$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: CKV5bQ2jpG+qhIDtOnyDBEcliY5JLrhmgPBFpVuz7yQ= Subject key identifier: 0D:B9:DF:C4:CA:D2:5B:F1:F4:DE:F7:FC:54:51:44:91:A6:28:B7:A5 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 399A4C588F57BE3F07FB48085ECA96D59392B0F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: E1 Signing time: Tue 24 Mar 2026 18:02:13 +0000 Manifest this update: Tue 24 Mar 2026 17:57:13 +0000 Manifest next update: Sat 28 Mar 2026 02:36:13 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: 7XxzFrr9vWPlqTuTyZCA7JjbJgIH85zler2+aSOYx9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9a:4c:58:8f:57:be:3f:07:fb:48:08:5e:ca:96:d5:93:92:b0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Mar 24 17:57:13 2026 GMT Not After : Mar 28 02:36:13 2026 GMT Subject: CN=0DB9DFC4CAD25BF1F4DEF7FC54514491A628B7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:60:49:b8:1e:de:d6:35:12:88:ab:4e:0f: b9:b0:6c:7e:fe:a7:20:61:f3:2f:0b:fa:aa:c6:b4: 3e:ed:a8:d6:ad:88:a8:03:8c:74:4a:c3:5d:74:52: e3:9c:4d:ff:0d:5f:83:e0:9b:aa:f2:51:e3:9d:75: 13:fc:e2:89:93:a6:31:60:24:60:79:22:3f:0b:82: 0d:30:35:b4:f6:b4:27:e6:c0:d3:91:10:20:06:68: 9f:f2:77:02:bf:43:d3:a0:ec:10:1c:ab:33:63:08: 91:53:be:39:6d:8d:7f:5b:cf:58:fe:95:5a:f2:f7: ea:42:fe:fd:20:f0:24:e2:7b:88:ef:bf:d9:0d:9b: 01:fa:55:3c:0e:65:49:f6:6b:ac:56:12:29:e5:6d: 57:ac:e0:28:d2:21:76:59:c6:df:24:51:f3:96:79: 37:00:04:da:79:75:51:69:e6:e1:0f:0a:fa:89:71: e5:bb:2d:92:29:50:68:22:bc:69:f3:69:69:ae:97: 59:66:3e:00:f7:5e:c4:0f:36:73:33:26:95:b5:c8: 6a:9b:33:df:ec:7d:a2:37:be:de:26:72:76:0d:5d: 39:d0:26:ce:e6:e2:c5:1f:bd:74:41:5d:86:0e:fa: 70:91:9d:8a:41:60:b0:2b:88:15:ce:00:1a:b5:fe: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B9:DF:C4:CA:D2:5B:F1:F4:DE:F7:FC:54:51:44:91:A6:28:B7:A5 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:3a:0d:f7:8a:14:55:89:5d:fa:eb:44:b0:7e:15:4e:fc:e9: 20:2b:85:c4:91:89:16:05:6c:53:4d:a6:43:2c:c0:66:64:6f: 84:3b:96:52:d5:ec:fa:5e:70:6b:93:0b:ea:d8:7f:0f:72:32: 12:a5:8d:3c:7f:2f:9f:bf:b7:35:db:4e:fa:48:84:fa:1d:80: 17:54:a1:c7:c0:3c:40:01:cb:e0:03:4a:bd:a8:ef:47:f7:3b: 6e:e1:d8:ca:d5:82:ee:ee:0d:98:1d:b9:a9:fb:3a:01:b3:ac: 19:0e:3d:71:cc:16:f5:3c:68:ee:fa:f1:34:5b:dd:69:6f:17: b3:9b:40:8f:6a:b9:eb:9a:6a:b0:87:e3:d0:92:93:65:f8:2d: 6d:13:ba:5a:0b:bc:44:f8:4d:de:3f:18:97:77:9d:70:e3:52: e6:f8:20:b7:7e:56:2b:3d:5b:e3:ea:42:81:19:70:0f:0b:88: 00:4f:72:16:83:04:07:3c:1d:4b:5c:88:f6:69:ce:1f:fc:5c: 7c:16:16:15:62:1a:85:f0:97:b4:cf:cc:43:46:ac:ce:d7:42: f4:a1:55:15:84:07:4e:b9:57:47:75:fe:78:78:7c:9d:b5:45: 4b:4e:f3:c7:52:68:da:1c:eb:96:71:c5:67:dd:e2:ae:9d:0b: 86:11:1b:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZpMWI9Xvj8H+0gIXsqW1ZOSsPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNjAzMjQxNzU3MTNaFw0yNjAzMjgwMjM2MTNaMDMxMTAvBgNV BAMTKDBEQjlERkM0Q0FEMjVCRjFGNERFRjdGQzU0NTE0NDkxQTYyOEI3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEGBJuB7e1jUSiKtOD7mwbH7+ pyBh8y8L+qrGtD7tqNatiKgDjHRKw110UuOcTf8NX4Pgm6ryUeOddRP84omTpjFg JGB5Ij8Lgg0wNbT2tCfmwNORECAGaJ/ydwK/Q9Og7BAcqzNjCJFTvjltjX9bz1j+ lVry9+pC/v0g8CTie4jvv9kNmwH6VTwOZUn2a6xWEinlbVes4CjSIXZZxt8kUfOW eTcABNp5dVFp5uEPCvqJceW7LZIpUGgivGnzaWmul1lmPgD3XsQPNnMzJpW1yGqb M9/sfaI3vt4mcnYNXTnQJs7m4sUfvXRBXYYO+nCRnYpBYLAriBXOABq1/qsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbnfxMrSW/H03vf8VFFEkaYot6UwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN06DfeKFFWJXfrrRLB+FU786SArhcSRiRYF bFNNpkMswGZkb4Q7llLV7PpecGuTC+rYfw9yMhKljTx/L5+/tzXbTvpIhPodgBdU ocfAPEABy+ADSr2o70f3O27h2MrVgu7uDZgduan7OgGzrBkOPXHMFvU8aO768TRb 3WlvF7ObQI9queuaarCH49CSk2X4LW0TuloLvET4Td4/GJd3nXDjUub4ILd+Vis9 W+PqQoEZcA8LiABPchaDBAc8HUtciPZpzh/8XHwWFhViGoXwl7TPzENGrM7XQvSh VRWEB065V0d1/nh4fJ21RUtO88dSaNoc65ZxxWfd4q6dC4YRG/0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:25 2026 by rpki-client