$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json) Hash identifier: mRiWz+Sxonp+Ud9EJwOggaV6L0UNq6Xqy0t7tPM+8OQ= Subject key identifier: 73:1A:D0:7B:21:68:CC:BD:B1:6A:03:AE:5E:EC:A4:06:CE:FB:61:8B Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Certificate serial: 427F058A1A3075C2396C501F4DFC2F1EAC7F8913 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft Manifest number: 012C Signing time: Sat 07 Mar 2026 02:31:32 +0000 Manifest this update: Sat 07 Mar 2026 02:26:32 +0000 Manifest next update: Tue 10 Mar 2026 09:38:32 +0000 Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: 7TI4pzLcqyxuF39YuyeEo0KkPf4qVThK/j4OGDR/rss=) 2: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: pXyy9nENtp89bn5qdesEobQ2VLjGL8jyuIEO3BdHM7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7f:05:8a:1a:30:75:c2:39:6c:50:1f:4d:fc:2f:1e:ac:7f:89:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF Validity Not Before: Mar 7 02:26:32 2026 GMT Not After : Mar 10 09:38:32 2026 GMT Subject: CN=731AD07B2168CCBDB16A03AE5EECA406CEFB618B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:91:da:09:79:68:0a:d4:25:17:97:47:dd: f0:28:9c:13:64:65:45:6b:bd:25:8e:9a:62:cf:4e: a9:d3:bb:aa:b3:78:d0:ef:d3:be:1d:e9:be:c3:b4: c4:33:20:b4:5c:20:de:5a:62:d4:84:40:6b:b6:bd: 8d:25:a3:1d:d5:de:a2:03:cd:6f:4a:28:5e:60:2b: ba:d4:d0:9b:f0:11:7c:f2:54:a1:fc:1e:9b:bc:0b: 52:ac:63:49:1d:88:13:9d:33:d3:e2:f8:9c:96:e9: 73:70:44:c0:5d:f9:57:10:cf:74:86:30:1b:ce:b9: a5:45:ae:33:ee:3b:fb:06:23:52:ab:32:2c:b7:25: ea:7d:c3:36:28:9c:93:65:81:16:19:eb:b5:41:f6: 68:4e:74:4b:ff:03:b9:dd:e9:a7:8b:46:ba:9b:3f: e7:c8:3d:88:15:80:32:74:9b:75:b4:14:95:76:71: 74:4f:6a:76:6c:ad:67:e6:ce:74:f2:0f:6d:94:06: 6a:97:a6:b0:7d:6a:d2:16:9d:48:09:91:72:da:37: 93:97:88:90:14:52:77:68:28:d5:be:7a:a3:86:39: 4c:d1:2f:8d:85:42:b2:32:87:16:13:1b:62:c6:df: a6:af:69:65:2c:78:4e:98:01:d4:df:52:0f:84:a7: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1A:D0:7B:21:68:CC:BD:B1:6A:03:AE:5E:EC:A4:06:CE:FB:61:8B X509v3 Authority Key Identifier: keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4e:5a:12:13:91:4e:7d:33:db:27:7b:e6:c9:90:ce:50:76: b0:89:65:d2:fe:1a:70:a0:75:f4:e5:5b:33:46:e1:c4:7e:17: 61:0f:e2:f2:5a:08:39:80:f7:56:a7:69:85:18:7c:de:22:82: 62:5a:7c:e4:92:22:a5:f2:68:f8:34:11:2b:37:91:7d:54:d5: a0:74:69:80:f3:6d:33:f8:f2:a6:34:11:49:46:e7:54:a8:4e: 0f:b7:17:d8:78:d4:4d:33:9f:33:ff:ab:90:db:4b:e3:c7:44: a1:f5:9d:34:92:49:d2:74:98:68:54:ce:f2:5e:f9:fe:63:82: 37:67:7b:88:51:1a:07:a9:64:46:51:93:a4:cb:b3:17:12:1a: f1:6b:da:a7:42:69:d6:d0:54:ef:4f:e2:ec:38:33:a2:58:b8: 11:9d:d0:92:d3:66:4a:bc:ec:21:fb:55:e1:8a:8d:a4:1d:a9: 85:dd:3e:cb:e4:bc:bf:8c:ab:52:83:8f:2b:2e:cd:0e:c6:cd: 1e:ec:2c:88:31:15:05:c0:8f:d0:75:1f:9f:de:76:d8:15:8a: 85:a1:bd:82:b2:44:09:a2:d6:37:1a:95:e9:9c:9d:71:bb:7a: 73:cf:05:87:ec:f0:71:dd:20:92:17:ec:17:ea:8d:6a:ff:9a: 24:86:96:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn8FihowdcI5bFAfTfwvHqx/iRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlB MzFDNzVERjAeFw0yNjAzMDcwMjI2MzJaFw0yNjAzMTAwOTM4MzJaMDMxMTAvBgNV BAMTKDczMUFEMDdCMjE2OENDQkRCMTZBMDNBRTVFRUNBNDA2Q0VGQjYxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClx5HaCXloCtQlF5dH3fAonBNk ZUVrvSWOmmLPTqnTu6qzeNDv074d6b7DtMQzILRcIN5aYtSEQGu2vY0lox3V3qID zW9KKF5gK7rU0JvwEXzyVKH8Hpu8C1KsY0kdiBOdM9Pi+JyW6XNwRMBd+VcQz3SG MBvOuaVFrjPuO/sGI1KrMiy3Jep9wzYonJNlgRYZ67VB9mhOdEv/A7nd6aeLRrqb P+fIPYgVgDJ0m3W0FJV2cXRPanZsrWfmznTyD22UBmqXprB9atIWnUgJkXLaN5OX iJAUUndoKNW+eqOGOUzRL42FQrIyhxYTG2LG36avaWUseE6YAdTfUg+Epy2JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxrQeyFozL2xagOuXuykBs77YYswHwYDVR0j BBgwFoAUCGg+1cdIt5o0bvcFotz4CaMcdd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGNlZDE4ZC1hN2NjLTRiNDQtYWY0YS04NWYzMDRmOWViNmMvMC8wODY4M0VENUM3 NDhCNzlBMzQ2RUY3MDVBMkRDRjgwOUEzMUM3NURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4MDlBMzFD NzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThjZWQxOGQtYTdjYy00YjQ0LWFm NGEtODVmMzA0ZjllYjZjLzAvMDg2ODNFRDVDNzQ4Qjc5QTM0NkVGNzA1QTJEQ0Y4 MDlBMzFDNzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNOWhITkU59M9sne+bJkM5QdrCJZdL+GnCg dfTlWzNG4cR+F2EP4vJaCDmA91anaYUYfN4igmJafOSSIqXyaPg0ESs3kX1U1aB0 aYDzbTP48qY0EUlG51SoTg+3F9h41E0znzP/q5DbS+PHRKH1nTSSSdJ0mGhUzvJe +f5jgjdne4hRGgepZEZRk6TLsxcSGvFr2qdCadbQVO9P4uw4M6JYuBGd0JLTZkq8 7CH7VeGKjaQdqYXdPsvkvL+Mq1KDjysuzQ7GzR7sLIgxFQXAj9B1H5/edtgVioWh vYKyRAmi1jcalemcnXG7enPPBYfs8HHdIJIX7BfqjWr/miSGll4= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:42 2026 by rpki-client