$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: hYdAkP+f8TDf7W9vd8mhCG5WdfUbVgW9zL2sa6SLrZY= Subject key identifier: 74:FB:B6:A3:EF:37:CC:F0:47:CD:64:B6:EE:09:D4:59:20:FC:27:15 Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 65C74F2682F33BBC3630CE296083C2BCD33B9A2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: 0138 Signing time: Sun 01 Mar 2026 23:01:42 +0000 Manifest this update: Sun 01 Mar 2026 22:56:42 +0000 Manifest next update: Wed 04 Mar 2026 23:25:42 +0000 Files and hashes: 1: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: 0fLTAcNRSr1JAW4RuukhcmTuFkWeEPPt29+J1kLEDNs=) 2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: FKWGkuhrHToaQ6HQBG2hDishDUxJo1KcIBwHXf6jaDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c7:4f:26:82:f3:3b:bc:36:30:ce:29:60:83:c2:bc:d3:3b:9a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Mar 1 22:56:42 2026 GMT Not After : Mar 4 23:25:42 2026 GMT Subject: CN=74FBB6A3EF37CCF047CD64B6EE09D45920FC2715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:24:51:62:ec:0d:25:c4:a8:51:52:be:de: 30:1c:ff:d1:d0:37:55:7a:4f:24:f7:d4:17:3a:85: d3:8c:7c:d3:5f:f2:52:5a:f9:45:a9:2a:79:1d:ae: 3a:e5:c3:20:db:ba:50:3e:6c:32:f4:0a:64:f1:c3: 0d:e9:b3:2e:51:8c:98:45:f6:1a:cc:c1:ac:75:dc: 65:33:56:4f:c7:76:86:c1:06:9b:08:07:76:e8:57: 29:03:dd:d0:26:5a:d2:fb:41:ec:54:6e:be:26:63: 0b:90:36:e1:d6:42:34:97:22:12:67:77:bb:84:10: ff:c3:be:ce:97:5a:49:0c:3e:f9:ea:56:a0:f2:a7: fc:a4:69:cf:87:ea:99:eb:f5:02:cc:13:ab:43:9c: 8d:04:d5:17:a3:ab:23:7f:be:8b:e6:70:4f:d0:8b: 51:0e:17:b8:db:66:18:78:c2:8b:da:d9:1a:7a:69: a2:61:fc:90:15:7c:4c:57:e7:a8:8e:9b:8c:f9:f1: 15:b1:c2:34:61:1a:50:8f:75:d1:a0:b2:73:a1:24: dc:56:c9:2f:53:58:ee:fe:e9:a8:41:94:c4:be:ae: 20:7d:b4:44:8c:46:5e:2d:b7:06:17:6a:97:a4:f4: 34:78:7d:c0:4e:a0:9b:bb:97:ef:42:2e:79:6d:92: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:B6:A3:EF:37:CC:F0:47:CD:64:B6:EE:09:D4:59:20:FC:27:15 X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8f:f1:ca:ba:7b:68:d9:1e:6d:2e:a9:b6:db:86:83:6c:6d: 30:2f:96:43:1b:57:09:d9:98:c7:05:16:75:4d:bd:8d:03:7c: 36:9e:0a:bf:60:2b:b6:12:a3:29:a1:1b:49:2e:1d:02:4e:35: 47:f5:93:fc:45:be:be:c5:54:d3:de:6d:76:fa:ae:c5:b7:63: 30:59:98:78:50:3d:83:1e:20:17:50:f7:85:4e:d2:e5:48:be: ed:60:f3:b5:15:aa:e6:4f:bf:74:13:2b:0e:27:d9:30:05:65: 88:a8:e3:10:b4:c5:68:81:ee:98:37:66:a0:74:21:6a:53:d6: e0:6a:73:c2:52:cd:e8:95:db:3c:9c:3b:6d:3d:15:39:3c:0c: 7e:41:a2:27:12:36:6e:9e:d0:5a:d2:e5:88:2e:47:7d:b1:4b: ac:e9:d7:00:15:ee:91:a2:cd:ba:05:cf:b7:3f:16:8b:32:f2: c1:4d:88:52:8f:08:04:30:53:6d:d4:3a:d9:ef:ca:08:d5:e9: b0:2f:a9:89:89:5b:07:ce:79:2f:01:5e:9a:d1:f9:f4:ad:70: 48:94:6b:41:23:1f:5b:16:7d:e4:6a:0d:76:75:20:79:00:df: 8e:91:f4:aa:41:d8:a8:0e:37:50:af:97:93:10:29:f0:b7:81: fa:c5:7c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcdPJoLzO7w2MM4pYIPCvNM7mi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNjAzMDEyMjU2NDJaFw0yNjAzMDQyMzI1NDJaMDMxMTAvBgNV BAMTKDc0RkJCNkEzRUYzN0NDRjA0N0NENjRCNkVFMDlENDU5MjBGQzI3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllyRRYuwNJcSoUVK+3jAc/9HQ N1V6TyT31Bc6hdOMfNNf8lJa+UWpKnkdrjrlwyDbulA+bDL0CmTxww3psy5RjJhF 9hrMwax13GUzVk/HdobBBpsIB3boVykD3dAmWtL7QexUbr4mYwuQNuHWQjSXIhJn d7uEEP/Dvs6XWkkMPvnqVqDyp/ykac+H6pnr9QLME6tDnI0E1RejqyN/vovmcE/Q i1EOF7jbZhh4wova2Rp6aaJh/JAVfExX56iOm4z58RWxwjRhGlCPddGgsnOhJNxW yS9TWO7+6ahBlMS+riB9tESMRl4ttwYXapek9DR4fcBOoJu7l+9CLnltkq/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdPu2o+83zPBHzWS27gnUWSD8JxUwHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCP8cq6e2jZHm0uqbbbhoNsbTAvlkMbVwnZ mMcFFnVNvY0DfDaeCr9gK7YSoymhG0kuHQJONUf1k/xFvr7FVNPebXb6rsW3YzBZ mHhQPYMeIBdQ94VO0uVIvu1g87UVquZPv3QTKw4n2TAFZYio4xC0xWiB7pg3ZqB0 IWpT1uBqc8JSzeiV2zycO209FTk8DH5BoicSNm6e0FrS5YguR32xS6zp1wAV7pGi zboFz7c/Fosy8sFNiFKPCAQwU23UOtnvygjV6bAvqYmJWwfOeS8BXprR+fStcEiU a0EjH1sWfeRqDXZ1IHkA346R9KpB2KgON1Cvl5MQKfC3gfrFfLQ= -----END CERTIFICATE-----Generated at Mon Mar 2 15:45:22 2026 by rpki-client