$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: JFH/K+4R1AKhEwsbvZIVy/P9lzs837xMh3vVngWn3m0= Subject key identifier: F2:48:99:B4:DF:CA:33:FB:7F:6D:C9:D6:7D:60:E6:5B:D4:4C:8E:15 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 2C1FA5DF95C3A1905F9CE61E52D369283CC0F75E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 055E Signing time: Thu 19 Mar 2026 00:12:26 +0000 Manifest this update: Thu 19 Mar 2026 00:07:25 +0000 Manifest next update: Sun 22 Mar 2026 07:20:25 +0000 Files and hashes: 1: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 2: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 3: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: xfeE9gp/iXwoLwV66ya7WjT8TFmEUKpPrmucz3Etu8o=) 4: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 5: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 07:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1f:a5:df:95:c3:a1:90:5f:9c:e6:1e:52:d3:69:28:3c:c0:f7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Mar 19 00:07:25 2026 GMT Not After : Mar 22 07:20:25 2026 GMT Subject: CN=F24899B4DFCA33FB7F6DC9D67D60E65BD44C8E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:27:44:de:82:40:0c:7d:b0:45:af:c9:35: 58:ef:fa:d4:31:1e:02:04:88:a4:37:b9:6b:b6:53: 82:d4:d8:15:2d:54:8b:bb:dc:73:4c:dc:67:36:9b: a7:47:34:4a:06:2c:0c:bf:d9:31:91:3c:6e:99:92: 75:fb:84:fb:c9:49:53:e0:0c:f2:46:a9:ec:0d:53: 7c:18:de:e8:cc:01:15:52:61:ae:a4:33:9a:28:7d: 89:eb:5b:55:88:1c:87:7d:4b:cd:ed:fa:f4:7a:17: 84:29:a6:41:3f:c3:6a:13:fe:60:6f:5c:21:40:9e: 7c:ea:bf:9a:09:3c:e9:c8:86:35:20:2f:35:e6:4d: 82:92:71:6f:6c:52:1c:7c:63:d8:96:b7:1d:39:d9: b3:6c:f5:24:26:43:7c:dc:c1:ce:52:ce:a9:5d:1a: af:e6:06:16:72:f9:9f:83:ab:ff:38:26:c6:bd:3f: fa:cc:39:e6:49:fe:18:67:b4:1a:1c:4e:93:03:6e: ab:00:59:5d:06:c1:be:b7:65:9b:82:74:6c:8f:1b: 89:35:f8:d8:48:d7:e3:6c:f2:17:46:7e:62:a1:72: a7:88:e1:18:d7:89:c1:f8:21:56:a3:59:cf:ec:b3: 44:35:d2:66:33:1c:f7:cb:bd:25:9f:ac:03:11:06: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:48:99:B4:DF:CA:33:FB:7F:6D:C9:D6:7D:60:E6:5B:D4:4C:8E:15 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f8:f3:3c:42:09:7b:73:de:d7:90:02:59:f7:46:fd:77:cb:b1: 68:c9:84:cb:c8:fd:83:d4:92:d2:76:66:e6:84:0c:e7:60:88: fe:9b:e9:c0:88:2e:73:d5:05:27:7a:a3:1f:9a:03:36:28:c5: 9c:32:cd:c6:e2:b2:55:86:50:0d:8a:be:2c:31:4b:1a:53:62: 86:ef:9a:45:2d:26:83:f9:94:fe:06:34:47:ef:3f:d5:d3:4d: d9:c7:a9:2e:2c:77:40:fa:ba:7f:ba:e2:19:fa:62:6a:bd:49: 2c:b1:a9:c1:13:19:c3:2f:fb:52:61:13:53:0a:da:e1:ba:ed: 3b:a0:36:2f:ed:d0:1b:ec:b5:82:70:0c:db:9e:c9:a4:2f:b6: ec:9a:03:9b:e4:7b:bb:a0:30:cc:cf:52:82:e9:85:10:04:e6: 37:23:f5:b6:96:3a:5f:63:ed:06:6d:a2:c2:c5:2d:20:79:05: fa:42:7b:11:c0:1d:f7:4c:19:d6:ed:2d:32:15:60:8a:12:b5: a3:44:89:6a:f6:55:ea:9d:5c:3a:a1:c7:a5:8b:df:22:e1:ed: 68:76:75:6b:ed:08:67:d4:1e:3c:c4:90:73:b1:1c:37:77:ef: 1f:0c:c6:e1:bc:5a:e9:75:60:16:bd:82:9d:a2:bf:ad:f1:97: 73:bd:37:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULB+l35XDoZBfnOYeUtNpKDzA914wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNjAzMTkwMDA3MjVaFw0yNjAzMjIwNzIwMjVaMDMxMTAvBgNV BAMTKEYyNDg5OUI0REZDQTMzRkI3RjZEQzlENjdENjBFNjVCRDQ0QzhFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTidE3oJADH2wRa/JNVjv+tQx HgIEiKQ3uWu2U4LU2BUtVIu73HNM3Gc2m6dHNEoGLAy/2TGRPG6ZknX7hPvJSVPg DPJGqewNU3wY3ujMARVSYa6kM5oofYnrW1WIHId9S83t+vR6F4QppkE/w2oT/mBv XCFAnnzqv5oJPOnIhjUgLzXmTYKScW9sUhx8Y9iWtx052bNs9SQmQ3zcwc5Szqld Gq/mBhZy+Z+Dq/84Jsa9P/rMOeZJ/hhntBocTpMDbqsAWV0Gwb63ZZuCdGyPG4k1 +NhI1+Ns8hdGfmKhcqeI4RjXicH4IVajWc/ss0Q10mYzHPfLvSWfrAMRBiqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kiZtN/KM/t/bcnWfWDmW9RMjhUwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPjzPEIJe3Pe15ACWfdG/XfLsWjJhMvI/YPU ktJ2ZuaEDOdgiP6b6cCILnPVBSd6ox+aAzYoxZwyzcbislWGUA2KviwxSxpTYobv mkUtJoP5lP4GNEfvP9XTTdnHqS4sd0D6un+64hn6Ymq9SSyxqcETGcMv+1JhE1MK 2uG67TugNi/t0BvstYJwDNueyaQvtuyaA5vke7ugMMzPUoLphRAE5jcj9baWOl9j 7QZtosLFLSB5BfpCexHAHfdMGdbtLTIVYIoStaNEiWr2VeqdXDqhx6WL3yLh7Wh2 dWvtCGfUHjzEkHOxHDd37x8MxuG8Wul1YBa9gp2iv63xl3O9N28= -----END CERTIFICATE-----Generated at Thu Mar 19 06:42:08 2026 by rpki-client