$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: h/i1i2CJ8JLqf+OpKc/guYvRJCkhA9rabkv1RdHdOik= Subject key identifier: 8D:BF:B4:B5:5E:59:3A:5D:7B:C4:75:BF:47:92:8D:D4:C1:1E:74:B2 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 7EA9CC2E8092150C101A0031AAA368845804639D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0270 Signing time: Tue 24 Mar 2026 14:41:58 +0000 Manifest this update: Tue 24 Mar 2026 14:36:58 +0000 Manifest next update: Sat 28 Mar 2026 00:26:58 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: bwwafcnog+rbgL8hHg0ScKEQDahebliibwYOL0TY8uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a9:cc:2e:80:92:15:0c:10:1a:00:31:aa:a3:68:84:58:04:63:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Mar 24 14:36:58 2026 GMT Not After : Mar 28 00:26:58 2026 GMT Subject: CN=8DBFB4B55E593A5D7BC475BF47928DD4C11E74B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:8d:f0:65:cb:2d:90:01:33:8e:7d:33:84: 59:1d:41:2e:92:c3:45:56:43:42:4f:6f:6f:de:b6: f9:03:4d:9c:f4:3a:22:be:91:09:6e:fb:72:9a:e1: 48:e8:9c:76:86:30:10:c5:2e:a7:95:80:90:bb:8c: 59:bf:d7:d3:0b:9d:4c:1e:f1:b8:9a:e8:25:e5:0e: 2d:c9:4a:f5:95:0c:c6:ec:11:4f:ea:b0:ed:41:b3: ae:e4:b1:be:f6:0b:e5:af:5e:1f:a4:36:08:7e:3d: 48:e4:f9:60:95:bb:6b:af:62:f1:a3:4d:f6:59:b3: 66:c1:c8:9b:14:f1:08:05:48:c0:05:93:65:a5:75: 6c:ef:5a:4a:33:37:53:f8:9c:56:ad:65:5b:6e:03: b1:18:87:62:90:11:02:72:e4:fe:12:08:d8:8f:36: 91:ee:7f:96:1b:d4:c7:88:b3:90:91:13:20:df:f5: 93:bd:12:8c:6b:d1:f2:0d:3c:08:10:a9:65:81:98: 13:b6:fd:3f:cf:6b:16:da:65:87:94:ac:52:96:79: c4:06:c5:53:fe:cc:5b:4c:89:24:3d:38:b4:70:e8: 60:48:20:ab:08:56:53:6a:92:be:4e:40:54:06:a9: 0f:03:7f:58:c1:8c:5f:d2:8a:cb:86:a8:77:9e:12: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:B4:B5:5E:59:3A:5D:7B:C4:75:BF:47:92:8D:D4:C1:1E:74:B2 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:dc:37:cc:88:74:8b:b1:71:59:2e:e1:f9:7e:22:6e:f6:e4: b5:ad:a0:6a:4d:0b:10:c2:5c:96:de:04:a6:14:2b:6b:d8:9e: 8c:cf:7f:7f:0f:cc:35:18:2d:92:20:5c:88:83:ee:d3:8b:43: df:1e:fb:ac:86:3f:c0:82:ef:2c:cc:7e:45:7e:70:4c:58:b5: 4b:63:a9:ea:75:60:55:f1:4e:49:f3:ad:12:49:cf:95:d2:f8: 40:e0:5e:cd:25:4d:ce:99:a7:7c:8f:9e:1c:4b:ad:c1:32:e4: 7f:cb:15:68:84:23:d5:a6:73:ed:14:af:07:31:83:e3:a0:ab: c9:d9:90:66:43:34:a1:b8:4e:d7:37:06:f6:b8:72:7c:bb:1a: 86:cb:69:b3:11:36:c9:46:3a:2d:c5:62:b1:8e:22:6a:e9:9e: e7:e7:2c:e4:f8:a4:9f:9f:ca:b3:31:1f:2f:92:f7:86:6a:40: ef:de:bb:e2:ee:71:5e:46:18:09:34:cc:56:da:85:10:7e:4c: fa:df:16:42:a9:4b:fe:a3:a0:7e:94:0c:f6:bc:05:a5:67:b3: 29:dd:a4:b8:ed:7c:19:0c:ae:8f:73:17:8b:dc:fc:85:bf:67: c5:23:ee:a0:47:a5:1f:b0:e9:5f:ec:9e:7a:14:dc:fe:19:d0: 41:f5:3c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqnMLoCSFQwQGgAxqqNohFgEY50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNjAzMjQxNDM2NThaFw0yNjAzMjgwMDI2NThaMDMxMTAvBgNV BAMTKDhEQkZCNEI1NUU1OTNBNUQ3QkM0NzVCRjQ3OTI4REQ0QzExRTc0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQo3wZcstkAEzjn0zhFkdQS6S w0VWQ0JPb2/etvkDTZz0OiK+kQlu+3Ka4UjonHaGMBDFLqeVgJC7jFm/19MLnUwe 8bia6CXlDi3JSvWVDMbsEU/qsO1Bs67ksb72C+WvXh+kNgh+PUjk+WCVu2uvYvGj TfZZs2bByJsU8QgFSMAFk2WldWzvWkozN1P4nFatZVtuA7EYh2KQEQJy5P4SCNiP NpHuf5Yb1MeIs5CREyDf9ZO9Eoxr0fINPAgQqWWBmBO2/T/PaxbaZYeUrFKWecQG xVP+zFtMiSQ9OLRw6GBIIKsIVlNqkr5OQFQGqQ8Df1jBjF/SisuGqHeeEtbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjb+0tV5ZOl17xHW/R5KN1MEedLIwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHcN8yIdIuxcVku4fl+Im725LWtoGpNCxDC XJbeBKYUK2vYnozPf38PzDUYLZIgXIiD7tOLQ98e+6yGP8CC7yzMfkV+cExYtUtj qep1YFXxTknzrRJJz5XS+EDgXs0lTc6Zp3yPnhxLrcEy5H/LFWiEI9Wmc+0Urwcx g+Ogq8nZkGZDNKG4Ttc3Bva4cny7GobLabMRNslGOi3FYrGOImrpnufnLOT4pJ+f yrMxHy+S94ZqQO/eu+LucV5GGAk0zFbahRB+TPrfFkKpS/6joH6UDPa8BaVnsynd pLjtfBkMro9zF4vc/IW/Z8Uj7qBHpR+w6V/snnoU3P4Z0EH1PDo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:10:23 2026 by rpki-client