$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: B+h0A43/ih2ZaWJb8EAsN7G17UP2zZJVy42coo5U80c= Subject key identifier: 51:2D:B4:99:27:71:2E:46:E9:51:AB:DD:12:30:97:C6:88:EC:C4:89 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 6035F0C91017D7CF967B9B2829CE468D39F8BF2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 01BD Signing time: Wed 25 Mar 2026 09:42:26 +0000 Manifest this update: Wed 25 Mar 2026 09:37:26 +0000 Manifest next update: Sat 28 Mar 2026 16:53:26 +0000 Files and hashes: 1: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) 2: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: dQKqWL5hDlEfs6e7mCxK5x1mh85BJNe6m+T3o06zdXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:35:f0:c9:10:17:d7:cf:96:7b:9b:28:29:ce:46:8d:39:f8:bf:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Mar 25 09:37:26 2026 GMT Not After : Mar 28 16:53:26 2026 GMT Subject: CN=512DB49927712E46E951ABDD123097C688ECC489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:5e:0f:8c:99:6e:f7:3a:ed:9b:f9:03:c0: 4d:d8:aa:7e:ec:5a:da:0b:0f:8a:c8:80:e6:58:6c: 21:a4:6e:2f:af:dc:82:9a:79:6d:cc:ac:0f:ee:1c: eb:d0:5f:78:c6:0b:dd:51:98:f3:ec:16:f3:ce:9b: 2c:2f:14:97:dd:0c:b6:07:eb:95:76:4e:a3:b0:c2: 84:93:6b:19:f9:e6:5e:91:8c:3d:b1:8f:9c:9b:8e: 37:3d:b5:6b:9f:5d:2e:01:50:b6:03:e1:e0:b9:0b: 83:91:3c:a4:66:32:82:ff:e6:33:86:61:56:89:56: 3e:da:2c:4b:1e:55:d9:3f:42:23:01:1b:69:91:37: b2:3e:be:c6:f5:4f:6a:2d:3e:98:c0:8b:b2:90:05: a8:e3:e1:ef:8f:a7:03:ba:33:35:5a:c6:48:fc:ea: 1d:e8:bb:40:32:bb:f8:ad:e2:79:4b:4e:8d:ea:90: 09:e6:e3:3c:70:42:59:9d:a7:d2:db:4d:c1:d8:4d: 95:59:31:41:97:1e:88:73:76:a0:54:dd:21:93:18: e4:a2:18:94:a6:c7:cc:ec:dd:a5:1e:91:7d:e5:9d: 06:1f:fb:af:f0:79:39:af:8a:19:6a:13:11:b0:f7: 81:19:28:51:41:11:88:69:07:36:59:46:11:1d:3e: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2D:B4:99:27:71:2E:46:E9:51:AB:DD:12:30:97:C6:88:EC:C4:89 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:f8:47:a9:c5:0c:5c:ca:87:29:cb:6c:b7:04:45:70:f7: 7a:ad:f7:a0:4f:8f:d2:8e:7e:4b:55:15:2d:fc:a7:dd:36:49: e7:5e:92:4f:ba:d7:87:31:0d:11:49:75:cd:35:8e:aa:c4:33: eb:69:63:f2:ad:7b:42:38:0b:ff:b3:bb:90:3a:70:3c:6b:72: f9:0a:65:00:9a:a5:98:e7:75:29:9d:d0:59:1c:bf:01:e9:21: 20:68:8c:94:db:97:28:34:4c:da:dc:4a:b8:fa:d7:be:0f:01: aa:57:67:34:43:74:3d:81:e4:b1:a4:27:3e:7c:82:02:34:8a: 53:aa:87:8c:86:5e:a2:96:8c:87:77:d2:22:2e:e9:75:48:ee: fd:53:7b:62:76:c3:63:6a:e6:0e:10:1a:2c:39:9d:c5:07:ba: d8:a2:15:34:21:97:8f:cc:87:dd:83:bf:39:52:97:f3:c2:fb: 90:09:7e:24:e7:e9:21:16:85:64:e6:15:93:29:b6:4a:37:55: 70:d0:32:9b:d3:2d:8f:70:c1:d8:09:87:f1:7d:1c:e9:73:42: 35:73:f7:43:46:74:9a:d2:32:7c:35:37:1c:c1:09:19:2b:7c: b3:4a:8b:be:31:88:d9:2d:fa:e7:6b:07:1b:35:07:e2:1b:d0: c1:e2:70:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDXwyRAX18+We5soKc5GjTn4vy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNjAzMjUwOTM3MjZaFw0yNjAzMjgxNjUzMjZaMDMxMTAvBgNV BAMTKDUxMkRCNDk5Mjc3MTJFNDZFOTUxQUJERDEyMzA5N0M2ODhFQ0M0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9M14PjJlu9zrtm/kDwE3Yqn7s WtoLD4rIgOZYbCGkbi+v3IKaeW3MrA/uHOvQX3jGC91RmPPsFvPOmywvFJfdDLYH 65V2TqOwwoSTaxn55l6RjD2xj5ybjjc9tWufXS4BULYD4eC5C4ORPKRmMoL/5jOG YVaJVj7aLEseVdk/QiMBG2mRN7I+vsb1T2otPpjAi7KQBajj4e+PpwO6MzVaxkj8 6h3ou0Ayu/it4nlLTo3qkAnm4zxwQlmdp9LbTcHYTZVZMUGXHohzdqBU3SGTGOSi GJSmx8zs3aUekX3lnQYf+6/weTmvihlqExGw94EZKFFBEYhpBzZZRhEdPo9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUS20mSdxLkbpUavdEjCXxojsxIkwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4v+EepxQxcyocpy2y3BEVw93qt96BPj9KO fktVFS38p902Sedekk+614cxDRFJdc01jqrEM+tpY/Kte0I4C/+zu5A6cDxrcvkK ZQCapZjndSmd0FkcvwHpISBojJTblyg0TNrcSrj6174PAapXZzRDdD2B5LGkJz58 ggI0ilOqh4yGXqKWjId30iIu6XVI7v1Te2J2w2Nq5g4QGiw5ncUHutiiFTQhl4/M h92DvzlSl/PC+5AJfiTn6SEWhWTmFZMptko3VXDQMpvTLY9wwdgJh/F9HOlzQjVz 90NGdJrSMnw1NxzBCRkrfLNKi74xiNkt+udrBxs1B+Ib0MHicAM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:45 2026 by rpki-client