$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: kFwVI5D0MIjNKIgq8srBd5de+/8Y3Bkp/D/oFiifkBM= Subject key identifier: 5C:BA:1E:2E:BE:E5:6D:DB:D6:EE:ED:FD:15:FF:09:3F:A4:4A:10:6E Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 79FAA0C1975EC3597760D2D82E0902E85BA35B86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 0243 Signing time: Wed 25 Mar 2026 19:12:41 +0000 Manifest this update: Wed 25 Mar 2026 19:07:41 +0000 Manifest next update: Sat 28 Mar 2026 22:48:41 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 2: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 3: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: n9y/h1o7xZkdyP5caLOk159zp5hea/d2m485MPdyStM=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fa:a0:c1:97:5e:c3:59:77:60:d2:d8:2e:09:02:e8:5b:a3:5b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Mar 25 19:07:41 2026 GMT Not After : Mar 28 22:48:41 2026 GMT Subject: CN=5CBA1E2EBEE56DDBD6EEEDFD15FF093FA44A106E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:a0:9d:0e:4b:df:2a:92:fc:fc:2a:dc:b7: 72:ac:5e:74:55:a3:13:d2:0c:8e:67:d9:48:c2:f9: 2a:13:95:20:37:c6:63:a6:a2:50:38:c9:c6:68:54: c2:95:f9:2b:58:84:38:75:44:bb:da:fc:59:94:db: 1a:d3:ef:cd:e3:83:7e:06:90:14:f6:a6:2b:19:97: 1f:01:14:79:08:2b:8d:c9:c5:94:a1:b0:99:73:09: 43:3d:96:f5:3c:95:f4:ef:ac:3a:3e:22:f7:63:7d: c3:78:e6:80:32:9a:3c:c4:36:09:fd:54:3f:eb:db: f8:f5:a1:e3:fd:c1:c3:1c:c9:b3:5a:dd:6f:d3:36: bf:70:82:75:99:f7:0b:52:db:e7:ee:c3:98:60:a1: a1:d2:7b:c5:69:ed:5c:74:53:59:d7:9e:ca:cc:74: e6:30:0d:8d:47:ee:d0:8b:9f:42:a4:e0:ea:99:86: cb:f4:5a:e8:4c:3f:a9:8f:a3:26:58:0b:f9:76:4b: ae:12:db:6a:fa:8b:fc:a5:14:aa:8f:88:db:c9:67: f4:3f:24:f7:75:99:0d:cc:b1:2a:a9:6a:f0:70:52: c8:94:6e:9c:69:bd:c4:a8:c6:78:1d:5b:2c:d8:d0: c1:4e:01:5e:34:07:03:55:e1:72:65:ce:85:9e:c7: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BA:1E:2E:BE:E5:6D:DB:D6:EE:ED:FD:15:FF:09:3F:A4:4A:10:6E X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:95:31:c7:fc:73:f3:73:6f:a1:3b:e6:de:1d:d5:0a:33:8e: 89:ad:aa:f0:d9:28:8f:e3:98:1c:4b:75:f2:07:c9:f7:79:60: 9d:ba:b6:be:74:cd:38:76:89:05:c5:a5:e5:73:cf:24:85:15: 92:f3:70:b7:a0:36:50:14:58:a7:85:a2:1c:10:fd:4c:9a:a6: 3d:12:41:30:b6:4e:71:73:37:7d:2f:51:f4:5e:e2:98:d2:a3: c7:f4:60:a1:19:0d:8f:1f:1a:3b:fa:91:7e:7f:f9:8c:2f:c4: bc:49:c8:12:79:87:60:b1:d7:a7:4f:de:b2:ed:90:e6:11:2d: 67:c6:9d:6f:14:a2:2a:a9:60:50:92:15:6c:02:fe:9c:81:fc: 56:63:63:bf:6a:00:94:6d:65:13:87:c6:a9:20:d9:ed:95:42: 0e:e2:45:47:11:ab:c3:13:90:29:0f:94:c6:9e:7d:47:b5:8c: 35:f2:95:21:c9:18:44:fa:3d:2c:d9:ce:88:e8:96:ac:0e:a0: eb:9b:7a:1f:0e:8d:b2:15:d6:9e:76:f2:98:82:42:82:35:a5: c3:ab:8f:7d:30:92:65:44:ea:e7:7e:b6:82:bd:fa:04:ed:b0: 47:62:4a:f9:76:6e:fe:c3:77:39:44:22:58:8b:98:d9:f4:9a: 4f:4b:b9:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefqgwZdew1l3YNLYLgkC6FujW4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNjAzMjUxOTA3NDFaFw0yNjAzMjgyMjQ4NDFaMDMxMTAvBgNV BAMTKDVDQkExRTJFQkVFNTZEREJENkVFRURGRDE1RkYwOTNGQTQ0QTEwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAqCdDkvfKpL8/Crct3KsXnRV oxPSDI5n2UjC+SoTlSA3xmOmolA4ycZoVMKV+StYhDh1RLva/FmU2xrT783jg34G kBT2pisZlx8BFHkIK43JxZShsJlzCUM9lvU8lfTvrDo+IvdjfcN45oAymjzENgn9 VD/r2/j1oeP9wcMcybNa3W/TNr9wgnWZ9wtS2+fuw5hgoaHSe8Vp7Vx0U1nXnsrM dOYwDY1H7tCLn0Kk4OqZhsv0WuhMP6mPoyZYC/l2S64S22r6i/ylFKqPiNvJZ/Q/ JPd1mQ3MsSqpavBwUsiUbpxpvcSoxngdWyzY0MFOAV40BwNV4XJlzoWexx8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLoeLr7lbdvW7u39Ff8JP6RKEG4wHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2VMcf8c/Nzb6E75t4d1QozjomtqvDZKI/j mBxLdfIHyfd5YJ26tr50zTh2iQXFpeVzzySFFZLzcLegNlAUWKeFohwQ/Uyapj0S QTC2TnFzN30vUfRe4pjSo8f0YKEZDY8fGjv6kX5/+YwvxLxJyBJ5h2Cx16dP3rLt kOYRLWfGnW8UoiqpYFCSFWwC/pyB/FZjY79qAJRtZROHxqkg2e2VQg7iRUcRq8MT kCkPlMaefUe1jDXylSHJGET6PSzZzojolqwOoOubeh8OjbIV1p528piCQoI1pcOr j30wkmVE6ud+toK9+gTtsEdiSvl2bv7DdzlEIliLmNn0mk9LuTo= -----END CERTIFICATE-----Generated at Thu Mar 26 09:02:44 2026 by rpki-client