$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: Inrg6X6FIzB1dtwwCvs9pkeGGrejNXDiCcAdJiBfpqk= Subject key identifier: 59:23:2B:81:A6:31:47:FD:C6:96:7A:63:A2:BD:13:C5:8F:A7:F4:25 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 6E35C13636FD1E164DB26291480676021724CF53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 012F Signing time: Tue 24 Mar 2026 09:41:20 +0000 Manifest this update: Tue 24 Mar 2026 09:36:20 +0000 Manifest next update: Fri 27 Mar 2026 17:28:20 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: qr+o16NdwI9nUWKrzCP4nk2v+zMizh3nmWXmeWMqUhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:35:c1:36:36:fd:1e:16:4d:b2:62:91:48:06:76:02:17:24:cf:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Mar 24 09:36:20 2026 GMT Not After : Mar 27 17:28:20 2026 GMT Subject: CN=59232B81A63147FDC6967A63A2BD13C58FA7F425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:28:a3:03:30:be:75:af:57:51:d0:78:77: 2e:d2:a4:0e:9c:d3:77:b7:0f:f9:bb:02:e0:f5:9c: 1d:8d:15:23:01:5a:d9:e0:6d:38:d1:e7:0a:4a:18: 09:27:01:73:57:28:1a:9b:c3:ca:03:93:bb:df:21: 43:b2:2f:fd:de:03:ce:3d:6b:e6:e7:8e:b4:12:d9: dd:d5:dd:58:93:90:13:cb:cc:f9:b0:f4:fc:03:50: 71:bd:9f:97:a3:4d:2e:1d:a8:45:c9:5a:1d:50:3a: 04:5b:3f:b6:82:26:91:19:1b:38:37:89:ee:37:00: f8:35:d2:2b:3f:c1:17:8b:21:fc:dd:ca:77:d0:28: b8:7f:08:93:af:e3:83:6e:ef:18:7f:90:94:59:27: 4b:20:15:69:c4:68:75:42:7c:e9:b9:2f:04:d9:35: c1:72:10:b6:f5:3c:54:95:ed:11:d0:83:13:47:90: 5a:6f:9c:5d:16:ec:74:e3:e2:91:ea:ee:a5:69:2f: 29:71:dd:d1:53:10:72:c9:27:2d:cc:24:a7:a3:6c: 06:af:b7:6a:ba:bd:32:37:e4:80:7c:df:8b:eb:35: 16:a4:70:52:42:97:3b:c6:b1:6b:b6:7b:84:3a:82: 3c:46:27:23:5f:c2:b8:34:de:e6:98:7e:8f:91:43: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:2B:81:A6:31:47:FD:C6:96:7A:63:A2:BD:13:C5:8F:A7:F4:25 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6e:53:22:04:bc:eb:3a:97:b5:ed:f4:ed:d7:0b:84:e2:1a: 72:2c:48:76:a5:a4:de:84:7e:8b:7f:0c:10:e6:1d:ae:22:6c: cb:2f:76:f8:05:2f:77:39:2f:e5:4e:6d:da:b2:2a:ad:aa:1f: e0:91:9b:f3:91:57:ca:e0:67:2e:ff:00:ea:36:5d:44:51:76: ad:d7:3b:32:fd:04:dd:df:6b:6f:ea:06:4c:04:a2:dd:90:13: 55:48:a9:83:d0:a3:12:15:0d:bb:79:f6:e1:a8:3e:b5:d0:89: 14:c8:ae:f3:c3:cb:a0:55:c3:c2:44:4d:2e:96:b9:ca:1c:b8: 06:ac:fc:79:b0:34:91:eb:e2:ff:cf:16:28:f0:03:51:ee:1e: ca:64:dc:5d:3d:03:f7:f8:40:7c:48:62:b0:5b:54:ce:52:24: d5:e9:df:ac:b5:86:07:f6:a2:01:d5:a3:d9:66:0e:05:4e:72: 22:3f:28:67:cf:a4:ba:29:fd:ee:3b:fa:d1:f6:44:6c:3a:b2: 7a:b6:a0:2c:fb:5a:a2:89:6e:43:cc:67:7c:73:ce:c9:f1:4f: 02:7f:cd:b9:c5:a7:f9:b8:7b:63:45:39:da:dc:ad:c7:d2:6d: 08:b8:4d:47:3c:3e:07:11:26:5d:f4:b7:4e:41:9b:e8:84:b6: 8c:01:63:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjXBNjb9HhZNsmKRSAZ2Ahckz1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNjAzMjQwOTM2MjBaFw0yNjAzMjcxNzI4MjBaMDMxMTAvBgNV BAMTKDU5MjMyQjgxQTYzMTQ3RkRDNjk2N0E2M0EyQkQxM0M1OEZBN0Y0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/CijAzC+da9XUdB4dy7SpA6c 03e3D/m7AuD1nB2NFSMBWtngbTjR5wpKGAknAXNXKBqbw8oDk7vfIUOyL/3eA849 a+bnjrQS2d3V3ViTkBPLzPmw9PwDUHG9n5ejTS4dqEXJWh1QOgRbP7aCJpEZGzg3 ie43APg10is/wReLIfzdynfQKLh/CJOv44Nu7xh/kJRZJ0sgFWnEaHVCfOm5LwTZ NcFyELb1PFSV7RHQgxNHkFpvnF0W7HTj4pHq7qVpLylx3dFTEHLJJy3MJKejbAav t2q6vTI35IB834vrNRakcFJClzvGsWu2e4Q6gjxGJyNfwrg03uaYfo+RQ9INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSMrgaYxR/3Glnpjor0TxY+n9CUwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9uUyIEvOs6l7Xt9O3XC4TiGnIsSHalpN6E fot/DBDmHa4ibMsvdvgFL3c5L+VObdqyKq2qH+CRm/ORV8rgZy7/AOo2XURRdq3X OzL9BN3fa2/qBkwEot2QE1VIqYPQoxIVDbt59uGoPrXQiRTIrvPDy6BVw8JETS6W ucocuAas/HmwNJHr4v/PFijwA1HuHspk3F09A/f4QHxIYrBbVM5SJNXp36y1hgf2 ogHVo9lmDgVOciI/KGfPpLop/e47+tH2RGw6snq2oCz7WqKJbkPMZ3xzzsnxTwJ/ zbnFp/m4e2NFOdrcrcfSbQi4TUc8PgcRJl30t05Bm+iEtowBYyQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:15 2026 by rpki-client