$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: iLhWH+64u4I+UGdok7hflqTvHpFMY2TFL181D/LbsxE= Subject key identifier: 87:8F:26:9D:EC:71:1E:70:E3:7D:31:9C:22:8F:D1:3D:1A:4D:DB:B2 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 4EB195DC83A5C658B83A71DE5B05CDF5A9DB1415 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 0319 Signing time: Thu 26 Mar 2026 08:40:45 +0000 Manifest this update: Thu 26 Mar 2026 08:35:45 +0000 Manifest next update: Sun 29 Mar 2026 17:49:45 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: 8zruQo39wpKdnSFaZwj4YIPoqXiMm+UAMWIkgMBii9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b1:95:dc:83:a5:c6:58:b8:3a:71:de:5b:05:cd:f5:a9:db:14:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Mar 26 08:35:45 2026 GMT Not After : Mar 29 17:49:45 2026 GMT Subject: CN=878F269DEC711E70E37D319C228FD13D1A4DDBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:d7:d7:ec:5b:7f:45:bc:66:75:02:9f:9c: ec:2f:b0:d3:3b:71:1c:c3:de:a0:6b:ce:ea:c4:f0: 7a:1d:b7:3b:d9:46:c7:6d:ee:6f:52:a5:39:dd:1c: 2e:2f:a2:19:39:b1:65:b3:75:b7:f6:01:10:8f:71: ee:54:6e:30:e8:ff:45:50:20:16:65:97:01:54:81: 89:3d:f6:61:e0:c5:31:bc:75:dd:fd:30:71:5c:9e: 7d:5f:58:e5:24:ff:ec:f5:9a:5b:13:c2:8e:c6:29: 3c:6b:85:31:63:c7:5e:73:b3:d7:bf:17:1d:a0:e8: c6:d2:cc:bf:74:b8:21:38:79:e5:a9:85:d4:8c:e2: 5b:97:33:8c:76:46:10:c0:12:53:f8:cf:cb:d0:9c: 3b:3d:2c:47:c4:02:9f:3b:9f:f2:b1:45:1b:7e:08: 38:79:2b:3d:16:2f:e4:7d:ef:cd:92:f1:b5:0c:4d: 42:01:6c:ab:87:7f:15:a9:c9:ed:fb:0a:3d:d9:40: 7c:e6:65:97:e6:52:83:78:d2:a4:c9:14:7a:c8:63: f1:7d:54:0b:0f:eb:69:e4:55:dc:44:61:97:93:22: 4f:b1:0d:db:15:f1:48:6a:af:ae:6f:1a:74:6d:d2: 21:93:f9:b3:97:6e:64:8b:bc:b7:0c:39:ed:36:db: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8F:26:9D:EC:71:1E:70:E3:7D:31:9C:22:8F:D1:3D:1A:4D:DB:B2 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:88:c9:99:c5:33:e1:95:51:6b:ca:d3:2d:9e:d5:e1:c0:bf: e0:56:12:88:c6:63:88:71:7a:c4:34:f0:45:46:e8:9e:a3:15: d2:19:50:f5:1e:12:89:7d:77:96:be:57:f4:59:6b:a8:ca:77: f8:c2:a8:40:d1:ea:33:88:5c:08:3b:2f:a9:ca:4a:3c:c6:33: 49:db:22:ef:99:4a:d6:d7:7a:f2:13:eb:bd:e7:84:a6:cf:0a: fe:b2:0a:b5:ac:9a:81:41:4a:3c:ef:a5:52:37:d9:8d:05:4d: e9:cf:b3:bf:25:ce:60:12:3e:a8:dd:7f:6c:32:44:0c:00:68: 0e:80:7d:21:1c:34:70:86:a1:8d:61:c7:e9:8d:b7:28:ad:a4: 30:9f:b8:34:90:cb:cb:4d:85:01:86:fe:40:24:ca:b6:e3:67: 48:f0:34:84:04:ea:f4:e1:69:17:93:4d:19:df:9c:b0:99:4a: 1e:76:e8:5f:3f:74:07:a0:a4:7f:b6:3c:b8:f3:24:fc:3f:6d: 8c:3b:5b:42:2a:8d:e3:20:54:55:1f:d4:d0:f2:3a:bd:26:39: 8b:f8:49:dc:a9:51:68:d5:67:bb:c4:bb:62:32:dd:f5:d0:6a: 6d:ec:b0:23:d0:e9:e1:65:5e:fe:07:2b:16:cc:ba:da:fe:15: d3:ac:8d:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrGV3IOlxli4OnHeWwXN9anbFBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNjAzMjYwODM1NDVaFw0yNjAzMjkxNzQ5NDVaMDMxMTAvBgNV BAMTKDg3OEYyNjlERUM3MTFFNzBFMzdEMzE5QzIyOEZEMTNEMUE0RERCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHNfX7Ft/RbxmdQKfnOwvsNM7 cRzD3qBrzurE8HodtzvZRsdt7m9SpTndHC4vohk5sWWzdbf2ARCPce5UbjDo/0VQ IBZllwFUgYk99mHgxTG8dd39MHFcnn1fWOUk/+z1mlsTwo7GKTxrhTFjx15zs9e/ Fx2g6MbSzL90uCE4eeWphdSM4luXM4x2RhDAElP4z8vQnDs9LEfEAp87n/KxRRt+ CDh5Kz0WL+R9782S8bUMTUIBbKuHfxWpye37Cj3ZQHzmZZfmUoN40qTJFHrIY/F9 VAsP62nkVdxEYZeTIk+xDdsV8Uhqr65vGnRt0iGT+bOXbmSLvLcMOe022+X/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh48mnexxHnDjfTGcIo/RPRpN27IwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmIyZnFM+GVUWvK0y2e1eHAv+BWEojGY4hx esQ08EVG6J6jFdIZUPUeEol9d5a+V/RZa6jKd/jCqEDR6jOIXAg7L6nKSjzGM0nb Iu+ZStbXevIT673nhKbPCv6yCrWsmoFBSjzvpVI32Y0FTenPs78lzmASPqjdf2wy RAwAaA6AfSEcNHCGoY1hx+mNtyitpDCfuDSQy8tNhQGG/kAkyrbjZ0jwNIQE6vTh aReTTRnfnLCZSh526F8/dAegpH+2PLjzJPw/bYw7W0IqjeMgVFUf1NDyOr0mOYv4 SdypUWjVZ7vEu2Iy3fXQam3ssCPQ6eFlXv4HKxbMutr+FdOsjWo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:31 2026 by rpki-client