$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: e79/b0rKrr5CUE/iE5iZmLMFUX6gSitzcCh78ToM2Ik= Subject key identifier: 77:9B:82:0B:34:C1:D5:45:6D:E8:2A:E5:F1:31:C6:0D:44:02:5E:25 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 13CF2E48903603548AF5E5A0AF04B1E439ABF360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0178 Signing time: Sun 01 Mar 2026 18:40:05 +0000 Manifest this update: Sun 01 Mar 2026 18:35:05 +0000 Manifest next update: Thu 05 Mar 2026 04:11:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: 5s2DBiDMhTQe7y5SzlwdmET0XQc+vy3aaBBTfxGG3Lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cf:2e:48:90:36:03:54:8a:f5:e5:a0:af:04:b1:e4:39:ab:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Mar 1 18:35:05 2026 GMT Not After : Mar 5 04:11:05 2026 GMT Subject: CN=779B820B34C1D5456DE82AE5F131C60D44025E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:6e:6f:5d:ed:57:31:d3:ef:2e:05:c7:7c: be:5b:81:5b:c2:9f:02:ed:7f:5a:d6:5a:f5:ab:c9: bf:44:cd:e3:71:99:7f:5b:99:c0:43:b1:b0:f8:8b: 21:b8:5e:df:c5:87:aa:09:39:93:1b:4c:c8:06:71: 73:75:31:4b:1c:ee:20:c1:4e:e1:49:5f:55:04:5e: 1b:a8:6b:50:5b:3e:8f:70:17:76:ef:98:af:71:d6: fb:00:a8:f4:64:28:9e:c3:b8:91:47:70:32:68:ce: 1f:3f:61:0a:6f:32:2f:8d:e3:09:ed:5d:f3:24:2c: b9:b0:9c:9e:a6:8d:97:75:7d:8c:81:00:75:30:5c: 44:93:94:be:29:18:9a:23:74:b6:c4:71:d6:1f:88: be:99:39:f6:8e:df:7d:fb:f9:a5:e9:0c:23:23:26: cc:2f:f2:d4:68:fd:2a:94:20:9d:a8:61:93:3e:b4: 89:59:1b:f1:49:22:89:8a:6d:12:0f:4e:07:8d:db: 3a:7d:55:2f:88:ec:ac:83:e5:bb:fc:8c:25:44:cc: b2:f4:7c:98:fc:34:91:2a:ae:1b:ce:a5:66:2d:aa: 88:2c:53:c4:57:0a:bd:c6:3e:2a:84:38:06:ae:a8: 53:f1:63:92:41:5f:f9:63:38:bb:3d:1b:e8:b2:23: 7f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9B:82:0B:34:C1:D5:45:6D:E8:2A:E5:F1:31:C6:0D:44:02:5E:25 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:55:2c:5e:89:c2:d5:27:e4:67:96:70:7a:a6:8e:42:9c:44: d4:22:1d:a2:c8:28:99:9e:6a:7a:12:a6:cd:2f:fb:64:4c:ed: 0c:28:26:5d:4d:1e:d9:26:1c:78:1e:36:9b:d4:b2:5e:e5:11: 97:ca:14:8b:36:5c:fa:5f:bb:2b:22:a1:8c:0f:d0:97:b7:79: 4c:24:af:08:84:1e:68:79:b6:75:f2:2a:c0:de:c2:44:15:a1: 9b:99:35:a2:16:e2:cd:70:22:3d:c9:bd:66:b6:a4:db:3f:5e: 46:11:d6:24:57:92:92:ca:eb:df:a8:87:8d:a8:a2:c2:29:62: d8:6e:a0:4c:69:cb:5a:b0:1c:aa:8e:aa:e8:3f:60:ff:3a:9c: 23:7c:40:75:b5:7e:b0:d9:29:dc:7f:36:fe:b6:40:1f:aa:71: 5c:f1:54:de:32:70:b2:9a:02:6c:16:ee:f4:62:72:0b:30:48: 9c:da:a0:76:6d:c7:a1:8a:1a:f1:ba:0c:a7:e6:5a:d5:14:3b: f7:36:d3:e1:a3:6d:ef:e9:34:4a:8a:29:8d:5c:2c:c0:06:3f: 8c:09:08:02:b2:c1:4b:75:15:0a:bc:51:6d:f1:d6:c2:25:52: 85:fb:17:a8:7e:01:d1:5c:56:8a:06:eb:02:69:6b:f8:8b:b5: 5c:df:ef:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE88uSJA2A1SK9eWgrwSx5Dmr82AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNjAzMDExODM1MDVaFw0yNjAzMDUwNDExMDVaMDMxMTAvBgNV BAMTKDc3OUI4MjBCMzRDMUQ1NDU2REU4MkFFNUYxMzFDNjBENDQwMjVFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgG5vXe1XMdPvLgXHfL5bgVvC nwLtf1rWWvWryb9EzeNxmX9bmcBDsbD4iyG4Xt/Fh6oJOZMbTMgGcXN1MUsc7iDB TuFJX1UEXhuoa1BbPo9wF3bvmK9x1vsAqPRkKJ7DuJFHcDJozh8/YQpvMi+N4wnt XfMkLLmwnJ6mjZd1fYyBAHUwXESTlL4pGJojdLbEcdYfiL6ZOfaO3337+aXpDCMj Jswv8tRo/SqUIJ2oYZM+tIlZG/FJIomKbRIPTgeN2zp9VS+I7KyD5bv8jCVEzLL0 fJj8NJEqrhvOpWYtqogsU8RXCr3GPiqEOAauqFPxY5JBX/ljOLs9G+iyI3/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd5uCCzTB1UVt6Crl8THGDUQCXiUwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFVLF6JwtUn5GeWcHqmjkKcRNQiHaLIKJme anoSps0v+2RM7QwoJl1NHtkmHHgeNpvUsl7lEZfKFIs2XPpfuysioYwP0Je3eUwk rwiEHmh5tnXyKsDewkQVoZuZNaIW4s1wIj3JvWa2pNs/XkYR1iRXkpLK69+oh42o osIpYthuoExpy1qwHKqOqug/YP86nCN8QHW1frDZKdx/Nv62QB+qcVzxVN4ycLKa AmwW7vRicgswSJzaoHZtx6GKGvG6DKfmWtUUO/c20+Gjbe/pNEqKKY1cLMAGP4wJ CAKywUt1FQq8UW3x1sIlUoX7F6h+AdFcVooG6wJpa/iLtVzf76Q= -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:29 2026 by rpki-client