$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: ymVbn+fxiGM5YLy8jgpp4q55Uu9OJjkgFhHePy2QP3w= Subject key identifier: 83:2D:0D:2B:33:4B:92:D5:BC:9D:B7:6B:5E:10:24:3D:6F:EC:96:49 Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 2DE8E38D3C32A9CC8DABD0DD6925A87B544FCEE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: CE Signing time: Fri 06 Mar 2026 16:01:16 +0000 Manifest this update: Fri 06 Mar 2026 15:56:16 +0000 Manifest next update: Mon 09 Mar 2026 18:19:16 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=) 2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: C3ZMz95X0wVsDwiVloTnk2zEYdfYfXCzqCEPHs0tCAc=) 3: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:e3:8d:3c:32:a9:cc:8d:ab:d0:dd:69:25:a8:7b:54:4f:ce:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Mar 6 15:56:16 2026 GMT Not After : Mar 9 18:19:16 2026 GMT Subject: CN=832D0D2B334B92D5BC9DB76B5E10243D6FEC9649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:c4:48:28:f2:21:7c:34:f3:2f:98:a6:7e: 53:12:b2:ee:a9:6c:0a:39:4e:00:b7:ef:fa:06:0a: 84:e0:db:58:fe:68:6a:ee:ae:8f:a8:43:18:89:cf: f0:2c:ef:11:4a:14:5e:85:86:04:25:e9:cb:b2:ff: 57:d6:26:dc:73:6c:56:74:db:56:cd:57:78:fa:0d: 04:0e:43:b4:43:50:81:5b:fb:d9:ae:5b:b7:a6:e9: fd:72:07:a0:d0:38:8c:c7:f8:24:78:78:c4:35:ab: ea:a2:54:25:a7:ad:eb:c9:b6:2e:8d:07:31:42:3e: 72:9a:4c:92:bd:c2:d3:9e:4d:01:f7:08:26:03:36: e0:34:4a:fa:6f:84:8e:2a:9a:90:8a:ac:3f:59:ed: 30:87:a9:98:fa:c3:c1:26:c6:08:c1:49:58:e2:9e: 63:cb:42:5a:5f:63:37:2c:91:67:6b:e0:30:94:f8: cb:99:ee:ab:7a:75:73:21:2d:30:f7:e2:c7:0d:f1: 3c:41:61:53:2b:d9:0a:bf:2a:70:e3:eb:45:37:12: ee:93:bb:29:5a:11:e0:42:0d:33:1f:4a:5f:5d:b9: 81:35:2d:ba:03:e1:32:b5:4d:85:ae:96:1d:f0:b8: 20:b7:35:4c:06:81:85:26:3b:f4:b5:fa:99:9a:f6: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2D:0D:2B:33:4B:92:D5:BC:9D:B7:6B:5E:10:24:3D:6F:EC:96:49 X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:93:8e:6d:01:b3:95:d8:b2:ae:ed:c1:43:60:ba:cf:ea:92: 5c:3d:6c:07:2f:a7:0f:0f:0a:66:05:4e:6b:d9:d3:21:03:c4: 1f:e5:c2:55:4b:fd:d4:48:a8:29:19:4f:62:86:de:6f:99:c0: b6:c2:a5:04:6b:35:69:c7:4c:5f:03:7a:92:79:d7:a6:b8:f6: ce:94:35:ff:1c:35:bd:bb:a2:ac:62:80:f1:99:b4:5b:ff:95: fb:f5:f1:85:8d:20:43:05:e8:f1:a7:31:d0:c6:c2:32:ad:df: 03:62:2a:e1:3d:91:1d:78:17:b8:9b:9b:d1:24:5e:2f:a8:55: 7b:2d:09:2d:f9:31:f5:0f:46:5b:aa:9b:a5:7a:c2:ad:c8:4b: a4:bd:1f:66:69:d1:7e:73:7f:89:f8:c1:38:94:42:05:33:ee: ee:9e:41:1f:f3:df:68:55:37:d0:d2:a9:b5:81:bf:bd:d7:24: 2e:08:ef:ba:e7:5a:18:86:cb:2e:e9:73:b1:94:40:c4:a6:55: cf:da:41:12:8d:d9:73:18:b2:e7:a3:2a:dd:b1:08:ab:01:eb: ef:13:c5:2d:6f:25:88:0a:da:8f:d7:9e:f3:ae:e5:25:ea:86: 05:4d:44:a1:80:19:90:ee:af:eb:a3:eb:4a:05:29:cb:71:a5: cd:81:61:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULejjjTwyqcyNq9DdaSWoe1RPzuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNjAzMDYxNTU2MTZaFw0yNjAzMDkxODE5MTZaMDMxMTAvBgNV BAMTKDgzMkQwRDJCMzM0QjkyRDVCQzlEQjc2QjVFMTAyNDNENkZFQzk2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDre8RIKPIhfDTzL5imflMSsu6p bAo5TgC37/oGCoTg21j+aGruro+oQxiJz/As7xFKFF6FhgQl6cuy/1fWJtxzbFZ0 21bNV3j6DQQOQ7RDUIFb+9muW7em6f1yB6DQOIzH+CR4eMQ1q+qiVCWnrevJti6N BzFCPnKaTJK9wtOeTQH3CCYDNuA0SvpvhI4qmpCKrD9Z7TCHqZj6w8EmxgjBSVji nmPLQlpfYzcskWdr4DCU+MuZ7qt6dXMhLTD34scN8TxBYVMr2Qq/KnDj60U3Eu6T uylaEeBCDTMfSl9duYE1LboD4TK1TYWulh3wuCC3NUwGgYUmO/S1+pma9qKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgy0NKzNLktW8nbdrXhAkPW/slkkwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+Tjm0Bs5XYsq7twUNgus/qklw9bAcvpw8P CmYFTmvZ0yEDxB/lwlVL/dRIqCkZT2KG3m+ZwLbCpQRrNWnHTF8DepJ516a49s6U Nf8cNb27oqxigPGZtFv/lfv18YWNIEMF6PGnMdDGwjKt3wNiKuE9kR14F7ibm9Ek Xi+oVXstCS35MfUPRluqm6V6wq3IS6S9H2Zp0X5zf4n4wTiUQgUz7u6eQR/z32hV N9DSqbWBv73XJC4I77rnWhiGyy7pc7GUQMSmVc/aQRKN2XMYsuejKt2xCKsB6+8T xS1vJYgK2o/XnvOu5SXqhgVNRKGAGZDur+uj60oFKctxpc2BYbA= -----END CERTIFICATE-----Generated at Sat Mar 7 21:04:28 2026 by rpki-client