$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: xLg/Ov17NmLYU0KdrA9/RzkqlSJF5PDSPjQHYwdSEDA= Subject key identifier: 6B:C6:CA:F8:3B:46:AD:5B:7F:E7:E6:F9:62:2D:62:16:16:1F:1B:90 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 458F136C28643F95CBA084DD3CAA7B1B7582D553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 025F Signing time: Wed 25 Mar 2026 18:42:20 +0000 Manifest this update: Wed 25 Mar 2026 18:37:20 +0000 Manifest next update: Sat 28 Mar 2026 22:01:20 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: YkWb+p6Amq1Iblz7+AIa03xdrtjzgboehCaNEbPHu9o=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: Kfl/9sWBuFPrWTyEyf/VdVj14rEjs9zTdYMKN2Ca1VQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8f:13:6c:28:64:3f:95:cb:a0:84:dd:3c:aa:7b:1b:75:82:d5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Mar 25 18:37:20 2026 GMT Not After : Mar 28 22:01:20 2026 GMT Subject: CN=6BC6CAF83B46AD5B7FE7E6F9622D6216161F1B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:1a:fb:74:85:f2:08:4a:9e:32:d7:5f:41:36: 9f:49:3d:c5:ea:ef:ef:6f:ef:b5:e4:51:7d:bb:4a: 6c:e3:01:a3:0e:4e:80:47:9a:24:bc:04:f0:3a:f0: 1e:13:02:8e:6f:af:8e:fc:5c:7c:af:70:a0:14:cf: cc:66:c4:24:58:3b:5c:74:f9:b5:fa:5a:21:5f:ef: 9e:f4:2c:da:b5:f2:7f:92:bf:f4:4d:90:cc:9d:93: 2b:17:9d:3f:97:a6:d4:de:e9:29:9a:a3:11:cb:df: 0b:27:59:3c:cc:78:40:51:c2:a2:a0:bb:23:89:b9: 33:d9:04:62:1b:fe:76:28:c9:9e:22:65:e5:47:e8: dc:e4:62:d5:bc:12:fb:a2:5d:36:48:8d:c9:fd:f3: ac:0b:4a:51:a6:ae:68:31:0e:bb:b2:05:13:91:a0: 23:12:db:d2:ab:dc:b3:96:57:23:19:94:28:68:56: 4d:bc:b4:c8:e2:14:4f:e4:54:5d:88:f3:59:6f:1b: e4:0d:8c:cb:f7:bb:89:17:c7:04:c8:17:36:a3:f9: a0:4c:28:86:72:81:d2:42:2c:1e:e2:ce:d8:f8:3a: b1:02:65:5b:a7:aa:b8:22:10:2f:19:08:0a:67:17: c0:c2:ac:65:75:e3:e2:5f:a3:48:01:c4:39:38:a3: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C6:CA:F8:3B:46:AD:5B:7F:E7:E6:F9:62:2D:62:16:16:1F:1B:90 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:71:5d:ae:8e:5e:9a:d8:82:59:4c:54:16:5e:40:ae:08:9b: 4c:dd:c9:a2:98:b3:b5:1e:7c:bd:15:c1:aa:e0:6c:e5:be:4f: b7:6b:f9:a1:72:6e:52:03:fa:6c:9b:73:00:53:cd:19:f4:f7: d3:85:d0:0d:dd:fe:30:81:2a:7d:26:cb:e7:c5:16:7d:d8:ba: 07:4e:2d:9a:78:18:bc:27:8e:3f:d4:b8:19:b0:d2:a4:22:ec: 80:cd:70:17:0c:dd:07:06:6c:58:9f:5a:cc:92:31:ef:2d:f3: 06:79:30:97:f9:8d:20:97:fe:33:47:6a:cb:d9:c3:5a:f2:56: e9:e8:fc:ff:f3:ca:db:d6:1a:48:50:bb:63:a4:fc:1c:19:63: 92:c9:21:9c:35:ca:d8:8c:aa:60:23:eb:1f:ba:3e:44:f2:03: 72:50:4d:25:5d:b8:d3:f2:da:ca:ba:10:ad:56:59:36:78:98: 72:ee:8b:84:a6:2f:9f:56:50:84:8d:8c:c3:e0:76:98:f8:cd: aa:26:d0:67:36:ef:c7:10:97:87:17:4f:f5:33:05:00:15:aa: 16:61:5b:54:e0:4a:ea:7f:55:86:b9:bd:67:eb:7a:be:47:9a: ae:88:a4:c6:94:56:a5:31:c0:cd:12:67:48:d4:ea:0e:7c:10: db:54:17:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY8TbChkP5XLoITdPKp7G3WC1VMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNjAzMjUxODM3MjBaFw0yNjAzMjgyMjAxMjBaMDMxMTAvBgNV BAMTKDZCQzZDQUY4M0I0NkFENUI3RkU3RTZGOTYyMkQ2MjE2MTYxRjFCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7Gvt0hfIISp4y119BNp9JPcXq 7+9v77XkUX27SmzjAaMOToBHmiS8BPA68B4TAo5vr478XHyvcKAUz8xmxCRYO1x0 +bX6WiFf7570LNq18n+Sv/RNkMydkysXnT+XptTe6SmaoxHL3wsnWTzMeEBRwqKg uyOJuTPZBGIb/nYoyZ4iZeVH6NzkYtW8EvuiXTZIjcn986wLSlGmrmgxDruyBROR oCMS29Kr3LOWVyMZlChoVk28tMjiFE/kVF2I81lvG+QNjMv3u4kXxwTIFzaj+aBM KIZygdJCLB7iztj4OrECZVunqrgiEC8ZCApnF8DCrGV14+Jfo0gBxDk4o4mZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8bK+DtGrVt/5+b5Yi1iFhYfG5AwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZxXa6OXprYgllMVBZeQK4Im0zdyaKYs7Ue fL0VwargbOW+T7dr+aFyblID+mybcwBTzRn099OF0A3d/jCBKn0my+fFFn3YugdO LZp4GLwnjj/UuBmw0qQi7IDNcBcM3QcGbFifWsySMe8t8wZ5MJf5jSCX/jNHasvZ w1ryVuno/P/zytvWGkhQu2Ok/BwZY5LJIZw1ytiMqmAj6x+6PkTyA3JQTSVduNPy 2sq6EK1WWTZ4mHLui4SmL59WUISNjMPgdpj4zaom0Gc278cQl4cXT/UzBQAVqhZh W1TgSup/VYa5vWfrer5Hmq6IpMaUVqUxwM0SZ0jU6g58ENtUF0U= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:10 2026 by rpki-client