$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: Cr3gKoRePFdlry/BmtLZmAq0asczSqt8jkKvJ+c+z80= Subject key identifier: 60:79:F2:11:53:36:AC:94:16:98:DF:82:AF:A0:C0:F0:99:D5:AD:2C Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 39FEA56E35E2DE5377BB2D6377AA6B21FCB2A549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: D7 Signing time: Sun 01 Mar 2026 14:02:08 +0000 Manifest this update: Sun 01 Mar 2026 13:57:08 +0000 Manifest next update: Wed 04 Mar 2026 22:37:08 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: TxQsdp1MgguFyg97WhfK6sM9UfjjDRe5jUksVLyTdxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fe:a5:6e:35:e2:de:53:77:bb:2d:63:77:aa:6b:21:fc:b2:a5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Mar 1 13:57:08 2026 GMT Not After : Mar 4 22:37:08 2026 GMT Subject: CN=6079F2115336AC941698DF82AFA0C0F099D5AD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:c4:53:85:2b:03:fd:94:04:69:40:8e:70: 92:c2:54:6a:cb:30:f6:23:b9:99:1e:d3:5b:c2:44: f5:95:08:f8:89:f8:5a:48:bd:17:61:7c:ff:5a:63: 02:83:c6:06:e8:6c:22:4f:67:90:0c:99:e0:ce:75: 73:30:a7:4e:48:60:75:ff:ad:b1:d9:75:81:23:23: 0a:d3:04:50:a5:2a:92:f7:f9:f4:28:21:cb:3f:7d: 75:fd:cd:f2:0e:31:bd:47:f5:9d:bd:6f:46:be:09: 54:c8:33:3e:3f:93:96:50:50:b2:dd:fb:86:2b:1c: b3:ac:c4:d1:21:37:d9:04:d1:44:f0:48:c7:23:e3: 89:4c:44:3d:ef:e9:2d:b7:ad:e0:f2:fd:95:a3:e5: 8f:43:bc:f7:69:d6:60:de:8f:e3:91:15:9c:60:f3: b3:58:eb:db:0e:19:b3:fa:fd:a9:ea:e9:eb:f2:72: 3b:79:e3:56:1c:58:8d:c9:56:c3:ae:7d:d4:55:4f: f8:d8:91:4f:66:2c:12:8e:60:ea:fa:f8:f0:86:12: ee:0b:7a:7c:65:4f:5d:ba:79:16:98:3e:58:71:ba: 99:59:69:26:e4:d1:62:26:30:13:67:ca:49:b9:e4: c2:46:1d:1b:23:c1:70:bf:c7:2c:79:f5:ac:c0:38: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:F2:11:53:36:AC:94:16:98:DF:82:AF:A0:C0:F0:99:D5:AD:2C X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:56:71:68:d6:8b:f6:5c:ff:b3:a8:f4:a8:b0:af:f8:77:aa: ea:9e:09:8c:f8:07:4c:01:d8:ae:fe:12:e7:6c:76:7b:26:57: f1:93:3a:2e:67:55:8b:19:8d:a0:1d:1c:47:24:1e:67:b4:c7: 20:55:7a:dd:4d:29:cc:7d:b9:0b:c9:0e:ae:66:18:8d:c7:74: ec:54:0a:e0:a2:a8:eb:c9:65:2e:b4:de:f0:53:0a:6c:dc:17: 44:77:45:aa:d7:ea:52:cf:52:41:53:92:74:ad:3f:87:21:7c: be:2e:2b:8a:f2:74:2a:c4:83:e5:e1:c6:14:cf:0c:2d:98:3d: fe:07:34:0a:9a:e7:fb:c0:85:dc:41:9e:1b:88:43:c2:17:f8: f2:c9:03:58:d1:56:88:d8:29:c6:17:23:b1:ae:40:b5:50:62: 1a:63:fc:e6:f4:7a:69:4d:e0:b1:eb:31:2e:53:ac:ab:1d:d0: c8:06:13:36:78:f6:77:18:40:9f:bc:72:bc:92:da:0a:07:98: 9a:6c:e9:b1:83:ff:a4:3b:76:2b:01:f2:22:30:72:89:7f:48: 01:ee:57:33:72:e3:05:49:23:af:4e:02:ca:0f:2c:07:62:1f: 4c:3b:c7:dc:90:f4:6b:8c:9c:2c:8e:d3:99:5e:2b:0e:95:52: 88:07:3f:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOf6lbjXi3lN3uy1jd6prIfyypUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNjAzMDExMzU3MDhaFw0yNjAzMDQyMjM3MDhaMDMxMTAvBgNV BAMTKDYwNzlGMjExNTMzNkFDOTQxNjk4REY4MkFGQTBDMEYwOTlENUFEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3cRThSsD/ZQEaUCOcJLCVGrL MPYjuZke01vCRPWVCPiJ+FpIvRdhfP9aYwKDxgbobCJPZ5AMmeDOdXMwp05IYHX/ rbHZdYEjIwrTBFClKpL3+fQoIcs/fXX9zfIOMb1H9Z29b0a+CVTIMz4/k5ZQULLd +4YrHLOsxNEhN9kE0UTwSMcj44lMRD3v6S23reDy/ZWj5Y9DvPdp1mDej+ORFZxg 87NY69sOGbP6/anq6evycjt541YcWI3JVsOufdRVT/jYkU9mLBKOYOr6+PCGEu4L enxlT126eRaYPlhxuplZaSbk0WImMBNnykm55MJGHRsjwXC/xyx59azAOOkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHnyEVM2rJQWmN+Cr6DA8JnVrSwwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRWcWjWi/Zc/7Oo9Kiwr/h3quqeCYz4B0wB 2K7+EudsdnsmV/GTOi5nVYsZjaAdHEckHme0xyBVet1NKcx9uQvJDq5mGI3HdOxU CuCiqOvJZS603vBTCmzcF0R3RarX6lLPUkFTknStP4chfL4uK4rydCrEg+XhxhTP DC2YPf4HNAqa5/vAhdxBnhuIQ8IX+PLJA1jRVojYKcYXI7GuQLVQYhpj/Ob0emlN 4LHrMS5TrKsd0MgGEzZ49ncYQJ+8cryS2goHmJps6bGD/6Q7disB8iIwcol/SAHu VzNy4wVJI69OAsoPLAdiH0w7x9yQ9GuMnCyO05leKw6VUogHP2A= -----END CERTIFICATE-----Generated at Mon Mar 2 07:46:01 2026 by rpki-client