$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: z48TmMYzHCpSpIwZ7o1egeLBHcZZkdkqRwOzUueMbxY= Subject key identifier: 6C:EA:B1:D7:AC:D4:0B:F5:BF:80:C8:33:85:5E:2D:AC:07:72:D4:94 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 259C40DE7AB0730119E50F855E91D2C901236E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 01C7 Signing time: Wed 25 Mar 2026 18:01:30 +0000 Manifest this update: Wed 25 Mar 2026 17:56:30 +0000 Manifest next update: Sat 28 Mar 2026 21:36:30 +0000 Files and hashes: 1: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: dw1qh+vON5KF4PLNxTrj2P8OLxxYcv+QhtbhoSVHbPs=) 2: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: mwXZGvsiqYO8BjZGzGEqdxUw+nTF/7mJPJXCsYgA+E8=) 3: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 4: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: i8YeqA66jLTHkrWq3WhHNQrrw6cEUvyy58nchkz4ulc=) 5: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 6: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: cEu0EjirS4vOm7fpY+AgTseXh1mis9QznqiCF2QTlk4=) 7: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 8: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 9: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 10: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: SBnQR+zv8l07BbYG06eTb7vfRhUvVUWA8zTkQAxpGrY=) 11: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9c:40:de:7a:b0:73:01:19:e5:0f:85:5e:91:d2:c9:01:23:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Mar 25 17:56:30 2026 GMT Not After : Mar 28 21:36:30 2026 GMT Subject: CN=6CEAB1D7ACD40BF5BF80C833855E2DAC0772D494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:dd:9a:f4:33:8d:61:15:91:b6:fe:b9:8e: 07:4f:fc:f6:39:c5:05:f2:bf:9e:fe:83:c9:88:da: d4:b1:f6:c4:ef:cb:1a:8e:6b:7f:1c:39:b5:4a:fd: de:bf:93:31:a1:bf:4f:a9:79:a5:60:6a:8d:1a:95: a4:c9:80:85:9b:84:59:cd:b5:6d:16:89:76:e8:ff: 9c:90:e2:dd:a6:7d:02:56:8e:c4:a7:20:31:0c:47: f8:a7:44:a9:26:1d:39:06:13:55:ef:40:5b:e4:e7: e0:2e:9b:c7:41:40:2e:be:79:38:22:91:a9:4d:38: d3:a5:40:4e:b8:48:80:c2:47:e1:fe:d3:ef:3b:f1: d9:be:b9:6a:58:ae:c3:1d:82:5f:68:80:e3:4e:b9: 13:ca:77:7b:1c:b3:2a:ff:36:18:37:7f:82:a0:e6: 72:a7:32:0a:30:b8:85:cf:65:76:64:c6:f5:ec:fa: 20:a8:4b:30:f6:f2:0d:d5:0f:fb:f4:d1:27:d1:7b: 01:a0:c8:05:9c:76:22:cb:da:52:4c:d3:9e:f2:82: 89:ee:cb:a1:84:ad:ae:18:46:32:28:ba:29:f3:a7: 65:d3:ca:5a:52:e8:ee:ce:da:31:0f:d3:d0:cf:b7: af:82:58:42:43:3c:95:fb:16:7a:38:4f:b0:db:31: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EA:B1:D7:AC:D4:0B:F5:BF:80:C8:33:85:5E:2D:AC:07:72:D4:94 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:26:2c:b5:30:b1:ab:04:1e:90:0b:23:70:06:3b:b5:2b: 4a:55:fd:6d:ce:02:be:01:f9:94:e6:8c:48:9c:7d:ad:95:a4: b8:84:2a:40:97:b1:d1:5a:8b:42:05:81:de:14:36:ce:51:9d: ef:a3:18:69:19:4b:87:2e:3b:c4:6e:1f:12:45:d2:83:dd:be: ff:e0:9c:ea:d7:25:0d:29:5d:65:bf:c3:26:e1:c5:16:09:53: 7e:0e:a2:a6:45:5e:77:32:64:e6:0b:ec:72:ac:6d:28:df:d6: 60:55:bc:56:2b:2e:95:3c:8f:9e:c5:20:97:96:1b:bf:00:88: 81:81:a8:09:48:52:72:d5:44:7b:a5:53:00:2a:3b:a1:6b:54: 9f:c1:7c:c4:c7:75:6d:c0:3d:6d:29:0a:6b:cc:18:c2:5a:e9: bf:ce:75:9d:59:9a:ad:1f:1e:02:7b:e8:a2:96:21:78:3a:2c: 6b:ee:e7:a5:d5:e8:0f:a9:c6:20:19:fd:59:61:f1:27:1f:68: 39:2f:de:30:0c:a1:7e:f7:96:b1:72:a9:2d:31:1a:11:7a:94: a3:aa:dc:9c:03:ca:df:f9:4c:07:4b:cf:47:02:07:a8:d2:e3: de:46:8e:dd:06:85:91:97:61:3d:aa:b7:5a:b2:b1:36:3e:b5: 6e:68:d4:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZxA3nqwcwEZ5Q+FXpHSyQEjbg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNjAzMjUxNzU2MzBaFw0yNjAzMjgyMTM2MzBaMDMxMTAvBgNV BAMTKDZDRUFCMUQ3QUNENDBCRjVCRjgwQzgzMzg1NUUyREFDMDc3MkQ0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcd2a9DONYRWRtv65jgdP/PY5 xQXyv57+g8mI2tSx9sTvyxqOa38cObVK/d6/kzGhv0+peaVgao0alaTJgIWbhFnN tW0WiXbo/5yQ4t2mfQJWjsSnIDEMR/inRKkmHTkGE1XvQFvk5+Aum8dBQC6+eTgi kalNONOlQE64SIDCR+H+0+878dm+uWpYrsMdgl9ogONOuRPKd3scsyr/Nhg3f4Kg 5nKnMgowuIXPZXZkxvXs+iCoSzD28g3VD/v00SfRewGgyAWcdiLL2lJM057ygonu y6GEra4YRjIouinzp2XTylpS6O7O2jEP09DPt6+CWEJDPJX7Fno4T7DbMRpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbOqx16zUC/W/gMgzhV4trAdy1JQwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0VJiy1MLGrBB6QCyNwBju1K0pV/W3OAr4B +ZTmjEicfa2VpLiEKkCXsdFai0IFgd4UNs5Rne+jGGkZS4cuO8RuHxJF0oPdvv/g nOrXJQ0pXWW/wybhxRYJU34OoqZFXncyZOYL7HKsbSjf1mBVvFYrLpU8j57FIJeW G78AiIGBqAlIUnLVRHulUwAqO6FrVJ/BfMTHdW3APW0pCmvMGMJa6b/OdZ1Zmq0f HgJ76KKWIXg6LGvu56XV6A+pxiAZ/Vlh8ScfaDkv3jAMoX73lrFyqS0xGhF6lKOq 3JwDyt/5TAdLz0cCB6jS495Gjt0GhZGXYT2qt1qysTY+tW5o1Gs= -----END CERTIFICATE-----Generated at Thu Mar 26 05:41:27 2026 by rpki-client