$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: O7F03uMwSDj01cABx3BCTr2Eyq4OXpY0p1YayQEa6vw= Subject key identifier: 80:4E:6C:F1:FE:23:AE:A8:A6:5E:19:0A:1D:E8:92:27:30:FF:9E:70 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 7EED6A443D53A2D07EA344EF141AB1652AB463D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: 0112 Signing time: Fri 06 Mar 2026 20:40:48 +0000 Manifest this update: Fri 06 Mar 2026 20:35:48 +0000 Manifest next update: Tue 10 Mar 2026 03:15:48 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: Ltwa5j4FEcsXjzgEBtqDdByDupsvodtKZIlbD6c5dUM=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ed:6a:44:3d:53:a2:d0:7e:a3:44:ef:14:1a:b1:65:2a:b4:63:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Mar 6 20:35:48 2026 GMT Not After : Mar 10 03:15:48 2026 GMT Subject: CN=804E6CF1FE23AEA8A65E190A1DE8922730FF9E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:70:b2:20:ac:f7:a9:cd:80:71:0c:fb:4f: b7:d2:2a:2c:27:55:ee:cf:78:39:c8:b3:00:32:6a: a9:30:02:ac:12:b8:e8:35:4d:e3:27:14:e8:ae:a5: be:ef:82:6b:76:34:68:00:40:46:a2:38:ee:c8:d6: 1e:96:8e:5b:d9:48:72:98:41:08:03:31:49:a3:76: 71:2e:0e:2d:09:56:24:2a:2f:46:19:39:bb:c5:0f: 56:98:05:61:0e:11:1b:2d:3b:91:d2:95:ea:4d:1f: d8:50:0d:6c:4f:e6:13:2a:d6:a4:b5:b8:65:4b:90: c3:aa:8a:7d:7c:b6:dd:58:26:bf:f3:34:92:ce:3a: 65:0e:68:83:c1:6a:b1:f1:99:af:3f:68:8b:ea:33: 11:f6:86:d8:2e:a8:9a:20:26:fe:9e:b0:c2:4a:b1: 00:72:b9:cc:1e:a7:e3:aa:91:3d:58:8f:e1:cc:cf: 2f:b6:7d:08:15:f9:5b:07:64:45:a5:fb:18:a1:89: 51:04:44:e5:00:77:c6:78:d5:97:db:ab:2d:0e:af: ab:6e:3d:68:c5:53:d2:88:57:69:36:1b:90:65:75: 56:7b:83:c1:7c:5c:49:c2:e4:93:d0:6b:06:8f:e2: 29:c3:25:8a:0f:df:59:96:af:5f:10:30:d8:ab:16: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:6C:F1:FE:23:AE:A8:A6:5E:19:0A:1D:E8:92:27:30:FF:9E:70 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5d:95:0f:2d:d2:8f:5c:40:58:a2:c4:9b:7b:ff:95:82:ba: b7:8b:d5:3d:5e:9e:e0:cd:26:59:82:37:b3:a4:9f:4e:e5:ad: 31:d1:16:71:06:82:d1:23:6a:ee:92:6f:2c:97:ba:6b:f8:e0: b9:1a:fe:cd:96:3d:c5:97:e0:e6:a6:df:08:cf:38:7a:13:8f: df:d5:9e:b5:0a:c0:d0:36:8a:68:96:b4:c0:7e:98:72:96:ca: a1:9b:a5:aa:f4:77:6b:1b:c3:88:4b:5c:9e:96:6e:f4:90:1d: 0c:06:1d:90:c0:a9:c8:3e:72:8b:28:03:16:8c:bd:2a:0a:ff: 11:14:97:0c:c7:75:b7:42:2e:45:f4:ee:d7:76:be:e6:59:ac: cf:04:fd:6d:72:2d:79:e5:34:e8:84:f0:53:38:f3:18:f8:17: bc:4a:3b:b9:1e:16:03:2b:97:83:8d:d4:5b:85:be:40:f4:dc: 34:b4:2b:23:1c:da:e7:51:3b:9c:63:c1:80:f6:38:0c:f7:08: 03:a4:df:f8:f2:c0:8b:82:4e:e9:97:3e:62:94:74:08:7f:c8: a0:1a:40:d4:52:42:44:3c:0a:a4:43:1e:a0:6b:73:7c:ac:86: e2:b1:0f:4c:eb:a3:a8:49:2c:78:ee:52:26:5e:eb:f8:c4:09: 32:86:20:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfu1qRD1TotB+o0TvFBqxZSq0Y9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNjAzMDYyMDM1NDhaFw0yNjAzMTAwMzE1NDhaMDMxMTAvBgNV BAMTKDgwNEU2Q0YxRkUyM0FFQThBNjVFMTkwQTFERTg5MjI3MzBGRjlFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6nCyIKz3qc2AcQz7T7fSKiwn Ve7PeDnIswAyaqkwAqwSuOg1TeMnFOiupb7vgmt2NGgAQEaiOO7I1h6WjlvZSHKY QQgDMUmjdnEuDi0JViQqL0YZObvFD1aYBWEOERstO5HSlepNH9hQDWxP5hMq1qS1 uGVLkMOqin18tt1YJr/zNJLOOmUOaIPBarHxma8/aIvqMxH2htguqJogJv6esMJK sQByucwep+OqkT1Yj+HMzy+2fQgV+VsHZEWl+xihiVEEROUAd8Z41Zfbqy0Or6tu PWjFU9KIV2k2G5BldVZ7g8F8XEnC5JPQawaP4inDJYoP31mWr18QMNirFtQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgE5s8f4jrqimXhkKHeiSJzD/nnAwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpdlQ8t0o9cQFiixJt7/5WCureL1T1enuDN JlmCN7Okn07lrTHRFnEGgtEjau6SbyyXumv44Lka/s2WPcWX4Oam3wjPOHoTj9/V nrUKwNA2imiWtMB+mHKWyqGbpar0d2sbw4hLXJ6WbvSQHQwGHZDAqcg+cosoAxaM vSoK/xEUlwzHdbdCLkX07td2vuZZrM8E/W1yLXnlNOiE8FM48xj4F7xKO7keFgMr l4ON1FuFvkD03DS0KyMc2udRO5xjwYD2OAz3CAOk3/jywIuCTumXPmKUdAh/yKAa QNRSQkQ8CqRDHqBrc3yshuKxD0zro6hJLHjuUiZe6/jECTKGIO0= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:39 2026 by rpki-client