b7:7b:6b:6b:b7:ae:5e:d6:b8:0d:52:7d:c7:60:17:3d:81: 35:ba:ca:2d:a8:54:ce:62:ae:6a:95:eb:00:75:2a:48:60:78: 43:c9:21:01:95:d7:0d:be:76:47:80:cc:30:8d:35:05:d4:d2: 31:53:e7:c9:8a:38:ea:5a:ac:8d:32:f5:98:df:95:46:68:b4: 24:54:6a:45:d2:36:ce:60:80:16:20:9d:3c:73:5c:da:9b:e1: 71:98:59:16:ed:2b:b2:6c:12:fb:e2:96:ec:73:d8:06:f1:3b: 36:95:b0:4e:8b:52:c0:9f:55:fe:1e:72:16:35:2e:b6:d3:a2: 16:0e:db:75:ba:cb:e1:03:4a:e1:18:af:96:cf:68:e9:13:03: f1:3b:95:52:fa:6a:59:a2:1b:36:38:74:35:8c:d9:40:40:12: 6f:11:3d:a9:4a:f4:a3:f4:32:dd:d8:a0:eb:78:b8:6b:c0:0d: 68:ac:93:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRAU0SW/Qssqbt3Pq/Q3TJXXn6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNjAzMjYxNDA1NDVaFw0yNjAzMjkyMDI5NDVaMDMxMTAvBgNV BAMTKEY1Q0U5RDU1NkQwMEQxMjcwNDZCRTUzMUQwQjlBOEY5Njc4MDZBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcyOPwQ1HP4TtCG292K+Mew4d iyealEEsqTJ98WK9frmEPIeN/1HiV/h+38bWne6oNiGezah+iyHI0mrryGtmgHJN Y8QkZx1rVZD6VRvBOk+SnMOJhP0749IjiZByZdgpkYRPnn4X/eWLwqfSLnLK3G36 BV2zcc8YKZonxC8+U31FqKI+HAAG/urY2RmCNDds2o11Zstc7uTkjafXbDQ/drN+ dHISaUITT3ExiwHUNyl1jmrEMGi5ed83lobpcieP/2N/FeDyPLWAXBmVQLOcMd+8 op61BUy2otmRhZ6kePumN037+sIJHbes1vAxRpqwK/+rsGK8k1FvX8+bE4ljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9c6dVW0A0ScEa+Ux0Lmo+WeAatUwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm8+SZAhJLDHxUE5+L5V0bfs83PwCGokEyl OaNcQ0QYbkJQNj8PW/T65zv31/HdNv5j+1defKNtNImJhpy+qby6fT2H2V4Q2IK3 e2trt65e1rgNUn3HYBc9gTW6yi2oVM5irmqV6wB1KkhgeEPJIQGV1w2+dkeAzDCN NQXU0jFT58mKOOparI0y9ZjflUZotCRUakXSNs5ggBYgnTxzXNqb4XGYWRbtK7Js Evviluxz2AbxOzaVsE6LUsCfVf4echY1LrbTohYO23W6y+EDSuEYr5bPaOkTA/E7 lVL6almiGzY4dDWM2UBAEm8RPalK9KP0Mt3YoOt4uGvADWisk/8= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:05 2026 by rpki-client