$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: RwLIxs3E+kruud8uBn4+FCoyd8kRRFOyR8t4cnfdZkI= Subject key identifier: F1:9D:72:37:21:9B:ED:EE:4E:43:14:CC:15:0A:2A:03:BA:32:BB:29 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 0C21D8018D826CEB815E0D95ECFF6145AEBFD976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 04A9 Signing time: Wed 25 Mar 2026 21:51:37 +0000 Manifest this update: Wed 25 Mar 2026 21:46:37 +0000 Manifest next update: Sat 28 Mar 2026 22:14:37 +0000 Files and hashes: 1: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) 3: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: jbavHIpXcnmJh8iL+oD2lKuLJCvwlV94zs0++tdWu0c=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:21:d8:01:8d:82:6c:eb:81:5e:0d:95:ec:ff:61:45:ae:bf:d9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Mar 25 21:46:37 2026 GMT Not After : Mar 28 22:14:37 2026 GMT Subject: CN=F19D7237219BEDEE4E4314CC150A2A03BA32BB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:88:31:2e:19:c5:32:7c:2b:f5:68:a6:2e: de:1f:d1:1c:56:4c:37:b7:db:4b:44:3d:0a:bb:a9: 61:9b:8f:db:f8:b2:47:ac:c7:ec:89:c6:a9:c1:87: ea:48:d6:09:dc:a0:8e:86:1a:b3:de:99:71:92:ea: f4:57:59:f0:9d:93:6a:22:e9:12:bc:f8:15:00:ff: 1e:c4:96:cf:39:56:e9:ac:1d:f0:2c:2a:41:cf:46: 4a:7d:99:0a:93:89:f7:86:42:2c:dd:42:73:a0:73: d6:2a:c2:45:58:59:3b:8e:88:a2:df:ce:07:25:68: f2:8d:17:df:de:84:90:7d:bd:88:43:48:26:4f:80: 4e:ad:42:d9:46:a4:8e:e6:a0:13:0c:f3:ac:78:8c: a2:d3:04:6f:4a:d3:5b:73:12:eb:59:3c:20:02:b5: c2:e3:33:04:1a:3b:1e:95:fc:91:f7:fd:1a:df:12: b1:f2:ec:ff:1b:09:0b:3b:96:b2:22:08:1d:b7:ad: 02:2e:1f:06:93:6a:22:c4:97:67:66:29:cb:e0:15: 33:06:de:90:2b:3a:8c:80:be:c7:af:40:f0:69:30: f3:f6:39:d8:cb:06:90:72:af:df:6e:1b:6a:39:5c: 7b:3a:ed:03:af:e1:75:5b:a0:7b:4f:32:9e:55:ac: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:72:37:21:9B:ED:EE:4E:43:14:CC:15:0A:2A:03:BA:32:BB:29 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0e:6a:5b:76:74:8d:86:6f:c3:6c:31:74:a1:e5:b3:2e:40: 38:04:07:53:12:56:ab:15:ee:26:15:e0:9c:be:c2:56:3f:81: 84:e1:91:65:ab:e0:81:7b:5f:13:8f:07:be:cb:0c:3e:07:10: 08:24:b4:d6:b4:50:fd:6e:36:f6:8b:3b:80:32:f1:f6:64:94: 90:3b:3f:2d:2a:e7:ab:f5:bb:f7:f4:c7:35:44:28:ab:1d:cd: 67:da:a4:6b:26:c4:43:f0:1d:c9:60:fc:2b:e4:25:ba:31:43: d5:af:d6:41:f8:7d:4a:38:58:b9:ea:8d:5d:b0:f2:7e:97:44: 0e:f4:3d:a9:37:4d:60:32:ba:2c:81:ba:30:a8:3a:dd:13:2d: 6e:c5:ac:19:b0:fb:42:72:9c:05:43:71:be:2f:1d:7a:92:5b: 34:68:44:4e:fb:ef:8c:d1:58:0d:a2:d2:0c:5d:16:7c:ba:86: 21:2e:2f:8e:a5:d4:e5:aa:98:7d:5f:da:8c:a9:08:fe:2f:47: 9f:a8:f6:fb:c8:31:e8:50:20:32:01:7e:84:91:d6:45:da:33: 77:27:f3:15:46:3a:5d:0d:8c:fc:f4:6f:01:3b:84:45:66:67: 4a:02:6b:f9:da:f9:4b:b5:a8:ef:21:8d:47:65:76:bb:01:70: c3:b8:dd:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCHYAY2CbOuBXg2V7P9hRa6/2XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNjAzMjUyMTQ2MzdaFw0yNjAzMjgyMjE0MzdaMDMxMTAvBgNV BAMTKEYxOUQ3MjM3MjE5QkVERUU0RTQzMTRDQzE1MEEyQTAzQkEzMkJCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdIgxLhnFMnwr9WimLt4f0RxW TDe320tEPQq7qWGbj9v4skesx+yJxqnBh+pI1gncoI6GGrPemXGS6vRXWfCdk2oi 6RK8+BUA/x7Els85VumsHfAsKkHPRkp9mQqTifeGQizdQnOgc9YqwkVYWTuOiKLf zgclaPKNF9/ehJB9vYhDSCZPgE6tQtlGpI7moBMM86x4jKLTBG9K01tzEutZPCAC tcLjMwQaOx6V/JH3/RrfErHy7P8bCQs7lrIiCB23rQIuHwaTaiLEl2dmKcvgFTMG 3pArOoyAvsevQPBpMPP2OdjLBpByr99uG2o5XHs67QOv4XVboHtPMp5VrMwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Z1yNyGb7e5OQxTMFQoqA7oyuykwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEOalt2dI2Gb8NsMXSh5bMuQDgEB1MSVqsV 7iYV4Jy+wlY/gYThkWWr4IF7XxOPB77LDD4HEAgktNa0UP1uNvaLO4Ay8fZklJA7 Py0q56v1u/f0xzVEKKsdzWfapGsmxEPwHclg/CvkJboxQ9Wv1kH4fUo4WLnqjV2w 8n6XRA70Pak3TWAyuiyBujCoOt0TLW7FrBmw+0JynAVDcb4vHXqSWzRoRE7774zR WA2i0gxdFny6hiEuL46l1OWqmH1f2oypCP4vR5+o9vvIMehQIDIBfoSR1kXaM3cn 8xVGOl0NjPz0bwE7hEVmZ0oCa/na+Uu1qO8hjUdldrsBcMO43Zg= -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:09 2026 by rpki-client