$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: qUUoJ5ido27HnX8IHzUtTE8dC1CIDrUjt53kKlXwTd8= Subject key identifier: 24:F3:DE:AB:21:84:30:E1:64:2B:57:E2:2F:36:66:DF:F5:3C:AE:7B Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 7D20CB2B44BA314DFC68504348F57304117694A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 85 Signing time: Sun 01 Mar 2026 14:02:31 +0000 Manifest this update: Sun 01 Mar 2026 13:57:31 +0000 Manifest next update: Wed 04 Mar 2026 20:42:31 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: rIINgTnsEufRMs1kK7XQftAyJJb/Z5WRe0W1dmz5mdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:20:cb:2b:44:ba:31:4d:fc:68:50:43:48:f5:73:04:11:76:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Mar 1 13:57:31 2026 GMT Not After : Mar 4 20:42:31 2026 GMT Subject: CN=24F3DEAB218430E1642B57E22F3666DFF53CAE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:cd:1c:67:2d:c3:85:08:d1:a6:bf:41:16: 8c:c8:8b:39:b4:97:2c:ed:59:ce:be:c8:fd:eb:af: 35:c8:24:ab:c4:0b:10:f9:98:53:b3:ed:a1:fc:63: 7e:45:c3:eb:c9:8c:bd:f8:cb:f7:f1:5f:9f:1d:d0: 25:87:d0:2b:49:a4:d1:59:63:9c:37:e4:46:c3:56: 8e:97:26:76:7c:42:9a:5f:1e:9e:5c:37:87:e5:97: 7e:f6:66:fe:1b:23:5a:15:cb:7c:d8:4b:ab:f3:98: 0c:81:6c:1c:aa:3a:37:70:a3:53:1f:c2:6c:4f:3d: c5:5d:c7:04:78:e5:7d:32:89:8d:d4:16:be:3e:c0: 26:0a:6b:6a:f2:03:e6:ef:8e:73:84:64:51:3a:32: e2:0c:7e:f9:f3:05:6b:13:0d:8d:fa:b5:02:39:db: 45:32:80:8d:ab:2d:42:b6:23:30:32:ea:02:6c:ab: 1c:48:c5:f4:7d:15:2e:7b:29:07:da:0b:6e:81:fb: 1d:f5:8c:47:b9:9d:fe:51:32:52:8a:a1:d5:cb:55: 75:52:d8:88:da:02:c1:34:6e:c3:58:43:71:f2:06: 58:b7:c8:40:6c:60:67:90:1c:57:6a:79:5a:66:c9: 60:d9:9f:28:99:53:3b:f6:2e:38:72:d7:74:4d:9e: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F3:DE:AB:21:84:30:E1:64:2B:57:E2:2F:36:66:DF:F5:3C:AE:7B X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:74:7d:e0:f1:03:4b:26:b0:7a:08:8b:6c:14:77:77:6e:0f: 2a:0b:24:53:6e:0f:1f:bd:a6:87:77:96:e6:f9:43:b2:37:8a: 11:1e:cf:5e:b0:54:cd:02:2a:0b:21:06:d8:bd:e1:63:8e:ca: 9d:e0:a9:19:30:16:4b:b6:5a:cb:34:b1:4d:fa:93:2f:78:1e: 74:cb:85:20:79:ec:60:cd:66:2a:54:b8:6c:96:33:7b:de:42: f4:c1:fb:b1:92:ad:a9:23:2d:72:7f:fe:f7:9c:5c:7b:0a:d7: 64:e2:ac:f5:56:2a:da:d2:a3:c9:2e:41:6b:7c:51:5c:6b:62: fd:ba:ee:15:31:ed:1a:b8:6d:fc:06:67:26:ad:c6:84:e5:03: 23:ba:bd:35:2c:11:36:d3:1a:2b:4a:8d:c4:88:bc:04:e4:0d: 90:04:8b:c7:ee:77:91:fe:6c:bb:fc:23:dd:3a:80:51:e2:60: 56:fa:3d:2c:0d:5f:32:26:72:14:a9:c5:a9:12:6a:e7:19:96: e3:26:5d:bc:4d:4c:c5:7b:49:89:86:c3:45:d5:2b:03:f2:0a: 78:24:75:fc:88:26:8a:ec:ce:5e:7e:42:b3:14:92:d6:91:aa: 52:f4:9f:1d:87:7e:86:2c:99:ef:57:7a:35:16:90:fd:d5:a3: 58:10:ca:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSDLK0S6MU38aFBDSPVzBBF2lKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNjAzMDExMzU3MzFaFw0yNjAzMDQyMDQyMzFaMDMxMTAvBgNV BAMTKDI0RjNERUFCMjE4NDMwRTE2NDJCNTdFMjJGMzY2NkRGRjUzQ0FFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OM0cZy3DhQjRpr9BFozIizm0 lyztWc6+yP3rrzXIJKvECxD5mFOz7aH8Y35Fw+vJjL34y/fxX58d0CWH0CtJpNFZ Y5w35EbDVo6XJnZ8QppfHp5cN4fll372Zv4bI1oVy3zYS6vzmAyBbByqOjdwo1Mf wmxPPcVdxwR45X0yiY3UFr4+wCYKa2ryA+bvjnOEZFE6MuIMfvnzBWsTDY36tQI5 20UygI2rLUK2IzAy6gJsqxxIxfR9FS57KQfaC26B+x31jEe5nf5RMlKKodXLVXVS 2IjaAsE0bsNYQ3HyBli3yEBsYGeQHFdqeVpmyWDZnyiZUzv2Ljhy13RNngBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPPeqyGEMOFkK1fiLzZm3/U8rnswHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZ0feDxA0smsHoIi2wUd3duDyoLJFNuDx+9 pod3lub5Q7I3ihEez16wVM0CKgshBti94WOOyp3gqRkwFku2Wss0sU36ky94HnTL hSB57GDNZipUuGyWM3veQvTB+7GSrakjLXJ//vecXHsK12TirPVWKtrSo8kuQWt8 UVxrYv267hUx7Rq4bfwGZyatxoTlAyO6vTUsETbTGitKjcSIvATkDZAEi8fud5H+ bLv8I906gFHiYFb6PSwNXzImchSpxakSaucZluMmXbxNTMV7SYmGw0XVKwPyCngk dfyIJorszl5+QrMUktaRqlL0nx2HfoYsme9XejUWkP3Vo1gQym4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:58 2026 by rpki-client