$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: FoXp4fU2h0QikhIvloiNb7R+IYD3OvcG2lCTT5k56gE= Subject key identifier: 11:56:66:81:2B:E4:9E:C4:1F:EE:CE:3B:B9:90:06:2B:E2:02:C9:C0 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 1841CF971150A939C902AE678C87BE38A7A6C1BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 02A3 Signing time: Thu 26 Mar 2026 03:50:54 +0000 Manifest this update: Thu 26 Mar 2026 03:45:54 +0000 Manifest next update: Sun 29 Mar 2026 08:06:54 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: 1Ub+zBmY60OCR/r1yTr0tHA+dwEaq8qHQwhbLa0kvaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:41:cf:97:11:50:a9:39:c9:02:ae:67:8c:87:be:38:a7:a6:c1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Mar 26 03:45:54 2026 GMT Not After : Mar 29 08:06:54 2026 GMT Subject: CN=115666812BE49EC41FEECE3BB990062BE202C9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:0d:22:5b:21:1d:82:db:4b:f5:e2:27:47: cd:2e:32:85:f9:56:e2:fd:f7:ad:f9:15:a0:11:e6: a8:61:dd:94:ac:4a:53:f2:19:ba:dd:c1:12:64:6a: d4:5f:5d:08:e1:9f:d4:f4:c3:9d:90:78:0e:0a:a6: 67:4c:c1:6f:7a:8c:35:a4:01:0b:2b:34:52:c3:97: 19:65:76:ac:8a:9b:f6:8c:dd:1c:3e:1d:43:e4:c0: 0b:1a:76:c4:9f:f8:d5:08:93:85:b0:f4:84:fb:2f: 37:16:c8:64:b3:96:a9:08:f9:79:9b:69:72:d1:0c: cf:f4:03:68:ac:3c:81:ae:f2:43:3c:aa:15:3c:ea: 40:43:a6:14:d4:68:08:f7:91:5a:f3:48:ab:bc:b2: cf:7e:3b:14:18:87:9d:d1:01:56:12:46:63:a7:24: a0:d7:ee:60:24:67:8e:26:f8:39:5f:91:31:79:be: 2d:84:18:e8:8e:61:79:6e:6e:43:50:28:73:f7:36: c6:28:54:20:cd:67:ac:54:1a:f2:e2:86:d7:b8:93: c3:88:63:6c:cc:cc:bc:55:a1:45:c1:7c:07:50:13: e4:f9:73:ff:14:06:f3:0d:16:3d:74:62:85:8c:e4: 14:4a:f6:71:a0:d6:66:9f:e4:b9:78:63:3a:f1:6b: 24:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:56:66:81:2B:E4:9E:C4:1F:EE:CE:3B:B9:90:06:2B:E2:02:C9:C0 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:98:65:82:16:09:51:96:3d:42:bd:3b:a3:23:88:77:3c:78: 21:48:d8:9c:57:3a:6a:a8:8e:00:6b:72:98:42:31:62:6a:d8: c6:33:0c:38:22:c0:71:93:a1:8e:1d:cf:71:68:a0:c1:1c:47: a8:c3:1b:71:4d:1a:f5:4f:5c:98:9f:81:35:8c:35:7e:10:1d: 14:ab:1f:f0:c6:3a:71:18:d6:03:6e:11:6c:0f:e8:1c:29:8a: b0:45:e2:2a:30:16:22:cd:9a:28:ad:1b:c9:cd:c8:6f:b5:87: 23:b7:e8:13:76:3a:b4:a9:e0:e5:4e:8d:5d:3e:d5:6a:cf:9e: 2d:00:d1:8a:56:a8:97:7b:de:b5:3e:4c:15:bc:f1:a5:b6:c5: 4f:57:b5:13:8a:94:68:6f:03:41:cf:4b:06:c9:db:d1:fb:73: 51:08:8a:db:35:43:c6:e1:c3:fc:7b:03:7d:72:46:04:c9:05: f7:bc:8d:75:e4:46:46:45:3b:97:2c:11:5c:7b:84:81:ce:46: d6:11:0c:ae:d6:f6:49:75:43:d1:00:73:a2:39:7f:a4:11:69: e4:e8:db:55:1f:3e:2e:d1:02:31:fb:e4:32:86:a9:be:d0:85: 29:c8:d6:b4:fc:c8:34:e0:50:7d:70:79:e8:6b:90:c5:62:85: 44:e7:09:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEHPlxFQqTnJAq5njIe+OKemwbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNjAzMjYwMzQ1NTRaFw0yNjAzMjkwODA2NTRaMDMxMTAvBgNV BAMTKDExNTY2NjgxMkJFNDlFQzQxRkVFQ0UzQkI5OTAwNjJCRTIwMkM5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg8A0iWyEdgttL9eInR80uMoX5 VuL99635FaAR5qhh3ZSsSlPyGbrdwRJkatRfXQjhn9T0w52QeA4KpmdMwW96jDWk AQsrNFLDlxlldqyKm/aM3Rw+HUPkwAsadsSf+NUIk4Ww9IT7LzcWyGSzlqkI+Xmb aXLRDM/0A2isPIGu8kM8qhU86kBDphTUaAj3kVrzSKu8ss9+OxQYh53RAVYSRmOn JKDX7mAkZ44m+DlfkTF5vi2EGOiOYXlubkNQKHP3NsYoVCDNZ6xUGvLihte4k8OI Y2zMzLxVoUXBfAdQE+T5c/8UBvMNFj10YoWM5BRK9nGg1maf5Ll4YzrxayQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVZmgSvknsQf7s47uZAGK+ICycAwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiYZYIWCVGWPUK9O6MjiHc8eCFI2JxXOmqo jgBrcphCMWJq2MYzDDgiwHGToY4dz3FooMEcR6jDG3FNGvVPXJifgTWMNX4QHRSr H/DGOnEY1gNuEWwP6BwpirBF4iowFiLNmiitG8nNyG+1hyO36BN2OrSp4OVOjV0+ 1WrPni0A0YpWqJd73rU+TBW88aW2xU9XtROKlGhvA0HPSwbJ29H7c1EIits1Q8bh w/x7A31yRgTJBfe8jXXkRkZFO5csEVx7hIHORtYRDK7W9kl1Q9EAc6I5f6QRaeTo 21UfPi7RAjH75DKGqb7QhSnI1rT8yDTgUH1weehrkMVihUTnCes= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:33 2026 by rpki-client