$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: B8n05AIAmCiT21itA84F+A/H22tNsuJrGAE5AEgyyOU= Subject key identifier: 15:8E:70:A8:C7:05:07:52:F7:A4:1F:3A:A9:AF:5F:E2:F4:8F:5A:0E Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 5BF974AAE3BA29C9D9CC63439391DF4CDCD213CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 055D Signing time: Sun 22 Mar 2026 22:31:14 +0000 Manifest this update: Sun 22 Mar 2026 22:26:14 +0000 Manifest next update: Thu 26 Mar 2026 09:37:14 +0000 Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: 7MfE1DDZSpY5RbGjpYp+fE3SfbmdFQI89Ji7J0L86mE=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f9:74:aa:e3:ba:29:c9:d9:cc:63:43:93:91:df:4c:dc:d2:13:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Mar 22 22:26:14 2026 GMT Not After : Mar 26 09:37:14 2026 GMT Subject: CN=158E70A8C7050752F7A41F3AA9AF5FE2F48F5A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:8b:aa:4f:5c:25:8e:82:a8:84:53:0c:eb: 2d:e7:8c:5b:61:7c:a0:d9:22:54:6d:69:a3:c0:07: 63:3e:97:11:88:d6:e8:fb:e9:c2:4b:81:b4:9e:52: 9d:cb:96:b9:a2:15:cb:4b:b7:b0:41:e7:fa:14:6b: a4:76:5b:8f:fb:46:a3:90:38:32:7f:5e:66:2a:29: 76:b2:ce:be:8e:78:88:d0:f5:63:5d:57:7c:18:8d: cf:bc:05:b7:4e:18:d6:33:18:a4:7e:55:ab:d7:b3: d7:4e:1a:6a:2f:ce:ab:06:a6:51:6d:3c:ed:12:63: dd:50:ea:96:b3:18:ba:77:cf:fd:b9:62:e3:a9:ba: 26:34:94:db:49:6e:46:84:8a:4a:af:f9:7e:06:2e: f4:2f:ea:59:0c:0f:b5:a1:53:5c:e1:35:f2:90:9c: 5f:d8:4c:c4:e5:63:8a:00:51:d6:e4:a9:78:cb:37: 4e:c0:3b:c2:41:5f:55:73:73:5f:e9:e4:0f:c8:8e: a0:14:70:71:ea:9d:e5:36:49:07:dd:2c:d9:21:7f: 99:91:78:31:10:7d:8f:07:9a:19:70:f5:a8:0d:27: 57:8c:a9:80:c2:10:34:31:9f:24:dd:ba:3b:25:03: 80:35:ae:9e:f8:45:95:62:db:99:4a:87:23:5a:bd: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8E:70:A8:C7:05:07:52:F7:A4:1F:3A:A9:AF:5F:E2:F4:8F:5A:0E X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:97:b8:32:dd:90:67:f0:d7:9e:7c:0c:92:0c:21:18:82:5c: cb:80:7e:80:31:fd:b4:ba:7d:ba:3a:9a:12:66:be:66:08:ec: e7:86:6a:dc:e3:39:ff:30:d4:c8:71:c3:28:b0:28:fe:e2:3c: fc:91:07:59:e8:7d:67:8e:c0:cc:dd:95:32:ba:75:77:16:5f: ea:05:32:63:4a:0e:d9:b4:d1:31:79:93:12:49:03:57:cd:a9: 88:d9:c0:44:52:65:d4:a2:9d:a9:57:0d:9c:23:8b:04:17:b5: cd:d7:08:ab:7e:83:5a:97:b8:09:49:19:af:63:7b:b9:1b:c0: 51:ff:04:0d:2a:b2:05:82:f2:b0:72:57:7c:45:ef:e9:d9:13: ab:88:45:b0:6b:ae:fb:20:ee:02:19:64:94:94:63:a3:34:31: 8c:e1:b1:37:e3:f2:6d:fd:11:cf:9b:2c:8e:d6:b5:1d:b6:d3: 3d:10:97:8d:46:3c:e2:34:8b:e7:c6:e4:3a:7f:4c:36:cd:71: 7f:18:02:48:63:91:f1:e7:d2:8c:95:52:cf:ae:3c:fb:1c:88: df:43:a1:ab:8a:8b:39:db:d4:7d:72:66:4b:0a:f9:4d:31:7c: a7:91:a7:91:8b:19:be:69:0a:ee:61:14:15:d4:60:39:3c:d3: 28:04:3a:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/l0quO6KcnZzGNDk5HfTNzSE8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNjAzMjIyMjI2MTRaFw0yNjAzMjYwOTM3MTRaMDMxMTAvBgNV BAMTKDE1OEU3MEE4QzcwNTA3NTJGN0E0MUYzQUE5QUY1RkUyRjQ4RjVBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ84uqT1wljoKohFMM6y3njFth fKDZIlRtaaPAB2M+lxGI1uj76cJLgbSeUp3LlrmiFctLt7BB5/oUa6R2W4/7RqOQ ODJ/XmYqKXayzr6OeIjQ9WNdV3wYjc+8BbdOGNYzGKR+VavXs9dOGmovzqsGplFt PO0SY91Q6pazGLp3z/25YuOpuiY0lNtJbkaEikqv+X4GLvQv6lkMD7WhU1zhNfKQ nF/YTMTlY4oAUdbkqXjLN07AO8JBX1Vzc1/p5A/IjqAUcHHqneU2SQfdLNkhf5mR eDEQfY8Hmhlw9agNJ1eMqYDCEDQxnyTdujslA4A1rp74RZVi25lKhyNavYkZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFY5wqMcFB1L3pB86qa9f4vSPWg4wHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOXuDLdkGfw1558DJIMIRiCXMuAfoAx/bS6 fbo6mhJmvmYI7OeGatzjOf8w1MhxwyiwKP7iPPyRB1nofWeOwMzdlTK6dXcWX+oF MmNKDtm00TF5kxJJA1fNqYjZwERSZdSinalXDZwjiwQXtc3XCKt+g1qXuAlJGa9j e7kbwFH/BA0qsgWC8rByV3xF7+nZE6uIRbBrrvsg7gIZZJSUY6M0MYzhsTfj8m39 Ec+bLI7WtR220z0Ql41GPOI0i+fG5Dp/TDbNcX8YAkhjkfHn0oyVUs+uPPsciN9D oauKiznb1H1yZksK+U0xfKeRp5GLGb5pCu5hFBXUYDk80ygEOr4= -----END CERTIFICATE-----Generated at Tue Mar 24 01:52:37 2026 by rpki-client