$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: vPJbhPaZyiAyoWKIra7JFzqbR+/YAkFrOOn6jyopCzs= Subject key identifier: 79:BB:53:DD:44:A5:FC:23:2E:E5:4E:3E:EC:4E:16:7F:FF:30:41:27 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 4C296C2936D1CA39862FF5C748CEAE8C36D6DDC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 0109 Signing time: Sat 28 Feb 2026 14:51:57 +0000 Manifest this update: Sat 28 Feb 2026 14:46:57 +0000 Manifest next update: Tue 03 Mar 2026 15:35:57 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: h1HBWKavGMdcpck8FoWc0NxoFKkAqKiAf6x4JsnvjG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:29:6c:29:36:d1:ca:39:86:2f:f5:c7:48:ce:ae:8c:36:d6:dd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Feb 28 14:46:57 2026 GMT Not After : Mar 3 15:35:57 2026 GMT Subject: CN=79BB53DD44A5FC232EE54E3EEC4E167FFF304127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:fd:e1:02:3b:22:cc:64:e2:06:3b:dd:71: ec:bd:67:83:d0:bf:74:a1:0a:2d:2e:84:34:82:44: 82:bd:a3:8c:08:5f:7d:31:e3:1a:6f:5e:91:0c:a2: 5f:c2:de:00:0f:30:b6:ef:16:e9:2d:29:44:21:55: 72:77:0a:ff:f7:6f:4f:3a:cf:f2:37:5b:3e:9b:fa: a8:23:eb:2c:33:21:52:8b:1d:28:f4:46:e4:9e:22: 97:bc:58:3d:52:fe:b9:67:98:62:3b:68:a0:3d:56: 3f:9b:61:d8:df:06:21:50:83:4e:27:73:9d:98:2c: 92:1e:52:ee:d5:f6:86:45:c8:2d:c5:0a:a4:21:e2: 96:9c:44:69:71:2b:63:84:c4:1a:50:33:57:a0:54: 4f:8a:58:75:0a:70:64:a8:76:4d:c8:1c:34:93:67: 26:d0:63:58:be:08:35:b0:ab:4b:48:40:fb:66:94: f5:ca:98:0c:44:5e:92:f2:9a:04:37:a7:28:a1:59: 3a:cb:0f:97:84:93:6b:09:79:bc:89:e7:2a:64:0f: bc:da:f3:ff:63:c2:6e:50:b0:52:1c:5d:ad:c2:5f: 3b:e5:84:80:75:4f:69:23:00:43:fa:4b:22:69:ba: a0:ea:52:7a:e7:4a:c7:8f:6b:10:28:5f:61:5f:b7: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:53:DD:44:A5:FC:23:2E:E5:4E:3E:EC:4E:16:7F:FF:30:41:27 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:02:1b:6e:8f:b9:1c:a0:d9:69:3e:5a:46:5e:0f:e6:09:b4: 17:47:78:77:39:0b:17:40:0a:b0:60:3e:08:68:29:e5:5b:fd: e9:53:9c:42:2c:a3:65:5c:bc:86:f9:53:b8:06:9c:cf:fe:83: 27:58:06:66:95:fd:74:2f:f8:18:62:6b:5e:93:21:61:14:e9: 98:48:23:12:39:0d:a9:27:80:35:72:a6:0f:e2:dd:ae:bc:2c: 76:55:cf:9a:5b:fe:ae:f8:5f:76:20:ee:c5:80:12:d8:a3:4a: 55:bb:ef:e5:97:37:a3:d6:67:51:0e:27:4f:5a:eb:29:fd:1a: 91:35:0f:f0:6d:ad:c4:56:7d:71:b8:44:0f:2f:1b:02:0b:54: bb:37:53:cd:57:d5:64:65:20:9b:e3:12:a0:22:8f:f8:a4:e7: 66:66:8b:8d:3f:b0:42:e2:97:e0:24:0a:f2:d3:a5:7a:ed:de: 63:39:a7:b2:3b:d4:dd:7f:a9:25:73:c9:1c:13:ba:33:27:bb: 37:4a:97:c9:c0:19:4d:3f:d8:28:de:64:dc:72:d9:7b:91:fe: 7f:94:61:f3:1c:84:a6:81:28:30:de:4c:a1:3e:d0:29:cc:8c: 9b:ac:e4:d2:7e:d3:ed:f6:91:4a:2f:c6:b1:28:83:db:02:56: 2c:69:34:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTClsKTbRyjmGL/XHSM6ujDbW3cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNjAyMjgxNDQ2NTdaFw0yNjAzMDMxNTM1NTdaMDMxMTAvBgNV BAMTKDc5QkI1M0RENDRBNUZDMjMyRUU1NEUzRUVDNEUxNjdGRkYzMDQxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJH/3hAjsizGTiBjvdcey9Z4PQ v3ShCi0uhDSCRIK9o4wIX30x4xpvXpEMol/C3gAPMLbvFuktKUQhVXJ3Cv/3b086 z/I3Wz6b+qgj6ywzIVKLHSj0RuSeIpe8WD1S/rlnmGI7aKA9Vj+bYdjfBiFQg04n c52YLJIeUu7V9oZFyC3FCqQh4pacRGlxK2OExBpQM1egVE+KWHUKcGSodk3IHDST ZybQY1i+CDWwq0tIQPtmlPXKmAxEXpLymgQ3pyihWTrLD5eEk2sJebyJ5ypkD7za 8/9jwm5QsFIcXa3CXzvlhIB1T2kjAEP6SyJpuqDqUnrnSsePaxAoX2Fft+yZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebtT3USl/CMu5U4+7E4Wf/8wQScwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAECG26PuRyg2Wk+WkZeD+YJtBdHeHc5CxdA CrBgPghoKeVb/elTnEIso2VcvIb5U7gGnM/+gydYBmaV/XQv+Bhia16TIWEU6ZhI IxI5DakngDVypg/i3a68LHZVz5pb/q74X3Yg7sWAEtijSlW77+WXN6PWZ1EOJ09a 6yn9GpE1D/BtrcRWfXG4RA8vGwILVLs3U81X1WRlIJvjEqAij/ik52Zmi40/sELi l+AkCvLTpXrt3mM5p7I71N1/qSVzyRwTujMnuzdKl8nAGU0/2CjeZNxy2XuR/n+U YfMchKaBKDDeTKE+0CnMjJus5NJ+0+32kUovxrEog9sCVixpNPA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:57 2026 by rpki-client