$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: HA57Sd95/q3L6ffI7rokX3T77WHKXYoAk7+fI+Yt6vw= Subject key identifier: 36:65:CB:53:15:CD:64:04:F1:6D:A1:12:37:96:A9:71:D8:25:5F:18 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 772318CB5C1D4B686FE07F0373C172A839748436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 011F Signing time: Sat 18 Apr 2026 15:22:03 +0000 Manifest this update: Sat 18 Apr 2026 15:17:03 +0000 Manifest next update: Wed 22 Apr 2026 01:00:03 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: jl877MiKGd42LmNTdhR+V9cdIsQUiFuZzK/VsKSCnPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 01:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:23:18:cb:5c:1d:4b:68:6f:e0:7f:03:73:c1:72:a8:39:74:84:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Apr 18 15:17:03 2026 GMT Not After : Apr 22 01:00:03 2026 GMT Subject: CN=3665CB5315CD6404F16DA1123796A971D8255F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:88:27:2c:a2:78:be:f2:2d:16:7c:8e:d9: d5:90:5d:8e:67:39:45:a2:2e:ef:81:3e:1d:a4:be: 75:e0:98:40:69:0e:e9:cc:25:b0:de:b9:2e:16:9d: 4d:19:49:6b:4a:7c:f6:12:9d:e7:68:8a:ca:cf:b1: 9a:7f:ac:1d:c0:4c:6d:23:ad:97:45:9a:38:f0:b5: ae:a1:36:60:a8:32:2d:c4:5f:7c:4d:32:bf:3e:f7: aa:b4:99:d1:e4:97:6d:53:30:43:7a:55:61:04:11: 34:b0:d3:ff:00:6a:a4:69:c9:ca:7a:1e:c5:23:f1: 06:c7:06:e8:41:c6:ff:4f:39:1e:32:27:c1:76:8b: c4:e9:72:41:79:ae:e8:6b:f8:2f:cb:a0:e9:67:6c: 8a:b4:81:f4:00:8c:22:c0:dc:0b:1a:ef:6f:42:45: 9a:c7:c6:a3:90:63:4d:b0:48:05:0b:43:51:f9:60: 2b:8b:44:dc:ff:a2:aa:8b:bf:7e:3d:4a:46:0a:ed: de:76:88:20:20:20:e4:8b:a4:a6:a7:9f:58:7a:b2: b6:86:d1:4a:ec:c0:6f:e6:03:5b:28:07:cd:85:16: b0:fb:89:18:f1:cb:3a:68:36:d4:de:78:0e:0b:cc: 4b:9d:01:0b:ba:0a:8d:16:95:6d:a3:2f:c0:60:ea: 82:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:65:CB:53:15:CD:64:04:F1:6D:A1:12:37:96:A9:71:D8:25:5F:18 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:00:55:20:a2:7e:8c:b9:d1:e4:1d:7c:5a:80:31:77:55:a0: dd:a6:e9:b4:b9:e2:6c:50:b2:c5:e1:aa:73:c7:d3:45:2f:28: 03:ef:22:dc:ed:d4:6d:bc:aa:f4:52:51:5e:70:73:fb:fe:3a: 0c:cb:a8:6b:7c:31:39:bc:18:b4:e3:7a:d7:83:74:ae:ac:b3: f7:b9:6b:9d:42:fd:7a:f2:1f:21:ba:ba:80:1a:83:9e:d7:5e: af:0d:14:08:3b:f6:68:b7:a8:5f:08:4b:fc:07:28:9a:64:4a: 61:7f:d1:93:f0:e8:f5:87:46:48:36:5e:ba:da:9a:52:eb:1c: 38:1c:2e:91:b3:69:bd:e4:80:b3:ff:74:42:64:98:44:bd:2a: cc:f1:81:7f:b1:77:22:a5:c7:38:d4:dd:b1:08:14:8e:00:e1: c9:dc:40:f9:58:e4:d4:85:a0:7d:18:56:3a:a8:ba:4d:52:98: 98:9d:83:ff:b6:fb:97:b1:43:62:2a:ae:24:2f:79:b9:05:ce: a1:ca:37:0b:9c:b9:62:e0:32:a0:d0:32:b8:b5:b8:77:dd:60: 36:4d:f3:d1:28:6b:7a:9b:36:6a:d1:0d:83:d7:7e:3c:4e:be: 20:f9:29:ee:a1:61:ac:44:b0:fa:9a:15:d1:b2:cf:92:39:7d: d8:e6:f8:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyMYy1wdS2hv4H8Dc8FyqDl0hDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNjA0MTgxNTE3MDNaFw0yNjA0MjIwMTAwMDNaMDMxMTAvBgNV BAMTKDM2NjVDQjUzMTVDRDY0MDRGMTZEQTExMjM3OTZBOTcxRDgyNTVGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtIgnLKJ4vvItFnyO2dWQXY5n OUWiLu+BPh2kvnXgmEBpDunMJbDeuS4WnU0ZSWtKfPYSnedoisrPsZp/rB3ATG0j rZdFmjjwta6hNmCoMi3EX3xNMr8+96q0mdHkl21TMEN6VWEEETSw0/8AaqRpycp6 HsUj8QbHBuhBxv9POR4yJ8F2i8TpckF5ruhr+C/LoOlnbIq0gfQAjCLA3Asa729C RZrHxqOQY02wSAULQ1H5YCuLRNz/oqqLv349SkYK7d52iCAgIOSLpKann1h6sraG 0UrswG/mA1soB82FFrD7iRjxyzpoNtTeeA4LzEudAQu6Co0WlW2jL8Bg6oIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmXLUxXNZATxbaESN5apcdglXxgwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkAVSCifoy50eQdfFqAMXdVoN2m6bS54mxQ ssXhqnPH00UvKAPvItzt1G28qvRSUV5wc/v+OgzLqGt8MTm8GLTjeteDdK6ss/e5 a51C/XryHyG6uoAag57XXq8NFAg79mi3qF8IS/wHKJpkSmF/0ZPw6PWHRkg2Xrra mlLrHDgcLpGzab3kgLP/dEJkmES9KszxgX+xdyKlxzjU3bEIFI4A4cncQPlY5NSF oH0YVjqouk1SmJidg/+2+5exQ2IqriQvebkFzqHKNwucuWLgMqDQMri1uHfdYDZN 89Eoa3qbNmrRDYPXfjxOviD5Ke6hYaxEsPqaFdGyz5I5fdjm+K8= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:40 2026 by rpki-client