$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: YwsdDhvHnU+aeGicxnGyVAFsNqHnKYMgpxCXuweQHog= Subject key identifier: 81:7A:4F:12:E0:F5:D5:93:C7:D8:E4:54:4A:85:DD:42:97:33:66:B0 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 0DEF8803BF5D9E8E1DACDC4FB2F804684DA53959 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0283 Signing time: Fri 06 Mar 2026 03:32:08 +0000 Manifest this update: Fri 06 Mar 2026 03:27:08 +0000 Manifest next update: Mon 09 Mar 2026 07:12:08 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: uUGn9ED/LV0uxqE+rgB0LoThgeLLLRivTd6YGxBdta0=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ef:88:03:bf:5d:9e:8e:1d:ac:dc:4f:b2:f8:04:68:4d:a5:39:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Mar 6 03:27:08 2026 GMT Not After : Mar 9 07:12:08 2026 GMT Subject: CN=817A4F12E0F5D593C7D8E4544A85DD42973366B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:f8:f5:0a:4f:c7:11:11:3c:a6:a3:ba:b0: 54:ec:4a:06:f5:02:d1:bb:15:7f:23:27:36:67:57: 14:80:27:a4:1f:71:b3:fc:1f:05:e6:5c:4d:6c:b3: fc:7c:f4:1e:24:c9:62:c9:63:78:d8:cf:f8:fa:f3: 06:e8:20:e4:1b:00:3e:32:74:18:c2:e3:da:05:7a: b7:22:1a:e8:8a:b4:8a:d6:c6:b7:d6:6d:f5:dd:60: f3:1c:6f:8a:88:a9:d4:0f:c7:33:41:e2:c1:87:f4: 6f:4e:2e:ce:0d:73:dd:18:e8:aa:02:f4:71:15:f7: b6:5b:3c:6e:94:33:2e:e3:3e:2a:d4:37:39:3b:b9: d5:47:1e:9e:88:44:a9:6d:c7:96:f5:2d:48:0d:d3: 9f:e9:28:7f:90:44:b5:d3:fd:04:62:61:0a:ca:e1: e3:f4:ff:52:67:ec:a5:44:52:e8:26:5d:ea:81:b2: af:f7:b9:b1:73:34:19:f0:a1:87:98:a0:fe:f7:99: c9:77:27:69:d3:af:8c:b4:c5:76:f0:03:c1:1c:ea: 2b:21:14:a9:05:f1:55:7c:85:08:ac:91:d9:6b:7f: d0:81:86:34:56:9e:b1:d4:e5:b6:e7:96:c0:01:91: ac:e9:3e:18:3e:c2:17:65:11:f4:8d:e1:af:72:3b: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:4F:12:E0:F5:D5:93:C7:D8:E4:54:4A:85:DD:42:97:33:66:B0 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:54:e9:52:7d:da:8a:9e:6c:22:96:84:c1:b7:a7:f6:c3:06: af:44:67:74:ea:18:1a:21:85:f6:92:9c:ab:32:71:48:f9:cd: 20:ea:36:5e:33:45:15:52:42:e9:e5:94:65:80:18:26:06:4b: 66:73:37:ec:9d:94:9c:92:14:0d:21:3c:40:6a:dc:2c:a8:69: ae:ad:d2:26:02:50:d7:cc:8c:8b:9b:f6:f2:fa:6e:57:b8:25: c4:62:56:9a:48:ee:64:1d:68:0a:9c:ef:a5:31:2a:f3:2d:f1: 3a:3c:4f:1e:15:c2:89:76:4c:8a:d2:1c:fd:d4:a4:18:58:3e: 94:65:36:62:8a:89:82:ad:f6:b2:2b:4b:0b:a8:d7:a5:20:55: ea:25:9f:45:12:2a:7f:42:22:44:ae:77:13:1a:6e:e0:a4:24: a9:06:d3:18:fc:34:0f:b7:98:be:a8:0c:2e:87:91:e7:33:b6: 74:ab:c3:ad:e3:10:9c:d9:bd:98:9b:49:6a:1a:35:9a:bf:8c: e1:d4:ab:e2:52:a6:12:6a:e7:4d:2f:f6:27:86:1d:ed:a9:0e: 76:2a:62:65:ae:e0:83:1e:4a:12:d9:4a:de:61:63:51:be:80: fd:a0:fc:bf:d7:1e:69:db:47:8f:46:b1:2f:8e:c4:07:af:54: 45:e7:3b:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDe+IA79dno4drNxPsvgEaE2lOVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNjAzMDYwMzI3MDhaFw0yNjAzMDkwNzEyMDhaMDMxMTAvBgNV BAMTKDgxN0E0RjEyRTBGNUQ1OTNDN0Q4RTQ1NDRBODVERDQyOTczMzY2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoO/j1Ck/HERE8pqO6sFTsSgb1 AtG7FX8jJzZnVxSAJ6QfcbP8HwXmXE1ss/x89B4kyWLJY3jYz/j68wboIOQbAD4y dBjC49oFerciGuiKtIrWxrfWbfXdYPMcb4qIqdQPxzNB4sGH9G9OLs4Nc90Y6KoC 9HEV97ZbPG6UMy7jPirUNzk7udVHHp6IRKltx5b1LUgN05/pKH+QRLXT/QRiYQrK 4eP0/1Jn7KVEUugmXeqBsq/3ubFzNBnwoYeYoP73mcl3J2nTr4y0xXbwA8Ec6ish FKkF8VV8hQiskdlrf9CBhjRWnrHU5bbnlsABkazpPhg+whdlEfSN4a9yO4UrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgXpPEuD11ZPH2ORUSoXdQpczZrAwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhU6VJ92oqebCKWhMG3p/bDBq9EZ3TqGBoh hfaSnKsycUj5zSDqNl4zRRVSQunllGWAGCYGS2ZzN+ydlJySFA0hPEBq3Cyoaa6t 0iYCUNfMjIub9vL6ble4JcRiVppI7mQdaAqc76UxKvMt8To8Tx4Vwol2TIrSHP3U pBhYPpRlNmKKiYKt9rIrSwuo16UgVeoln0USKn9CIkSudxMabuCkJKkG0xj8NA+3 mL6oDC6HkecztnSrw63jEJzZvZibSWoaNZq/jOHUq+JSphJq500v9ieGHe2pDnYq YmWu4IMeShLZSt5hY1G+gP2g/L/XHmnbR49GsS+OxAevVEXnO80= -----END CERTIFICATE-----Generated at Sat Mar 7 21:03:30 2026 by rpki-client