$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: Sixt5ePYoDySlkr10Kh2cgBfrz/Ztzdj65482YWZHYw= Subject key identifier: FA:2E:F0:AA:CE:A1:1B:F6:DB:D8:17:3C:97:38:8C:F4:55:8E:94:21 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 06DC1BA24BDC582BAE00F3AA21EE374F167822E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 024E Signing time: Wed 18 Mar 2026 18:30:42 +0000 Manifest this update: Wed 18 Mar 2026 18:25:42 +0000 Manifest next update: Sat 21 Mar 2026 21:57:42 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) 2: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: VCREsIYOOJnXex83gTXhhVMwAqMwPwrjvy9d2CiJeAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 21:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dc:1b:a2:4b:dc:58:2b:ae:00:f3:aa:21:ee:37:4f:16:78:22:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Mar 18 18:25:42 2026 GMT Not After : Mar 21 21:57:42 2026 GMT Subject: CN=FA2EF0AACEA11BF6DBD8173C97388CF4558E9421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:4e:3f:58:4a:27:77:78:7f:49:1e:7c:9d: 0b:a7:85:2d:f4:b4:c5:79:d3:01:c2:7f:f2:21:b1: 6c:74:dc:7c:c8:ad:67:b7:db:02:24:72:a9:ce:c8: f9:83:67:7d:c5:3d:10:50:ed:db:5f:49:55:bd:95: d1:13:41:35:30:37:ae:7c:e4:ae:0f:13:d3:c0:7d: 65:8e:dd:5a:9b:ef:bf:0d:4a:d2:27:07:94:a8:fe: d8:7b:7c:1d:c5:6d:96:19:a5:a6:6c:c8:73:61:f8: 95:13:28:dd:f5:49:cf:c9:44:c6:61:d1:14:39:18: f1:2b:3d:ed:aa:88:b6:4d:57:bd:9e:9c:67:1c:a7: 62:61:50:91:3c:4d:6c:3c:86:73:14:4a:a5:da:ee: 57:7f:23:f5:a5:0c:b5:60:5b:1c:be:6a:46:a1:9a: 6d:69:7b:57:dd:d2:d5:e8:8d:a0:4c:c1:23:1d:fd: dc:5d:6e:57:98:74:3f:73:58:fd:84:bb:13:28:8d: 9c:cc:9d:0d:0d:03:18:e2:aa:5a:74:60:84:bb:55: 41:5d:a2:84:85:89:59:df:21:ba:87:a1:2e:f4:fd: 3f:d4:05:48:3f:7b:1d:3c:f1:90:6b:30:e0:e0:a6: 49:e4:63:e4:a7:2d:28:5a:31:d2:3c:f5:1e:96:52: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2E:F0:AA:CE:A1:1B:F6:DB:D8:17:3C:97:38:8C:F4:55:8E:94:21 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:45:3c:87:63:6b:b6:33:ac:a6:86:d8:6f:81:cf:54:ae: 8d:d3:8b:fe:17:19:9d:5d:7a:c1:e0:3a:c5:83:16:d8:db:ad: 2b:62:e1:b2:f2:26:92:f0:1b:e4:9b:f2:91:a6:cd:4b:c4:53: 35:28:d0:e5:2b:1b:05:19:f5:5c:e3:52:b8:c8:37:b1:8b:e5: c8:2c:84:83:4c:f9:f1:26:95:35:a5:d7:34:ea:64:c1:5f:5e: 88:92:24:13:bb:6b:7b:56:26:93:e2:0b:d2:c1:64:0e:b9:c4: 40:f1:54:c9:81:54:3a:18:e4:2c:cd:c2:a6:ea:ba:a2:2f:d9: 31:f7:af:94:f2:41:cb:ec:38:8b:53:4d:2f:da:09:bd:e5:8b: a8:2e:74:46:b1:44:2a:6a:1e:0a:d7:53:6c:3c:64:de:62:19: 25:66:a4:46:5d:3f:6b:0f:ab:89:24:14:7d:36:7b:b2:e2:fb: a3:44:c7:4f:9d:db:e0:28:ef:8b:21:cc:ae:59:12:c0:5f:9a: 2c:af:33:1d:7f:fa:f3:7f:2d:4f:13:47:30:3c:db:25:b9:82: b3:50:ca:1e:e5:ed:9c:c5:27:af:23:fe:52:8f:f3:2b:79:d1: bd:19:21:28:dc:18:6f:12:63:08:59:9c:91:22:f8:d1:62:2a: c8:59:cc:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtwbokvcWCuuAPOqIe43TxZ4IuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNjAzMTgxODI1NDJaFw0yNjAzMjEyMTU3NDJaMDMxMTAvBgNV BAMTKEZBMkVGMEFBQ0VBMTFCRjZEQkQ4MTczQzk3Mzg4Q0Y0NTU4RTk0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbn04/WEond3h/SR58nQunhS30 tMV50wHCf/IhsWx03HzIrWe32wIkcqnOyPmDZ33FPRBQ7dtfSVW9ldETQTUwN658 5K4PE9PAfWWO3Vqb778NStInB5So/th7fB3FbZYZpaZsyHNh+JUTKN31Sc/JRMZh 0RQ5GPErPe2qiLZNV72enGccp2JhUJE8TWw8hnMUSqXa7ld/I/WlDLVgWxy+akah mm1pe1fd0tXojaBMwSMd/dxdbleYdD9zWP2EuxMojZzMnQ0NAxjiqlp0YIS7VUFd ooSFiVnfIbqHoS70/T/UBUg/ex088ZBrMODgpknkY+SnLShaMdI89R6WUmkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+i7wqs6hG/bb2Bc8lziM9FWOlCEwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx/RTyHY2u2M6ymhthvgc9Uro3Ti/4XGZ1d esHgOsWDFtjbrSti4bLyJpLwG+Sb8pGmzUvEUzUo0OUrGwUZ9VzjUrjIN7GL5cgs hINM+fEmlTWl1zTqZMFfXoiSJBO7a3tWJpPiC9LBZA65xEDxVMmBVDoY5CzNwqbq uqIv2TH3r5TyQcvsOItTTS/aCb3li6gudEaxRCpqHgrXU2w8ZN5iGSVmpEZdP2sP q4kkFH02e7Li+6NEx0+d2+Ao74shzK5ZEsBfmiyvMx1/+vN/LU8TRzA82yW5grNQ yh7l7ZzFJ68j/lKP8yt50b0ZISjcGG8SYwhZnJEi+NFiKshZzBU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:27 2026 by rpki-client