$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: MLpOsu68Rt9fm6beTlatvMrup4s+TyHZ7rTg6QwWMcU= Subject key identifier: 99:65:1E:3C:2E:80:44:74:2F:AC:8B:30:C0:DC:2F:00:FF:B2:7B:78 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 02D875D02E8BCFA315EC05FBEC4003CE0DC1097B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 0279 Signing time: Thu 19 Mar 2026 07:41:43 +0000 Manifest this update: Thu 19 Mar 2026 07:36:43 +0000 Manifest next update: Sun 22 Mar 2026 07:51:43 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 4: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 6: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: byKRO7iNBX/xJ83zQPyTPGubFcNRGsXlao6TkwzQEyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 07:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d8:75:d0:2e:8b:cf:a3:15:ec:05:fb:ec:40:03:ce:0d:c1:09:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Mar 19 07:36:43 2026 GMT Not After : Mar 22 07:51:43 2026 GMT Subject: CN=99651E3C2E8044742FAC8B30C0DC2F00FFB27B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:f8:dc:3b:9b:ff:ca:dd:f9:05:03:55:2d: 72:ff:75:7f:ce:ec:da:15:ce:07:f4:e8:f9:d2:da: 82:ea:03:45:a5:32:1b:fb:9e:1f:b7:4f:14:c8:c8: a9:e7:ac:b7:32:79:aa:2b:da:da:6f:4a:f3:a7:0c: 6d:48:80:85:c2:0f:85:d9:f9:52:41:fc:d6:32:ef: 6a:1a:f4:f5:98:b7:15:58:5a:c2:bd:d3:b8:0b:6b: cf:18:fd:84:4a:45:28:a2:90:75:4b:72:9e:ad:cc: c8:4d:20:e3:fc:34:37:7e:d6:0c:b5:89:31:da:ed: 52:3b:c3:69:2a:47:a1:03:7e:55:ec:1f:16:e4:56: c2:5d:0c:a2:ea:e9:57:c9:81:ee:f6:a3:bd:70:12: cb:d9:6d:1d:d6:b6:ae:15:04:4c:e4:c4:b9:a1:c2: 76:1e:28:97:f9:40:a0:b4:cc:4c:0f:b3:02:10:11: f0:28:e5:bd:43:d3:56:a7:e9:dd:7c:59:a3:83:87: e1:19:82:5c:55:5c:7f:f5:89:33:5f:24:7d:7f:ec: 2f:74:77:c4:6f:a4:b5:58:6c:f4:83:49:c4:20:47: b0:e7:f6:e0:4f:b9:1a:d8:bc:dc:78:11:44:06:ff: ec:fb:d4:6a:f7:f2:5e:66:9a:71:bb:5e:47:69:71: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:1E:3C:2E:80:44:74:2F:AC:8B:30:C0:DC:2F:00:FF:B2:7B:78 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:92:6e:e0:60:4f:a5:62:d3:cb:74:88:f4:14:11:e3:c1:30: 87:d4:aa:5f:e8:37:ce:1f:89:e0:f8:6c:fb:c4:66:33:bf:ea: eb:6b:1b:ec:41:18:8d:de:87:1d:b9:f8:39:42:d8:28:0e:01: 9e:a6:3a:f6:0a:78:02:dd:b9:fe:95:77:5f:94:4d:64:1e:d7: 6f:75:7a:4a:36:53:e6:9f:e9:d6:2d:63:69:c5:d1:b1:11:17: 67:d6:e8:af:84:e5:67:ba:5a:02:94:b4:6c:38:7f:bd:62:f4: 71:2e:5f:43:8f:8e:7c:cf:96:58:14:80:d6:a3:39:6e:53:be: b3:1f:f3:4b:be:39:76:19:62:b9:1c:bd:70:8d:23:d5:7e:ec: 0b:98:7f:ce:53:74:5d:2c:f2:a3:8c:d5:f3:21:ec:db:71:aa: 55:26:5f:74:2d:f0:6b:87:94:3c:e8:eb:64:43:60:1c:63:d7: ea:7b:4a:bd:a9:b1:4e:19:af:3f:32:74:a3:b3:33:40:94:fd: 79:0c:c2:9d:9a:ba:da:a7:e6:66:9d:f7:0a:ed:35:ee:49:04: 21:a4:c0:77:5d:b4:35:22:6b:7f:2f:51:65:35:34:80:d1:7c: 74:03:8b:54:cd:ad:b7:07:92:8e:e5:6e:22:ee:31:6c:cb:60: 25:db:07:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAth10C6Lz6MV7AX77EADzg3BCXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNjAzMTkwNzM2NDNaFw0yNjAzMjIwNzUxNDNaMDMxMTAvBgNV BAMTKDk5NjUxRTNDMkU4MDQ0NzQyRkFDOEIzMEMwREMyRjAwRkZCMjdCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41fjcO5v/yt35BQNVLXL/dX/O 7NoVzgf06PnS2oLqA0WlMhv7nh+3TxTIyKnnrLcyeaor2tpvSvOnDG1IgIXCD4XZ +VJB/NYy72oa9PWYtxVYWsK907gLa88Y/YRKRSiikHVLcp6tzMhNIOP8NDd+1gy1 iTHa7VI7w2kqR6EDflXsHxbkVsJdDKLq6VfJge72o71wEsvZbR3Wtq4VBEzkxLmh wnYeKJf5QKC0zEwPswIQEfAo5b1D01an6d18WaODh+EZglxVXH/1iTNfJH1/7C90 d8RvpLVYbPSDScQgR7Dn9uBPuRrYvNx4EUQG/+z71Gr38l5mmnG7Xkdpcb5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWUePC6ARHQvrIswwNwvAP+ye3gwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSSbuBgT6Vi08t0iPQUEePBMIfUql/oN84f ieD4bPvEZjO/6utrG+xBGI3ehx25+DlC2CgOAZ6mOvYKeALduf6Vd1+UTWQe1291 eko2U+af6dYtY2nF0bERF2fW6K+E5We6WgKUtGw4f71i9HEuX0OPjnzPllgUgNaj OW5TvrMf80u+OXYZYrkcvXCNI9V+7AuYf85TdF0s8qOM1fMh7NtxqlUmX3Qt8GuH lDzo62RDYBxj1+p7Sr2psU4Zrz8ydKOzM0CU/XkMwp2autqn5mad9wrtNe5JBCGk wHddtDUia38vUWU1NIDRfHQDi1TNrbcHko7lbiLuMWzLYCXbB18= -----END CERTIFICATE-----Generated at Sat Mar 21 01:31:56 2026 by rpki-client