$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: V+e8i2FKvs99qvwyvaBvvk9xmrpCNb4EFVP1SKUQzwA= Subject key identifier: 51:59:FA:D7:83:9E:63:EA:79:D1:89:53:4A:96:0B:42:36:B2:9B:DE Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 21D0358591DF47D7B5797BCC8FA9463FD7C7E1B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: CC Signing time: Mon 02 Mar 2026 01:01:09 +0000 Manifest this update: Mon 02 Mar 2026 00:56:09 +0000 Manifest next update: Thu 05 Mar 2026 04:43:09 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=) 3: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: 9EGQAb9O9C9+XbBsKIc+b5sNr+kD+TqBMiiwqhpT4fQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d0:35:85:91:df:47:d7:b5:79:7b:cc:8f:a9:46:3f:d7:c7:e1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Mar 2 00:56:09 2026 GMT Not After : Mar 5 04:43:09 2026 GMT Subject: CN=5159FAD7839E63EA79D189534A960B4236B29BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:2a:2e:7c:35:18:bb:c9:09:62:b9:bc:45: 1a:8a:18:89:d0:ac:c4:5c:a5:60:bd:49:a1:8a:53: 3e:af:e4:96:62:45:ae:1d:72:bb:0e:56:a3:cd:4e: 44:fc:47:1b:5e:fe:51:f2:55:be:80:ec:cc:39:02: ca:7c:a8:93:a2:ce:50:b7:a6:0b:ef:85:06:66:c0: bd:d8:9c:73:5c:f6:f7:ae:21:c9:2d:ab:09:e6:0d: cc:82:62:30:19:67:9e:14:e4:6a:39:af:6e:bc:a0: 8c:f7:9a:4d:4e:e7:a3:de:63:bd:37:90:89:1a:67: a7:c4:e6:6f:6b:f8:f5:f7:56:e8:c0:0e:4b:77:5d: a4:cd:d8:2a:45:91:7c:40:96:80:41:59:0f:04:b6: 13:62:b0:e0:ed:bd:5b:f8:07:85:37:b3:df:92:fc: 26:1f:c9:91:a9:b6:88:f0:b7:f0:df:8d:48:7b:6a: 07:59:20:2a:60:64:4f:fa:39:70:b5:cb:23:46:8b: cb:77:61:92:88:dd:97:90:ff:88:cb:d7:95:ac:6a: 51:01:e5:94:a5:fd:8d:ae:a0:fd:d2:f5:a1:18:25: fe:02:73:82:64:91:88:98:6e:19:cd:0d:ad:af:af: 9c:18:85:a0:fd:85:e9:ae:c9:1e:b1:70:76:6a:2b: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:FA:D7:83:9E:63:EA:79:D1:89:53:4A:96:0B:42:36:B2:9B:DE X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:60:37:21:ba:a2:15:af:80:2a:6d:3d:fc:7f:be:10:68:7b: e5:f9:08:a1:5c:fb:f6:44:96:d5:bc:27:47:93:c7:f1:8f:4b: 33:d8:fd:fc:9e:b2:93:6f:35:32:db:0d:7f:bb:8e:35:8e:c5: 94:78:77:4f:08:af:c2:d7:55:8a:ad:77:ad:fc:f0:67:e7:35: 9e:ed:da:3e:ed:e4:03:11:1d:ac:82:46:7d:86:59:78:93:03: 52:23:41:30:7a:6f:d7:b1:21:58:76:bc:c0:70:b1:c0:d2:5c: 18:59:5d:9a:15:c9:60:2d:6a:0b:13:23:60:c4:74:85:a9:3c: 6e:e9:9b:31:b8:99:f4:cf:36:1d:fa:fb:6a:f5:43:f5:19:a1: 60:f8:f2:d4:be:db:3c:b6:51:11:66:a2:33:56:62:04:bf:d8: 29:01:cb:90:91:63:a5:45:a5:d0:45:ad:df:bb:da:c8:a2:16: ce:29:a7:9e:19:af:ee:27:b9:a7:b1:d8:ec:6e:46:74:d1:03: 10:a9:e6:fc:19:fd:2b:6c:9f:19:85:4f:f9:b2:6b:a3:63:40: 11:62:53:0c:77:b4:02:0b:a0:85:06:37:80:f7:0e:2c:bc:4b: 56:21:c3:39:90:70:68:97:bf:19:8c:9f:c2:bb:30:61:f7:2d: 4a:5b:34:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdA1hZHfR9e1eXvMj6lGP9fH4bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNjAzMDIwMDU2MDlaFw0yNjAzMDUwNDQzMDlaMDMxMTAvBgNV BAMTKDUxNTlGQUQ3ODM5RTYzRUE3OUQxODk1MzRBOTYwQjQyMzZCMjlCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNCoufDUYu8kJYrm8RRqKGInQ rMRcpWC9SaGKUz6v5JZiRa4dcrsOVqPNTkT8Rxte/lHyVb6A7Mw5Asp8qJOizlC3 pgvvhQZmwL3YnHNc9veuIcktqwnmDcyCYjAZZ54U5Go5r268oIz3mk1O56PeY703 kIkaZ6fE5m9r+PX3VujADkt3XaTN2CpFkXxAloBBWQ8EthNisODtvVv4B4U3s9+S /CYfyZGptojwt/DfjUh7agdZICpgZE/6OXC1yyNGi8t3YZKI3ZeQ/4jL15WsalEB 5ZSl/Y2uoP3S9aEYJf4Cc4JkkYiYbhnNDa2vr5wYhaD9hemuyR6xcHZqKy2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVn614OeY+p50YlTSpYLQjaym94wHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxgNyG6ohWvgCptPfx/vhBoe+X5CKFc+/ZE ltW8J0eTx/GPSzPY/fyespNvNTLbDX+7jjWOxZR4d08Ir8LXVYqtd6388GfnNZ7t 2j7t5AMRHayCRn2GWXiTA1IjQTB6b9exIVh2vMBwscDSXBhZXZoVyWAtagsTI2DE dIWpPG7pmzG4mfTPNh36+2r1Q/UZoWD48tS+2zy2URFmojNWYgS/2CkBy5CRY6VF pdBFrd+72siiFs4pp54Zr+4nuaex2OxuRnTRAxCp5vwZ/StsnxmFT/mya6NjQBFi Uwx3tAILoIUGN4D3Diy8S1YhwzmQcGiXvxmMn8K7MGH3LUpbNKU= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:51 2026 by rpki-client