$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: hY/cNCueXnm1jpooe47l5sU76c8KlepWoiIW4gFrZ/o= Subject key identifier: 49:11:07:E4:FA:D8:0A:9A:36:09:E1:AB:92:58:EB:04:93:5C:AC:CB Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 01B6BA161DF78432DF96D048624E48E8F5E28504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0388 Signing time: Thu 19 Mar 2026 11:51:32 +0000 Manifest this update: Thu 19 Mar 2026 11:46:32 +0000 Manifest next update: Sun 22 Mar 2026 23:41:32 +0000 Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: SwRz+t1xnBqvpAm4F0fknQxWjWUqwao8xyN1H0n3VXI=) 2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 23:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b6:ba:16:1d:f7:84:32:df:96:d0:48:62:4e:48:e8:f5:e2:85:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Mar 19 11:46:32 2026 GMT Not After : Mar 22 23:41:32 2026 GMT Subject: CN=491107E4FAD80A9A3609E1AB9258EB04935CACCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:95:f2:8d:53:ae:28:45:ac:be:78:4c:73: 21:b0:2d:89:99:38:a8:df:8b:93:b6:98:eb:fe:27: 32:a8:56:ae:59:ba:f0:52:5e:65:aa:28:22:2f:88: 8b:20:5d:58:a3:5a:35:e5:02:f1:c7:6f:b1:d6:16: 6f:6d:9c:99:20:0d:93:db:eb:ab:28:2c:86:9c:80: 73:ac:d1:a7:56:24:3c:18:83:96:8d:77:53:be:2d: 1a:ce:d5:c4:3c:70:4d:de:f9:65:c8:d6:78:46:7a: f6:75:ba:aa:a7:28:73:48:e8:1e:83:af:a4:92:e9: 33:58:9d:90:e8:b1:cc:1d:c0:15:64:4a:61:07:63: d3:3e:bd:80:2d:50:a1:22:d0:89:7a:bc:cf:ea:f4: 37:49:f5:d2:4e:67:b5:4f:17:7c:fb:48:7d:74:55: 11:c7:c5:1c:8a:c9:31:ba:ce:99:06:1f:07:e1:0f: 91:29:22:55:c1:a4:ac:24:00:3f:07:1a:aa:53:e6: f9:66:ae:74:b2:61:7f:14:72:f1:9b:ce:30:54:46: e9:37:96:ff:df:1b:94:a1:a6:4e:ae:7a:50:a8:6e: 9d:bb:6a:8e:3a:bd:c5:a5:68:d1:ce:f3:bd:fb:61: a7:1a:10:6f:25:76:4d:b8:15:65:6b:5f:2c:d9:31: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:11:07:E4:FA:D8:0A:9A:36:09:E1:AB:92:58:EB:04:93:5C:AC:CB X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fc:ed:9f:4c:f2:64:d6:a1:31:b9:ec:1f:5c:88:e0:41:38: 19:72:29:9e:8e:8a:af:43:6f:e2:7a:3a:08:a9:f2:82:17:9f: c6:07:9c:04:69:b6:1b:f1:b8:c1:92:64:ab:c1:33:50:d8:7f: f4:f8:5e:3d:b3:15:9b:75:b1:07:12:56:3f:4a:d3:1a:e2:9a: d4:29:db:f0:40:49:e3:ab:27:26:04:31:33:53:e3:d0:7e:20: 77:56:0f:0a:e5:4d:d7:06:2c:f6:af:a0:93:d6:25:ea:33:4f: 71:ac:d6:ed:fc:1e:20:27:e7:20:a8:a5:2e:24:90:21:65:09: e9:bb:04:d1:cc:c4:3d:74:70:d4:36:6d:21:80:b0:07:1f:92: fc:fc:93:5c:2c:22:ef:40:96:b1:13:d6:4c:fc:51:29:e9:1f: f1:b5:07:71:78:ff:fd:5d:b1:a7:31:1c:bb:80:95:9c:b7:09: 5c:3b:60:cf:36:f1:b5:c7:c1:c4:98:04:8b:1d:4c:9c:00:b8: 8c:07:ff:79:00:37:3a:4f:2d:e7:03:8f:8e:66:eb:01:cf:fa: e0:a0:87:01:23:df:b8:ad:6a:60:ba:5c:26:ab:a3:6f:29:73: fa:8d:9a:b0:2c:6a:61:9e:b6:d7:5f:09:18:c9:cd:79:54:a0: 37:40:27:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAba6Fh33hDLfltBIYk5I6PXihQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNjAzMTkxMTQ2MzJaFw0yNjAzMjIyMzQxMzJaMDMxMTAvBgNV BAMTKDQ5MTEwN0U0RkFEODBBOUEzNjA5RTFBQjkyNThFQjA0OTM1Q0FDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNpZXyjVOuKEWsvnhMcyGwLYmZ OKjfi5O2mOv+JzKoVq5ZuvBSXmWqKCIviIsgXVijWjXlAvHHb7HWFm9tnJkgDZPb 66soLIacgHOs0adWJDwYg5aNd1O+LRrO1cQ8cE3e+WXI1nhGevZ1uqqnKHNI6B6D r6SS6TNYnZDoscwdwBVkSmEHY9M+vYAtUKEi0Il6vM/q9DdJ9dJOZ7VPF3z7SH10 VRHHxRyKyTG6zpkGHwfhD5EpIlXBpKwkAD8HGqpT5vlmrnSyYX8UcvGbzjBURuk3 lv/fG5Shpk6uelCobp27ao46vcWlaNHO8737YacaEG8ldk24FWVrXyzZMWPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSREH5PrYCpo2CeGrkljrBJNcrMswHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKr87Z9M8mTWoTG57B9ciOBBOBlyKZ6Oiq9D b+J6Ogip8oIXn8YHnARpthvxuMGSZKvBM1DYf/T4Xj2zFZt1sQcSVj9K0xrimtQp 2/BASeOrJyYEMTNT49B+IHdWDwrlTdcGLPavoJPWJeozT3Gs1u38HiAn5yCopS4k kCFlCem7BNHMxD10cNQ2bSGAsAcfkvz8k1wsIu9AlrET1kz8USnpH/G1B3F4//1d sacxHLuAlZy3CVw7YM828bXHwcSYBIsdTJwAuIwH/3kANzpPLecDj45m6wHP+uCg hwEj37itamC6XCaro28pc/qNmrAsamGettdfCRjJzXlUoDdAJyE= -----END CERTIFICATE-----Generated at Fri Mar 20 21:58:22 2026 by rpki-client