$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: TwbD+XR00VycTSLvY/ZFy9euzAySxF0GZVNVC8WFn1s= Subject key identifier: A6:51:37:F3:97:D5:D0:3D:56:09:6C:9E:CC:A5:CE:8C:9C:3B:0A:39 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 0C6B33C2B19BB219E3E0092B784A146C924DBEDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0182 Signing time: Tue 24 Mar 2026 11:30:25 +0000 Manifest this update: Tue 24 Mar 2026 11:25:25 +0000 Manifest next update: Fri 27 Mar 2026 15:54:25 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: OfiSR3fbEC6oiIJxe3k5g/rV6YsD/Z4jBQ1/EdKR9Rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6b:33:c2:b1:9b:b2:19:e3:e0:09:2b:78:4a:14:6c:92:4d:be:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Mar 24 11:25:25 2026 GMT Not After : Mar 27 15:54:25 2026 GMT Subject: CN=A65137F397D5D03D56096C9ECCA5CE8C9C3B0A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:65:15:44:51:c9:c6:f1:72:df:b8:6d:37:ad: 6a:a8:b9:00:b8:67:8e:5a:6c:a4:7a:1d:10:d0:30: 10:4c:10:54:89:12:6a:82:54:51:54:7e:5c:4b:13: bf:3d:5f:c3:f4:bf:5a:d4:c3:cc:25:7c:f5:96:a2: 52:13:c6:7d:40:3d:8d:bd:fc:1e:59:6a:02:0f:93: 60:65:f0:48:90:92:7a:b8:65:e2:cf:20:94:de:80: 3a:8f:47:b3:2e:dd:7e:32:2f:62:52:4d:4f:3e:ff: 0a:60:5a:b9:53:01:dd:01:98:00:38:d2:14:7e:df: 35:b1:39:05:40:c4:84:c7:3a:99:5f:77:34:80:3f: 8c:9d:9a:8a:22:98:26:8b:0f:c2:7c:3e:c2:3f:09: ac:0d:7d:b3:49:37:66:9b:4b:4d:86:36:12:3e:f9: eb:92:4e:bb:df:eb:64:54:68:a9:1e:0e:eb:11:af: f7:98:bf:15:af:24:cd:63:7f:81:1f:9c:42:8b:a1: fe:20:b5:42:bc:66:d5:e0:1e:64:2e:76:d9:fa:6a: 82:60:5a:78:ae:07:76:6f:d3:fa:3d:4c:e2:0b:4e: 17:8d:86:59:19:ae:5b:8d:12:04:2a:64:fd:c0:d3: a8:97:9e:e6:0f:89:ed:b9:f6:8d:31:40:be:3c:92: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:51:37:F3:97:D5:D0:3D:56:09:6C:9E:CC:A5:CE:8C:9C:3B:0A:39 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b4:c7:8d:87:62:18:d4:79:a3:66:bc:5c:51:57:1f:d2:2a: c8:23:69:24:26:06:16:d9:f5:54:96:32:54:c2:02:9c:1c:2e: 16:1d:e1:4a:1a:f4:9b:8b:e6:c1:b6:8e:a3:8b:73:24:46:32: 12:1c:78:b3:17:be:1e:53:c4:11:c2:2d:f4:49:98:27:c6:6a: 9a:64:1c:57:50:0d:b3:10:a0:ab:29:c3:f4:a7:08:c5:a0:b2: a3:62:1f:e9:41:81:ef:88:03:77:ca:08:59:6c:1a:8f:e9:47: 18:cb:98:b5:87:f5:2a:9b:56:f0:67:79:23:37:1c:d2:38:79: 33:e2:37:e2:2e:07:a3:9a:37:35:1f:4f:e2:03:d6:e6:d8:4f: 77:01:0f:6a:35:f2:e9:d6:84:ac:e1:79:5d:96:b5:d1:0c:d7: 8b:88:fa:e7:0a:bc:36:c5:d3:ef:66:fd:f1:7b:9a:7b:7f:f1: 47:dd:cd:2d:a8:68:b3:b7:0e:3c:03:fb:76:d3:8e:c8:0a:8b: 2e:65:04:74:46:d4:ef:8f:f4:35:a5:75:f7:44:ae:68:53:d6: 77:a6:0a:2a:57:ae:f5:cb:0d:ca:b3:c4:e8:7d:fe:0c:11:9e: 5c:df:62:3a:13:31:2a:3a:0b:a7:ff:0c:96:c8:65:6e:51:86: d2:ed:60:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGszwrGbshnj4AkreEoUbJJNvtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNjAzMjQxMTI1MjVaFw0yNjAzMjcxNTU0MjVaMDMxMTAvBgNV BAMTKEE2NTEzN0YzOTdENUQwM0Q1NjA5NkM5RUNDQTVDRThDOUMzQjBBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4ZRVEUcnG8XLfuG03rWqouQC4 Z45abKR6HRDQMBBMEFSJEmqCVFFUflxLE789X8P0v1rUw8wlfPWWolITxn1APY29 /B5ZagIPk2Bl8EiQknq4ZeLPIJTegDqPR7Mu3X4yL2JSTU8+/wpgWrlTAd0BmAA4 0hR+3zWxOQVAxITHOplfdzSAP4ydmooimCaLD8J8PsI/CawNfbNJN2abS02GNhI+ +euSTrvf62RUaKkeDusRr/eYvxWvJM1jf4EfnEKLof4gtUK8ZtXgHmQudtn6aoJg WniuB3Zv0/o9TOILTheNhlkZrluNEgQqZP3A06iXnuYPie259o0xQL48kogfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUplE385fV0D1WCWyezKXOjJw7CjkwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG0x42HYhjUeaNmvFxRVx/SKsgjaSQmBhbZ 9VSWMlTCApwcLhYd4Uoa9JuL5sG2jqOLcyRGMhIceLMXvh5TxBHCLfRJmCfGappk HFdQDbMQoKspw/SnCMWgsqNiH+lBge+IA3fKCFlsGo/pRxjLmLWH9SqbVvBneSM3 HNI4eTPiN+IuB6OaNzUfT+ID1ubYT3cBD2o18unWhKzheV2WtdEM14uI+ucKvDbF 0+9m/fF7mnt/8UfdzS2oaLO3DjwD+3bTjsgKiy5lBHRG1O+P9DWldfdErmhT1nem CipXrvXLDcqzxOh9/gwRnlzfYjoTMSo6C6f/DJbIZW5RhtLtYAw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:42:33 2026 by rpki-client