$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: X3UFplxl1RFL9gI6rFWXExf33L7AyX194aNGQY3MMl4= Subject key identifier: 34:CA:6E:DC:00:47:2A:62:58:60:A8:73:56:15:A4:B4:70:94:15:5B Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 74991493B54657C06C446197854BDA436474575C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0298 Signing time: Mon 02 Mar 2026 05:20:53 +0000 Manifest this update: Mon 02 Mar 2026 05:15:53 +0000 Manifest next update: Thu 05 Mar 2026 06:36:53 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: Q4fEmT2L5iob4VUUSSEYFlZeDDtXHDM2RUI8hb6s09s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:99:14:93:b5:46:57:c0:6c:44:61:97:85:4b:da:43:64:74:57:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Mar 2 05:15:53 2026 GMT Not After : Mar 5 06:36:53 2026 GMT Subject: CN=34CA6EDC00472A625860A8735615A4B47094155B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1a:49:43:9c:44:7c:e4:72:6e:7d:b6:05:c6: d1:11:a4:5d:f6:cb:d2:58:df:cc:08:b0:60:70:41: 17:1d:53:a6:47:0f:b1:4e:9b:de:04:3c:01:55:46: 1c:6c:35:8f:af:39:7c:85:f2:9b:6b:95:3b:16:b3: d5:ba:5e:cf:cb:54:ec:e3:b5:10:bc:78:ae:f5:b7: c4:ae:7f:6c:c8:23:d0:5a:0f:b3:84:87:69:40:89: 42:98:88:bc:91:fe:4b:a5:2b:7f:a7:22:bd:ee:f4: 80:c3:33:f5:1b:cb:08:ab:da:87:34:12:5e:b5:c0: fa:02:3b:e9:f4:4c:b0:f2:9a:4e:2b:97:ef:86:cc: 38:2f:74:20:c6:9f:40:ab:0a:88:c2:e4:de:e9:d7: 78:a1:80:62:7b:2b:3f:0f:59:df:f4:62:24:0f:c2: 13:cd:75:48:8a:93:57:b0:f6:f4:b5:54:98:48:f0: b3:39:26:24:65:6d:39:e6:2f:a3:8f:35:50:b7:f9: 34:32:fc:d1:b9:14:37:ac:6f:8c:bf:19:28:25:46: 8e:53:78:75:a3:a6:6e:a5:58:77:85:b7:e3:9d:70: 80:60:14:c2:af:b2:ab:44:b6:21:a2:0e:0c:10:1b: 52:ee:ea:ef:79:20:39:fc:6b:96:d7:e5:da:3b:60: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CA:6E:DC:00:47:2A:62:58:60:A8:73:56:15:A4:B4:70:94:15:5B X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3e:5f:a5:b6:bf:0f:ae:8a:09:d1:d6:db:10:39:f1:92:36: 71:80:8f:64:05:af:cb:0f:b9:02:bd:60:d5:62:c1:76:04:9f: c3:a5:62:f4:92:ba:75:27:ef:27:f0:49:c6:27:72:03:8c:19: 37:0d:a3:a1:e6:af:a2:e2:16:d1:c6:68:42:03:6f:0b:ea:b2: 35:95:2b:cd:67:61:5d:a5:07:65:f8:3c:63:84:e3:f9:0c:c9: 11:46:3c:44:b2:9d:63:7d:ed:1d:7d:e6:8b:26:f5:b2:8b:33: 34:a6:f5:d5:f4:76:cf:7b:93:04:ba:e8:96:51:97:51:3a:19: a4:59:97:2f:67:66:d4:76:a4:11:86:6f:11:12:20:26:2b:81: c4:84:7d:e8:ff:4a:41:df:90:8c:90:fa:da:33:c8:9b:a4:4b: 0e:86:22:9c:0d:ba:b2:7d:8f:b3:68:f0:04:c1:f8:ce:38:dd: e3:75:2b:60:88:8f:a3:1e:34:e1:58:8c:59:85:84:c0:5a:37: e9:1c:b1:b9:f0:52:5f:61:3f:6c:2e:3a:6a:69:84:8d:2c:c4: 2e:82:da:0c:a1:a4:30:12:fd:cf:10:e2:9d:87:f5:c4:72:95: 0f:20:e9:d5:33:a4:81:85:2c:a1:f7:7b:54:b0:57:4a:0d:62: 76:0e:81:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJkUk7VGV8BsRGGXhUvaQ2R0V1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNjAzMDIwNTE1NTNaFw0yNjAzMDUwNjM2NTNaMDMxMTAvBgNV BAMTKDM0Q0E2RURDMDA0NzJBNjI1ODYwQTg3MzU2MTVBNEI0NzA5NDE1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuGklDnER85HJufbYFxtERpF32 y9JY38wIsGBwQRcdU6ZHD7FOm94EPAFVRhxsNY+vOXyF8ptrlTsWs9W6Xs/LVOzj tRC8eK71t8Suf2zII9BaD7OEh2lAiUKYiLyR/kulK3+nIr3u9IDDM/Ubywir2oc0 El61wPoCO+n0TLDymk4rl++GzDgvdCDGn0CrCojC5N7p13ihgGJ7Kz8PWd/0YiQP whPNdUiKk1ew9vS1VJhI8LM5JiRlbTnmL6OPNVC3+TQy/NG5FDesb4y/GSglRo5T eHWjpm6lWHeFt+OdcIBgFMKvsqtEtiGiDgwQG1Lu6u95IDn8a5bX5do7YG3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNMpu3ABHKmJYYKhzVhWktHCUFVswHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs+X6W2vw+uignR1tsQOfGSNnGAj2QFr8sP uQK9YNViwXYEn8OlYvSSunUn7yfwScYncgOMGTcNo6Hmr6LiFtHGaEIDbwvqsjWV K81nYV2lB2X4PGOE4/kMyRFGPESynWN97R195osm9bKLMzSm9dX0ds97kwS66JZR l1E6GaRZly9nZtR2pBGGbxESICYrgcSEfej/SkHfkIyQ+tozyJukSw6GIpwNurJ9 j7No8ATB+M443eN1K2CIj6MeNOFYjFmFhMBaN+kcsbnwUl9hP2wuOmpphI0sxC6C 2gyhpDAS/c8Q4p2H9cRylQ8g6dUzpIGFLKH3e1SwV0oNYnYOgZA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:09 2026 by rpki-client