$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: rJ4dQ1/TX3eCDNiQRbtdnPwDUwgmqXhB8xVh9kwSmp0= Subject key identifier: B0:A0:38:25:0C:64:D7:30:35:B7:94:E6:32:3B:09:13:C9:30:2A:4E Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 69B2129DD092B27AFE082BD34F96C205697DD3A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 024E Signing time: Sun 01 Mar 2026 16:41:03 +0000 Manifest this update: Sun 01 Mar 2026 16:36:03 +0000 Manifest next update: Wed 04 Mar 2026 23:46:03 +0000 Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) 2: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: AXQTC76/JTGKVk+DxkKUP8zmL5M/5Z9AsIhZZI1Crks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b2:12:9d:d0:92:b2:7a:fe:08:2b:d3:4f:96:c2:05:69:7d:d3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Mar 1 16:36:03 2026 GMT Not After : Mar 4 23:46:03 2026 GMT Subject: CN=B0A038250C64D73035B794E6323B0913C9302A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:b5:2c:97:d8:2c:03:93:69:b7:c1:b3:14: 84:2b:2a:cb:95:4c:9d:b3:0e:62:78:a6:6b:7a:d5: 04:bc:5c:d6:d5:c4:39:2b:48:9e:e9:e3:8a:07:d0: 1e:40:b2:f7:ef:07:00:33:7d:bd:db:bd:48:07:f8: 55:d1:23:17:b4:c9:68:98:a2:51:84:1e:9f:ba:f4: 90:8c:d7:69:25:71:cd:ab:17:15:29:57:08:65:1b: 10:af:7c:f6:1c:f8:2f:37:41:bb:7a:e0:b7:a3:ba: bb:75:88:89:8c:85:55:62:d8:aa:f6:e3:35:b3:9f: c1:cd:59:71:0c:fb:46:8f:8c:3b:38:e3:35:31:7d: c9:96:2b:85:3f:89:a2:22:4a:6d:9a:d2:27:1d:5a: 94:86:5e:7c:e3:9a:d2:ad:86:e4:7e:7e:4a:41:a8: a1:41:31:01:5d:a9:0f:be:eb:b7:44:ed:4b:17:8b: a3:f6:32:56:7d:41:c3:93:67:ff:cc:50:a0:0d:37: 1d:93:8c:f8:53:42:df:d8:29:21:94:c3:ee:ae:ba: 7d:87:6b:d9:4b:de:bd:7b:69:52:1f:41:a6:56:e1: d0:a1:36:b1:7e:b4:70:39:5d:9b:13:da:33:9c:02: 8e:ae:35:04:c2:b3:82:88:af:6f:99:44:e5:92:64: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A0:38:25:0C:64:D7:30:35:B7:94:E6:32:3B:09:13:C9:30:2A:4E X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6e:31:25:97:d6:5b:0e:cc:44:c3:8e:15:7a:fe:7f:4b:ae: a5:81:11:b4:e6:ed:9e:be:0a:04:0c:e8:64:a0:1e:69:e3:d9: 0c:3d:1d:4e:3e:94:de:3a:df:60:04:6b:72:c5:2a:af:a3:b9: ac:48:7d:d5:6c:69:ae:af:1f:5e:d6:6e:13:de:ea:7e:aa:a5: ab:14:bc:5a:16:b5:e5:9c:72:22:1d:cc:50:34:ba:38:eb:b6: 10:9b:c9:be:f4:c1:a5:e0:66:8f:3e:66:82:9a:c9:09:81:2f: 0b:2b:0a:14:d2:2d:37:8f:e6:41:da:7d:81:ea:b5:62:4d:07: 00:5c:02:d3:cb:e8:f3:75:34:68:ee:e1:e3:dc:4b:a4:95:33: fb:89:cb:e2:9e:56:a0:91:c6:85:c3:d8:72:37:6a:cf:49:c5: 4c:f4:31:72:58:f3:23:84:a3:10:ce:44:7a:29:bc:f6:96:e0: 95:11:47:f4:b6:61:82:4e:40:11:46:76:9b:fe:2b:f0:79:73: 3f:77:96:27:e3:64:cb:ba:01:61:06:ec:fa:e5:b8:2c:95:a6: af:f0:8e:37:2a:3c:39:4a:05:04:ae:6e:ee:cf:eb:07:cc:b5: 1d:68:95:56:27:cd:1e:28:f8:3a:49:84:ef:07:35:40:c0:0c: be:fe:bc:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabISndCSsnr+CCvTT5bCBWl906EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNjAzMDExNjM2MDNaFw0yNjAzMDQyMzQ2MDNaMDMxMTAvBgNV BAMTKEIwQTAzODI1MEM2NEQ3MzAzNUI3OTRFNjMyM0IwOTEzQzkzMDJBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28LUsl9gsA5Npt8GzFIQrKsuV TJ2zDmJ4pmt61QS8XNbVxDkrSJ7p44oH0B5AsvfvBwAzfb3bvUgH+FXRIxe0yWiY olGEHp+69JCM12klcc2rFxUpVwhlGxCvfPYc+C83Qbt64Lejurt1iImMhVVi2Kr2 4zWzn8HNWXEM+0aPjDs44zUxfcmWK4U/iaIiSm2a0icdWpSGXnzjmtKthuR+fkpB qKFBMQFdqQ++67dE7UsXi6P2MlZ9QcOTZ//MUKANNx2TjPhTQt/YKSGUw+6uun2H a9lL3r17aVIfQaZW4dChNrF+tHA5XZsT2jOcAo6uNQTCs4KIr2+ZROWSZPd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsKA4JQxk1zA1t5TmMjsJE8kwKk4wHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVuMSWX1lsOzETDjhV6/n9LrqWBEbTm7Z6+ CgQM6GSgHmnj2Qw9HU4+lN4632AEa3LFKq+juaxIfdVsaa6vH17WbhPe6n6qpasU vFoWteWcciIdzFA0ujjrthCbyb70waXgZo8+ZoKayQmBLwsrChTSLTeP5kHafYHq tWJNBwBcAtPL6PN1NGju4ePcS6SVM/uJy+KeVqCRxoXD2HI3as9JxUz0MXJY8yOE oxDORHopvPaW4JURR/S2YYJOQBFGdpv+K/B5cz93lifjZMu6AWEG7PrluCyVpq/w jjcqPDlKBQSubu7P6wfMtR1olVYnzR4o+DpJhO8HNUDADL7+vJc= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:17 2026 by rpki-client