$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: pvgJg2Mrps7RRPPTvuGULBokDll8ToH901dBJqJm6Ec= Subject key identifier: 21:9F:2F:AD:9B:88:A5:15:22:0E:9F:9B:A1:4B:36:54:AE:E8:11:C1 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 78CB3A5A12F13DEDC01489AAB1C64A19ED9AB013 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04F2 Signing time: Tue 24 Mar 2026 07:51:43 +0000 Manifest this update: Tue 24 Mar 2026 07:46:43 +0000 Manifest next update: Fri 27 Mar 2026 10:15:43 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: 5sMi9FI4wlE4bZzNLp21vPaTswmJb4wqPIF2VD1Acww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cb:3a:5a:12:f1:3d:ed:c0:14:89:aa:b1:c6:4a:19:ed:9a:b0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Mar 24 07:46:43 2026 GMT Not After : Mar 27 10:15:43 2026 GMT Subject: CN=219F2FAD9B88A515220E9F9BA14B3654AEE811C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:d9:0a:55:a7:93:3b:ef:58:6b:fa:5b:43: 83:17:45:29:c6:ea:b5:c2:46:95:33:1c:8a:b0:01: d7:16:14:90:58:1f:52:00:2c:02:7d:af:fd:a2:fe: bd:ba:ea:82:08:c4:73:ce:0c:73:25:e8:52:de:2f: 56:f9:e9:a7:44:36:3b:d6:0f:f5:17:18:32:0e:e0: 56:2c:89:cf:68:44:35:98:e3:29:ff:29:50:b3:f0: 4a:fe:1e:f3:cc:7a:b7:ad:22:e1:b0:2f:cf:47:56: e3:ed:8b:59:64:02:84:54:e0:63:0e:ad:04:45:f0: ae:31:cd:70:27:d5:98:40:c7:01:2f:32:ab:c1:f6: 92:02:2d:78:94:d7:1c:80:22:42:d2:ca:7b:07:1b: b2:08:f2:a2:d9:6b:25:46:19:40:96:19:91:fb:38: a1:93:1a:e6:cb:dd:08:15:8f:90:e1:4e:1f:2e:f9: 96:22:74:8f:72:90:1d:af:0a:8a:27:57:6b:1a:9e: 81:40:7a:c3:23:d1:d7:a8:e1:87:13:31:c5:f4:8d: dc:83:4b:39:39:92:86:24:1b:ce:30:ff:6c:c3:28: cd:9b:2e:bf:4d:14:ff:7d:5d:92:96:5a:eb:b7:7a: 66:7e:f6:b4:53:ab:8c:0a:69:f7:39:4a:92:cf:42: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:2F:AD:9B:88:A5:15:22:0E:9F:9B:A1:4B:36:54:AE:E8:11:C1 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f3:04:8f:4e:dd:df:01:93:bb:2b:57:39:75:cd:57:26:85: f9:da:93:d7:b6:c0:23:46:24:37:2a:81:e4:fb:c5:53:21:f1: 22:51:36:a1:29:32:bd:ba:15:0d:6a:d0:9c:30:2d:c2:36:3a: 26:6b:1c:60:00:96:7e:44:f9:6a:fe:56:db:cd:b9:c7:aa:e4: 99:ac:2e:f5:12:81:a9:df:32:35:93:82:92:f3:20:7e:38:ce: 48:8a:9f:a0:56:16:64:01:35:c9:c4:9d:2c:2a:b8:75:99:a2: 61:83:19:cd:1d:07:5e:ee:aa:af:0f:18:05:39:06:48:6a:c1: bb:df:4a:d3:df:60:aa:5d:81:a2:c2:da:ce:7a:84:b3:42:17: 60:99:5b:0f:2b:5c:3d:fb:09:66:da:8e:02:dc:6e:84:ef:b4: d7:b2:72:85:26:1f:75:f1:18:19:0d:c3:f2:36:1c:fe:ba:5a: 2c:9a:33:6e:ba:80:1d:e2:0e:80:14:65:6a:e9:73:4b:4c:fd: ab:6b:10:a9:bb:32:ac:60:68:dd:b5:87:a2:f0:f6:df:8f:0a: f1:e9:24:34:fb:51:b4:08:b3:f1:b1:28:66:8c:55:c4:99:cb: 4e:cb:69:f5:ae:c8:b6:58:9c:c7:f9:f3:4a:e5:37:4e:d7:a7: ca:56:1c:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMs6WhLxPe3AFImqscZKGe2asBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNjAzMjQwNzQ2NDNaFw0yNjAzMjcxMDE1NDNaMDMxMTAvBgNV BAMTKDIxOUYyRkFEOUI4OEE1MTUyMjBFOUY5QkExNEIzNjU0QUVFODExQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5INkKVaeTO+9Ya/pbQ4MXRSnG 6rXCRpUzHIqwAdcWFJBYH1IALAJ9r/2i/r266oIIxHPODHMl6FLeL1b56adENjvW D/UXGDIO4FYsic9oRDWY4yn/KVCz8Er+HvPMeretIuGwL89HVuPti1lkAoRU4GMO rQRF8K4xzXAn1ZhAxwEvMqvB9pICLXiU1xyAIkLSynsHG7II8qLZayVGGUCWGZH7 OKGTGubL3QgVj5DhTh8u+ZYidI9ykB2vCoonV2sanoFAesMj0deo4YcTMcX0jdyD Szk5koYkG84w/2zDKM2bLr9NFP99XZKWWuu3emZ+9rRTq4wKafc5SpLPQgInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZ8vrZuIpRUiDp+boUs2VK7oEcEwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzzBI9O3d8Bk7srVzl1zVcmhfnak9e2wCNG JDcqgeT7xVMh8SJRNqEpMr26FQ1q0JwwLcI2OiZrHGAAln5E+Wr+VtvNuceq5Jms LvUSganfMjWTgpLzIH44zkiKn6BWFmQBNcnEnSwquHWZomGDGc0dB17uqq8PGAU5 BkhqwbvfStPfYKpdgaLC2s56hLNCF2CZWw8rXD37CWbajgLcboTvtNeycoUmH3Xx GBkNw/I2HP66WiyaM266gB3iDoAUZWrpc0tM/atrEKm7MqxgaN21h6Lw9t+PCvHp JDT7UbQIs/GxKGaMVcSZy07LafWuyLZYnMf580rlN07Xp8pWHIY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:53:50 2026 by rpki-client