$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: cGgtJBdaJDZ9ReKx0MY2pb6iypAiVNnkNl0RYV0xQJc= Subject key identifier: 7D:0F:20:8A:56:BE:DC:CA:07:B3:52:26:BA:A7:F6:C4:95:37:A4:3C Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 306AD34D832B8E2AF2457311683AB5E4B2CFCCB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 79 Signing time: Sat 28 Feb 2026 18:41:20 +0000 Manifest this update: Sat 28 Feb 2026 18:36:20 +0000 Manifest next update: Wed 04 Mar 2026 00:27:20 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: T5UbanJ/DfmcZVPfrlFjJ56AyxtdihEKCYxCkArn0iI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6a:d3:4d:83:2b:8e:2a:f2:45:73:11:68:3a:b5:e4:b2:cf:cc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Feb 28 18:36:20 2026 GMT Not After : Mar 4 00:27:20 2026 GMT Subject: CN=7D0F208A56BEDCCA07B35226BAA7F6C49537A43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:e6:e3:cc:5c:df:19:a2:c5:70:46:8d:96: b3:6c:b1:bc:b6:6e:11:a3:aa:ac:e0:07:64:b1:ff: 61:b8:4c:d6:65:62:0d:5c:3c:91:a3:d3:0e:ed:e2: 7c:dc:f8:92:53:d4:71:49:ca:e5:0a:b6:f4:1d:12: f2:ae:6e:d6:f0:61:4f:6e:c4:cc:2e:4d:7a:36:62: f3:a2:de:62:8c:63:6a:f0:55:79:64:6d:68:df:8a: 50:0c:41:5a:1f:8a:bc:dd:2c:26:a9:fd:fd:71:c6: bf:e8:7b:98:52:3d:d2:0d:51:55:74:fd:ef:e0:a1: c3:c9:20:44:78:77:51:f6:59:cc:a2:62:80:4c:21: ca:29:25:3b:5c:6d:82:26:8f:a8:55:85:14:8c:9e: e9:20:03:8f:84:cd:0f:b5:95:2d:74:c5:bd:18:5d: 22:67:fe:d1:2c:14:f3:9b:e4:5d:09:68:87:d5:41: 4b:2f:b0:88:dd:43:c2:49:27:c0:fc:1b:25:62:a0: 89:3e:43:bf:85:61:41:64:c6:8f:f7:43:dd:7b:2d: 82:0b:96:c4:0c:d5:18:a4:ea:dc:6f:d7:74:be:99: 69:4d:db:2d:d3:ab:42:95:a6:11:d7:51:cd:59:fd: e1:c9:3a:c7:9f:28:36:61:0b:78:f9:a4:d7:d5:7d: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:20:8A:56:BE:DC:CA:07:B3:52:26:BA:A7:F6:C4:95:37:A4:3C X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:df:ff:7f:10:9c:9c:e5:e8:22:73:3a:c0:5c:a2:a5:41:49: 70:f6:b0:8e:cb:51:a2:22:49:11:c2:0d:85:27:d8:eb:80:a1: 21:ce:54:e0:29:7a:1d:3d:0c:78:dc:52:4c:60:d6:25:ff:00: 6a:38:15:4e:d0:e6:f0:b6:06:88:f9:9f:2d:f7:eb:d7:3f:6d: 16:66:5a:36:4e:43:fb:ae:5e:9c:c3:22:a3:da:be:4c:55:05: ad:e7:56:26:26:a4:12:28:fc:47:67:7c:a1:39:4a:f5:f5:f3: eb:07:af:67:41:d8:45:e9:c9:20:9b:a7:9e:78:68:c2:25:36: 3d:c2:e3:c4:4a:84:f6:14:56:32:2d:96:7b:99:40:c8:99:dd: 7c:d2:21:d8:62:a5:83:f1:1e:85:c7:6f:ae:1b:d8:27:8d:cb: f9:76:34:a9:43:e0:f3:68:78:79:5d:1b:ee:86:b1:3b:53:59: a2:54:7c:63:6e:d9:db:11:23:1b:f2:cf:36:30:f8:7a:aa:4f: 9a:4f:4c:0e:58:55:4f:9e:87:02:a3:e6:01:2d:c4:c5:0a:34: 03:dc:c2:54:a6:dc:67:77:a4:0f:96:64:1f:32:a5:ed:d5:fb: ac:da:b2:03:20:5d:65:bd:05:f4:2a:41:34:15:9e:35:cd:0c: 3d:8b:ec:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGrTTYMrjiryRXMRaDq15LLPzLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNjAyMjgxODM2MjBaFw0yNjAzMDQwMDI3MjBaMDMxMTAvBgNV BAMTKDdEMEYyMDhBNTZCRURDQ0EwN0IzNTIyNkJBQTdGNkM0OTUzN0E0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgV+bjzFzfGaLFcEaNlrNssby2 bhGjqqzgB2Sx/2G4TNZlYg1cPJGj0w7t4nzc+JJT1HFJyuUKtvQdEvKubtbwYU9u xMwuTXo2YvOi3mKMY2rwVXlkbWjfilAMQVofirzdLCap/f1xxr/oe5hSPdINUVV0 /e/gocPJIER4d1H2WcyiYoBMIcopJTtcbYImj6hVhRSMnukgA4+EzQ+1lS10xb0Y XSJn/tEsFPOb5F0JaIfVQUsvsIjdQ8JJJ8D8GyVioIk+Q7+FYUFkxo/3Q917LYIL lsQM1Rik6txv13S+mWlN2y3Tq0KVphHXUc1Z/eHJOsefKDZhC3j5pNfVfbuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQ8gila+3MoHs1Imuqf2xJU3pDwwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACff/38QnJzl6CJzOsBcoqVBSXD2sI7LUaIi SRHCDYUn2OuAoSHOVOApeh09DHjcUkxg1iX/AGo4FU7Q5vC2Boj5ny3369c/bRZm WjZOQ/uuXpzDIqPavkxVBa3nViYmpBIo/EdnfKE5SvX18+sHr2dB2EXpySCbp554 aMIlNj3C48RKhPYUVjItlnuZQMiZ3XzSIdhipYPxHoXHb64b2CeNy/l2NKlD4PNo eHldG+6GsTtTWaJUfGNu2dsRIxvyzzYw+HqqT5pPTA5YVU+ehwKj5gEtxMUKNAPc wlSm3Gd3pA+WZB8ype3V+6zasgMgXWW9BfQqQTQVnjXNDD2L7IQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:24:26 2026 by rpki-client