$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: +RhMje1PkY4wPOgQyzRVYLNeKjiGaeIOS18UybvqjJk= Subject key identifier: 61:0B:0D:B7:9B:C1:FD:9B:36:02:0D:BC:47:A4:B1:FF:AB:97:4B:20 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 5E5E500FAD17548676573B807739E8F854B94FFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: 014A Signing time: Wed 25 Mar 2026 12:41:49 +0000 Manifest this update: Wed 25 Mar 2026 12:36:49 +0000 Manifest next update: Sat 28 Mar 2026 18:55:49 +0000 Files and hashes: 1: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: 7ozD55jlqeYO3+5XISh4jbdbBWkemZXvsZpeCKGNKpQ=) 2: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: auTxlOGyUx1cy5HvSX5DnWx3cFTubm306blClFP2M7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5e:50:0f:ad:17:54:86:76:57:3b:80:77:39:e8:f8:54:b9:4f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Mar 25 12:36:49 2026 GMT Not After : Mar 28 18:55:49 2026 GMT Subject: CN=610B0DB79BC1FD9B36020DBC47A4B1FFAB974B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:9c:40:50:6c:cb:e0:31:99:ff:a6:ce:a0: 43:30:d4:8c:b8:15:ad:51:36:c2:cc:3f:94:30:c1: a0:59:98:80:21:73:bf:54:3d:af:c0:57:c0:54:bd: 17:7e:ea:05:76:79:82:52:db:75:f7:ab:99:d1:4d: 37:08:85:a7:a5:45:8f:62:00:b8:34:c7:ec:da:a1: c4:dd:c1:8a:60:2e:31:bf:df:59:8c:76:db:b2:e6: 34:0b:ae:02:b0:8a:25:0b:91:53:9a:97:0e:0f:cf: 9e:9a:a2:82:ed:c6:3c:3f:38:eb:01:79:2c:a6:41: 50:29:55:4c:14:c8:c5:cd:88:a3:f4:f7:d3:0b:15: 08:e5:b7:4c:3e:02:fd:5b:53:50:c7:53:25:f2:23: d1:4e:99:0c:91:2f:84:ed:05:aa:c9:ac:93:89:4f: 33:be:77:8c:32:32:48:70:47:75:b2:53:59:2d:ac: 46:dd:ca:2f:0a:d5:63:fd:53:82:2b:8d:8f:29:40: 30:0f:31:fa:98:c8:fc:06:e0:91:81:01:93:d9:8c: eb:41:13:91:c2:55:3f:97:56:44:87:1d:d0:fb:24: 29:c0:95:6a:ca:7d:65:09:84:8c:52:fd:8a:ec:c6: 14:27:3f:f1:0b:0b:96:aa:97:13:c4:8b:e5:03:b9: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0B:0D:B7:9B:C1:FD:9B:36:02:0D:BC:47:A4:B1:FF:AB:97:4B:20 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b7:dc:77:f0:7b:b4:01:b7:a6:41:f7:e9:1a:e0:4b:6a:45: 3b:a7:37:6e:07:3b:66:60:6d:f5:62:d0:25:a9:d5:58:16:ad: c3:d8:60:ef:9f:ff:ea:21:7f:01:e7:d2:44:cf:9b:1a:c8:dd: 31:47:d0:6e:56:5c:93:ad:34:eb:9c:73:9c:07:40:46:b0:12: b5:15:4f:97:d9:c6:df:d6:42:9a:d9:98:8e:5b:c8:be:8a:94: bd:3b:96:69:27:38:62:45:11:4c:55:7e:e8:98:02:bb:10:53: a0:f3:be:e6:02:40:de:6e:c6:dc:50:34:c8:95:5c:83:a7:86: 1b:d5:ba:09:27:6d:2e:8a:63:ae:45:63:e5:32:7a:3b:32:28: 7a:bc:62:de:2a:85:50:ea:47:01:88:7a:77:2c:79:a7:b4:58: c2:74:e4:6c:58:6e:bd:99:85:02:7a:68:ce:c5:8a:e4:c7:12: 72:85:ea:dd:35:88:34:06:9b:ba:cc:c5:d4:9d:04:c2:0c:77: e8:aa:e5:31:af:da:ef:fb:bd:9a:9a:2c:a5:f9:6c:ff:90:66: d5:ed:10:69:59:5d:7c:87:e4:a3:a8:f6:62:54:2f:1f:af:80: 19:bc:83:1b:c0:68:ad:12:8b:73:86:7c:85:5f:ea:5f:20:04: fd:c2:a8:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXl5QD60XVIZ2VzuAdzno+FS5T/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNjAzMjUxMjM2NDlaFw0yNjAzMjgxODU1NDlaMDMxMTAvBgNV BAMTKDYxMEIwREI3OUJDMUZEOUIzNjAyMERCQzQ3QTRCMUZGQUI5NzRCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL95xAUGzL4DGZ/6bOoEMw1Iy4 Fa1RNsLMP5QwwaBZmIAhc79UPa/AV8BUvRd+6gV2eYJS23X3q5nRTTcIhaelRY9i ALg0x+zaocTdwYpgLjG/31mMdtuy5jQLrgKwiiULkVOalw4Pz56aooLtxjw/OOsB eSymQVApVUwUyMXNiKP099MLFQjlt0w+Av1bU1DHUyXyI9FOmQyRL4TtBarJrJOJ TzO+d4wyMkhwR3WyU1ktrEbdyi8K1WP9U4IrjY8pQDAPMfqYyPwG4JGBAZPZjOtB E5HCVT+XVkSHHdD7JCnAlWrKfWUJhIxS/YrsxhQnP/ELC5aqlxPEi+UDubtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQsNt5vB/Zs2Ag28R6Sx/6uXSyAwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK33Hfwe7QBt6ZB9+ka4EtqRTunN24HO2Zg bfVi0CWp1VgWrcPYYO+f/+ohfwHn0kTPmxrI3TFH0G5WXJOtNOucc5wHQEawErUV T5fZxt/WQprZmI5byL6KlL07lmknOGJFEUxVfuiYArsQU6DzvuYCQN5uxtxQNMiV XIOnhhvVugknbS6KY65FY+UyejsyKHq8Yt4qhVDqRwGIencseae0WMJ05GxYbr2Z hQJ6aM7FiuTHEnKF6t01iDQGm7rMxdSdBMIMd+iq5TGv2u/7vZqaLKX5bP+QZtXt EGlZXXyH5KOo9mJULx+vgBm8gxvAaK0Si3OGfIVf6l8gBP3CqFI= -----END CERTIFICATE-----Generated at Thu Mar 26 06:00:15 2026 by rpki-client