$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: bwA9zDvWIXmIl3fZP9ZVhtb7mlDFlMyp948tJ9xHN5s= Subject key identifier: B4:96:C5:25:CF:51:F2:0B:E6:A0:FA:39:2E:B8:20:60:D3:18:6E:95 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 493167082100DF9203046BDEBBF651C79D538AE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04E8 Signing time: Sun 01 Mar 2026 23:51:40 +0000 Manifest this update: Sun 01 Mar 2026 23:46:40 +0000 Manifest next update: Thu 05 Mar 2026 11:36:40 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: 59+BZlJNJVjxe2AONr+9ct+111Ug5pkthV1zVoCM/Xg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:31:67:08:21:00:df:92:03:04:6b:de:bb:f6:51:c7:9d:53:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Mar 1 23:46:40 2026 GMT Not After : Mar 5 11:36:40 2026 GMT Subject: CN=B496C525CF51F20BE6A0FA392EB82060D3186E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:8a:cc:34:8b:75:f0:69:3e:ee:cc:04:b1: 28:8c:f9:52:e6:1a:ef:5b:1e:14:d7:0b:7c:57:a3: a2:4e:b6:c4:88:c0:5b:f3:de:2b:93:45:0f:bb:e5: f8:e8:d7:e6:55:d5:a6:c3:86:63:ca:e1:3d:e9:ba: f2:d9:7e:49:52:3d:08:18:74:f2:f4:8a:68:94:0a: a2:48:57:af:8f:7a:23:91:b0:5f:5a:1b:dc:b9:2a: 25:1a:84:59:7c:ec:be:e5:45:72:1d:2d:f0:dc:40: 2e:34:7f:7a:06:7e:7f:d2:1d:72:38:1d:c2:1c:b1: 32:48:84:3a:82:a3:de:6d:f5:3a:10:64:cf:ea:93: f3:f1:ea:ad:37:57:9a:a4:7c:3c:b2:70:5c:86:85: 67:76:4f:56:b1:85:d6:e1:a3:d3:65:0a:75:4a:d0: bb:6b:14:dc:30:38:43:6e:40:55:5e:60:24:c0:87: ca:8f:ea:18:9a:52:07:18:e6:06:59:93:eb:72:1f: e1:c3:c0:cd:f5:8a:8e:c8:ea:be:fa:39:be:3a:6f: a7:21:a4:24:89:ad:ed:58:97:1a:a3:d1:ca:10:25: 48:0b:54:c4:3d:93:68:c3:49:16:13:8e:04:3d:c3: 9f:1c:41:86:c1:96:a3:85:11:99:63:5c:3d:da:3a: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:C5:25:CF:51:F2:0B:E6:A0:FA:39:2E:B8:20:60:D3:18:6E:95 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1c:46:65:7c:82:8c:5c:9d:41:1c:72:38:ec:da:99:0f:88: d6:77:ac:0c:2a:56:fd:cb:58:47:d3:20:e9:1c:32:4d:41:f6: 3c:f1:7e:5c:96:f9:e1:41:cc:79:f6:6c:56:02:c8:9e:70:28: 77:87:63:00:91:94:71:44:7d:22:34:e7:9d:b2:2e:aa:74:a9: 24:00:2c:69:57:b0:46:84:01:47:77:8b:c6:15:bb:df:29:50: 74:26:73:04:c8:53:0a:ab:67:ca:fc:04:40:91:86:f0:bd:ef: 59:91:9f:5f:6d:e4:77:61:b5:2f:47:aa:bb:ab:15:bf:a6:e2: 83:ef:58:ff:2e:d1:f9:46:b2:6f:a4:73:ae:ae:20:25:e3:04: 1a:6d:58:f4:c7:e4:ca:08:a7:bc:0e:df:83:48:b6:30:5a:d6: ca:bb:66:73:a7:6f:be:b8:5c:bc:fa:46:58:94:2f:3e:39:f1: 7d:58:f5:49:c5:6c:8a:e3:d8:db:11:ed:e5:c5:94:0f:7f:e1: 55:b1:1c:9c:ab:35:3e:5a:52:f1:bc:62:86:78:8d:69:b4:3b: 9d:c4:27:d3:1b:98:7e:84:b3:a3:4a:55:66:c7:04:0a:f6:e8: b2:83:eb:49:c4:70:bd:80:2a:9f:76:b9:e8:bd:19:68:b5:10: b1:7b:2b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTFnCCEA35IDBGveu/ZRx51TiugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNjAzMDEyMzQ2NDBaFw0yNjAzMDUxMTM2NDBaMDMxMTAvBgNV BAMTKEI0OTZDNTI1Q0Y1MUYyMEJFNkEwRkEzOTJFQjgyMDYwRDMxODZFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguorMNIt18Gk+7swEsSiM+VLm Gu9bHhTXC3xXo6JOtsSIwFvz3iuTRQ+75fjo1+ZV1abDhmPK4T3puvLZfklSPQgY dPL0imiUCqJIV6+PeiORsF9aG9y5KiUahFl87L7lRXIdLfDcQC40f3oGfn/SHXI4 HcIcsTJIhDqCo95t9ToQZM/qk/Px6q03V5qkfDyycFyGhWd2T1axhdbho9NlCnVK 0LtrFNwwOENuQFVeYCTAh8qP6hiaUgcY5gZZk+tyH+HDwM31io7I6r76Ob46b6ch pCSJre1Ylxqj0coQJUgLVMQ9k2jDSRYTjgQ9w58cQYbBlqOFEZljXD3aOq5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJbFJc9R8gvmoPo5LrggYNMYbpUwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAocRmV8goxcnUEccjjs2pkPiNZ3rAwqVv3L WEfTIOkcMk1B9jzxflyW+eFBzHn2bFYCyJ5wKHeHYwCRlHFEfSI0552yLqp0qSQA LGlXsEaEAUd3i8YVu98pUHQmcwTIUwqrZ8r8BECRhvC971mRn19t5HdhtS9Hqrur Fb+m4oPvWP8u0flGsm+kc66uICXjBBptWPTH5MoIp7wO34NItjBa1sq7ZnOnb764 XLz6RliULz458X1Y9UnFbIrj2NsR7eXFlA9/4VWxHJyrNT5aUvG8YoZ4jWm0O53E J9MbmH6Es6NKVWbHBAr26LKD60nEcL2AKp92uei9GWi1ELF7K1M= -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:26 2026 by rpki-client