$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: ZF8xsRXUmtn47iRagIGMqQlMNtbEDG7rmPnXp/DqNfY= Subject key identifier: FA:52:3D:C7:16:93:33:D6:4C:74:09:53:BA:B0:38:1A:88:D4:DD:FB Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 49A90B6701B8B05119B823E2326AB443A906AB5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 0240 Signing time: Thu 19 Mar 2026 06:22:35 +0000 Manifest this update: Thu 19 Mar 2026 06:17:35 +0000 Manifest next update: Sun 22 Mar 2026 09:20:35 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: dijD1nyhyOER7eVgcglHE88pnjkk6RAI+5/Y7LNCmpc=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 4: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a9:0b:67:01:b8:b0:51:19:b8:23:e2:32:6a:b4:43:a9:06:ab:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Mar 19 06:17:35 2026 GMT Not After : Mar 22 09:20:35 2026 GMT Subject: CN=FA523DC7169333D64C740953BAB0381A88D4DDFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:f0:74:2b:8f:5d:57:1f:0a:f4:9e:50:d4: bf:a0:0d:31:4b:07:81:f4:bb:66:0c:66:62:5d:b3: fd:ca:88:e6:f8:e3:9c:06:f1:0f:12:f9:97:86:c8: 38:e1:9b:4c:e8:eb:04:31:e2:60:83:9d:21:95:b6: b1:1d:cd:42:be:8a:62:47:09:6e:67:92:76:6e:a6: c7:4c:57:72:9e:89:9f:aa:54:ac:76:6d:01:3f:a1: 8d:a2:1c:e8:2b:4b:09:4a:f7:82:82:3d:51:df:a3: 36:79:dc:2a:07:52:c3:ea:9a:cd:7c:fd:5a:66:09: 41:fd:50:0c:ab:6c:b6:a8:f5:50:2b:6f:7f:91:7c: 75:16:02:1c:6f:6a:13:18:15:66:d2:02:a4:d7:8d: 1d:8d:fd:82:29:04:55:d0:33:81:8d:f2:a8:ca:e7: 1e:78:37:c1:66:e6:1a:5d:99:70:a4:5e:d7:ce:5f: 6c:c2:a7:a0:5c:34:65:0b:fc:e0:0b:f5:6b:50:77: 52:63:0b:8a:10:77:00:8c:83:4a:49:69:64:37:14: 0c:02:53:0f:d9:1b:d1:9c:2a:e5:54:d0:2f:e2:05: e6:fe:58:bc:b7:f1:52:09:1b:97:4f:0e:0b:fd:d9: 24:4a:7c:87:25:f2:cb:2f:c2:86:1d:92:38:04:f1: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:3D:C7:16:93:33:D6:4C:74:09:53:BA:B0:38:1A:88:D4:DD:FB X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:61:15:b7:c7:93:99:8a:b1:11:b8:e7:69:34:db:a0:81:57: 0f:18:6b:08:95:da:a1:27:51:7f:a8:b0:3b:e8:23:d4:bf:93: b0:7e:c2:c9:78:f9:d7:a0:14:bb:a3:90:4b:1e:49:cf:ae:6d: 6f:a9:ad:4c:8d:57:c0:ac:98:36:b6:c2:fa:d0:5f:b2:17:30: 64:25:7b:86:38:10:17:15:62:80:51:11:72:e1:1d:7d:4a:84: 8d:d2:d5:2b:ac:0f:cd:26:aa:cd:a3:e6:17:7e:17:ac:3c:f5: a5:f3:ef:b0:0e:f5:31:4a:42:8d:fd:88:f6:08:7b:4f:36:c5: 2e:6a:ae:bd:7d:f0:09:e4:f0:2f:f7:8b:38:9d:16:d7:f4:28: 91:dc:89:7f:50:2a:3b:42:99:24:25:ad:a4:d3:cf:03:c9:ce: 2c:8d:25:f4:6a:2c:5a:f1:5c:09:5f:13:a2:98:e5:07:d8:97: ea:46:68:38:54:73:68:dd:c6:08:b7:3a:bd:3d:67:58:b9:61: 73:5f:e9:13:8b:5e:ff:a8:ac:4d:18:96:0e:ba:c0:1c:c3:c0: 79:99:f8:93:a4:38:b2:53:fa:95:1b:cd:1c:b5:69:d5:17:53: ee:9d:93:6d:93:2b:00:13:6f:d0:75:8c:47:7a:7e:d2:f8:a6: 8b:95:37:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSakLZwG4sFEZuCPiMmq0Q6kGq1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNjAzMTkwNjE3MzVaFw0yNjAzMjIwOTIwMzVaMDMxMTAvBgNV BAMTKEZBNTIzREM3MTY5MzMzRDY0Qzc0MDk1M0JBQjAzODFBODhENERERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fPB0K49dVx8K9J5Q1L+gDTFL B4H0u2YMZmJds/3KiOb445wG8Q8S+ZeGyDjhm0zo6wQx4mCDnSGVtrEdzUK+imJH CW5nknZupsdMV3KeiZ+qVKx2bQE/oY2iHOgrSwlK94KCPVHfozZ53CoHUsPqms18 /VpmCUH9UAyrbLao9VArb3+RfHUWAhxvahMYFWbSAqTXjR2N/YIpBFXQM4GN8qjK 5x54N8Fm5hpdmXCkXtfOX2zCp6BcNGUL/OAL9WtQd1JjC4oQdwCMg0pJaWQ3FAwC Uw/ZG9GcKuVU0C/iBeb+WLy38VIJG5dPDgv92SRKfIcl8ssvwoYdkjgE8SpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lI9xxaTM9ZMdAlTurA4GojU3fswHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1hFbfHk5mKsRG452k026CBVw8YawiV2qEn UX+osDvoI9S/k7B+wsl4+degFLujkEseSc+ubW+prUyNV8CsmDa2wvrQX7IXMGQl e4Y4EBcVYoBREXLhHX1KhI3S1SusD80mqs2j5hd+F6w89aXz77AO9TFKQo39iPYI e082xS5qrr198Ank8C/3izidFtf0KJHciX9QKjtCmSQlraTTzwPJziyNJfRqLFrx XAlfE6KY5QfYl+pGaDhUc2jdxgi3Or09Z1i5YXNf6ROLXv+orE0Ylg66wBzDwHmZ +JOkOLJT+pUbzRy1adUXU+6dk22TKwATb9B1jEd6ftL4pouVNyI= -----END CERTIFICATE-----Generated at Fri Mar 20 14:32:30 2026 by rpki-client