$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: hbkiUD8g6IRw22/mDp+fxt28ojPiqJn3Pjm/SxJhlOY= Subject key identifier: AC:E6:07:DF:76:AF:DA:99:4B:29:8E:20:3A:CF:3B:73:A9:F2:7E:F2 Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 769853368BC80C737669F2E9FED8524380D12D48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 022B Signing time: Thu 26 Mar 2026 20:22:42 +0000 Manifest this update: Thu 26 Mar 2026 20:17:42 +0000 Manifest next update: Mon 30 Mar 2026 08:18:42 +0000 Files and hashes: 1: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) 2: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 3: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) 4: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) 5: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: tRPoxjPOreOLyFuATHVQadRbp3jt+8Ern1HDLwF4l7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 06:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:98:53:36:8b:c8:0c:73:76:69:f2:e9:fe:d8:52:43:80:d1:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Mar 26 20:17:42 2026 GMT Not After : Mar 30 08:18:42 2026 GMT Subject: CN=ACE607DF76AFDA994B298E203ACF3B73A9F27EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:c5:54:61:48:d3:f0:5a:54:1b:05:92:86: 2f:84:8a:cb:ab:09:eb:56:6b:4e:2c:ff:93:18:1c: 60:09:c0:2f:8e:4f:5d:64:e5:e3:fc:5d:cc:fc:ee: 19:72:bf:55:be:f8:00:55:2e:b2:f6:d7:5f:ff:89: b6:a2:1f:dc:40:79:ef:8d:f6:9a:64:49:d0:e6:c7: fc:98:ed:52:7e:1c:f0:6e:04:e7:61:d3:b5:ee:15: 8d:1e:c8:ad:ff:b5:33:08:d9:72:0f:4d:69:05:41: 83:ed:8b:2d:64:09:cd:35:af:68:39:3e:4d:25:46: 82:be:11:dc:3d:cd:a2:f9:6e:e2:e5:da:3a:b5:13: de:dd:a8:8e:32:ba:c9:4f:7d:5c:70:e9:1c:cb:51: 73:72:80:b5:76:70:3e:bb:72:80:80:21:b1:0b:41: ba:63:b5:9c:77:7b:28:22:4d:f4:3f:e3:8a:8c:64: a2:8d:78:b4:43:67:16:c8:8e:9c:82:6e:da:48:43: a7:1c:69:89:f3:94:b1:b2:15:1d:03:04:53:04:0d: 10:ef:c6:97:13:56:68:3d:a9:4a:ec:bc:4f:73:7c: c5:65:65:90:2a:47:c2:44:7f:c2:43:ef:de:26:a1: 5b:07:cb:0c:17:d6:06:ce:17:d5:c3:02:5d:b8:45: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E6:07:DF:76:AF:DA:99:4B:29:8E:20:3A:CF:3B:73:A9:F2:7E:F2 X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f7:9e:55:78:02:ba:17:51:92:78:80:3d:9c:34:93:65:fa: 65:0e:96:54:68:cf:76:2c:e9:94:c3:7a:89:83:33:8b:e0:54: 41:79:b1:a4:8e:56:81:64:b7:67:38:23:1c:96:90:6b:21:a2: 88:0d:38:b3:f3:dd:b3:62:bb:e2:0f:75:7e:15:42:4c:05:ab: 52:cb:a3:69:fb:2e:e4:ae:6e:0a:ea:95:0c:d0:04:06:09:67: 94:23:f1:87:25:b3:5c:2d:e3:31:9f:50:e5:9d:f9:3c:ff:53: 78:50:8c:9a:57:6b:af:78:be:42:a6:1a:a9:e6:82:d2:a9:e0: e7:bb:6e:50:4f:63:34:37:57:04:be:79:b8:08:37:18:c0:ae: 5d:55:4c:b6:75:4b:b0:2c:23:db:0b:ad:59:80:34:88:ab:33: 03:ea:3e:54:77:49:61:3a:a8:71:f9:fe:36:53:b7:90:b3:53: fd:3b:4e:06:61:36:6c:f9:81:a5:31:73:2e:c3:be:13:ec:dc: dc:a7:96:68:74:5e:dd:2d:83:21:1b:80:bf:ce:7f:bc:76:ba: 8a:32:9d:5d:85:34:04:fc:8f:a8:d0:2f:db:63:d8:b6:ad:26: 75:0f:0f:42:e4:e9:9d:7f:f6:da:18:e2:e5:1f:cf:d6:4b:c4: 47:6c:b0:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdphTNovIDHN2afLp/thSQ4DRLUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNjAzMjYyMDE3NDJaFw0yNjAzMzAwODE4NDJaMDMxMTAvBgNV BAMTKEFDRTYwN0RGNzZBRkRBOTk0QjI5OEUyMDNBQ0YzQjczQTlGMjdFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw88VUYUjT8FpUGwWShi+Eisur CetWa04s/5MYHGAJwC+OT11k5eP8Xcz87hlyv1W++ABVLrL211//ibaiH9xAee+N 9ppkSdDmx/yY7VJ+HPBuBOdh07XuFY0eyK3/tTMI2XIPTWkFQYPtiy1kCc01r2g5 Pk0lRoK+Edw9zaL5buLl2jq1E97dqI4yuslPfVxw6RzLUXNygLV2cD67coCAIbEL QbpjtZx3eygiTfQ/44qMZKKNeLRDZxbIjpyCbtpIQ6ccaYnzlLGyFR0DBFMEDRDv xpcTVmg9qUrsvE9zfMVlZZAqR8JEf8JD794moVsHywwX1gbOF9XDAl24RRDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOYH33av2plLKY4gOs87c6nyfvIwHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv3nlV4AroXUZJ4gD2cNJNl+mUOllRoz3Ys 6ZTDeomDM4vgVEF5saSOVoFkt2c4IxyWkGshoogNOLPz3bNiu+IPdX4VQkwFq1LL o2n7LuSubgrqlQzQBAYJZ5Qj8Ycls1wt4zGfUOWd+Tz/U3hQjJpXa694vkKmGqnm gtKp4Oe7blBPYzQ3VwS+ebgINxjArl1VTLZ1S7AsI9sLrVmANIirMwPqPlR3SWE6 qHH5/jZTt5CzU/07TgZhNmz5gaUxcy7DvhPs3Nynlmh0Xt0tgyEbgL/Of7x2uooy nV2FNAT8j6jQL9tj2LatJnUPD0Lk6Z1/9toY4uUfz9ZLxEdssCQ= -----END CERTIFICATE-----Generated at Fri Mar 27 00:48:18 2026 by rpki-client