$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: dNfMZ6XKEQvAKLjTkW9YVs+jUCbSJmzTsHx8NIBJxVA= Subject key identifier: B8:9F:5E:E3:60:15:27:4F:93:35:A4:A1:39:2E:A6:2E:9C:02:5B:A0 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 0FED7B32CFAC011C9AFDA8652E17CFAEAB282480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 01CA Signing time: Sun 01 Mar 2026 16:30:51 +0000 Manifest this update: Sun 01 Mar 2026 16:25:51 +0000 Manifest next update: Thu 05 Mar 2026 03:23:51 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: i7fFsmSBkeSKbyW/TTm9TcNtd1h8Ec2ngRNSViv1V60=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: F5Nr9oAfEjMG6cDxMzOcei5b+qDnSyNmXyrG7q2lqxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ed:7b:32:cf:ac:01:1c:9a:fd:a8:65:2e:17:cf:ae:ab:28:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Mar 1 16:25:51 2026 GMT Not After : Mar 5 03:23:51 2026 GMT Subject: CN=B89F5EE36015274F9335A4A1392EA62E9C025BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:c2:f6:8b:29:09:33:e2:6e:e3:43:da:5b: 62:ae:a7:ee:62:1d:8d:4f:6c:ae:98:c2:29:24:a6: 9d:15:03:93:3d:48:81:87:99:ef:18:21:06:f0:0f: 4b:f9:d4:8f:d5:0d:46:44:86:53:c7:cf:59:88:81: ae:45:db:6b:4a:47:3e:93:66:c8:9e:f3:6c:0e:2b: 7c:b2:83:ee:45:20:f4:f6:f2:cf:69:e5:c7:6c:00: d7:88:f7:7b:dc:77:c8:58:d8:62:88:9c:41:45:7a: 82:23:f5:ef:10:41:eb:86:18:25:b3:ef:f5:65:f5: 5c:e5:3d:2f:60:53:9f:d4:2c:3a:d1:48:82:c1:6e: d6:b4:30:d7:8d:f6:33:33:51:db:f7:71:13:8c:ee: 73:98:47:da:4b:a1:39:c6:e8:77:56:7f:2a:06:b4: 68:37:ba:c0:f4:3a:7e:27:73:b2:48:9a:01:15:88: a6:cb:f8:0e:ca:74:e1:9a:d6:da:04:f5:14:54:04: b0:30:db:84:05:2b:2a:db:ea:46:cb:ef:a8:81:6f: 6f:d8:e7:91:4b:db:f3:ff:2f:2d:38:89:3f:3f:a1: bd:44:56:71:d8:6f:db:74:16:1a:fc:56:66:c1:fc: 35:85:92:c8:ad:5e:cf:03:f9:58:a7:83:5d:68:f3: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:5E:E3:60:15:27:4F:93:35:A4:A1:39:2E:A6:2E:9C:02:5B:A0 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:00:64:94:46:de:92:a3:06:1d:78:f7:f0:b6:34:1f:a1: 31:43:11:41:e4:24:ab:27:08:32:41:44:d3:c8:90:e4:91:ac: 96:80:50:b1:4e:bb:c1:70:2f:a1:5e:51:6a:57:b8:6b:b5:6c: 84:4f:c9:56:f2:ad:43:ce:cc:fa:e7:ee:c0:5f:af:bb:fd:e2: 02:c1:0b:57:71:a7:a5:d8:b0:df:29:70:c5:43:d4:67:34:9f: 92:12:da:6b:fd:a9:94:d3:fd:ee:74:01:d5:b5:ee:d1:85:cc: b5:61:39:22:fb:db:e3:a4:fa:37:a4:9e:a7:99:7f:69:25:bd: a5:28:4c:7f:f1:90:5c:4d:ff:d8:89:f9:03:bb:e2:a4:03:a4: be:23:ee:f8:e6:da:08:fd:74:c7:a9:cf:8c:45:ce:fc:ec:eb: b9:83:6f:b5:fa:37:2b:48:e2:69:97:ef:6e:02:6e:36:09:29: d2:ca:82:98:f6:eb:6e:3f:e3:5e:2e:e7:fa:69:31:76:96:6b: 57:d7:f6:01:37:47:ef:6b:60:64:28:8e:4d:10:d8:59:c0:f6: 61:d5:72:f4:db:71:8c:37:9e:d4:7d:cc:f1:67:a4:9c:ca:91: 34:64:87:7b:d8:59:a3:dc:74:68:20:f4:22:b3:bf:87:46:8f: 5a:73:19:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+17Ms+sARya/ahlLhfPrqsoJIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNjAzMDExNjI1NTFaFw0yNjAzMDUwMzIzNTFaMDMxMTAvBgNV BAMTKEI4OUY1RUUzNjAxNTI3NEY5MzM1QTRBMTM5MkVBNjJFOUMwMjVCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrcL2iykJM+Ju40PaW2Kup+5i HY1PbK6Ywikkpp0VA5M9SIGHme8YIQbwD0v51I/VDUZEhlPHz1mIga5F22tKRz6T Zsie82wOK3yyg+5FIPT28s9p5cdsANeI93vcd8hY2GKInEFFeoIj9e8QQeuGGCWz 7/Vl9VzlPS9gU5/ULDrRSILBbta0MNeN9jMzUdv3cROM7nOYR9pLoTnG6HdWfyoG tGg3usD0On4nc7JImgEViKbL+A7KdOGa1toE9RRUBLAw24QFKyrb6kbL76iBb2/Y 55FL2/P/Ly04iT8/ob1EVnHYb9t0Fhr8VmbB/DWFksitXs8D+Ving11o8zOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJ9e42AVJ0+TNaShOS6mLpwCW6AwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8YAGSURt6SowYdePfwtjQfoTFDEUHkJKsn CDJBRNPIkOSRrJaAULFOu8FwL6FeUWpXuGu1bIRPyVbyrUPOzPrn7sBfr7v94gLB C1dxp6XYsN8pcMVD1Gc0n5IS2mv9qZTT/e50AdW17tGFzLVhOSL72+Ok+jeknqeZ f2klvaUoTH/xkFxN/9iJ+QO74qQDpL4j7vjm2gj9dMepz4xFzvzs67mDb7X6NytI 4mmX724CbjYJKdLKgpj2624/414u5/ppMXaWa1fX9gE3R+9rYGQojk0Q2FnA9mHV cvTbcYw3ntR9zPFnpJzKkTRkh3vYWaPcdGgg9CKzv4dGj1pzGRU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:52 2026 by rpki-client