$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: hxUKvAffjDGUhEdnA6ooBNAlhm/3FR+Pb9+NMP1Yj/Q= Subject key identifier: E0:24:D2:39:28:70:25:0C:27:2B:D6:E1:B1:02:50:68:E5:70:25:90 Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 2D043185575BEADEFC9FADC1FD528EDE6A4A1727 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 0227 Signing time: Tue 17 Mar 2026 19:01:11 +0000 Manifest this update: Tue 17 Mar 2026 18:56:11 +0000 Manifest next update: Fri 20 Mar 2026 21:53:11 +0000 Files and hashes: 1: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: j0ryGEEEXnljqgjpxmXqXk2WbC0vSReFQQIDmnGeLfk=) 2: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 3: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) 4: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) 5: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 21:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:04:31:85:57:5b:ea:de:fc:9f:ad:c1:fd:52:8e:de:6a:4a:17:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Mar 17 18:56:11 2026 GMT Not After : Mar 20 21:53:11 2026 GMT Subject: CN=E024D2392870250C272BD6E1B1025068E5702590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:4d:b3:ed:d2:53:69:d6:0f:aa:98:75:05: 01:46:a0:26:05:1a:7b:56:ba:33:40:f6:25:d9:fc: fa:fb:97:86:b3:0b:0b:47:88:ff:86:d1:37:3d:55: 35:0d:19:87:62:ed:0b:ae:d2:34:e0:f1:35:4f:d5: 5c:83:98:3e:f9:f2:e6:11:e4:52:7f:57:06:a0:09: 91:ac:08:e5:b3:84:f2:85:a5:0b:90:6d:9e:2a:b6: 7e:46:98:64:7b:7c:5a:15:ca:7b:00:dd:02:f9:0c: 19:82:03:1d:03:6b:10:9d:af:98:b0:f5:2a:3f:79: 63:96:2c:99:7c:d7:67:65:d7:5b:b8:a9:e7:73:a5: f5:b0:cd:f7:aa:f9:9d:7f:cf:5f:d3:0c:c7:03:61: 9c:19:93:52:b2:e8:a1:24:dd:22:6f:78:90:07:0c: 12:bd:12:fa:9a:95:52:a9:e7:75:83:bb:5a:d2:99: 45:d4:8b:d4:09:d5:6f:fc:7e:25:37:03:8d:10:81: 53:58:fc:65:07:6b:4a:69:13:b4:c5:bb:d1:05:9d: 94:dd:ae:4f:ab:bb:4a:9e:42:33:b6:27:9d:63:8a: 50:3f:47:25:9b:86:23:d2:c4:7b:4d:73:e5:84:d9: cd:e1:8c:e5:ac:9a:e8:85:40:0e:ed:a9:af:7f:b0: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:D2:39:28:70:25:0C:27:2B:D6:E1:B1:02:50:68:E5:70:25:90 X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f7:d2:a3:8b:11:bb:ca:aa:c6:1b:d2:91:08:17:d6:a7:06: a4:14:89:13:f1:e3:7f:05:3f:b0:10:3c:93:25:68:f3:d2:85: 12:93:00:db:78:57:5a:12:8a:e2:f3:73:9c:ac:db:75:fd:df: b4:04:75:fe:ab:9b:6b:8d:1c:a6:f5:24:9d:cf:be:ab:58:08: 81:22:a2:1b:3f:da:e8:42:4c:b2:8f:a3:8b:7a:e5:73:38:65: d2:9b:bb:02:38:b4:ed:39:fe:82:58:74:5e:57:c2:8e:a3:3d: 2d:d3:e7:84:f9:3f:a1:9a:4c:e7:be:e7:a5:63:bf:64:13:b6: 51:46:1e:2c:5a:04:e2:54:54:9f:ed:8c:d9:2d:3d:a8:a8:77: 42:36:f7:0b:44:db:9a:74:b6:af:b8:fb:80:c8:0a:2a:86:92: a2:8a:59:22:21:32:4b:4f:20:94:9a:67:63:46:bf:cf:b5:b9: 23:41:a2:86:8a:79:98:3b:ce:0d:8c:e0:d3:f3:cb:58:18:30: d9:96:56:80:39:e6:1a:c5:5c:db:37:ef:01:c4:f4:db:c3:3b: 13:bd:9d:63:6c:4a:2c:4b:05:e7:f6:88:27:e4:bd:e7:3e:2e: 2b:c3:6f:be:0c:ea:55:0a:04:f4:26:ad:f3:cd:e5:7d:b8:41: ab:93:cd:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQQxhVdb6t78n63B/VKO3mpKFycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNjAzMTcxODU2MTFaFw0yNjAzMjAyMTUzMTFaMDMxMTAvBgNV BAMTKEUwMjREMjM5Mjg3MDI1MEMyNzJCRDZFMUIxMDI1MDY4RTU3MDI1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWw02z7dJTadYPqph1BQFGoCYF GntWujNA9iXZ/Pr7l4azCwtHiP+G0Tc9VTUNGYdi7Quu0jTg8TVP1VyDmD758uYR 5FJ/VwagCZGsCOWzhPKFpQuQbZ4qtn5GmGR7fFoVynsA3QL5DBmCAx0DaxCdr5iw 9So/eWOWLJl812dl11u4qedzpfWwzfeq+Z1/z1/TDMcDYZwZk1Ky6KEk3SJveJAH DBK9EvqalVKp53WDu1rSmUXUi9QJ1W/8fiU3A40QgVNY/GUHa0ppE7TFu9EFnZTd rk+ru0qeQjO2J51jilA/RyWbhiPSxHtNc+WE2c3hjOWsmuiFQA7tqa9/sDSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4CTSOShwJQwnK9bhsQJQaOVwJZAwHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP30qOLEbvKqsYb0pEIF9anBqQUiRPx438F P7AQPJMlaPPShRKTANt4V1oSiuLzc5ys23X937QEdf6rm2uNHKb1JJ3PvqtYCIEi ohs/2uhCTLKPo4t65XM4ZdKbuwI4tO05/oJYdF5Xwo6jPS3T54T5P6GaTOe+56Vj v2QTtlFGHixaBOJUVJ/tjNktPaiod0I29wtE25p0tq+4+4DICiqGkqKKWSIhMktP IJSaZ2NGv8+1uSNBooaKeZg7zg2M4NPzy1gYMNmWVoA55hrFXNs37wHE9NvDOxO9 nWNsSixLBef2iCfkvec+LivDb74M6lUKBPQmrfPN5X24QauTzXA= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:32 2026 by rpki-client