$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: /i0aV3khmufB1aieoHEd52bp+Ugs7TtxnsJ2kRGHVts= Subject key identifier: 62:97:DE:42:66:1E:23:D1:A1:82:DD:2F:94:14:EF:60:4D:5F:4A:37 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: E58BF816C5B05AC92F5A317FF803D49C14D82B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 0268 Signing time: Thu 19 Mar 2026 16:31:44 +0000 Manifest this update: Thu 19 Mar 2026 16:26:44 +0000 Manifest next update: Mon 23 Mar 2026 01:37:44 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: DXI1qQYb6tvG+9Me5rdctgpG29bKWdMqxGqGKjoE34A=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 01:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e5:8b:f8:16:c5:b0:5a:c9:2f:5a:31:7f:f8:03:d4:9c:14:d8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Mar 19 16:26:44 2026 GMT Not After : Mar 23 01:37:44 2026 GMT Subject: CN=6297DE42661E23D1A182DD2F9414EF604D5F4A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:55:44:fc:e6:b7:e6:eb:59:bf:07:7b:a5: 07:a9:6a:b5:30:c4:02:b1:ad:b7:2f:e5:43:3a:45: 2d:5a:ea:89:ab:61:49:09:dc:27:7c:d7:0f:c8:81: 4d:19:64:72:bb:2a:b2:1e:8b:cc:f7:8b:f5:db:c2: 09:f8:e0:d4:d0:dc:db:3a:22:7d:d3:20:f0:63:35: c3:29:c5:ff:fd:c6:8e:21:62:2e:cb:5b:cf:4f:cb: e9:2c:d7:87:f8:c5:aa:c6:e8:e2:77:69:53:8e:c3: 1a:cd:73:6b:b9:4c:6e:fa:c4:7f:db:42:48:b4:88: 34:49:61:6a:fa:f9:b1:26:ac:48:14:56:25:29:e7: 56:e4:03:a9:19:3c:ee:18:36:94:64:c2:69:89:6f: 8d:ca:73:8b:14:fc:42:06:ad:58:e7:25:14:64:84: d7:e4:db:65:26:df:5c:f3:93:ba:ba:3d:b5:a8:d7: 0b:aa:73:9f:46:e6:21:3c:1c:e3:2e:46:ca:b7:be: 32:29:59:9f:3e:79:7e:45:c3:76:9f:d9:aa:d7:17: e7:31:c2:a5:e9:8e:58:c9:9b:d1:06:e7:6e:91:c1: 68:05:bd:b2:dd:1b:0a:e5:e2:c6:3c:f1:97:cc:60: 9a:39:e3:d2:ab:88:16:f0:a7:23:46:16:03:2e:2e: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:97:DE:42:66:1E:23:D1:A1:82:DD:2F:94:14:EF:60:4D:5F:4A:37 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e4:6d:cf:57:5b:e4:26:39:94:4c:c2:e1:e1:d6:63:95:69: 88:38:5f:de:10:2c:e1:80:19:03:fc:73:c6:38:db:8c:1a:f3: 46:69:6b:21:9f:ff:94:9c:71:0c:20:11:3b:22:f5:13:5e:37: 24:83:85:bf:61:57:44:85:4c:e8:8a:ae:b0:51:be:79:74:18: 60:d2:87:a3:9b:9b:83:60:8e:97:0a:55:ad:12:f6:44:e7:df: ba:5c:33:1e:3f:b8:30:5b:27:67:79:f8:59:7d:2f:54:73:43: 0c:76:05:ef:5a:4e:81:4b:e1:be:b7:8b:88:2f:17:24:50:27: 04:17:7e:5e:de:13:d8:a4:1e:a8:57:c0:c8:ea:3d:67:e4:9d: b7:22:ce:42:c5:ea:4e:15:73:9f:bc:e7:39:4b:bb:2b:13:dd: ea:41:e0:4a:a3:04:76:09:b6:9c:44:50:a4:e1:b7:18:56:25: 5a:72:a3:0c:22:f0:8a:4b:f1:25:e5:77:30:83:0e:b8:84:8e: 8c:af:d2:3b:f4:b2:27:db:c0:d6:08:b6:f3:b5:a4:3a:ff:e6: 51:bc:7a:d8:4e:92:c8:07:4b:54:be:66:37:22:c0:88:d2:45: 18:be:5b:6b:29:f1:cd:4d:fc:bb:e8:e6:16:fd:8c:30:b3:bb: 34:c2:69:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOWL+BbFsFrJL1oxf/gD1JwU2CswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNjAzMTkxNjI2NDRaFw0yNjAzMjMwMTM3NDRaMDMxMTAvBgNV BAMTKDYyOTdERTQyNjYxRTIzRDFBMTgyREQyRjk0MTRFRjYwNEQ1RjRBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtCFVE/Oa35utZvwd7pQeparUw xAKxrbcv5UM6RS1a6omrYUkJ3Cd81w/IgU0ZZHK7KrIei8z3i/Xbwgn44NTQ3Ns6 In3TIPBjNcMpxf/9xo4hYi7LW89Py+ks14f4xarG6OJ3aVOOwxrNc2u5TG76xH/b Qki0iDRJYWr6+bEmrEgUViUp51bkA6kZPO4YNpRkwmmJb43Kc4sU/EIGrVjnJRRk hNfk22Um31zzk7q6PbWo1wuqc59G5iE8HOMuRsq3vjIpWZ8+eX5Fw3af2arXF+cx wqXpjljJm9EG526RwWgFvbLdGwrl4sY88ZfMYJo549KriBbwpyNGFgMuLit3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpfeQmYeI9Ghgt0vlBTvYE1fSjcwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfkbc9XW+QmOZRMwuHh1mOVaYg4X94QLOGA GQP8c8Y424wa80ZpayGf/5SccQwgETsi9RNeNySDhb9hV0SFTOiKrrBRvnl0GGDS h6Obm4NgjpcKVa0S9kTn37pcMx4/uDBbJ2d5+Fl9L1RzQwx2Be9aToFL4b63i4gv FyRQJwQXfl7eE9ikHqhXwMjqPWfknbcizkLF6k4Vc5+85zlLuysT3epB4EqjBHYJ tpxEUKThtxhWJVpyowwi8IpL8SXldzCDDriEjoyv0jv0sifbwNYItvO1pDr/5lG8 ethOksgHS1S+ZjciwIjSRRi+W2sp8c1N/Lvo5hb9jDCzuzTCaWA= -----END CERTIFICATE-----Generated at Sat Mar 21 01:01:24 2026 by rpki-client