$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: y6z/BmA8cIvNsXItU3ITXBSEZf9z/okFrPpOHf6qsSA= Subject key identifier: 4F:3B:CE:B0:63:27:EA:62:C8:63:E5:17:97:01:F5:44:EB:9F:C6:64 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 0C0E6413EE6D2ACCBA4298B0903D4FB5753AC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 0258 Signing time: Tue 24 Mar 2026 06:01:08 +0000 Manifest this update: Tue 24 Mar 2026 05:56:08 +0000 Manifest next update: Fri 27 Mar 2026 11:38:08 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: 2lMXQEuaV2fFdvvxR0ZTh3oyj0B3ZMnQanErGTbSg1c=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0e:64:13:ee:6d:2a:cc:ba:42:98:b0:90:3d:4f:b5:75:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Mar 24 05:56:08 2026 GMT Not After : Mar 27 11:38:08 2026 GMT Subject: CN=4F3BCEB06327EA62C863E5179701F544EB9FC664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:b9:94:5e:6f:64:56:dd:40:89:b8:93:b5: ee:ae:58:35:d3:eb:4f:45:f4:1c:45:25:6d:22:b7: ff:6a:9b:c4:f2:4d:cf:a9:f0:09:69:6f:fc:7a:b7: 54:25:dd:c0:37:37:81:5f:c7:bd:61:17:05:ce:28: 47:6e:35:33:0d:c6:13:2f:85:08:79:f5:49:07:ab: 56:90:c2:61:83:73:28:1e:92:a5:7f:1b:8c:54:06: 44:f5:6e:c1:aa:97:19:3c:e4:47:2d:df:f5:2b:53: a4:29:96:29:c7:b8:be:b5:96:fb:e1:92:8a:87:58: de:4c:a2:46:4b:26:fd:19:7d:7b:dc:b2:9e:6b:26: 62:b6:02:51:52:1b:f7:fc:f5:bf:2d:c9:aa:5f:49: 80:34:cb:9e:95:24:24:3b:96:f9:d9:0d:e1:6c:d8: 21:ac:d8:e8:a5:e1:60:9a:bb:a2:b3:6c:2e:65:72: 7b:5e:c9:b9:11:73:3e:1b:d4:28:43:20:8d:af:47: c3:0e:f2:04:11:92:8e:7d:16:e5:94:b3:8f:4f:c5: 37:e2:90:25:cf:01:29:8e:0b:99:56:42:ac:82:01: 69:c6:2a:35:bf:f2:bc:d9:1e:83:95:90:d3:c9:24: 72:44:79:4b:33:e7:72:40:09:20:1b:2b:2b:5f:ea: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:CE:B0:63:27:EA:62:C8:63:E5:17:97:01:F5:44:EB:9F:C6:64 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a6:a2:36:bc:34:c1:cd:ff:ca:4f:c6:36:c9:f3:71:bf:c4: 12:f4:24:b5:a0:f8:26:1c:64:52:4b:15:73:9d:9e:46:f6:00: f7:14:bb:b7:fd:1d:0f:e5:2c:fd:bf:ef:16:20:bd:63:45:75: 75:a1:9c:2d:a1:31:71:1e:fa:24:da:74:3c:e9:08:3f:da:21: 6d:50:f1:88:fc:20:aa:30:26:77:e9:48:1a:63:6d:ff:9d:4d: 37:4b:d5:88:84:33:34:ee:9b:b8:46:d4:88:a1:c7:07:fb:f8: 66:bb:2e:25:d3:4a:58:f5:cf:61:d6:9f:77:1c:82:4b:63:9b: 7a:b1:a8:dc:39:26:82:66:df:89:2f:08:f1:f9:04:02:ce:33: 9f:f5:bd:50:92:eb:36:03:40:df:2e:08:c8:ff:18:1f:01:2b: 6b:6a:c0:f0:d9:93:df:09:e2:6f:0f:2e:5e:42:6e:21:ec:28: 19:89:f0:00:5e:52:da:c1:17:0f:b4:e6:bd:6d:2b:ae:f5:e2: 3c:1f:24:5b:d4:38:ee:58:d4:54:ae:cf:7d:b7:52:e4:c3:81: 6f:fb:5a:2f:2f:48:c4:1c:3d:35:a9:ca:5f:38:85:55:84:ed: 6c:04:d7:9a:76:f6:52:12:79:3c:ec:86:a7:48:f1:5a:7f:d6: 55:3c:c3:1a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITDA5kE+5tKsy6QpiwkD1PtXU6wDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4Q0MzQTY3REJBMTYyQjQ0MzBERjBGMDhGODEwQTdCOTUz Q0JBNEExMB4XDTI2MDMyNDA1NTYwOFoXDTI2MDMyNzExMzgwOFowMzExMC8GA1UE AxMoNEYzQkNFQjA2MzI3RUE2MkM4NjNFNTE3OTcwMUY1NDRFQjlGQzY2NDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALQFuZReb2RW3UCJuJO17q5YNdPr T0X0HEUlbSK3/2qbxPJNz6nwCWlv/Hq3VCXdwDc3gV/HvWEXBc4oR241Mw3GEy+F CHn1SQerVpDCYYNzKB6SpX8bjFQGRPVuwaqXGTzkRy3f9StTpCmWKce4vrWW++GS iodY3kyiRksm/Rl9e9yynmsmYrYCUVIb9/z1vy3Jql9JgDTLnpUkJDuW+dkN4WzY IazY6KXhYJq7orNsLmVye17JuRFzPhvUKEMgja9Hww7yBBGSjn0W5ZSzj0/FN+KQ Jc8BKY4LmVZCrIIBacYqNb/yvNkeg5WQ08kkckR5SzPnckAJIBsrK1/q2hkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRPO86wYyfqYshj5ReXAfVE65/GZDAfBgNVHSME GDAWgBSMw6Z9uhYrRDDfDwj4EKe5U8ukoTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5 YWZkMzE1LWY0N2YtNGY2YS1iOGI1LTQ1YTIyODBiYmM4NS8wLzhDQzNBNjdEQkEx NjJCNDQzMERGMEYwOEY4MTBBN0I5NTNDQkE0QTEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi84Q0MzQTY3REJBMTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JB NEExLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9kOWFmZDMxNS1mNDdmLTRmNmEtYjhi NS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJBMTYyQjQ0MzBERjBGMDhGODEwQTdC OTUzQ0JBNEExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAWqaiNrw0wc3/yk/GNsnzcb/EEvQktaD4Jhxk UksVc52eRvYA9xS7t/0dD+Us/b/vFiC9Y0V1daGcLaExcR76JNp0POkIP9ohbVDx iPwgqjAmd+lIGmNt/51NN0vViIQzNO6buEbUiKHHB/v4ZrsuJdNKWPXPYdafdxyC S2OberGo3DkmgmbfiS8I8fkEAs4zn/W9UJLrNgNA3y4IyP8YHwEra2rA8NmT3wni bw8uXkJuIewoGYnwAF5S2sEXD7TmvW0rrvXiPB8kW9Q47ljUVK7PfbdS5MOBb/ta Ly9IxBw9NanKXziFVYTtbATXmnb2UhJ5POyGp0jxWn/WVTzDGg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:06 2026 by rpki-client