$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: dzn4zEs2HXPR7APQL2eqF7gBJWe3Ym1AJPL2GHXcAYI= Subject key identifier: F2:E5:CC:6E:1A:0D:24:B8:47:8D:C3:44:64:DA:7F:C3:69:95:46:26 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 1DE5FFF82696844DB797E29542AD32C7FD70C27D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 84 Signing time: Wed 25 Mar 2026 07:21:23 +0000 Manifest this update: Wed 25 Mar 2026 07:16:23 +0000 Manifest next update: Sat 28 Mar 2026 14:31:23 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: VoHEwMkrzMWuQESiG4PvDJ7Y8/fYj0FtJRjdBpMSP70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e5:ff:f8:26:96:84:4d:b7:97:e2:95:42:ad:32:c7:fd:70:c2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Mar 25 07:16:23 2026 GMT Not After : Mar 28 14:31:23 2026 GMT Subject: CN=F2E5CC6E1A0D24B8478DC34464DA7FC369954626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:ca:e5:88:e0:79:8f:be:7f:50:24:c1:16: ae:23:b4:1b:74:d7:ec:c2:8b:c7:d3:18:c7:74:18: 69:f2:03:24:bd:f3:06:bf:cc:4b:74:9a:d5:e9:83: a5:c5:58:d9:03:82:b0:24:79:64:af:49:29:46:94: ce:f6:2c:31:26:60:b6:08:1d:14:47:17:35:ea:f1: f5:4d:d8:e6:87:24:98:ee:26:4a:0c:24:73:ab:80: cd:58:46:7b:30:a9:45:50:e9:ae:64:8b:10:a2:e2: 4e:11:29:97:b3:9c:f6:90:ab:73:36:1f:a1:6b:03: 38:c7:0f:83:cf:0d:ad:8f:0e:28:ec:17:80:7a:87: b0:e2:ce:50:96:5a:6b:06:26:a8:27:58:c5:8b:a4: fc:3b:83:35:6b:fe:7b:ee:c7:20:f0:db:72:2c:af: c3:e5:2c:cb:d0:42:b5:5a:2d:95:29:7b:63:e7:49: 24:bd:25:eb:13:43:9c:00:1f:dc:21:d9:80:6c:74: 73:a4:02:f5:37:6d:38:e5:bb:8e:d0:7e:18:17:f3: 7f:64:db:69:3b:25:f4:62:2a:95:07:bc:93:38:bc: 1c:3e:83:3d:6d:fe:9d:96:10:69:3f:8e:f9:c0:a8: 62:9f:42:74:98:0f:08:b3:8a:af:4f:1a:81:36:92: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E5:CC:6E:1A:0D:24:B8:47:8D:C3:44:64:DA:7F:C3:69:95:46:26 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:3a:01:20:f6:c3:f9:a2:05:af:cd:d2:74:2f:d7:35:8a: 79:c7:ab:32:38:f0:05:71:18:59:24:c4:78:44:3f:1c:d0:07: 45:23:a3:cf:cf:51:8f:ec:6b:cc:21:d9:00:99:a5:62:d0:99: 65:b4:9e:0e:14:64:f1:bb:cf:98:1d:4b:f3:c0:14:ed:91:1c: e4:61:ca:0d:38:f8:21:22:42:1e:6d:69:2f:a7:a4:3f:39:09: 62:c8:96:ec:0f:ca:6e:0d:b7:2d:5c:b7:84:5d:51:bc:09:41: ca:cc:60:e3:b0:14:fc:d9:4f:73:ba:bf:cf:b4:d3:cd:d2:de: de:7c:1d:e4:92:ef:c6:b5:11:ef:56:84:8a:1b:f9:d1:ef:38: 08:5b:e9:b7:5c:64:9c:88:0f:8a:73:2c:32:49:d5:bc:0e:ba: 3d:a6:41:6e:31:65:1e:c7:6f:d4:c8:34:85:ab:6b:a5:bb:2e: 6b:83:6f:45:83:0c:bd:f1:1b:7b:7b:c3:d6:16:e5:dc:c1:c9: fb:cf:31:24:90:77:18:8a:20:1d:c4:d1:e6:8d:80:6f:15:40: 07:72:8c:11:71:1c:7f:68:f7:b2:ba:13:f9:3c:88:2a:4d:02: 91:80:c7:11:6a:5b:4a:97:01:16:10:62:2f:5a:3c:42:30:f4: 8c:b3:13:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeX/+CaWhE23l+KVQq0yx/1wwn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNjAzMjUwNzE2MjNaFw0yNjAzMjgxNDMxMjNaMDMxMTAvBgNV BAMTKEYyRTVDQzZFMUEwRDI0Qjg0NzhEQzM0NDY0REE3RkMzNjk5NTQ2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYl8rliOB5j75/UCTBFq4jtBt0 1+zCi8fTGMd0GGnyAyS98wa/zEt0mtXpg6XFWNkDgrAkeWSvSSlGlM72LDEmYLYI HRRHFzXq8fVN2OaHJJjuJkoMJHOrgM1YRnswqUVQ6a5kixCi4k4RKZeznPaQq3M2 H6FrAzjHD4PPDa2PDijsF4B6h7DizlCWWmsGJqgnWMWLpPw7gzVr/nvuxyDw23Is r8PlLMvQQrVaLZUpe2PnSSS9JesTQ5wAH9wh2YBsdHOkAvU3bTjlu47QfhgX839k 22k7JfRiKpUHvJM4vBw+gz1t/p2WEGk/jvnAqGKfQnSYDwiziq9PGoE2ktJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8uXMbhoNJLhHjcNEZNp/w2mVRiYwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/sOgEg9sP5ogWvzdJ0L9c1innHqzI48AVx GFkkxHhEPxzQB0Ujo8/PUY/sa8wh2QCZpWLQmWW0ng4UZPG7z5gdS/PAFO2RHORh yg04+CEiQh5taS+npD85CWLIluwPym4Nty1ct4RdUbwJQcrMYOOwFPzZT3O6v8+0 083S3t58HeSS78a1Ee9WhIob+dHvOAhb6bdcZJyID4pzLDJJ1bwOuj2mQW4xZR7H b9TINIWra6W7LmuDb0WDDL3xG3t7w9YW5dzByfvPMSSQdxiKIB3E0eaNgG8VQAdy jBFxHH9o97K6E/k8iCpNApGAxxFqW0qXARYQYi9aPEIw9IyzE4Y= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:48 2026 by rpki-client