$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: 3MV3Z4GHUH/huKQR321m6a4Y/OgVgLkij830N0Qast4= Subject key identifier: E8:45:F2:55:05:B7:06:3F:42:08:1C:BB:25:C8:76:B8:17:FF:A6:04 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 284D048EE0EBA89062401F36FC8B1BDB335455FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04DA Signing time: Thu 19 Mar 2026 08:00:58 +0000 Manifest this update: Thu 19 Mar 2026 07:55:58 +0000 Manifest next update: Sun 22 Mar 2026 10:31:58 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: XytyG8YNLqbc2MoZf3nWg77ZccTd/bwml4lHe4iq93I=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 10:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4d:04:8e:e0:eb:a8:90:62:40:1f:36:fc:8b:1b:db:33:54:55:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Mar 19 07:55:58 2026 GMT Not After : Mar 22 10:31:58 2026 GMT Subject: CN=E845F25505B7063F42081CBB25C876B817FFA604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:11:59:c5:75:20:a2:17:30:5f:63:52:26: 0f:d1:6d:8f:dc:9d:34:ff:44:b7:23:47:60:ac:a6: 6b:b4:aa:5b:09:a1:a5:6b:8e:73:a8:11:49:ef:32: e2:92:29:0a:1b:6f:e6:e3:e7:96:e5:2b:61:f4:1a: 24:6e:dd:98:bb:32:94:9a:2c:d7:60:6a:ec:9a:0d: 9e:c8:5f:ef:28:11:65:c9:80:0d:e2:9f:6b:45:33: d8:f2:33:52:fb:60:6f:6b:fd:20:04:a6:22:e3:26: f6:0b:b1:9e:47:34:11:e2:d2:30:5a:a7:70:45:f6: 58:24:d9:e3:69:c1:1d:00:4c:e5:53:0b:8e:61:af: 44:cb:02:12:71:cc:69:c5:59:e1:24:fd:76:b2:de: bd:53:fb:0f:23:0d:36:af:f7:d5:c0:ad:fa:8a:b8: ba:1d:5c:b3:ed:d5:16:e0:0e:e6:2e:23:b7:65:97: b6:f4:f6:4e:6b:01:e5:ea:91:d5:a8:e9:4b:d6:81: c5:e3:bf:04:84:08:0e:61:16:a2:30:3b:79:87:f6: 75:fe:cd:15:ff:f6:49:af:29:83:05:59:ab:5a:0c: b1:1e:e5:f6:f8:1b:5f:ca:1a:a0:2e:f7:6a:85:ce: 98:62:ee:3c:c5:83:22:da:ea:3a:de:88:2a:df:68: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:45:F2:55:05:B7:06:3F:42:08:1C:BB:25:C8:76:B8:17:FF:A6:04 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f5:1d:b9:7d:19:15:d4:05:2b:d0:9f:ae:80:c9:7b:b6:ce: 43:60:cd:38:74:50:12:05:26:c9:cb:0b:21:2f:f4:4d:85:39: 3e:4b:f4:ed:68:47:60:89:b2:34:f6:68:4a:64:44:92:2f:d3: 16:d6:65:13:e0:aa:b5:89:c6:a1:58:f9:a7:36:75:02:26:0c: b6:2e:0d:31:34:33:41:39:6d:2c:d2:84:38:17:b5:c5:93:6c: 7c:47:75:4e:8f:12:f1:d9:43:7a:81:2a:0c:90:0e:03:5e:2a: 83:b7:9f:17:f7:66:b4:7c:2a:9f:b2:f8:69:2b:44:56:6d:91: 70:23:ba:85:46:4b:2c:c8:eb:cb:38:9b:37:7a:5b:a4:d5:cd: ec:70:58:d3:b4:f0:b3:cd:ce:59:27:20:ed:58:b4:e9:83:11: 0c:e8:e2:05:7d:87:f1:62:e3:d6:35:be:2c:3e:e9:38:e3:ca: dd:eb:b1:ff:6b:01:b0:74:42:12:a6:c9:89:ef:41:b9:b9:7d: 3e:fe:81:e6:82:cf:49:75:0b:4b:f8:a7:33:fc:40:81:4c:8f: 12:fe:c8:b0:66:a4:ec:e0:22:6b:6b:f2:99:09:0c:43:4f:6e: 23:73:da:ec:17:b8:fa:6c:4a:5d:50:04:a8:11:75:0a:0a:71: 89:9d:9b:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKE0EjuDrqJBiQB82/Isb2zNUVf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNjAzMTkwNzU1NThaFw0yNjAzMjIxMDMxNThaMDMxMTAvBgNV BAMTKEU4NDVGMjU1MDVCNzA2M0Y0MjA4MUNCQjI1Qzg3NkI4MTdGRkE2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0hFZxXUgohcwX2NSJg/RbY/c nTT/RLcjR2Cspmu0qlsJoaVrjnOoEUnvMuKSKQobb+bj55blK2H0GiRu3Zi7MpSa LNdgauyaDZ7IX+8oEWXJgA3in2tFM9jyM1L7YG9r/SAEpiLjJvYLsZ5HNBHi0jBa p3BF9lgk2eNpwR0ATOVTC45hr0TLAhJxzGnFWeEk/Xay3r1T+w8jDTav99XArfqK uLodXLPt1RbgDuYuI7dll7b09k5rAeXqkdWo6UvWgcXjvwSECA5hFqIwO3mH9nX+ zRX/9kmvKYMFWataDLEe5fb4G1/KGqAu92qFzphi7jzFgyLa6jreiCrfaJVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6EXyVQW3Bj9CCBy7Jch2uBf/pgQwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ71Hbl9GRXUBSvQn66AyXu2zkNgzTh0UBIF JsnLCyEv9E2FOT5L9O1oR2CJsjT2aEpkRJIv0xbWZRPgqrWJxqFY+ac2dQImDLYu DTE0M0E5bSzShDgXtcWTbHxHdU6PEvHZQ3qBKgyQDgNeKoO3nxf3ZrR8Kp+y+Gkr RFZtkXAjuoVGSyzI68s4mzd6W6TVzexwWNO08LPNzlknIO1YtOmDEQzo4gV9h/Fi 49Y1viw+6Tjjyt3rsf9rAbB0QhKmyYnvQbm5fT7+geaCz0l1C0v4pzP8QIFMjxL+ yLBmpOzgImtr8pkJDENPbiNz2uwXuPpsSl1QBKgRdQoKcYmdm0M= -----END CERTIFICATE-----Generated at Sat Mar 21 01:32:03 2026 by rpki-client