$ rpki-client -vvf repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft File: 8EEE0584B224A95915512EA70FE012A4AF134C7A.mft (raw, json) Hash identifier: 51PSmybBZlv3P5Qm8aFvvd1ZRIMpfrI8hR9E1Q+i87g= Subject key identifier: 39:2A:DE:2F:13:BE:AF:2E:C9:CF:64:94:AF:FD:9F:44:3F:E3:FA:FD Authority key identifier: 8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A Certificate issuer: /CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Certificate serial: 75EDDA7BAA4C7C533301B301C5B3D41E0DEA4041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft Manifest number: 055A Signing time: Tue 17 Mar 2026 20:11:21 +0000 Manifest this update: Tue 17 Mar 2026 20:06:21 +0000 Manifest next update: Sat 21 Mar 2026 07:53:21 +0000 Files and hashes: 1: 8EEE0584B224A95915512EA70FE012A4AF134C7A.crl (hash: E+r+ydFZcprQMKP0esse+gE2WtcyU3+hds3poMjZMpk=) 2: 3130332e39352e3136302e302f32332d3234203d3e20313336313236.roa (hash: KD7T4Ue/VEXioee+nFto/OfNIEmRxJwHxyIAd7JKH2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 07:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ed:da:7b:aa:4c:7c:53:33:01:b3:01:c5:b3:d4:1e:0d:ea:40:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEE0584B224A95915512EA70FE012A4AF134C7A Validity Not Before: Mar 17 20:06:21 2026 GMT Not After : Mar 21 07:53:21 2026 GMT Subject: CN=392ADE2F13BEAF2EC9CF6494AFFD9F443FE3FAFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:ed:78:3a:65:cf:14:8f:61:82:5d:e5:a4: bc:08:91:a8:c7:44:51:3e:09:3e:9c:37:99:94:f1: c7:d6:b1:1d:fd:33:61:e7:b6:a4:fd:c8:d3:ca:36: f8:21:54:96:52:dc:a1:3c:a5:4e:f4:39:79:74:52: fd:3f:95:64:ea:3a:18:97:6e:31:9c:f3:9e:f6:2c: 2c:d5:0f:52:92:ee:0e:6e:bb:36:bb:a3:99:91:67: e8:51:e3:5c:a3:7d:ab:7f:66:9e:84:6f:b3:c5:7d: 89:be:9f:d6:66:20:bd:3f:60:06:55:bf:8c:58:94: 88:0c:f3:36:c0:33:99:ed:fb:f9:96:55:52:8c:f9: 02:58:78:4d:06:3d:4f:14:01:b1:ee:7c:f8:18:d7: 44:d1:5b:f4:71:9b:b0:a6:37:59:11:77:80:a9:bd: d3:58:f2:0c:6d:28:bf:bb:a0:ba:c7:0f:0c:58:a8: cd:24:d7:f5:af:e9:87:c4:7e:ac:3c:16:02:c6:1c: e2:a7:b1:82:d7:50:49:a1:c9:52:3e:f2:da:d0:d9: 3c:25:6e:40:d8:81:f7:62:9f:24:5c:74:a0:9b:60: bf:67:5c:f7:41:3b:c3:d5:9f:e6:54:e7:b2:96:4e: e4:96:04:d1:3b:06:17:09:e9:64:94:69:d9:5c:1c: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2A:DE:2F:13:BE:AF:2E:C9:CF:64:94:AF:FD:9F:44:3F:E3:FA:FD X509v3 Authority Key Identifier: keyid:8E:EE:05:84:B2:24:A9:59:15:51:2E:A7:0F:E0:12:A4:AF:13:4C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EEE0584B224A95915512EA70FE012A4AF134C7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a75d371-18c7-48df-8f61-1d404b646413/0/8EEE0584B224A95915512EA70FE012A4AF134C7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3d:59:99:80:16:82:b7:c1:d9:ba:8f:7d:20:2f:5a:7a:a1: ab:3a:8a:5f:c0:22:b7:e2:46:51:b2:8d:74:a0:eb:42:57:8d: 7b:1e:c4:5b:2a:01:f7:dc:e4:d1:b8:c0:b6:cd:b4:dd:2f:1b: e8:eb:12:4d:ca:04:ed:e1:4c:91:17:50:d5:8d:1f:66:a8:47: ba:74:80:4e:8d:79:14:34:55:4c:d2:6a:8d:d4:86:0f:d2:8b: 74:cd:fd:8e:f5:b0:af:5a:1f:b8:6a:2b:fd:3c:2b:ff:49:24: c3:eb:0a:c5:d8:4b:75:ea:99:f7:12:b3:df:a4:7d:65:1c:dd: ed:f5:b6:08:19:4c:43:9b:dd:8a:b8:e2:d8:4f:43:42:56:d1: 72:35:f6:7f:88:03:f1:59:7b:3b:03:cb:9a:2b:17:2b:7a:cd: 21:03:58:af:70:57:76:61:1d:79:ec:4e:d9:de:94:72:ae:f4: 68:34:c0:9a:f2:9a:78:52:c7:e9:ac:49:d8:e0:0c:47:75:95: 27:ed:f7:9b:91:46:0a:f5:43:b5:63:71:f2:4a:3b:c7:f4:d5: ac:20:0f:69:71:77:ad:30:0d:17:ed:fc:8e:77:e2:44:a7:e3: a3:b6:0b:e6:a5:fb:a7:7e:be:9e:1c:ef:67:fd:f0:bf:55:75: 62:af:b1:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUde3ae6pMfFMzAbMBxbPUHg3qQEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRB RjEzNEM3QTAeFw0yNjAzMTcyMDA2MjFaFw0yNjAzMjEwNzUzMjFaMDMxMTAvBgNV BAMTKDM5MkFERTJGMTNCRUFGMkVDOUNGNjQ5NEFGRkQ5RjQ0M0ZFM0ZBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrO14OmXPFI9hgl3lpLwIkajH RFE+CT6cN5mU8cfWsR39M2HntqT9yNPKNvghVJZS3KE8pU70OXl0Uv0/lWTqOhiX bjGc8572LCzVD1KS7g5uuza7o5mRZ+hR41yjfat/Zp6Eb7PFfYm+n9ZmIL0/YAZV v4xYlIgM8zbAM5nt+/mWVVKM+QJYeE0GPU8UAbHufPgY10TRW/Rxm7CmN1kRd4Cp vdNY8gxtKL+7oLrHDwxYqM0k1/Wv6YfEfqw8FgLGHOKnsYLXUEmhyVI+8trQ2Twl bkDYgfdinyRcdKCbYL9nXPdBO8PVn+ZU57KWTuSWBNE7BhcJ6WSUadlcHJCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSreLxO+ry7Jz2SUr/2fRD/j+v0wHwYDVR0j BBgwFoAUju4FhLIkqVkVUS6nD+ASpK8TTHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc1ZDM3MS0xOGM3LTQ4ZGYtOGY2MS0xZDQwNGI2NDY0MTMvMC84RUVFMDU4NEIy MjRBOTU5MTU1MTJFQTcwRkUwMTJBNEFGMTM0QzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEyQTRBRjEz NEM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3NWQzNzEtMThjNy00OGRmLThm NjEtMWQ0MDRiNjQ2NDEzLzAvOEVFRTA1ODRCMjI0QTk1OTE1NTEyRUE3MEZFMDEy QTRBRjEzNEM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACM9WZmAFoK3wdm6j30gL1p6oas6il/AIrfi RlGyjXSg60JXjXsexFsqAffc5NG4wLbNtN0vG+jrEk3KBO3hTJEXUNWNH2aoR7p0 gE6NeRQ0VUzSao3Uhg/Si3TN/Y71sK9aH7hqK/08K/9JJMPrCsXYS3XqmfcSs9+k fWUc3e31tggZTEOb3Yq44thPQ0JW0XI19n+IA/FZezsDy5orFyt6zSEDWK9wV3Zh HXnsTtnelHKu9Gg0wJrymnhSx+msSdjgDEd1lSft95uRRgr1Q7VjcfJKO8f01awg D2lxd60wDRft/I534kSn46O2C+al+6d+vp4c72f98L9VdWKvsc0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:24:14 2026 by rpki-client