$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: jOrDarWdhCRum43ezwQXM19s6u2FdYHhRR0onMIiZ+E= Subject key identifier: 4B:BF:17:EC:9C:5A:B6:5E:D5:20:CC:2C:38:D0:BA:81:F1:F5:DB:FA Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 0C72AB8261C2DF733115863E1F689BB52ADCC63A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02E7 Signing time: Wed 25 Mar 2026 13:00:03 +0000 Manifest this update: Wed 25 Mar 2026 12:55:03 +0000 Manifest next update: Sat 28 Mar 2026 16:49:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: HvkdFbC72BlUmQsGsmet/gCvuopkxGj3s7UDxWP02UI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:72:ab:82:61:c2:df:73:31:15:86:3e:1f:68:9b:b5:2a:dc:c6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Mar 25 12:55:03 2026 GMT Not After : Mar 28 16:49:03 2026 GMT Subject: CN=4BBF17EC9C5AB65ED520CC2C38D0BA81F1F5DBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:cd:95:23:a7:7e:f0:fe:23:85:51:ec:89: ed:d7:2b:f3:53:c3:cf:0f:89:fe:53:9c:f3:c0:fa: ae:99:ef:84:fc:b1:3e:9b:c4:fa:0c:b1:e5:f5:1a: 51:ad:e2:89:a6:00:95:42:c9:3a:af:6d:51:c0:11: d9:a4:1b:c2:8a:6a:c5:00:80:ef:ad:b3:1d:58:5f: 50:10:b5:80:8b:76:0e:d4:6b:3b:83:b0:e4:b2:09: a1:73:d2:fc:3a:a9:9f:b0:d7:69:8d:f5:c7:6f:78: 27:25:27:f6:1a:f9:86:97:f3:35:88:6e:ad:09:91: 00:59:0f:15:71:c5:f1:cb:22:c4:89:d6:de:9d:83: 19:a0:79:be:48:db:64:0a:2a:15:98:11:6a:3c:73: 7a:17:58:0a:fe:47:3c:00:c0:d2:08:b8:ed:26:89: ba:fb:9f:7c:4c:0c:c1:18:cb:3b:df:d5:dd:58:21: 62:3b:8e:9d:84:b5:6d:36:59:96:b5:31:c3:e5:ce: a4:d0:56:94:89:27:1c:12:38:84:76:e0:92:f7:e6: f3:29:06:9c:8b:e0:78:65:ae:b0:38:2d:55:c8:86: 0f:03:0a:7b:ee:39:fd:8d:60:0f:1b:16:9e:44:f7: 8b:56:f7:34:03:87:6b:14:4d:66:c3:5f:fd:fd:6e: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:17:EC:9C:5A:B6:5E:D5:20:CC:2C:38:D0:BA:81:F1:F5:DB:FA X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6b:21:84:8f:52:ee:32:f8:8c:91:0a:9d:18:ec:01:42:d4: 56:0e:9d:05:08:76:9c:84:af:f5:ee:c4:b6:b1:58:c2:10:29: 38:c4:b0:b6:d2:b8:28:20:2f:12:be:9a:eb:0a:6a:ff:fd:79: 25:f3:62:3e:90:d8:04:69:c4:54:00:2b:3f:62:f2:b5:44:8e: 74:92:46:ce:4b:8a:c5:6d:9a:f1:e5:7d:62:ef:85:74:fa:12: 92:9f:f1:3e:de:58:9e:4a:dd:64:15:8e:b3:d5:cb:6f:92:08: 03:4c:1f:5e:fd:04:8e:fa:63:7f:94:32:08:93:ba:06:b8:25: 81:4e:99:ea:bb:dd:30:f7:99:4f:85:15:17:cd:70:ea:6d:8b: ec:cc:1a:f7:4e:71:0a:99:64:ab:8e:aa:06:1f:84:9d:52:26: ec:86:3f:d2:b6:46:7a:42:c7:83:72:1f:33:b5:90:88:14:48: 6d:f3:f9:91:58:8f:5e:2f:5c:0d:b0:c4:10:4c:12:05:9f:58: f1:17:8c:b7:b8:a2:85:f5:be:a5:aa:1b:1c:24:25:de:ea:11: 96:a9:72:dd:a0:a4:5f:cb:dc:15:14:58:f5:7b:a0:f3:b7:97: d6:5a:0d:e9:7e:f9:25:04:ab:18:2f:fb:33:2e:bf:9f:d4:cd: ff:43:49:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHKrgmHC33MxFYY+H2ibtSrcxjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNjAzMjUxMjU1MDNaFw0yNjAzMjgxNjQ5MDNaMDMxMTAvBgNV BAMTKDRCQkYxN0VDOUM1QUI2NUVENTIwQ0MyQzM4RDBCQTgxRjFGNURCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtec2VI6d+8P4jhVHsie3XK/NT w88Pif5TnPPA+q6Z74T8sT6bxPoMseX1GlGt4ommAJVCyTqvbVHAEdmkG8KKasUA gO+tsx1YX1AQtYCLdg7UazuDsOSyCaFz0vw6qZ+w12mN9cdveCclJ/Ya+YaX8zWI bq0JkQBZDxVxxfHLIsSJ1t6dgxmgeb5I22QKKhWYEWo8c3oXWAr+RzwAwNIIuO0m ibr7n3xMDMEYyzvf1d1YIWI7jp2EtW02WZa1McPlzqTQVpSJJxwSOIR24JL35vMp BpyL4HhlrrA4LVXIhg8DCnvuOf2NYA8bFp5E94tW9zQDh2sUTWbDX/39bsDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS78X7Jxatl7VIMwsONC6gfH12/owHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVrIYSPUu4y+IyRCp0Y7AFC1FYOnQUIdpyE r/XuxLaxWMIQKTjEsLbSuCggLxK+musKav/9eSXzYj6Q2ARpxFQAKz9i8rVEjnSS Rs5LisVtmvHlfWLvhXT6EpKf8T7eWJ5K3WQVjrPVy2+SCANMH179BI76Y3+UMgiT uga4JYFOmeq73TD3mU+FFRfNcOpti+zMGvdOcQqZZKuOqgYfhJ1SJuyGP9K2RnpC x4NyHzO1kIgUSG3z+ZFYj14vXA2wxBBMEgWfWPEXjLe4ooX1vqWqGxwkJd7qEZap ct2gpF/L3BUUWPV7oPO3l9ZaDel++SUEqxgv+zMuv5/Uzf9DSWw= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:20 2026 by rpki-client