$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: 2X898YYtBgEp6GLljXIx2WqLqwxTWHwZq2bu7/XJtG4= Subject key identifier: 83:6C:71:44:72:02:79:AA:66:04:84:2A:FA:1F:F6:2A:AF:09:B4:53 Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 3BD1CB09C74E08FAC3BF98927075D1D52D6B7893 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 038B Signing time: Thu 26 Mar 2026 14:21:34 +0000 Manifest this update: Thu 26 Mar 2026 14:16:34 +0000 Manifest next update: Sun 29 Mar 2026 18:08:34 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: Iu/d2slivxyK22lxF/kvFDh+cu8OsBeoUZl1LQ8aWtw=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d1:cb:09:c7:4e:08:fa:c3:bf:98:92:70:75:d1:d5:2d:6b:78:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Mar 26 14:16:34 2026 GMT Not After : Mar 29 18:08:34 2026 GMT Subject: CN=836C7144720279AA6604842AFA1FF62AAF09B453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:07:a9:2b:f4:8e:77:92:19:a6:f8:dc:f8: d4:95:e6:31:d1:81:bc:74:2c:94:ce:a8:51:4f:cb: da:ea:50:d2:78:3d:4c:ef:ab:cd:c4:59:fa:b9:0c: ca:09:4d:e6:e5:9b:dc:5c:d6:29:d8:e9:d3:46:ec: 14:eb:3d:ec:41:05:2c:87:5b:8d:b2:c9:fa:7a:b1: 5a:32:8f:88:41:5d:c5:c9:33:e2:f2:25:5f:3d:0a: d9:23:02:76:59:a7:87:40:5c:0a:76:15:8a:7b:7b: 13:63:e2:f7:4e:6a:83:db:fd:6a:b8:2c:87:59:45: 95:ec:5f:93:b6:94:80:e1:48:2c:ee:fe:a0:14:77: b2:ce:c6:d5:f5:55:70:1c:f6:8a:3b:11:c2:63:ce: e1:0e:b0:10:50:b9:ca:90:9e:0a:4c:fc:2d:22:d7: dc:37:9a:f2:fd:34:a3:44:48:3d:a7:6e:25:6e:37: 7c:a1:57:6e:0c:17:d4:2c:80:99:4e:2d:72:99:aa: fb:ef:cf:6e:5e:93:a4:a0:13:61:92:86:e4:20:93: 22:ff:ea:ee:76:da:c7:00:e3:3b:3e:ca:fa:8a:ea: 68:1b:3a:09:12:40:e8:46:19:f3:c0:48:0f:fd:4e: 66:03:b6:3f:e5:e4:1c:ed:ba:a2:ac:ee:17:41:bc: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6C:71:44:72:02:79:AA:66:04:84:2A:FA:1F:F6:2A:AF:09:B4:53 X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2c:e9:ec:f5:b8:af:0a:d9:12:09:22:89:92:e3:45:39:f3: d1:03:9c:0b:69:5f:fd:b2:49:e5:52:54:53:69:26:bc:c6:0c: e5:c8:2e:14:c6:42:9d:85:52:65:9a:5b:a9:e8:de:ff:59:55: 5e:6e:33:1b:e2:cd:4f:a9:d3:97:db:f4:19:14:b3:81:b8:8f: ac:78:b6:87:d0:e5:0d:03:06:ce:0f:f7:d1:a8:d6:9f:ff:95: ed:91:0b:58:78:75:61:44:14:51:68:44:22:93:da:74:58:4d: 76:3a:0d:52:99:62:ca:c9:3f:95:57:1f:40:45:c4:b8:20:80: bd:91:15:78:68:39:f1:d1:0d:66:c0:c8:22:c1:1f:09:83:39: e3:32:01:69:29:1f:98:72:57:6b:8b:67:8e:7d:8d:1a:53:32: 4f:a2:2c:c9:77:54:a2:7f:5a:c9:b9:9b:e0:8d:f5:e0:f2:e5: 06:c0:ac:c0:2a:42:84:89:6b:4c:2f:c1:b4:fa:c9:00:02:1e: fa:45:cc:44:99:f3:c2:d3:c4:db:35:0a:cd:4f:d6:03:f6:3b: 37:13:2a:3c:b4:6e:7b:47:7c:72:1f:14:30:49:01:5c:b2:69: 6b:b0:a4:5c:77:53:ba:5b:f2:52:47:41:b9:bd:f7:d4:34:01: 91:b0:f7:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9HLCcdOCPrDv5iScHXR1S1reJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNjAzMjYxNDE2MzRaFw0yNjAzMjkxODA4MzRaMDMxMTAvBgNV BAMTKDgzNkM3MTQ0NzIwMjc5QUE2NjA0ODQyQUZBMUZGNjJBQUYwOUI0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iQepK/SOd5IZpvjc+NSV5jHR gbx0LJTOqFFPy9rqUNJ4PUzvq83EWfq5DMoJTeblm9xc1inY6dNG7BTrPexBBSyH W42yyfp6sVoyj4hBXcXJM+LyJV89CtkjAnZZp4dAXAp2FYp7exNj4vdOaoPb/Wq4 LIdZRZXsX5O2lIDhSCzu/qAUd7LOxtX1VXAc9oo7EcJjzuEOsBBQucqQngpM/C0i 19w3mvL9NKNESD2nbiVuN3yhV24MF9QsgJlOLXKZqvvvz25ek6SgE2GShuQgkyL/ 6u522scA4zs+yvqK6mgbOgkSQOhGGfPASA/9TmYDtj/l5BztuqKs7hdBvC4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg2xxRHICeapmBIQq+h/2Kq8JtFMwHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMs6ez1uK8K2RIJIomS40U589EDnAtpX/2y SeVSVFNpJrzGDOXILhTGQp2FUmWaW6no3v9ZVV5uMxvizU+p05fb9BkUs4G4j6x4 tofQ5Q0DBs4P99Go1p//le2RC1h4dWFEFFFoRCKT2nRYTXY6DVKZYsrJP5VXH0BF xLgggL2RFXhoOfHRDWbAyCLBHwmDOeMyAWkpH5hyV2uLZ459jRpTMk+iLMl3VKJ/ Wsm5m+CN9eDy5QbArMAqQoSJa0wvwbT6yQACHvpFzESZ88LTxNs1Cs1P1gP2OzcT Kjy0bntHfHIfFDBJAVyyaWuwpFx3U7pb8lJHQbm999Q0AZGw9/0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:40 2026 by rpki-client