$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: n9cEdDQtgorNxpTLJEt4YTjmg3SBQEDW2LSFstzTgSY= Subject key identifier: 71:CF:68:D3:66:9E:59:F5:B8:72:F3:90:1D:1C:D0:B9:76:24:24:0C Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 6F7557E0CCE44E8F59D76556B7E32A27343272F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: 0118 Signing time: Tue 24 Mar 2026 15:51:33 +0000 Manifest this update: Tue 24 Mar 2026 15:46:33 +0000 Manifest next update: Sat 28 Mar 2026 01:47:33 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: 4cn+tqa6qU7UTtm3RJQlhSdZiQQpGzEL87XTbGpKDx4=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:57:e0:cc:e4:4e:8f:59:d7:65:56:b7:e3:2a:27:34:32:72:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Mar 24 15:46:33 2026 GMT Not After : Mar 28 01:47:33 2026 GMT Subject: CN=71CF68D3669E59F5B872F3901D1CD0B97624240C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:a2:7f:eb:89:57:e8:75:53:a0:67:67:ac: 16:1f:a0:2a:88:1a:7e:46:02:19:ed:e0:6b:5c:14: 05:d5:15:60:f1:95:7b:ea:ba:7a:8e:fa:24:4d:10: 92:99:29:ed:b6:c2:02:e8:ac:e2:57:eb:55:66:06: 93:03:e8:ed:4f:01:cd:c6:a3:5f:22:b5:1a:43:44: df:d6:e6:56:7b:84:ac:f3:6e:05:c7:57:a5:ee:4e: ad:7a:3b:89:13:f0:bd:35:23:52:7d:00:e8:3f:46: 67:14:cb:99:e9:93:ac:62:aa:2a:ca:b3:41:c1:cf: 1c:48:54:ef:ca:a8:b7:8c:d5:30:c3:fe:a2:1e:8d: 94:ec:76:ce:96:1f:4b:c9:1d:cc:16:c4:ed:9f:5a: 3b:02:7b:c9:ee:aa:cb:e7:77:21:c6:74:0c:df:98: 7d:09:8e:3f:e5:72:fc:98:83:f0:76:3f:7c:ec:d2: 48:5d:40:3d:a0:1b:42:f7:9a:19:28:24:95:69:87: c6:7e:73:ee:7f:c5:05:e0:b2:8c:ef:a0:0f:75:ef: 90:a5:88:d3:5d:31:65:d9:0a:40:4c:3e:9b:91:15: 9b:5f:dc:f6:13:ea:b2:92:2b:56:b7:b0:d6:22:a3: 16:de:60:af:81:05:e0:eb:ec:64:f4:79:c9:65:3d: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:68:D3:66:9E:59:F5:B8:72:F3:90:1D:1C:D0:B9:76:24:24:0C X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:99:37:0c:49:ce:f5:f0:ae:2a:fb:e2:fd:7e:dc:ec:3a:6f: 32:eb:6d:a4:57:e9:da:63:70:69:00:f6:29:d6:f8:f6:67:66: e6:0a:ce:c3:c7:2c:24:f3:cd:4b:ac:c9:a2:f7:70:b0:3f:32: 6e:6a:04:40:e6:6e:0f:cc:fe:45:c4:e7:e3:8f:1f:51:e6:4f: 50:08:0c:b1:d0:6a:1a:d4:5a:3e:3e:4a:aa:32:e1:f8:1c:af: 51:01:c4:8a:c9:95:b2:72:09:dc:a5:f8:e4:e9:c1:49:99:9f: af:30:7b:63:cb:66:b4:82:8d:58:66:7a:14:07:ac:d9:93:97: 4c:67:93:d6:17:c0:bd:3c:c5:64:fb:46:56:0a:6f:1f:cb:99: 76:83:0c:cb:20:02:b4:c6:65:08:08:fa:7b:64:4c:0d:fe:49: d6:40:dc:7b:20:6c:9b:74:ff:39:0b:51:93:eb:a3:b6:39:c9: 79:3a:f4:6e:14:fb:04:16:8e:1f:a4:1d:1a:30:8a:5c:34:88: c1:82:da:07:e7:9e:d3:71:34:76:89:37:4e:12:d4:53:81:b7: d2:84:9f:35:63:43:43:05:2a:20:bc:56:30:2f:c4:42:e2:fb: 7d:d8:4d:f6:b0:a4:97:1a:d8:e7:2d:8f:1c:1e:b9:ce:7f:0c: b9:f1:12:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3VX4MzkTo9Z12VWt+MqJzQycvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNjAzMjQxNTQ2MzNaFw0yNjAzMjgwMTQ3MzNaMDMxMTAvBgNV BAMTKDcxQ0Y2OEQzNjY5RTU5RjVCODcyRjM5MDFEMUNEMEI5NzYyNDI0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIaJ/64lX6HVToGdnrBYfoCqI Gn5GAhnt4GtcFAXVFWDxlXvqunqO+iRNEJKZKe22wgLorOJX61VmBpMD6O1PAc3G o18itRpDRN/W5lZ7hKzzbgXHV6XuTq16O4kT8L01I1J9AOg/RmcUy5npk6xiqirK s0HBzxxIVO/KqLeM1TDD/qIejZTsds6WH0vJHcwWxO2fWjsCe8nuqsvndyHGdAzf mH0Jjj/lcvyYg/B2P3zs0khdQD2gG0L3mhkoJJVph8Z+c+5/xQXgsozvoA9175Cl iNNdMWXZCkBMPpuRFZtf3PYT6rKSK1a3sNYioxbeYK+BBeDr7GT0ecllPSObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcc9o02aeWfW4cvOQHRzQuXYkJAwwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaZNwxJzvXwrir74v1+3Ow6bzLrbaRX6dpj cGkA9inW+PZnZuYKzsPHLCTzzUusyaL3cLA/Mm5qBEDmbg/M/kXE5+OPH1HmT1AI DLHQahrUWj4+Sqoy4fgcr1EBxIrJlbJyCdyl+OTpwUmZn68we2PLZrSCjVhmehQH rNmTl0xnk9YXwL08xWT7RlYKbx/LmXaDDMsgArTGZQgI+ntkTA3+SdZA3HsgbJt0 /zkLUZPro7Y5yXk69G4U+wQWjh+kHRowilw0iMGC2gfnntNxNHaJN04S1FOBt9KE nzVjQ0MFKiC8VjAvxELi+33YTfawpJca2Octjxweuc5/DLnxEus= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:38 2026 by rpki-client