$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: IHnPc1OetbD9bdZfL8rbHV4PuJrjReEv4v68tL7lRXA= Subject key identifier: 7B:09:25:5F:E8:B6:93:66:9F:DB:CC:01:09:1B:E7:23:19:E7:E2:F6 Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 3C310A790ACA3AA3A7D81FB1FE9D89F72B57D400 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 023A Signing time: Wed 18 Mar 2026 14:52:31 +0000 Manifest this update: Wed 18 Mar 2026 14:47:31 +0000 Manifest next update: Sat 21 Mar 2026 16:30:31 +0000 Files and hashes: 1: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: dQEM/KsZRwJIzCCmuOmX+rsd+kfviGQVnsMIqOPouAQ=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 16:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:31:0a:79:0a:ca:3a:a3:a7:d8:1f:b1:fe:9d:89:f7:2b:57:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Mar 18 14:47:31 2026 GMT Not After : Mar 21 16:30:31 2026 GMT Subject: CN=7B09255FE8B693669FDBCC01091BE72319E7E2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:b4:33:c5:82:82:a7:ba:4c:34:e3:9d:5f: 5f:f4:18:0e:18:b5:86:44:8e:40:54:ce:f5:24:bf: f6:35:43:79:08:85:8d:fa:55:db:01:3d:79:a1:a4: 8e:f0:5e:18:25:bc:bb:04:41:dc:52:a4:6c:cd:7e: c2:68:cb:0a:9d:7a:ad:ff:53:1b:8a:5f:65:89:4e: 5c:a2:99:f1:67:0e:9d:e1:16:ae:59:07:15:7e:c0: 91:35:ef:c1:b6:3d:ad:3e:7f:4e:17:0e:f3:3b:ec: dd:7f:be:5b:37:51:6f:51:44:5c:a4:50:38:22:fe: d3:43:94:10:cb:53:4f:7d:6d:07:fb:c4:86:14:a2: 84:64:0b:2f:af:1e:d1:e0:86:5f:e1:10:47:c9:25: 39:30:0c:8e:78:e9:da:c1:b7:32:dc:09:d0:62:45: 01:f0:62:fc:42:77:67:72:6b:d9:1d:c2:46:50:fe: df:3e:11:00:a6:e1:77:9f:ca:d8:fc:18:a6:1f:11: 12:77:20:11:04:7f:d3:fe:91:da:e2:17:7f:82:65: 51:62:95:08:95:44:4e:9d:c7:52:88:1a:56:14:6b: 18:0c:f3:d0:e4:19:10:6f:e9:e5:bf:dc:21:a7:6e: e4:b3:d1:5b:1d:af:cb:24:97:49:33:60:0a:0a:1e: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:09:25:5F:E8:B6:93:66:9F:DB:CC:01:09:1B:E7:23:19:E7:E2:F6 X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1e:58:19:7e:8d:50:46:e8:e7:b1:70:a8:ef:22:dc:b4:e1: db:77:2c:4d:d6:d1:4f:64:11:99:0d:e4:ec:97:96:25:74:55: 3a:5c:91:ab:ba:92:0d:b0:b2:3f:37:52:d1:53:7b:8e:99:f3: 63:e7:d6:67:f5:20:1c:ed:b4:b0:6c:ae:d9:5f:40:56:d7:94: b4:f8:84:71:d4:d5:7c:b0:59:b3:be:69:61:01:c4:38:64:46: 63:16:2b:c3:64:54:89:ab:39:30:62:62:20:40:9d:6e:2e:28: a9:ce:af:63:5a:ad:21:39:63:9c:96:09:62:e3:11:b2:04:fe: b2:31:95:2e:43:3e:62:23:11:b9:5a:55:58:03:44:34:20:ce: 29:0a:80:72:52:5c:d3:60:f3:ce:21:01:54:49:6a:3c:e3:27: 11:9d:f8:57:5c:59:82:88:e4:0d:dc:27:ac:4d:d2:eb:fa:2c: cf:ed:f2:e5:51:ab:f5:97:3c:66:d1:ac:0c:ad:47:2d:99:ce: 5b:4c:7a:28:d0:ae:b4:02:5e:e3:df:22:82:15:1c:02:48:bd: 71:e1:ec:7d:8c:84:4d:04:c2:ff:a3:ff:f0:2d:7f:a8:8e:5c: 5f:8d:d7:d1:14:d0:16:43:de:a9:3e:1b:3a:45:07:f4:06:37: d9:1f:17:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDEKeQrKOqOn2B+x/p2J9ytX1AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNjAzMTgxNDQ3MzFaFw0yNjAzMjExNjMwMzFaMDMxMTAvBgNV BAMTKDdCMDkyNTVGRThCNjkzNjY5RkRCQ0MwMTA5MUJFNzIzMTlFN0UyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMrQzxYKCp7pMNOOdX1/0GA4Y tYZEjkBUzvUkv/Y1Q3kIhY36VdsBPXmhpI7wXhglvLsEQdxSpGzNfsJoywqdeq3/ UxuKX2WJTlyimfFnDp3hFq5ZBxV+wJE178G2Pa0+f04XDvM77N1/vls3UW9RRFyk UDgi/tNDlBDLU099bQf7xIYUooRkCy+vHtHghl/hEEfJJTkwDI546drBtzLcCdBi RQHwYvxCd2dya9kdwkZQ/t8+EQCm4Xefytj8GKYfERJ3IBEEf9P+kdriF3+CZVFi lQiVRE6dx1KIGlYUaxgM89DkGRBv6eW/3CGnbuSz0Vsdr8skl0kzYAoKHoqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewklX+i2k2af28wBCRvnIxnn4vYwHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0eWBl+jVBG6OexcKjvIty04dt3LE3W0U9k EZkN5OyXliV0VTpckau6kg2wsj83UtFTe46Z82Pn1mf1IBzttLBsrtlfQFbXlLT4 hHHU1XywWbO+aWEBxDhkRmMWK8NkVImrOTBiYiBAnW4uKKnOr2NarSE5Y5yWCWLj EbIE/rIxlS5DPmIjEblaVVgDRDQgzikKgHJSXNNg884hAVRJajzjJxGd+FdcWYKI 5A3cJ6xN0uv6LM/t8uVRq/WXPGbRrAytRy2ZzltMeijQrrQCXuPfIoIVHAJIvXHh 7H2MhE0Ewv+j//Atf6iOXF+N19EU0BZD3qk+GzpFB/QGN9kfF3o= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:33 2026 by rpki-client