$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: EllQUcBMpTvx08SNfPE4Ktd9MJ4myptUneo6yxvpByI= Subject key identifier: 7D:14:63:E3:07:F0:93:49:7E:D5:6C:5A:94:3E:CA:53:D5:23:C8:F5 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 400D2E6018CCA547A1E4B2AA05D68181D0F08E25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01EA Signing time: Wed 25 Mar 2026 20:12:32 +0000 Manifest this update: Wed 25 Mar 2026 20:07:32 +0000 Manifest next update: Sun 29 Mar 2026 01:20:32 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: hTMhFpyCQFUqahvHac3PbyQvEBFh/2YhQZ3DB9bPPjE=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: g6XhPZqUR7CvgeII+0l0WZvANj30r5Imr0YOu9OtlUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0d:2e:60:18:cc:a5:47:a1:e4:b2:aa:05:d6:81:81:d0:f0:8e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Mar 25 20:07:32 2026 GMT Not After : Mar 29 01:20:32 2026 GMT Subject: CN=7D1463E307F093497ED56C5A943ECA53D523C8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:17:8f:00:59:c8:81:1e:80:82:ec:c5:b3:c5: dd:72:20:f1:f1:65:2a:95:d9:a9:85:a4:88:5e:65: 86:1b:bb:ef:5e:bb:e4:05:04:13:a7:87:da:3e:25: d6:c4:e4:66:f2:93:6e:de:2d:a0:a3:92:ef:ff:18: c9:40:cc:5c:b6:64:d1:09:ca:31:3c:95:5d:61:ee: b3:ce:d2:04:0d:5e:49:2f:8b:2a:45:c3:58:c0:9e: 0c:4e:d7:3b:ed:6d:15:06:d9:b4:a6:a8:a2:0a:36: 1c:d6:1f:83:73:a6:39:aa:af:dc:bf:62:42:15:1a: 43:d0:7e:97:52:0b:1c:be:e5:d1:ef:c5:cb:b7:7c: 59:09:8a:b5:65:05:01:76:81:7d:69:80:1d:17:48: 8e:ba:14:81:dc:ea:cb:72:bf:3d:60:ef:d7:ba:f0: 2f:d0:d1:18:ba:bd:7d:e9:57:bc:ee:41:5a:d0:3b: a0:2b:2a:52:3d:f7:5b:15:fe:0a:e1:8b:3e:b5:21: 17:ca:44:d2:e6:f7:9b:d4:f6:c7:24:70:1a:f5:83: e9:c4:97:25:7e:4e:28:ff:2c:c1:61:90:57:c0:2e: c0:33:c1:e7:b8:e4:8e:aa:79:ac:12:44:42:49:f2: d3:7c:ea:c1:e9:c3:97:86:8c:4b:a3:ce:1b:83:dc: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:14:63:E3:07:F0:93:49:7E:D5:6C:5A:94:3E:CA:53:D5:23:C8:F5 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:81:7d:dc:95:35:5a:1d:2d:03:b2:84:42:b6:79:f2:37:8b: 2c:82:8e:d3:83:d3:e3:22:b3:21:6b:7c:6c:0f:9d:6f:3a:3d: ca:0a:e8:61:cb:4d:5a:e4:ca:04:8b:20:e6:c5:a9:e7:a2:fc: d4:d4:61:d4:07:e1:66:9a:b6:66:6e:f7:c8:a2:71:84:4f:13: 75:4b:ec:96:a2:29:9c:95:72:db:94:ed:dc:a1:01:8c:ae:ca: 74:d3:55:86:15:8e:de:49:54:21:d8:09:a1:c5:01:23:7b:bb: f4:7b:d7:f0:83:8c:4a:ce:73:85:57:27:6b:fa:31:fe:8a:f0: dd:79:4e:08:fe:65:fd:35:87:50:fd:b3:81:fd:8f:6f:f6:30: 35:b1:be:4b:1a:84:ee:6c:4b:f9:60:1a:a2:01:09:e0:26:50: 60:d6:c6:60:a5:94:8b:c7:8a:cb:81:78:6e:63:1d:4d:21:73: 30:01:88:70:7e:31:36:b4:84:bd:3d:5f:58:49:b4:7e:fa:32: 71:1f:de:e8:0d:0b:cd:dd:d5:55:2d:13:19:27:ef:80:40:e6: 55:36:84:6b:c5:a3:0b:d2:04:dd:ae:22:8e:da:4f:26:22:7a: ce:e4:a9:c9:96:e2:b7:76:a7:53:da:32:b8:d5:61:76:d0:ed: 80:e5:d1:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQA0uYBjMpUeh5LKqBdaBgdDwjiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNjAzMjUyMDA3MzJaFw0yNjAzMjkwMTIwMzJaMDMxMTAvBgNV BAMTKDdEMTQ2M0UzMDdGMDkzNDk3RUQ1NkM1QTk0M0VDQTUzRDUyM0M4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYF48AWciBHoCC7MWzxd1yIPHx ZSqV2amFpIheZYYbu+9eu+QFBBOnh9o+JdbE5Gbyk27eLaCjku//GMlAzFy2ZNEJ yjE8lV1h7rPO0gQNXkkviypFw1jAngxO1zvtbRUG2bSmqKIKNhzWH4Nzpjmqr9y/ YkIVGkPQfpdSCxy+5dHvxcu3fFkJirVlBQF2gX1pgB0XSI66FIHc6styvz1g79e6 8C/Q0Ri6vX3pV7zuQVrQO6ArKlI991sV/grhiz61IRfKRNLm95vU9sckcBr1g+nE lyV+Tij/LMFhkFfALsAzwee45I6qeawSREJJ8tN86sHpw5eGjEujzhuD3ICrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfRRj4wfwk0l+1WxalD7KU9UjyPUwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeBfdyVNVodLQOyhEK2efI3iyyCjtOD0+Mi syFrfGwPnW86PcoK6GHLTVrkygSLIObFqeei/NTUYdQH4WaatmZu98iicYRPE3VL 7JaiKZyVctuU7dyhAYyuynTTVYYVjt5JVCHYCaHFASN7u/R71/CDjErOc4VXJ2v6 Mf6K8N15Tgj+Zf01h1D9s4H9j2/2MDWxvksahO5sS/lgGqIBCeAmUGDWxmCllIvH isuBeG5jHU0hczABiHB+MTa0hL09X1hJtH76MnEf3ugNC83d1VUtExkn74BA5lU2 hGvFowvSBN2uIo7aTyYies7kqcmW4rd2p1PaMrjVYXbQ7YDl0S4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:37:55 2026 by rpki-client