$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: QngSl/Ymbh6+g/CI7O+1Mff+2OdvyzJSbNIAYOaLfPI= Subject key identifier: A7:1C:63:9B:51:DC:20:9F:AE:CF:CD:58:5A:C4:54:8A:01:D7:BA:68 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 0926EC2DB39C0A1028B94676ECE7EFEEA451045E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0559 Signing time: Sat 21 Mar 2026 01:52:30 +0000 Manifest this update: Sat 21 Mar 2026 01:47:30 +0000 Manifest next update: Tue 24 Mar 2026 08:28:30 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: uXqrONpthHm4qoy+3e6xNu5w7IZBbY0SLic4NuqStVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 08:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:26:ec:2d:b3:9c:0a:10:28:b9:46:76:ec:e7:ef:ee:a4:51:04:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Mar 21 01:47:30 2026 GMT Not After : Mar 24 08:28:30 2026 GMT Subject: CN=A71C639B51DC209FAECFCD585AC4548A01D7BA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:10:0d:81:d9:ea:7e:51:62:fd:ac:84:b4: bb:2c:b1:a9:d9:ca:cc:f8:03:17:f7:32:50:0f:30: c9:9d:ac:a4:6c:79:b1:b0:f1:30:12:9c:19:93:6d: 39:71:88:7c:b5:9b:95:95:53:c3:c8:e0:7f:f8:0d: 32:e4:95:cc:84:7b:65:ff:bb:ea:5e:c0:e3:06:89: b9:9c:73:11:e7:0f:6b:23:14:15:bd:69:14:b1:5b: 5a:15:4c:dd:28:00:0b:cb:0a:6c:9b:c8:1d:9f:53: b6:e1:33:f5:15:e6:1d:06:c2:a7:79:ba:69:a6:66: aa:fa:a0:2f:16:9f:1e:75:cc:f8:e6:bb:af:af:1b: 36:7d:41:02:3f:dd:c0:a6:f2:e6:73:31:83:fe:fd: 64:bb:b1:fb:6b:a2:68:26:df:94:fa:b5:5d:27:93: 5b:bf:c2:cd:c9:82:5e:d5:88:be:96:9e:4d:8c:9a: 08:31:ba:22:aa:bd:61:72:32:1d:47:89:d2:20:b0: 24:81:b2:d6:fb:f6:c1:97:cc:20:79:06:36:b7:61: 42:b2:14:a7:e6:b5:da:93:72:ed:d6:b7:8e:f5:26: 06:c8:46:a9:41:9c:eb:a7:41:2f:c5:da:94:77:37: 0f:4d:69:33:35:df:4a:02:d8:89:76:1a:45:c6:30: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1C:63:9B:51:DC:20:9F:AE:CF:CD:58:5A:C4:54:8A:01:D7:BA:68 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:01:9f:5d:d9:5b:ce:da:19:cc:61:60:82:4c:ac:26:c0:6d: e4:40:80:fc:46:9c:d3:ab:fd:f6:2a:f4:07:72:a9:f7:a0:42: d1:cd:b3:f6:f7:cc:20:5c:8b:b8:24:35:60:f0:62:2d:df:8e: 1c:09:e3:8a:1d:38:59:68:a7:0e:a8:b4:8a:6f:3e:82:42:55: 61:be:e4:12:a1:0e:76:a7:f9:5f:72:2d:18:b5:9d:22:50:42: 58:ad:eb:bb:69:52:0f:64:28:b1:1a:2a:f4:26:c4:95:db:b5: cc:b9:88:cc:bf:6f:b2:f0:63:fa:4a:83:23:d9:d0:d7:39:b3: 35:32:b7:8f:82:48:c1:fd:15:73:77:45:45:11:f0:b1:49:b1: 6d:6a:8c:c2:dd:05:26:a3:e1:68:d7:6f:41:0b:4c:b2:e4:10: 7a:a4:5f:5e:2f:95:85:73:70:01:1e:60:08:0a:75:ba:60:81: 2e:5a:6c:32:6c:1f:27:ed:68:04:30:17:53:f0:9b:49:58:cc: e9:c3:67:0a:ac:c5:7d:3a:10:0b:5c:fd:3a:a7:81:30:26:ea: 10:94:01:96:d7:e3:e7:b9:72:cb:66:78:fc:a4:9b:5b:cf:fa: 7c:b7:4f:74:3f:be:6d:e7:45:8a:28:28:30:a8:c1:6e:ac:89: 73:f6:24:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSbsLbOcChAouUZ27Ofv7qRRBF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNjAzMjEwMTQ3MzBaFw0yNjAzMjQwODI4MzBaMDMxMTAvBgNV BAMTKEE3MUM2MzlCNTFEQzIwOUZBRUNGQ0Q1ODVBQzQ1NDhBMDFEN0JBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPThANgdnqflFi/ayEtLsssanZ ysz4Axf3MlAPMMmdrKRsebGw8TASnBmTbTlxiHy1m5WVU8PI4H/4DTLklcyEe2X/ u+pewOMGibmccxHnD2sjFBW9aRSxW1oVTN0oAAvLCmybyB2fU7bhM/UV5h0Gwqd5 ummmZqr6oC8Wnx51zPjmu6+vGzZ9QQI/3cCm8uZzMYP+/WS7sftromgm35T6tV0n k1u/ws3Jgl7ViL6Wnk2MmggxuiKqvWFyMh1HidIgsCSBstb79sGXzCB5Bja3YUKy FKfmtdqTcu3Wt471JgbIRqlBnOunQS/F2pR3Nw9NaTM130oC2Il2GkXGMI/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxxjm1HcIJ+uz81YWsRUigHXumgwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsBn13ZW87aGcxhYIJMrCbAbeRAgPxGnNOr /fYq9AdyqfegQtHNs/b3zCBci7gkNWDwYi3fjhwJ44odOFlopw6otIpvPoJCVWG+ 5BKhDnan+V9yLRi1nSJQQlit67tpUg9kKLEaKvQmxJXbtcy5iMy/b7LwY/pKgyPZ 0Nc5szUyt4+CSMH9FXN3RUUR8LFJsW1qjMLdBSaj4WjXb0ELTLLkEHqkX14vlYVz cAEeYAgKdbpggS5abDJsHyftaAQwF1Pwm0lYzOnDZwqsxX06EAtc/TqngTAm6hCU AZbX4+e5cstmePykm1vP+ny3T3Q/vm3nRYooKDCowW6siXP2JAo= -----END CERTIFICATE-----Generated at Mon Mar 23 08:24:47 2026 by rpki-client