$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: 3i5gb/zHhh/1wBW+BthWZKUXACHJAT1CskZr09c+apk= Subject key identifier: 8B:C7:EB:FE:33:02:18:3C:4C:50:99:54:B0:16:AE:9C:38:1C:15:DC Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 691139FB8D88986F2902588A4819F52A56F64330 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 79 Signing time: Sun 01 Mar 2026 07:32:23 +0000 Manifest this update: Sun 01 Mar 2026 07:27:23 +0000 Manifest next update: Wed 04 Mar 2026 14:38:23 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: EUTG4aCV4FsrA2nykAA4RDtIFiX9B/FzxOPHL6fu+YI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:11:39:fb:8d:88:98:6f:29:02:58:8a:48:19:f5:2a:56:f6:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Mar 1 07:27:23 2026 GMT Not After : Mar 4 14:38:23 2026 GMT Subject: CN=8BC7EBFE3302183C4C509954B016AE9C381C15DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:9d:31:04:1a:ae:eb:9a:91:cb:f6:aa:e9: b7:65:d1:84:23:43:b3:50:8d:14:0e:dd:26:bd:49: c5:a6:19:57:ce:8f:36:b0:6c:fc:78:a6:82:4e:72: 73:39:e3:d3:df:4b:fe:a3:36:de:ef:bf:dd:a9:02: 16:31:97:18:9d:b9:0b:6b:bd:43:7c:86:6c:10:a9: ba:2c:38:c6:83:f4:11:64:23:60:d4:e6:28:a2:95: 9c:2f:79:3a:2e:8f:0c:e5:ef:ea:05:32:ac:f2:da: 1f:bb:4f:ff:75:59:71:fa:c4:64:a6:6b:97:99:be: 13:79:ca:d3:e6:52:18:5d:d7:45:b8:ec:6f:b5:fd: 40:0b:3a:bb:1d:21:3c:10:bd:e9:3a:da:b9:3d:ee: 42:19:73:ce:b9:14:b4:c7:ca:3e:5c:3f:61:48:2c: b3:25:12:ce:db:7b:6a:b3:56:09:69:0c:24:41:ab: f1:8b:bd:f3:9b:a0:f8:b9:bb:23:3e:31:c2:f9:2e: 14:83:e8:a3:c6:d1:96:24:0b:06:59:3a:a4:74:1a: 5c:75:28:33:d3:ef:fa:9a:d3:3b:d7:b8:97:95:09: 48:29:e8:9a:c2:65:bc:fe:c7:a4:82:9b:bd:9d:aa: f8:e4:27:cd:61:2e:5b:1c:f8:31:45:b6:49:7d:f1: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C7:EB:FE:33:02:18:3C:4C:50:99:54:B0:16:AE:9C:38:1C:15:DC X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c5:ca:3a:2d:15:1b:de:9e:56:ea:b1:ab:2e:96:7a:a0:50: bd:eb:ba:d5:5f:e1:63:32:78:a2:2a:f4:0b:d2:83:2c:8e:aa: 8c:0e:56:dd:55:9c:d9:26:9a:8b:60:4a:50:00:a6:c8:53:03: fc:af:7f:9f:90:b7:b2:64:bb:ef:68:ea:d4:60:f2:77:4a:18: b8:cb:d7:13:68:0e:bd:e9:08:7b:44:be:91:6d:a9:c2:22:3c: 5e:a3:95:e1:3b:72:e2:dd:7a:f3:7b:17:2c:e7:68:6d:52:6f: 3c:a1:8d:46:0d:eb:86:7f:ed:ad:dd:0a:77:ca:34:10:19:ec: 27:0a:8a:95:1c:67:24:3d:df:28:f0:f3:97:25:33:de:13:43: ac:66:4f:6f:62:28:3e:68:f6:c7:a1:48:4b:18:36:36:2e:a0: 81:10:c7:a2:7e:80:d8:f6:59:d8:74:ab:62:a8:0b:cd:a9:07: 80:19:23:d1:c7:02:77:9b:68:29:f8:24:65:98:71:26:1a:8c: a8:54:98:88:26:86:ff:b3:aa:ad:27:89:70:47:dd:ac:60:1d: 8f:ea:33:25:9d:73:c8:9c:37:91:cc:f0:3d:d6:7c:05:bc:91: 19:e3:da:1b:22:bf:5a:fa:0f:be:1b:41:a8:a0:45:1c:fc:f7: d8:d2:4e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRE5+42ImG8pAliKSBn1Klb2QzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNjAzMDEwNzI3MjNaFw0yNjAzMDQxNDM4MjNaMDMxMTAvBgNV BAMTKDhCQzdFQkZFMzMwMjE4M0M0QzUwOTk1NEIwMTZBRTlDMzgxQzE1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSp0xBBqu65qRy/aq6bdl0YQj Q7NQjRQO3Sa9ScWmGVfOjzawbPx4poJOcnM549PfS/6jNt7vv92pAhYxlxiduQtr vUN8hmwQqbosOMaD9BFkI2DU5iiilZwveToujwzl7+oFMqzy2h+7T/91WXH6xGSm a5eZvhN5ytPmUhhd10W47G+1/UALOrsdITwQvek62rk97kIZc865FLTHyj5cP2FI LLMlEs7be2qzVglpDCRBq/GLvfOboPi5uyM+McL5LhSD6KPG0ZYkCwZZOqR0Glx1 KDPT7/qa0zvXuJeVCUgp6JrCZbz+x6SCm72dqvjkJ81hLlsc+DFFtkl98eoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8fr/jMCGDxMUJlUsBaunDgcFdwwHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnFyjotFRvenlbqsasulnqgUL3rutVf4WMy eKIq9AvSgyyOqowOVt1VnNkmmotgSlAApshTA/yvf5+Qt7Jku+9o6tRg8ndKGLjL 1xNoDr3pCHtEvpFtqcIiPF6jleE7cuLdevN7FyznaG1SbzyhjUYN64Z/7a3dCnfK NBAZ7CcKipUcZyQ93yjw85clM94TQ6xmT29iKD5o9sehSEsYNjYuoIEQx6J+gNj2 Wdh0q2KoC82pB4AZI9HHAnebaCn4JGWYcSYajKhUmIgmhv+zqq0niXBH3axgHY/q MyWdc8icN5HM8D3WfAW8kRnj2hsiv1r6D74bQaigRRz899jSTlg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:12 2026 by rpki-client