$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: 8kTCuCUPJVKhbXIGHQZ4DTVTjBhVN2DCFQJbs0JJras= Subject key identifier: 25:F3:86:AD:34:08:80:D4:F9:09:7B:A3:07:61:42:CD:BA:62:67:E8 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 20BEBA49359FCB4CA394826D5439F1270BA24F1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 0125 Signing time: Sun 01 Mar 2026 12:41:00 +0000 Manifest this update: Sun 01 Mar 2026 12:36:00 +0000 Manifest next update: Thu 05 Mar 2026 00:06:00 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: DRb6CoYbX2Ka1COF92UkoqkcmNFDMgMCkuKyHVi/d24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:be:ba:49:35:9f:cb:4c:a3:94:82:6d:54:39:f1:27:0b:a2:4f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Mar 1 12:36:00 2026 GMT Not After : Mar 5 00:06:00 2026 GMT Subject: CN=25F386AD340880D4F9097BA3076142CDBA6267E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:bf:5d:15:39:6b:4d:b9:f6:17:ed:a9:aa: a5:13:66:94:44:c5:47:43:fb:ea:c3:0a:9f:a4:89: 32:2d:df:64:ac:59:56:3d:3e:c2:a0:b0:30:be:b4: 50:8c:d6:20:f5:6c:5b:41:f9:62:b4:fd:22:3b:d1: 7e:01:ca:3d:a4:81:df:fe:c7:9a:ce:12:73:b2:83: 64:83:b0:c1:f8:a4:83:28:33:5e:ce:6a:33:0c:a3: 96:c4:d7:24:e7:45:f0:c4:18:06:f4:32:b1:32:01: 2a:df:78:2b:ad:6e:e8:93:79:01:77:e1:5d:de:e5: 92:f3:dc:d5:06:e3:6f:37:7d:99:b4:69:a0:a5:6f: 2b:bc:78:4c:8a:f3:f4:33:05:d9:2a:8d:19:da:3f: c4:cc:a3:8e:47:35:79:91:38:ef:4d:03:34:b9:03: b6:f4:ed:56:84:5d:04:37:4c:2e:48:e6:d1:06:23: 41:a1:61:d2:1a:31:aa:b7:02:9a:f9:3a:3c:4f:97: 9e:b2:66:cf:7d:c7:c4:bd:e2:46:8c:fa:60:8c:04: 41:ad:f8:be:ed:66:c7:c5:e2:3a:b5:33:db:9f:67: 35:99:7e:4e:70:c7:ac:dd:dc:f5:9b:68:b5:78:f6: 90:6f:b6:2b:43:b5:c8:3f:43:33:08:7a:f8:b1:84: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F3:86:AD:34:08:80:D4:F9:09:7B:A3:07:61:42:CD:BA:62:67:E8 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:90:02:9b:d6:e5:79:e2:dd:ca:b9:a3:24:89:0f:36:e8:68: 25:0a:69:bb:f3:88:b0:ca:5e:9d:cb:f7:bc:f9:bf:5e:ee:17: 6c:74:8c:da:8c:35:57:11:bf:0b:10:81:0d:1e:ae:39:62:ac: 65:02:48:60:10:6c:38:65:52:c3:e9:f4:84:c9:0a:00:2e:db: a2:5b:2b:12:7d:21:79:f9:f8:fe:1f:4d:28:ff:ba:c4:b2:5a: b5:74:ab:92:b5:29:86:a4:a8:96:e4:9e:ad:e3:2e:ed:43:6e: bf:10:26:c6:d8:9e:bb:d5:9b:a8:31:57:01:a1:11:bb:3d:66: f8:f3:97:34:34:6a:62:20:32:f5:b0:7a:71:3e:60:a1:4b:6c: 3b:de:ba:eb:bb:5f:01:0d:c8:82:d4:1a:55:43:34:0e:b9:f5: 07:11:cc:a8:a2:27:19:2c:9d:d8:0c:d6:93:4d:c9:ac:6e:5a: 41:8c:5c:a9:a4:d1:03:24:1f:e1:70:87:2d:b6:72:bc:06:a5: 57:9e:48:61:75:a6:e2:38:8e:32:c0:f5:97:ec:a0:05:fc:1e: 8d:62:ef:74:8d:7b:74:fd:0f:5b:ee:8b:54:28:23:ea:83:2b: c0:8a:3c:4d:51:b6:63:29:d2:14:37:e0:bd:08:50:82:22:b6: 32:5c:d7:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIL66STWfy0yjlIJtVDnxJwuiTx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNjAzMDExMjM2MDBaFw0yNjAzMDUwMDA2MDBaMDMxMTAvBgNV BAMTKDI1RjM4NkFEMzQwODgwRDRGOTA5N0JBMzA3NjE0MkNEQkE2MjY3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNg79dFTlrTbn2F+2pqqUTZpRE xUdD++rDCp+kiTIt32SsWVY9PsKgsDC+tFCM1iD1bFtB+WK0/SI70X4Byj2kgd/+ x5rOEnOyg2SDsMH4pIMoM17OajMMo5bE1yTnRfDEGAb0MrEyASrfeCutbuiTeQF3 4V3e5ZLz3NUG4283fZm0aaClbyu8eEyK8/QzBdkqjRnaP8TMo45HNXmROO9NAzS5 A7b07VaEXQQ3TC5I5tEGI0GhYdIaMaq3Apr5OjxPl56yZs99x8S94kaM+mCMBEGt +L7tZsfF4jq1M9ufZzWZfk5wx6zd3PWbaLV49pBvtitDtcg/QzMIevixhC/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJfOGrTQIgNT5CXujB2FCzbpiZ+gwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKQApvW5Xni3cq5oySJDzboaCUKabvziLDK Xp3L97z5v17uF2x0jNqMNVcRvwsQgQ0erjlirGUCSGAQbDhlUsPp9ITJCgAu26Jb KxJ9IXn5+P4fTSj/usSyWrV0q5K1KYakqJbknq3jLu1Dbr8QJsbYnrvVm6gxVwGh Ebs9ZvjzlzQ0amIgMvWwenE+YKFLbDveuuu7XwENyILUGlVDNA659QcRzKiiJxks ndgM1pNNyaxuWkGMXKmk0QMkH+Fwhy22crwGpVeeSGF1puI4jjLA9ZfsoAX8Ho1i 73SNe3T9D1vui1QoI+qDK8CKPE1RtmMp0hQ34L0IUIIitjJc16g= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:35 2026 by rpki-client