$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: ch9sNVBCkurL+ZW6yn8KmCOCxQe7ky2dNx2pF68/+LQ= Subject key identifier: 82:18:32:CC:AF:C3:9C:0D:84:3E:25:A7:A5:7B:F5:60:BC:23:3E:56 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 7E6A8A6093E72D490AB237F18036E27BF64FD79D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 03C2 Signing time: Wed 25 Mar 2026 13:12:00 +0000 Manifest this update: Wed 25 Mar 2026 13:07:00 +0000 Manifest next update: Sat 28 Mar 2026 15:18:00 +0000 Files and hashes: 1: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 2: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 3: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: ZnKgGwqABjytj0Jgjy8OYjkENbnJeTCR3SZ0gHvVjbk=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6a:8a:60:93:e7:2d:49:0a:b2:37:f1:80:36:e2:7b:f6:4f:d7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Mar 25 13:07:00 2026 GMT Not After : Mar 28 15:18:00 2026 GMT Subject: CN=821832CCAFC39C0D843E25A7A57BF560BC233E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:2e:f3:3b:de:7f:fb:e8:d8:ff:d6:5e:26:1e: b2:cf:b1:83:d0:3a:2a:f0:36:69:bf:3d:1e:3c:12: 24:02:09:17:8f:07:fc:3f:23:63:b1:50:83:2c:15: 8e:cc:29:27:f2:e2:10:35:ea:02:b7:4d:fe:44:19: 8f:ba:2c:5b:96:4c:bc:b4:84:b2:35:34:c7:af:a0: 41:02:3e:f1:c3:df:91:4b:1d:4c:26:5d:fd:f3:75: 17:43:87:d8:02:0b:ba:30:a2:87:79:45:3f:0c:63: dd:d8:b4:97:e5:fb:c0:c9:c3:e3:52:4b:22:81:20: 47:98:92:9c:c3:c9:29:7c:9f:26:4a:ec:85:a0:72: 4c:fc:e4:94:af:6a:57:a4:28:10:ba:d0:34:bd:6c: 4d:ba:ea:92:a9:f4:f5:e6:cb:bc:87:48:cc:11:2d: 2b:ec:e8:16:d2:2d:99:52:af:e2:da:89:fd:ac:89: b5:44:7e:eb:af:46:72:28:7e:8b:21:73:7f:b5:4f: 4d:d7:c1:da:22:d3:1d:90:87:42:3e:b9:0e:2b:25: 2a:4f:27:58:68:63:97:df:9d:4e:61:dc:8f:4b:03: 11:e0:ce:3a:c2:f6:f8:8f:3a:85:65:c1:e0:d0:00: c6:65:31:18:bb:c2:dc:9e:a3:9b:3c:ef:31:c5:75: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:18:32:CC:AF:C3:9C:0D:84:3E:25:A7:A5:7B:F5:60:BC:23:3E:56 X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0e:ff:df:74:ed:ce:cd:25:ae:eb:ce:59:e5:77:93:35:0f: a4:0c:b2:e1:f8:14:87:16:45:55:f4:ce:0e:57:6c:e7:ff:7f: ca:f7:db:c8:b2:63:cb:51:79:23:61:0b:b5:7a:52:f6:a8:f0: 06:eb:aa:16:2d:10:e7:41:eb:44:15:3b:91:53:c8:30:b2:bb: 8e:fe:8b:49:3b:c4:6a:40:c6:ad:b7:7a:ef:dd:62:f6:bd:f7: 7a:d5:bf:06:c0:6d:c6:fc:0c:4a:75:6a:26:7f:b2:8e:a0:e4: 07:68:aa:36:25:fa:fd:36:80:69:0c:cd:9c:46:28:43:28:9b: 4b:37:e3:f8:65:34:a6:d8:c9:04:d4:82:fe:9f:f7:67:f1:79: a4:f2:71:48:7b:85:d8:65:33:7a:ef:d3:50:eb:20:29:2e:f8: 41:b7:2c:17:a0:e0:46:53:24:1c:be:95:60:07:af:29:59:41: b7:3a:7e:fe:27:76:e9:80:66:1c:ca:8e:55:a8:db:da:9e:8a: fc:a0:45:d2:54:3b:39:80:44:f3:60:b9:54:3e:bb:fa:7c:9d: b3:02:d6:dd:8e:8b:66:2c:7e:48:2b:77:90:bd:42:a9:97:78: 87:e3:a4:c2:a7:d2:86:5c:88:bf:56:15:90:c6:01:9e:1c:91: fa:8e:b6:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmqKYJPnLUkKsjfxgDbie/ZP150wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNjAzMjUxMzA3MDBaFw0yNjAzMjgxNTE4MDBaMDMxMTAvBgNV BAMTKDgyMTgzMkNDQUZDMzlDMEQ4NDNFMjVBN0E1N0JGNTYwQkMyMzNFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+LvM73n/76Nj/1l4mHrLPsYPQ OirwNmm/PR48EiQCCRePB/w/I2OxUIMsFY7MKSfy4hA16gK3Tf5EGY+6LFuWTLy0 hLI1NMevoEECPvHD35FLHUwmXf3zdRdDh9gCC7owood5RT8MY93YtJfl+8DJw+NS SyKBIEeYkpzDySl8nyZK7IWgckz85JSvalekKBC60DS9bE266pKp9PXmy7yHSMwR LSvs6BbSLZlSr+Laif2sibVEfuuvRnIofoshc3+1T03Xwdoi0x2Qh0I+uQ4rJSpP J1hoY5ffnU5h3I9LAxHgzjrC9viPOoVlweDQAMZlMRi7wtyeo5s87zHFdVErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghgyzK/DnA2EPiWnpXv1YLwjPlYwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEO/9907c7NJa7rzlnld5M1D6QMsuH4FIcW RVX0zg5XbOf/f8r328iyY8tReSNhC7V6Uvao8AbrqhYtEOdB60QVO5FTyDCyu47+ i0k7xGpAxq23eu/dYva993rVvwbAbcb8DEp1aiZ/so6g5AdoqjYl+v02gGkMzZxG KEMom0s34/hlNKbYyQTUgv6f92fxeaTycUh7hdhlM3rv01DrICku+EG3LBeg4EZT JBy+lWAHrylZQbc6fv4ndumAZhzKjlWo29qeivygRdJUOzmARPNguVQ+u/p8nbMC 1t2Oi2Ysfkgrd5C9QqmXeIfjpMKn0oZciL9WFZDGAZ4ckfqOtoY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:50 2026 by rpki-client