$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: 5+eVy0kAqGX0+/nubILD9d8+tH30PuxqyPDZC4cYFyU= Subject key identifier: 4C:58:A3:0C:82:A7:18:F6:D1:E7:C1:45:EB:C2:1B:1B:66:E7:4B:12 Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 6A3641AABC0E8BB72A6E46249E3125A58F3C10A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 0447 Signing time: Wed 18 Mar 2026 15:22:23 +0000 Manifest this update: Wed 18 Mar 2026 15:17:23 +0000 Manifest next update: Sat 21 Mar 2026 19:28:23 +0000 Files and hashes: 1: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: U7DVNvpEMLByQQk2b+WXhxRIJOFGjGQiEsah2HM4E5Y=) 2: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: m1eSNAhfoWPkAvoAk9t8Vee7d8vHfj7jOz/5bwkMGxE=) 3: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: q34ctZRabkzgVMwhpjzkGD0HvYBu2zTW+lnhs8q/u94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 19:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:36:41:aa:bc:0e:8b:b7:2a:6e:46:24:9e:31:25:a5:8f:3c:10:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Mar 18 15:17:23 2026 GMT Not After : Mar 21 19:28:23 2026 GMT Subject: CN=4C58A30C82A718F6D1E7C145EBC21B1B66E74B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:23:3d:c8:1c:f8:fd:bf:9c:1c:96:b9:dc: 14:b2:0f:9b:3e:2b:95:b3:e7:7c:4b:9a:27:95:e0: c4:ae:db:8a:6b:f3:f5:18:dd:73:e6:5b:ad:1c:24: b7:2c:41:44:0a:a0:6a:2f:66:e3:eb:62:e9:d6:13: 15:06:e3:81:75:22:51:d3:e3:84:d0:52:1e:0f:fa: 1a:d8:3b:1b:9b:a0:7c:ef:64:fe:62:14:cc:e8:56: b7:33:0a:26:ad:41:3a:86:ed:9b:3d:e2:4e:ce:0b: 80:86:8c:1b:4e:7e:14:9c:a4:29:76:5d:a5:27:59: cc:23:27:6f:36:33:f6:de:74:b1:04:78:a2:d9:0a: 7f:c9:6d:81:04:b1:01:ee:f6:ca:ef:7a:52:ee:ee: 1f:51:72:35:b3:b1:15:be:5f:bc:00:4a:6f:9e:84: e2:66:ee:6d:63:2c:8d:35:fb:79:27:5b:f4:13:0c: 92:35:14:61:b1:a4:af:9c:df:e3:c0:ac:c3:0e:39: a5:0c:50:b4:0f:3b:bb:5b:d7:88:e2:01:ed:9a:91: ff:a9:cc:a1:3a:a1:ae:8a:f0:e7:6d:8f:db:f8:e3: c0:d0:e7:d3:d8:59:67:cd:b4:f1:fa:20:14:9d:a1: 81:39:e2:5d:53:1b:8e:07:ff:a4:2a:2d:63:52:02: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:58:A3:0C:82:A7:18:F6:D1:E7:C1:45:EB:C2:1B:1B:66:E7:4B:12 X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:20:82:b0:f2:f5:8e:3f:aa:3e:ca:66:f6:a4:e7:17:6c:d2: d6:80:09:3c:e9:c5:a2:88:4e:c0:95:f3:d3:42:76:0f:18:77: 4b:f6:ef:13:f2:2a:68:71:2e:f1:87:dd:bb:a4:98:70:70:d3: 58:4f:a4:db:98:c0:65:61:6a:0f:1b:09:0b:de:dc:e7:b6:62: 3f:24:ad:f4:38:5b:43:dd:97:66:59:52:d4:91:96:68:a1:6b: b5:be:28:ed:9c:79:bb:3a:9e:97:88:53:8c:d6:83:09:dc:43: d4:a7:03:0b:16:c3:c6:8b:4c:f8:2f:f6:60:4a:c0:3e:84:01: 70:60:33:bd:b7:bc:fd:49:85:93:69:c1:cf:a8:b5:c0:95:31: f6:78:09:7a:41:ba:08:8e:5b:da:3c:ac:e6:53:40:3f:99:4c: 8d:1b:bc:58:a2:93:13:fc:c2:86:8f:e0:b3:f9:3d:8f:92:95: 69:6c:f1:24:7d:71:e6:f9:f3:50:2a:d3:41:3e:39:b6:24:20: 84:16:fc:65:ad:a0:89:ec:56:2a:70:92:8e:11:12:2c:1f:a5: 5a:6e:b1:5c:72:1b:1c:b6:4b:88:f6:50:28:42:4e:a2:4f:89: 9a:6a:d4:5a:c1:dd:c0:11:09:22:72:de:62:2b:49:dd:44:b2: e6:92:46:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajZBqrwOi7cqbkYknjElpY88EKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNjAzMTgxNTE3MjNaFw0yNjAzMjExOTI4MjNaMDMxMTAvBgNV BAMTKDRDNThBMzBDODJBNzE4RjZEMUU3QzE0NUVCQzIxQjFCNjZFNzRCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vSM9yBz4/b+cHJa53BSyD5s+ K5Wz53xLmieV4MSu24pr8/UY3XPmW60cJLcsQUQKoGovZuPrYunWExUG44F1IlHT 44TQUh4P+hrYOxuboHzvZP5iFMzoVrczCiatQTqG7Zs94k7OC4CGjBtOfhScpCl2 XaUnWcwjJ282M/bedLEEeKLZCn/JbYEEsQHu9srvelLu7h9RcjWzsRW+X7wASm+e hOJm7m1jLI01+3knW/QTDJI1FGGxpK+c3+PArMMOOaUMULQPO7tb14jiAe2akf+p zKE6oa6K8Odtj9v448DQ59PYWWfNtPH6IBSdoYE54l1TG44H/6QqLWNSAnj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFijDIKnGPbR58FF68IbG2bnSxIwHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIggrDy9Y4/qj7KZvak5xds0taACTzpxaKI TsCV89NCdg8Yd0v27xPyKmhxLvGH3bukmHBw01hPpNuYwGVhag8bCQve3Oe2Yj8k rfQ4W0Pdl2ZZUtSRlmiha7W+KO2cebs6npeIU4zWgwncQ9SnAwsWw8aLTPgv9mBK wD6EAXBgM723vP1JhZNpwc+otcCVMfZ4CXpBugiOW9o8rOZTQD+ZTI0bvFiikxP8 woaP4LP5PY+SlWls8SR9ceb581Aq00E+ObYkIIQW/GWtoInsVipwko4REiwfpVpu sVxyGxy2S4j2UChCTqJPiZpq1FrB3cARCSJy3mIrSd1EsuaSRvI= -----END CERTIFICATE-----Generated at Thu Mar 19 12:19:42 2026 by rpki-client