$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: bvJqHr9pvmJqTtPUV5+wS2ipSEcCRNme45saZKm1amA= Subject key identifier: 52:C3:F2:6B:42:F9:52:87:FE:B1:16:52:3C:E2:1E:A0:56:EC:3D:2E Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 4EACC3AE3B1E6FB7B37FE9D90BF68B7DBB663E75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: 0126 Signing time: Mon 23 Mar 2026 06:40:01 +0000 Manifest this update: Mon 23 Mar 2026 06:35:01 +0000 Manifest next update: Thu 26 Mar 2026 07:15:01 +0000 Files and hashes: 1: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: RUchmhtL89zOQbXptenqTJfUKB3pWmFu6nEAb1yDunc=) 2: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 07:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ac:c3:ae:3b:1e:6f:b7:b3:7f:e9:d9:0b:f6:8b:7d:bb:66:3e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Mar 23 06:35:01 2026 GMT Not After : Mar 26 07:15:01 2026 GMT Subject: CN=52C3F26B42F95287FEB116523CE21EA056EC3D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:55:1a:be:a0:23:70:33:33:6b:db:3a:60: 11:09:6b:81:52:4c:8a:6b:56:bf:71:57:29:b5:28: ee:21:bc:1a:78:12:e4:23:a9:32:af:1a:4b:d2:e4: 7f:7e:46:15:af:1a:d2:30:85:7d:65:6a:bc:46:78: 9e:e9:59:b2:82:0b:83:36:69:c9:00:2f:50:2e:76: 29:0a:4e:ee:be:f4:ca:fc:37:db:8c:bd:01:06:fe: dc:50:ad:58:c0:5b:d0:4a:93:a4:85:e6:dd:7a:9d: 74:8b:cb:d6:a7:8c:08:1a:86:d1:f4:36:75:7f:d4: ef:96:e6:47:37:09:a2:6d:19:a7:c2:2b:b4:de:c2: f1:7f:95:bf:d2:19:aa:c6:50:de:3d:f2:73:4e:ad: 5d:89:3e:12:ae:58:d1:0c:6b:c4:e2:d3:ed:1d:0b: 79:e8:b2:4f:96:74:55:ba:07:fe:4d:b8:7a:5e:f9: a3:0f:e5:83:00:3a:c9:4a:07:7f:99:6d:29:7f:b5: 19:3b:93:0c:5c:b8:56:cc:43:af:92:65:bf:0f:45: 4b:02:66:4e:a3:7a:38:39:96:d3:bd:82:53:3f:65: 3c:f8:35:8f:de:46:07:2d:37:a5:1d:fd:fb:04:69: c1:00:80:e8:37:ff:d6:3b:bd:1c:9c:36:54:eb:1e: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:F2:6B:42:F9:52:87:FE:B1:16:52:3C:E2:1E:A0:56:EC:3D:2E X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d2:34:30:8c:21:40:27:31:54:20:58:de:ec:36:96:44:53: 0a:a4:04:28:63:f6:18:de:6b:ee:5e:87:f1:61:78:f2:1e:f0: ca:74:73:f4:55:46:10:a6:57:07:60:fe:59:08:58:ee:f4:c6: 9c:af:3f:5d:21:db:85:e2:aa:54:94:3c:83:23:26:70:ce:99: fc:4d:9e:d9:82:f7:98:d4:0d:f6:c4:c3:9d:b2:fe:52:c9:8b: 5b:60:7e:a9:2c:5d:44:89:06:35:79:9d:1f:0a:a1:9a:7f:e4: c9:18:88:82:b8:a3:cc:3f:17:72:c1:87:41:6b:13:34:1a:bb: 2b:e0:c5:6d:bb:86:98:37:30:59:49:86:3b:d1:58:b2:37:e7: c1:74:d2:12:f7:a0:71:4d:e8:03:ca:2b:73:08:7a:aa:b6:ad: 6b:ee:00:e5:6e:fa:11:5c:d1:c1:be:f3:aa:87:32:d2:ea:d1: 76:c4:67:8d:c7:79:03:bb:a8:d0:4c:45:10:4c:3f:4e:de:df: 8b:e4:8a:4b:ae:22:5d:b8:34:89:76:0e:39:a5:2c:62:aa:26: 36:e2:42:e0:26:f8:2f:b9:7f:45:d7:3e:aa:a9:7d:dc:b4:87: 1f:28:51:bb:d0:9e:f4:04:46:ee:ab:bf:6b:9d:a0:56:8a:80: 53:14:9e:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqzDrjseb7ezf+nZC/aLfbtmPnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNjAzMjMwNjM1MDFaFw0yNjAzMjYwNzE1MDFaMDMxMTAvBgNV BAMTKDUyQzNGMjZCNDJGOTUyODdGRUIxMTY1MjNDRTIxRUEwNTZFQzNEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/b1UavqAjcDMza9s6YBEJa4FS TIprVr9xVym1KO4hvBp4EuQjqTKvGkvS5H9+RhWvGtIwhX1larxGeJ7pWbKCC4M2 ackAL1AudikKTu6+9Mr8N9uMvQEG/txQrVjAW9BKk6SF5t16nXSLy9anjAgahtH0 NnV/1O+W5kc3CaJtGafCK7TewvF/lb/SGarGUN498nNOrV2JPhKuWNEMa8Ti0+0d C3nosk+WdFW6B/5NuHpe+aMP5YMAOslKB3+ZbSl/tRk7kwxcuFbMQ6+SZb8PRUsC Zk6jejg5ltO9glM/ZTz4NY/eRgctN6Ud/fsEacEAgOg3/9Y7vRycNlTrHrUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsPya0L5Uof+sRZSPOIeoFbsPS4wHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATSNDCMIUAnMVQgWN7sNpZEUwqkBChj9hje a+5eh/FhePIe8Mp0c/RVRhCmVwdg/lkIWO70xpyvP10h24XiqlSUPIMjJnDOmfxN ntmC95jUDfbEw52y/lLJi1tgfqksXUSJBjV5nR8KoZp/5MkYiIK4o8w/F3LBh0Fr EzQauyvgxW27hpg3MFlJhjvRWLI358F00hL3oHFN6APKK3MIeqq2rWvuAOVu+hFc 0cG+86qHMtLq0XbEZ43HeQO7qNBMRRBMP07e34vkikuuIl24NIl2DjmlLGKqJjbi QuAm+C+5f0XXPqqpfdy0hx8oUbvQnvQERu6rv2udoFaKgFMUnu0= -----END CERTIFICATE-----Generated at Wed Mar 25 04:25:01 2026 by rpki-client