$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: ePxjO52H7fhEc+UVIqiDz5TTsXqhi69DyqsSPncsXgQ= Subject key identifier: 72:DF:34:88:85:CE:CD:C7:07:2A:F1:88:43:50:9E:7E:3A:BC:8C:AE Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 53C924CE6BCE8362E3300EE8B2E3F3026D94B985 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0389 Signing time: Fri 20 Mar 2026 10:10:03 +0000 Manifest this update: Fri 20 Mar 2026 10:05:03 +0000 Manifest next update: Mon 23 Mar 2026 13:41:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: 5m6gDJW4ELVrR2YGnZeQTWT1LteCcB5db9bOJDHEx1o=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 13:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c9:24:ce:6b:ce:83:62:e3:30:0e:e8:b2:e3:f3:02:6d:94:b9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Mar 20 10:05:03 2026 GMT Not After : Mar 23 13:41:03 2026 GMT Subject: CN=72DF348885CECDC7072AF18843509E7E3ABC8CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:ea:14:c1:53:68:5e:99:b1:c8:78:2c:86: c4:14:32:cb:5b:6c:6d:66:68:5e:ca:fa:50:76:3b: 49:83:7b:33:a0:ee:d8:60:e6:78:4d:04:93:a3:5d: f4:a8:e6:1d:57:f2:17:90:f8:e2:49:80:fd:54:82: e9:c0:79:77:ab:71:7d:ee:2c:99:ff:ec:bb:35:56: 8e:b6:34:74:69:ba:5d:35:bf:87:ca:89:4f:5e:0b: 2d:5d:d8:0c:94:fe:a1:9b:d2:73:6c:59:70:ae:19: d1:bb:a7:ff:5b:c1:50:ee:d5:13:d0:77:cd:f3:e9: 50:f3:db:d3:4c:6e:62:c8:22:a1:44:ee:05:34:34: a9:0c:06:a1:da:94:fd:84:61:f5:d0:d8:e9:24:3b: 37:55:9d:0f:62:1d:98:cd:81:33:f1:84:e8:6d:e3: b9:8c:a3:08:48:cc:6f:2c:8d:eb:35:4b:26:0b:95: 79:e5:49:39:94:dc:90:48:e1:62:df:ff:12:f7:aa: df:00:5c:4a:a1:52:e1:0f:75:17:85:de:0e:70:d0: 82:b1:05:ee:62:44:fa:d3:2e:54:16:61:61:0a:09: 57:9d:9c:a2:cd:44:4f:19:b7:62:8b:05:47:b5:ad: f9:eb:8a:03:8a:d0:53:02:f7:fb:75:57:88:f7:f4: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DF:34:88:85:CE:CD:C7:07:2A:F1:88:43:50:9E:7E:3A:BC:8C:AE X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:46:34:31:ef:cf:fd:2d:4d:35:9e:f5:84:34:c9:84:a0:a6: 00:69:f3:b2:1b:77:42:cb:2d:37:01:4a:a9:17:ae:38:58:5f: aa:b9:ab:37:51:a9:5f:ed:14:3c:34:a5:db:c4:6f:bf:66:90: fb:53:75:0d:04:37:39:0c:73:8c:e2:79:3d:7e:ec:ad:c7:3c: d7:27:19:43:a7:47:62:ef:1f:af:02:2b:55:60:55:d8:d5:a5: 07:bd:3e:6f:38:1a:89:3e:de:1d:46:7d:fd:a2:ee:92:9e:9e: 24:38:44:04:a6:83:95:f5:04:6e:b6:22:87:cf:00:eb:dd:9b: 99:93:b7:ac:69:92:0b:61:df:17:89:b2:55:6d:00:33:22:ac: 53:76:fa:29:d6:56:de:8d:ed:d8:76:05:17:57:36:74:ad:e7: a5:6e:86:a4:9a:f8:2e:41:4c:4a:38:76:c2:cf:0c:c8:97:05: 61:af:01:51:85:3d:7b:01:50:c4:f4:97:18:ba:08:af:64:6b: 22:16:bb:0d:63:a0:1d:c1:9b:f6:e2:f2:ed:11:94:3f:32:91: ef:d9:f1:f6:f0:56:c2:49:73:3f:1f:e4:51:e9:35:12:ee:18: bb:7a:70:44:a6:c7:1f:9f:73:99:17:b5:39:93:f8:a8:58:a2: 1a:44:5f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8kkzmvOg2LjMA7osuPzAm2UuYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNjAzMjAxMDA1MDNaFw0yNjAzMjMxMzQxMDNaMDMxMTAvBgNV BAMTKDcyREYzNDg4ODVDRUNEQzcwNzJBRjE4ODQzNTA5RTdFM0FCQzhDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRuoUwVNoXpmxyHgshsQUMstb bG1maF7K+lB2O0mDezOg7thg5nhNBJOjXfSo5h1X8heQ+OJJgP1UgunAeXercX3u LJn/7Ls1Vo62NHRpul01v4fKiU9eCy1d2AyU/qGb0nNsWXCuGdG7p/9bwVDu1RPQ d83z6VDz29NMbmLIIqFE7gU0NKkMBqHalP2EYfXQ2OkkOzdVnQ9iHZjNgTPxhOht 47mMowhIzG8sjes1SyYLlXnlSTmU3JBI4WLf/xL3qt8AXEqhUuEPdReF3g5w0IKx Be5iRPrTLlQWYWEKCVednKLNRE8Zt2KLBUe1rfnrigOK0FMC9/t1V4j39K1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUct80iIXOzccHKvGIQ1Cefjq8jK4wHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtGNDHvz/0tTTWe9YQ0yYSgpgBp87Ibd0LL LTcBSqkXrjhYX6q5qzdRqV/tFDw0pdvEb79mkPtTdQ0ENzkMc4zieT1+7K3HPNcn GUOnR2LvH68CK1VgVdjVpQe9Pm84Gok+3h1Gff2i7pKeniQ4RASmg5X1BG62IofP AOvdm5mTt6xpkgth3xeJslVtADMirFN2+inWVt6N7dh2BRdXNnSt56VuhqSa+C5B TEo4dsLPDMiXBWGvAVGFPXsBUMT0lxi6CK9kayIWuw1joB3Bm/bi8u0RlD8yke/Z 8fbwVsJJcz8f5FHpNRLuGLt6cESmxx+fc5kXtTmT+KhYohpEX7k= -----END CERTIFICATE-----Generated at Fri Mar 20 21:57:30 2026 by rpki-client