$ rpki-client -vvf repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft File: 83C7CB5B51B0D2341C906429DBCB81393F473E08.mft (raw, json) Hash identifier: wNbF3LHxcZyqkj5aHhsJJqa/f/A15JEhT87zvZ7YyGE= Subject key identifier: 87:A1:B5:30:EB:B2:F1:DF:CC:AD:83:AC:D7:C6:74:8E:56:C9:F6:48 Authority key identifier: 83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 Certificate issuer: /CN=83C7CB5B51B0D2341C906429DBCB81393F473E08 Certificate serial: 2B9E11B74811503ECB092681B534134BDE075B4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft Manifest number: 0175 Signing time: Thu 26 Mar 2026 10:52:36 +0000 Manifest this update: Thu 26 Mar 2026 10:47:36 +0000 Manifest next update: Sun 29 Mar 2026 20:24:36 +0000 Files and hashes: 1: 83C7CB5B51B0D2341C906429DBCB81393F473E08.crl (hash: LHaLwZKgx34SrHJoR3g3drWEAORCxhzYMxQsOuCVHLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.crl rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9e:11:b7:48:11:50:3e:cb:09:26:81:b5:34:13:4b:de:07:5b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83C7CB5B51B0D2341C906429DBCB81393F473E08 Validity Not Before: Mar 26 10:47:36 2026 GMT Not After : Mar 29 20:24:36 2026 GMT Subject: CN=87A1B530EBB2F1DFCCAD83ACD7C6748E56C9F648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:49:3b:a2:2c:5a:8d:de:f8:ce:70:58:d1: 07:f7:2e:af:dc:c5:62:d9:43:57:07:fb:7c:c5:aa: c3:2c:35:61:8a:a2:2f:76:5f:14:4c:fb:47:46:85: 92:f8:1e:59:08:6e:e0:25:a3:77:a1:4c:13:81:74: 4c:bf:c5:b4:ac:ca:ef:a2:7a:28:10:18:5d:28:bd: de:57:10:98:62:dd:52:3e:b0:24:d0:74:43:88:9b: c9:ed:64:a1:a3:d4:73:77:44:9f:7f:21:9c:6f:17: 2a:28:15:53:05:a5:37:46:2d:e1:49:0b:0e:17:ee: 1e:d6:f3:45:89:2e:89:d0:26:21:ed:86:20:a2:22: 3e:e3:d1:9a:e8:2f:f1:06:f8:3e:99:df:17:7a:3e: 33:9b:d7:60:9f:8c:75:9b:bb:f9:a4:b0:0c:b9:74: 7d:c0:de:99:92:16:5e:ff:42:5b:f5:7b:2a:32:27: 0b:0a:52:b5:96:b9:35:10:8c:37:5f:cb:93:36:14: 33:8e:ae:4c:90:04:1e:46:ef:25:ac:86:ce:65:1f: 71:45:d5:be:d0:cb:b7:4d:bc:9b:a3:9d:f1:66:ff: b6:9f:d3:89:3e:e8:cf:29:b6:5f:66:09:8e:d9:14: 96:19:41:1c:57:ba:70:f0:1d:88:7f:ee:59:9e:09: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A1:B5:30:EB:B2:F1:DF:CC:AD:83:AC:D7:C6:74:8E:56:C9:F6:48 X509v3 Authority Key Identifier: keyid:83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:4b:38:bd:71:61:1f:c6:21:e6:a9:f3:aa:48:b2:8f:57: 68:40:93:5c:94:92:63:ee:04:b0:b7:38:50:39:64:d7:24:89: ac:4a:46:8a:58:ce:af:52:3d:e9:41:0b:51:22:2f:28:e5:b7: 66:3d:24:93:a3:25:bb:2d:84:f1:af:9f:36:c5:61:bf:92:2c: 46:a8:90:d8:79:69:5e:07:ef:fa:d8:a1:67:1d:21:42:d9:b5: 3a:30:d6:a1:75:4e:d3:07:aa:a9:71:bc:52:f0:30:62:61:ef: 1a:ec:e9:77:51:79:f7:af:f0:0b:4c:7d:bf:de:1f:08:aa:4a: 21:91:46:ec:bd:48:7f:8e:90:c0:2f:58:ba:c1:a0:81:a6:62: eb:d7:42:65:f4:19:35:ec:74:c9:6c:e3:c7:e7:6d:c2:9d:4d: a0:57:e5:f8:e8:48:5d:35:27:39:85:58:44:82:ea:fd:15:9b: 8d:92:b5:79:9b:9d:7b:e1:d6:d5:25:dd:eb:ad:1b:1b:41:c6: 57:b6:34:db:53:cf:b7:a8:95:b5:df:85:10:bc:b3:c3:ef:6b: 6f:1f:37:7e:4c:be:9f:72:4e:2e:85:6c:3b:8c:54:af:6d:b1: 71:d7:2d:9e:4b:03:b7:17:a8:ce:4d:00:17:93:c0:6c:dd:2c: 9a:48:b3:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK54Rt0gRUD7LCSaBtTQTS94HW0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNDN0NCNUI1MUIwRDIzNDFDOTA2NDI5REJDQjgxMzkz RjQ3M0UwODAeFw0yNjAzMjYxMDQ3MzZaFw0yNjAzMjkyMDI0MzZaMDMxMTAvBgNV BAMTKDg3QTFCNTMwRUJCMkYxREZDQ0FEODNBQ0Q3QzY3NDhFNTZDOUY2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDToUk7oixajd74znBY0Qf3Lq/c xWLZQ1cH+3zFqsMsNWGKoi92XxRM+0dGhZL4HlkIbuAlo3ehTBOBdEy/xbSsyu+i eigQGF0ovd5XEJhi3VI+sCTQdEOIm8ntZKGj1HN3RJ9/IZxvFyooFVMFpTdGLeFJ Cw4X7h7W80WJLonQJiHthiCiIj7j0ZroL/EG+D6Z3xd6PjOb12CfjHWbu/mksAy5 dH3A3pmSFl7/Qlv1eyoyJwsKUrWWuTUQjDdfy5M2FDOOrkyQBB5G7yWshs5lH3FF 1b7Qy7dNvJujnfFm/7af04k+6M8ptl9mCY7ZFJYZQRxXunDwHYh/7lmeCX2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6G1MOuy8d/MrYOs18Z0jlbJ9kgwHwYDVR0j BBgwFoAUg8fLW1Gw0jQckGQp28uBOT9HPggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQyNjEyNC0wNTljLTQzYWQtYTE1MC04MjJiOWQ1ZmIzZjMvMC84M0M3Q0I1QjUx QjBEMjM0MUM5MDY0MjlEQkNCODEzOTNGNDczRTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNDN0NCNUI1MUIwRDIzNDFDOTA2NDI5REJDQjgxMzkzRjQ3 M0UwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MjYxMjQtMDU5Yy00M2FkLWEx NTAtODIyYjlkNWZiM2YzLzAvODNDN0NCNUI1MUIwRDIzNDFDOTA2NDI5REJDQjgx MzkzRjQ3M0UwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa3Szi9cWEfxiHmqfOqSLKPV2hAk1yUkmPu BLC3OFA5ZNckiaxKRopYzq9SPelBC1EiLyjlt2Y9JJOjJbsthPGvnzbFYb+SLEao kNh5aV4H7/rYoWcdIULZtTow1qF1TtMHqqlxvFLwMGJh7xrs6XdRefev8AtMfb/e HwiqSiGRRuy9SH+OkMAvWLrBoIGmYuvXQmX0GTXsdMls48fnbcKdTaBX5fjoSF01 JzmFWESC6v0Vm42StXmbnXvh1tUl3eutGxtBxle2NNtTz7eolbXfhRC8s8Pva28f N35Mvp9yTi6FbDuMVK9tsXHXLZ5LA7cXqM5NABeTwGzdLJpIs3o= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:51 2026 by rpki-client