$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: IBMFGZ40ZPn1G0OaIHh8UYWN0AXrg8Hr98Y6WTV1SIA= Subject key identifier: D3:37:C7:0D:69:B3:BB:7B:82:A4:E0:64:7A:C0:B3:65:44:ED:D7:D8 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 5E28F0800A2D68D9CF33B6D7706083D65D7E9816 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 0363 Signing time: Wed 25 Mar 2026 01:40:43 +0000 Manifest this update: Wed 25 Mar 2026 01:35:43 +0000 Manifest next update: Sat 28 Mar 2026 12:17:43 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: qPvCYYZfkgatvo3U4jaQE7jx62WOeDnnAKk1Zr/3xLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:28:f0:80:0a:2d:68:d9:cf:33:b6:d7:70:60:83:d6:5d:7e:98:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Mar 25 01:35:43 2026 GMT Not After : Mar 28 12:17:43 2026 GMT Subject: CN=D337C70D69B3BB7B82A4E0647AC0B36544EDD7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:66:55:84:ee:84:a8:14:2c:99:ba:b6:5c: 76:44:5e:8b:b1:e1:ef:5a:1f:b5:66:44:92:a7:35: 1a:95:7f:7b:32:b7:9f:f4:02:1a:83:22:89:4f:0f: a1:47:de:ca:4a:d4:24:f5:41:b4:f6:7a:2c:ef:00: fe:66:c8:7b:11:d1:33:1e:b2:24:2c:e5:28:8f:9f: 92:0d:1b:83:cb:c2:6d:e7:e9:aa:35:61:32:ac:5a: d0:c6:14:c1:f6:ab:97:8b:ad:4a:38:16:fa:51:bb: ae:ec:bb:82:59:de:03:e8:d6:6a:11:8c:eb:17:65: de:ae:1c:cc:82:f9:49:0c:61:f5:39:09:07:21:51: 4f:ad:65:89:fc:e6:ab:d1:f2:7d:ee:6e:1f:13:a8: 4d:f6:0b:42:7f:b3:1e:1e:bc:94:c8:a9:d1:82:42: d5:c7:99:44:de:3a:a4:eb:eb:48:bd:05:aa:ee:bd: f2:4b:bc:47:49:da:83:eb:82:f1:a6:c6:03:78:93: 1f:29:af:77:0a:34:bc:25:05:b0:6b:a6:91:ac:80: c6:8d:30:33:e5:b6:01:fc:76:8a:93:39:c5:f3:f3: 5f:28:49:ac:d0:b3:c8:00:ed:88:d0:16:25:6e:7b: ea:ef:c6:1b:be:e8:68:83:a9:f1:2f:e2:f2:90:a9: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:C7:0D:69:B3:BB:7B:82:A4:E0:64:7A:C0:B3:65:44:ED:D7:D8 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:61:0d:7b:cf:ed:91:d2:95:f6:1f:90:9e:41:32:96:38:af: 21:41:3c:93:e5:49:6f:41:d2:98:33:08:a2:d9:85:cc:05:f1: b9:43:f9:9d:41:0e:18:2e:fc:f0:89:f6:f5:b4:b3:4d:6d:9b: f4:62:66:f1:10:f9:82:a9:43:11:c5:ca:8b:8e:72:12:39:fe: 29:29:26:3a:26:f1:12:c9:65:33:c1:f4:fd:60:d1:8e:54:ab: 30:dc:0a:e6:f6:18:7a:2a:60:1a:45:32:ca:83:82:38:2f:24: 76:f6:5e:0d:61:05:7e:98:5e:bf:7c:03:dc:ee:66:e2:1b:9e: 81:cf:22:f8:92:ec:b7:db:9a:fa:a1:c1:46:38:81:64:6b:d5: c9:42:a8:5c:76:bd:8b:d7:48:c0:c9:c4:e4:ed:1c:5b:39:ee: 67:dc:91:c8:88:87:6d:9b:fe:dc:37:3f:ee:01:c4:a5:6a:db: 86:a7:fe:75:af:5c:8b:70:f8:2a:7b:0b:f2:3e:b0:a5:da:b7: 7c:44:ff:dd:f9:9a:5e:db:88:a3:ad:10:0c:30:b0:e0:2b:f5: 09:50:cd:27:82:88:83:64:69:bd:5f:dd:d9:7e:f5:93:92:d8: de:7b:85:fa:64:43:9b:4c:08:3f:eb:7d:98:f7:ae:a6:75:ab: c7:49:db:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXijwgAotaNnPM7bXcGCD1l1+mBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNjAzMjUwMTM1NDNaFw0yNjAzMjgxMjE3NDNaMDMxMTAvBgNV BAMTKEQzMzdDNzBENjlCM0JCN0I4MkE0RTA2NDdBQzBCMzY1NDRFREQ3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtx2ZVhO6EqBQsmbq2XHZEXoux 4e9aH7VmRJKnNRqVf3syt5/0AhqDIolPD6FH3spK1CT1QbT2eizvAP5myHsR0TMe siQs5SiPn5ING4PLwm3n6ao1YTKsWtDGFMH2q5eLrUo4FvpRu67su4JZ3gPo1moR jOsXZd6uHMyC+UkMYfU5CQchUU+tZYn85qvR8n3ubh8TqE32C0J/sx4evJTIqdGC QtXHmUTeOqTr60i9BaruvfJLvEdJ2oPrgvGmxgN4kx8pr3cKNLwlBbBrppGsgMaN MDPltgH8doqTOcXz818oSazQs8gA7YjQFiVue+rvxhu+6GiDqfEv4vKQqUAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zfHDWmzu3uCpOBkesCzZUTt19gwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVhDXvP7ZHSlfYfkJ5BMpY4ryFBPJPlSW9B 0pgzCKLZhcwF8blD+Z1BDhgu/PCJ9vW0s01tm/RiZvEQ+YKpQxHFyouOchI5/ikp Jjom8RLJZTPB9P1g0Y5UqzDcCub2GHoqYBpFMsqDgjgvJHb2Xg1hBX6YXr98A9zu ZuIbnoHPIviS7LfbmvqhwUY4gWRr1clCqFx2vYvXSMDJxOTtHFs57mfckciIh22b /tw3P+4BxKVq24an/nWvXItw+Cp7C/I+sKXat3xE/935ml7biKOtEAwwsOAr9QlQ zSeCiINkab1f3dl+9ZOS2N57hfpkQ5tMCD/rfZj3rqZ1q8dJ22Y= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:16 2026 by rpki-client