$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: XyEBlIPmptZG8jCQS0OVDN6NDrS0VQY0qLkL7BqQqQE= Subject key identifier: 71:F4:A9:8B:0F:A3:28:0E:D1:13:5D:3A:5D:5E:10:47:51:71:02:B3 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 4E138BC2DEF69335FFAC1A5D1C73B7A146433C74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 90 Signing time: Thu 26 Mar 2026 14:12:35 +0000 Manifest this update: Thu 26 Mar 2026 14:07:35 +0000 Manifest next update: Sun 29 Mar 2026 15:36:35 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: Rpt9qFSVyUciJNgGkW6Dk+6e9RCoosXkz+kPHUY3VcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:13:8b:c2:de:f6:93:35:ff:ac:1a:5d:1c:73:b7:a1:46:43:3c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Mar 26 14:07:35 2026 GMT Not After : Mar 29 15:36:35 2026 GMT Subject: CN=71F4A98B0FA3280ED1135D3A5D5E1047517102B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:09:c2:58:5b:34:63:28:bf:1d:8e:1c:5d: 20:f7:3e:05:93:f1:4c:91:42:a9:da:e0:fa:bc:07: 23:97:ff:4d:e3:f9:a1:1c:19:5d:f9:73:0d:94:c8: 6c:66:b7:6b:08:75:b9:17:84:37:48:05:da:ba:75: 87:fd:38:01:ca:cc:55:80:58:96:85:d3:4e:2a:65: 6f:cb:87:d2:97:cd:97:0b:29:d7:60:f2:86:3a:61: d6:c5:c1:6b:f5:e4:70:a0:4c:a5:e9:03:46:55:ca: 69:62:b2:c9:52:1a:d8:0f:b7:d2:83:c7:e6:d9:2b: 46:4c:98:6a:80:20:23:45:2e:a4:58:da:b9:97:d3: 68:e8:ee:f2:77:df:51:f3:1e:c8:39:58:99:90:a3: d2:0d:b9:00:64:6b:db:4f:58:c4:b6:3e:71:56:65: 7f:b8:d4:7a:48:ea:7c:9d:74:3a:a9:74:57:2b:28: d6:5a:a5:0b:2f:52:9e:0f:9a:8e:95:03:09:55:e9: 62:0a:d5:26:30:2c:d5:38:51:8e:4a:6c:3d:4d:0d: 48:ff:f4:ad:31:5d:c0:80:22:3f:3b:3e:e8:19:da: 68:a1:eb:40:36:e9:b4:70:a1:2b:e7:1f:d0:bf:94: f1:0b:52:1c:0b:8e:16:c1:41:39:fa:b9:1f:e2:29: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F4:A9:8B:0F:A3:28:0E:D1:13:5D:3A:5D:5E:10:47:51:71:02:B3 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:eb:f4:dc:24:53:1c:68:bd:3b:50:3d:c1:01:76:e2:4f:6f: 48:d4:b9:60:d0:28:46:39:41:71:b5:1f:4e:7e:43:94:c4:63: b7:0d:11:66:3c:ac:23:ac:3a:9d:82:40:a2:bb:48:6a:26:08: 97:89:e1:1f:e8:b3:a5:11:c9:5f:57:62:5c:f4:35:22:70:12: 91:24:70:ef:a3:ae:13:3d:71:76:04:ff:eb:a1:a2:e7:05:71: e9:d0:12:48:79:73:26:17:6a:61:b6:ae:3f:a5:b1:a5:30:70: 1b:18:ba:fd:59:73:83:4d:41:e6:67:23:73:b1:58:d2:8f:09: 8d:02:de:39:c1:fd:2f:cf:12:dc:bb:56:54:a5:99:b1:9f:b0: 59:4f:df:6f:c8:19:52:7e:ec:c7:8c:05:55:4f:62:eb:a0:53: 04:1a:20:a1:1b:16:29:db:49:c0:0e:fd:a5:67:85:ba:4c:4e: 46:6b:7d:f3:74:20:fd:20:f9:c4:04:d0:9b:d2:c5:16:56:b0: 90:99:9b:37:24:1e:b5:27:c4:5b:6a:a1:33:2e:79:ac:be:ab: 17:25:66:1b:ca:23:4a:01:8e:19:08:9f:8f:2d:89:8b:42:e4: b3:4f:7e:48:e9:bf:b6:ed:6d:12:3e:32:1a:83:24:49:62:a8: 56:10:27:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThOLwt72kzX/rBpdHHO3oUZDPHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNjAzMjYxNDA3MzVaFw0yNjAzMjkxNTM2MzVaMDMxMTAvBgNV BAMTKDcxRjRBOThCMEZBMzI4MEVEMTEzNUQzQTVENUUxMDQ3NTE3MTAyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrAnCWFs0Yyi/HY4cXSD3PgWT 8UyRQqna4Pq8ByOX/03j+aEcGV35cw2UyGxmt2sIdbkXhDdIBdq6dYf9OAHKzFWA WJaF004qZW/Lh9KXzZcLKddg8oY6YdbFwWv15HCgTKXpA0ZVymlisslSGtgPt9KD x+bZK0ZMmGqAICNFLqRY2rmX02jo7vJ331HzHsg5WJmQo9INuQBka9tPWMS2PnFW ZX+41HpI6nyddDqpdFcrKNZapQsvUp4Pmo6VAwlV6WIK1SYwLNU4UY5KbD1NDUj/ 9K0xXcCAIj87PugZ2mih60A26bRwoSvnH9C/lPELUhwLjhbBQTn6uR/iKd55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfSpiw+jKA7RE106XV4QR1FxArMwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/r9NwkUxxovTtQPcEBduJPb0jUuWDQKEY5 QXG1H05+Q5TEY7cNEWY8rCOsOp2CQKK7SGomCJeJ4R/os6URyV9XYlz0NSJwEpEk cO+jrhM9cXYE/+uhoucFcenQEkh5cyYXamG2rj+lsaUwcBsYuv1Zc4NNQeZnI3Ox WNKPCY0C3jnB/S/PEty7VlSlmbGfsFlP32/IGVJ+7MeMBVVPYuugUwQaIKEbFinb ScAO/aVnhbpMTkZrffN0IP0g+cQE0JvSxRZWsJCZmzckHrUnxFtqoTMueay+qxcl ZhvKI0oBjhkIn48tiYtC5LNPfkjpv7btbRI+MhqDJEliqFYQJ7g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:29:13 2026 by rpki-client