$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: uymShZ++Ie4TdS7BudCSxTiG8p77vnETyeCe7VdUK+M= Subject key identifier: 84:60:DD:82:B1:0B:12:7D:21:B0:31:EB:3C:E4:E7:4B:96:16:7D:C4 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 07618B38229947EAE9593CD9B3CDB1E4A071196F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 0114 Signing time: Tue 24 Mar 2026 13:31:57 +0000 Manifest this update: Tue 24 Mar 2026 13:26:57 +0000 Manifest next update: Sat 28 Mar 2026 01:09:57 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: lhiQ0/pQNxJVoVG7+H+BNxbE07od1mDAF0XyPrDbQck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:61:8b:38:22:99:47:ea:e9:59:3c:d9:b3:cd:b1:e4:a0:71:19:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Mar 24 13:26:57 2026 GMT Not After : Mar 28 01:09:57 2026 GMT Subject: CN=8460DD82B10B127D21B031EB3CE4E74B96167DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:c2:c4:58:dd:60:26:ce:ac:a3:5d:c6:46: d8:f4:1c:a5:eb:3e:c0:06:91:40:a0:99:41:fb:5d: aa:8e:13:ed:c3:e9:9c:75:5e:c1:f3:9b:3e:4e:51: f3:c2:01:74:f6:34:dd:d1:3e:43:9e:cb:05:62:8a: 3f:c1:55:85:cc:d9:19:30:fd:ff:28:e1:67:d3:28: 52:bc:b4:7c:83:f3:0c:6d:b6:74:6e:1f:5d:ae:99: 04:06:aa:4d:bc:12:9f:22:be:46:d5:05:c8:d5:fa: 34:f1:e8:5e:65:fd:20:28:4b:78:64:a6:20:12:15: 0e:91:2d:7d:e5:8e:d5:7c:94:25:01:e3:db:89:01: cd:0b:ed:97:b6:3c:9e:bd:77:f5:3a:07:39:aa:14: 43:1c:c4:d3:69:3b:df:36:5a:55:06:c8:4b:32:90: 2e:ed:44:44:86:64:4f:a5:f5:01:ae:47:95:62:4f: 9e:f6:4c:c8:46:1b:b3:62:ab:0c:3a:3f:6c:04:e6: 27:7a:45:56:1c:a2:74:b2:c0:4d:a2:f2:d4:df:62: 7b:d3:6b:f0:42:f9:65:f6:3b:c8:36:57:1c:50:7e: c5:fb:1a:b3:b6:ca:25:c8:b6:ed:ce:c6:4d:c8:81: a3:6a:3b:97:64:93:96:26:b2:e0:3f:cf:8e:0a:aa: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:60:DD:82:B1:0B:12:7D:21:B0:31:EB:3C:E4:E7:4B:96:16:7D:C4 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:86:7e:27:a5:8a:70:f0:7b:5e:f9:4e:17:0e:f5:69:9c:48: e2:bc:3f:0c:dc:92:9c:83:fe:fe:f9:4e:8e:64:65:47:ba:9b: 0a:16:45:7a:11:2d:d6:d9:51:e2:3d:d5:e5:61:27:24:91:ba: 97:80:ee:00:bb:8f:8a:6e:2d:af:ee:09:ce:35:f2:fe:da:2e: 31:e8:ad:a1:9f:eb:ee:dd:b1:39:2a:77:20:4f:fa:f3:f5:d3: e2:4d:cc:85:7f:f6:00:98:a5:9a:96:b9:ab:fe:12:05:d2:84: f0:d9:a3:41:73:9f:dc:51:58:e0:e9:f5:69:b7:4d:2b:b4:10: e0:3e:63:cd:63:5e:03:fe:21:c8:9c:9e:03:c4:30:3a:35:6f: 78:02:c5:13:a1:73:01:6c:91:99:73:f1:b1:00:96:45:1d:0d: 91:0d:29:fe:98:07:39:af:2c:5a:0b:73:5e:dc:ee:84:97:a4: db:ed:db:df:4e:a0:d6:a5:e6:7c:48:17:8f:f8:c0:6d:e5:ae: b3:c4:8f:89:40:d2:74:7b:03:af:7b:3b:1c:6d:58:6f:80:05: 7e:8e:c6:d2:5e:c9:34:ef:c7:46:ab:dc:a1:7b:06:fd:71:b9: 35:86:f1:76:c7:74:ae:41:ef:52:bb:d4:bb:59:12:31:5c:01: aa:f0:83:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2GLOCKZR+rpWTzZs82x5KBxGW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNjAzMjQxMzI2NTdaFw0yNjAzMjgwMTA5NTdaMDMxMTAvBgNV BAMTKDg0NjBERDgyQjEwQjEyN0QyMUIwMzFFQjNDRTRFNzRCOTYxNjdEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHcLEWN1gJs6so13GRtj0HKXr PsAGkUCgmUH7XaqOE+3D6Zx1XsHzmz5OUfPCAXT2NN3RPkOeywViij/BVYXM2Rkw /f8o4WfTKFK8tHyD8wxttnRuH12umQQGqk28Ep8ivkbVBcjV+jTx6F5l/SAoS3hk piASFQ6RLX3ljtV8lCUB49uJAc0L7Ze2PJ69d/U6BzmqFEMcxNNpO982WlUGyEsy kC7tRESGZE+l9QGuR5ViT572TMhGG7Niqww6P2wE5id6RVYconSywE2i8tTfYnvT a/BC+WX2O8g2VxxQfsX7GrO2yiXItu3Oxk3IgaNqO5dkk5YmsuA/z44KqvT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGDdgrELEn0hsDHrPOTnS5YWfcQwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGGfielinDwe175ThcO9WmcSOK8PwzckpyD /v75To5kZUe6mwoWRXoRLdbZUeI91eVhJySRupeA7gC7j4puLa/uCc418v7aLjHo raGf6+7dsTkqdyBP+vP10+JNzIV/9gCYpZqWuav+EgXShPDZo0Fzn9xRWODp9Wm3 TSu0EOA+Y81jXgP+IcicngPEMDo1b3gCxROhcwFskZlz8bEAlkUdDZENKf6YBzmv LFoLc17c7oSXpNvt299OoNal5nxIF4/4wG3lrrPEj4lA0nR7A697OxxtWG+ABX6O xtJeyTTvx0ar3KF7Bv1xuTWG8XbHdK5B71K71LtZEjFcAarwg3g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:40 2026 by rpki-client