$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: FZT44Yvg3gilSAiprRYbhrO/RvdI32dffp6Kf/+6nP0= Subject key identifier: 9B:A5:24:52:86:3D:15:46:B6:9D:13:66:AB:08:12:98:B3:5F:5D:5F Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 798750DBE847066BB754D65276F82075F6332BCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 84 Signing time: Thu 26 Mar 2026 04:43:52 +0000 Manifest this update: Thu 26 Mar 2026 04:38:52 +0000 Manifest next update: Sun 29 Mar 2026 10:23:52 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: FHMZBDFHPtVD/X4SiiGd9apvPD/g5zf7oKsMOodQ5ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:87:50:db:e8:47:06:6b:b7:54:d6:52:76:f8:20:75:f6:33:2b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Mar 26 04:38:52 2026 GMT Not After : Mar 29 10:23:52 2026 GMT Subject: CN=9BA52452863D1546B69D1366AB081298B35F5D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:9e:b9:61:b0:4b:b6:db:51:1a:e4:03:03: 3c:99:c0:22:b9:76:97:a2:41:29:fa:ec:be:91:f3: d9:5c:d9:e7:2c:4e:8e:c7:59:b1:b0:e0:d5:13:7b: fe:17:58:3d:90:b4:50:a4:e1:ae:0c:a1:ee:c0:1c: b9:c3:c7:a8:88:84:9b:65:25:26:22:c0:28:3e:6d: 11:e3:e6:b6:a2:b7:3a:1c:55:5c:be:99:ab:66:36: 90:74:c3:0f:21:54:81:fe:22:06:1d:7c:c4:a3:ef: 89:34:af:d2:85:25:2c:ae:32:5a:ae:00:e2:ec:02: 70:35:4f:5b:11:75:55:b5:4c:7d:4a:be:24:4b:42: 3a:d4:d3:da:f0:21:6d:9b:d7:6d:1b:50:a3:5a:bb: 84:5a:00:bb:cb:93:c5:90:31:35:f5:4b:da:cc:33: f3:6e:c9:54:45:0f:e7:a1:dc:f4:74:c2:0b:f9:f3: 85:bd:7b:d2:3a:fb:3e:5b:c3:a7:6c:20:ff:29:dc: 76:89:51:96:b5:14:5e:ba:60:c1:f7:19:78:5d:24: b2:0d:1c:4d:ab:61:3c:d9:47:22:7e:66:b9:f5:f1: d9:22:6a:16:46:38:4a:49:36:9f:f1:02:80:a7:a1: 91:8c:91:25:56:7d:5f:f5:8b:79:7a:76:f6:aa:d9: cb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A5:24:52:86:3D:15:46:B6:9D:13:66:AB:08:12:98:B3:5F:5D:5F X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e3:3a:82:14:df:35:69:79:fb:e6:5d:75:d9:4e:d8:49:e8: 00:c7:b3:5e:c1:9e:21:65:1d:5a:ce:25:79:12:ce:27:f3:5f: e8:df:5a:4a:13:4c:55:7b:d7:a0:89:46:0a:fd:5c:a1:0f:d6: 98:43:04:27:3e:06:cf:1b:28:a0:6b:f4:7d:ff:24:44:ed:0b: 43:ac:fd:1c:db:d2:f6:7a:13:b5:56:cc:0b:52:10:55:b5:ae: d5:36:0e:22:3a:ff:56:06:8d:e5:d7:a9:41:5d:65:23:2e:85: d7:af:7f:35:7a:c9:91:27:f3:a6:67:0b:21:d2:71:08:52:1b: d5:a9:9d:0d:e8:18:f1:c3:d2:a2:f7:be:d6:1f:e0:34:64:a0: 67:7d:bd:23:95:1f:f6:73:63:69:e1:55:29:ec:48:93:bd:dc: a8:60:a6:d7:cb:4f:4b:e1:30:f8:19:a5:99:ea:80:ce:25:7b: f0:b9:c6:e1:e0:cf:e9:8c:0d:1a:35:21:01:fc:96:9f:12:a6: ab:f5:0d:89:6d:11:c4:2e:ed:7c:dd:8d:76:30:c4:40:92:bf: f6:95:9e:75:40:ea:16:ca:61:ff:a9:86:33:a3:33:f6:b4:b0: d2:17:ea:75:e9:81:52:f5:d6:a9:bf:b9:ad:92:ff:25:d9:06: 40:11:68:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYdQ2+hHBmu3VNZSdvggdfYzK8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNjAzMjYwNDM4NTJaFw0yNjAzMjkxMDIzNTJaMDMxMTAvBgNV BAMTKDlCQTUyNDUyODYzRDE1NDZCNjlEMTM2NkFCMDgxMjk4QjM1RjVENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhKZ65YbBLtttRGuQDAzyZwCK5 dpeiQSn67L6R89lc2ecsTo7HWbGw4NUTe/4XWD2QtFCk4a4Moe7AHLnDx6iIhJtl JSYiwCg+bRHj5raitzocVVy+matmNpB0ww8hVIH+IgYdfMSj74k0r9KFJSyuMlqu AOLsAnA1T1sRdVW1TH1KviRLQjrU09rwIW2b120bUKNau4RaALvLk8WQMTX1S9rM M/NuyVRFD+eh3PR0wgv584W9e9I6+z5bw6dsIP8p3HaJUZa1FF66YMH3GXhdJLIN HE2rYTzZRyJ+Zrn18dkiahZGOEpJNp/xAoCnoZGMkSVWfV/1i3l6dvaq2cuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6UkUoY9FUa2nRNmqwgSmLNfXV8wHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjjOoIU3zVpefvmXXXZTthJ6ADHs17BniFl HVrOJXkSzifzX+jfWkoTTFV716CJRgr9XKEP1phDBCc+Bs8bKKBr9H3/JETtC0Os /Rzb0vZ6E7VWzAtSEFW1rtU2DiI6/1YGjeXXqUFdZSMuhdevfzV6yZEn86ZnCyHS cQhSG9WpnQ3oGPHD0qL3vtYf4DRkoGd9vSOVH/ZzY2nhVSnsSJO93KhgptfLT0vh MPgZpZnqgM4le/C5xuHgz+mMDRo1IQH8lp8Spqv1DYltEcQu7XzdjXYwxECSv/aV nnVA6hbKYf+phjOjM/a0sNIX6nXpgVL11qm/ua2S/yXZBkARaGw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:40 2026 by rpki-client