$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: XNqx+ay2i91SyNuKDpUt1uA1OebvfewjHzDRBpUqPoI= Subject key identifier: 5A:D4:12:19:13:26:F2:F4:CB:9C:22:2F:EF:40:B7:08:66:87:FC:7A Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 334C865A51F3E43B48ACF82372910311A2C5A1D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 0359 Signing time: Mon 02 Mar 2026 05:00:42 +0000 Manifest this update: Mon 02 Mar 2026 04:55:42 +0000 Manifest next update: Thu 05 Mar 2026 14:54:42 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: N57s9+HGuac7HoP8A/On1mDYP1bTzgEdSx8vsSDILIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4c:86:5a:51:f3:e4:3b:48:ac:f8:23:72:91:03:11:a2:c5:a1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Mar 2 04:55:42 2026 GMT Not After : Mar 5 14:54:42 2026 GMT Subject: CN=5AD412191326F2F4CB9C222FEF40B7086687FC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:12:cf:2e:3b:3f:c2:cb:6b:5c:8c:d9:60: fc:c7:7d:d7:46:a9:d2:a6:ec:ec:b5:ec:61:2a:94: 04:a3:21:b2:cb:03:78:17:c8:2e:c0:47:7c:f8:e8: 27:d7:64:bc:40:3f:fe:05:73:79:f5:03:eb:e5:66: b0:61:aa:6b:37:30:9a:bb:78:25:11:08:88:50:b1: 9d:42:95:3c:ee:39:aa:c0:4f:b8:26:73:a6:5b:e1: 8d:72:0d:be:44:4c:8d:b5:ed:21:a2:9a:1f:0e:e8: b8:29:d9:dd:6e:3f:c5:39:9a:e6:12:ce:b3:a0:89: 67:5a:3f:f1:9a:c4:22:26:ac:b2:8a:09:85:1f:1f: 39:be:87:32:b7:dc:b3:8a:73:07:55:0b:27:15:48: 10:30:a8:be:da:7b:c3:a3:ad:57:c2:3d:de:b9:dd: da:27:2c:c0:6e:61:10:25:91:4f:8d:6b:1d:c1:1d: 99:03:7e:a4:1f:29:a9:fb:16:a0:e7:e7:9b:f2:78: 5c:ff:db:71:eb:d2:86:4c:25:34:b9:94:5f:92:77: 0a:44:0b:9a:02:a9:3e:e0:2e:11:75:76:e6:48:56: a9:59:83:91:1d:e3:dc:b9:ef:32:8b:ab:6e:c9:0c: 08:ec:cd:74:e3:95:b0:c6:21:ea:0b:51:3a:85:8e: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D4:12:19:13:26:F2:F4:CB:9C:22:2F:EF:40:B7:08:66:87:FC:7A X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a9:9f:76:09:ca:4b:fa:2a:2b:4a:a8:a4:f0:de:db:69:f3: 2a:c7:23:ef:5c:28:c4:43:db:10:25:b8:2f:a1:82:be:ce:38: 65:20:60:17:3e:b1:b3:8f:9b:15:e4:bc:07:13:5b:3a:6b:bb: 90:d8:7f:16:12:3a:14:a6:1f:c7:12:b7:b1:14:b6:fa:68:35: b7:50:72:42:57:25:60:0a:39:80:cb:e5:d8:8e:f0:e7:31:80: cf:cf:c2:df:eb:13:02:6e:3f:99:77:f1:9c:c8:8f:65:86:72: 97:be:b0:8a:1b:79:df:50:db:9e:7e:dc:8c:1e:26:a6:0e:2d: 41:41:2f:f7:4b:59:e4:ef:e8:9e:9f:65:05:e9:b7:9d:32:93: 10:98:b8:60:c6:45:c2:86:1e:b2:63:c7:8c:91:13:ad:7e:9f: a3:3b:61:f6:17:15:44:d6:42:c8:fd:25:17:58:db:4e:08:69: f3:31:1d:48:39:56:f9:1d:47:ff:29:86:08:be:dc:e3:9b:18: 12:23:d1:55:37:19:d3:47:a2:14:22:cb:16:5a:58:22:3a:84: c5:54:af:1c:7f:91:ed:98:7b:94:b6:d1:de:52:11:1c:5e:02: 87:42:92:66:36:58:ca:ce:42:d7:cc:72:a3:44:f0:e9:28:a8: 76:dd:c7:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0yGWlHz5DtIrPgjcpEDEaLFodAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNjAzMDIwNDU1NDJaFw0yNjAzMDUxNDU0NDJaMDMxMTAvBgNV BAMTKDVBRDQxMjE5MTMyNkYyRjRDQjlDMjIyRkVGNDBCNzA4NjY4N0ZDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsxLPLjs/wstrXIzZYPzHfddG qdKm7Oy17GEqlASjIbLLA3gXyC7AR3z46CfXZLxAP/4Fc3n1A+vlZrBhqms3MJq7 eCURCIhQsZ1ClTzuOarAT7gmc6Zb4Y1yDb5ETI217SGimh8O6Lgp2d1uP8U5muYS zrOgiWdaP/GaxCImrLKKCYUfHzm+hzK33LOKcwdVCycVSBAwqL7ae8OjrVfCPd65 3donLMBuYRAlkU+Nax3BHZkDfqQfKan7FqDn55vyeFz/23Hr0oZMJTS5lF+SdwpE C5oCqT7gLhF1duZIVqlZg5Ed49y57zKLq27JDAjszXTjlbDGIeoLUTqFjokXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWtQSGRMm8vTLnCIv70C3CGaH/HowHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+pn3YJykv6KitKqKTw3ttp8yrHI+9cKMRD 2xAluC+hgr7OOGUgYBc+sbOPmxXkvAcTWzpru5DYfxYSOhSmH8cSt7EUtvpoNbdQ ckJXJWAKOYDL5diO8OcxgM/Pwt/rEwJuP5l38ZzIj2WGcpe+sIobed9Q255+3Iwe JqYOLUFBL/dLWeTv6J6fZQXpt50ykxCYuGDGRcKGHrJjx4yRE61+n6M7YfYXFUTW Qsj9JRdY204IafMxHUg5VvkdR/8phgi+3OObGBIj0VU3GdNHohQiyxZaWCI6hMVU rxx/ke2Ye5S20d5SERxeAodCkmY2WMrOQtfMcqNE8OkoqHbdx0E= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:54 2026 by rpki-client