$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: ZneuqD4jhPsSRkpOT3wVF489PP6gTiPZ6LYLv1L5KzY= Subject key identifier: 20:15:14:DB:C2:F7:58:DD:6F:09:F8:46:3E:09:4F:E0:78:AC:50:3D Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 52BB20573EFB7FB2EC5113A00487122050E1096B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0266 Signing time: Mon 02 Mar 2026 05:41:54 +0000 Manifest this update: Mon 02 Mar 2026 05:36:54 +0000 Manifest next update: Thu 05 Mar 2026 14:14:54 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: ypKXNU07QqsvG3MeXDX+/1EdHhF0F/jkIy1AiqkvAVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bb:20:57:3e:fb:7f:b2:ec:51:13:a0:04:87:12:20:50:e1:09:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Mar 2 05:36:54 2026 GMT Not After : Mar 5 14:14:54 2026 GMT Subject: CN=201514DBC2F758DD6F09F8463E094FE078AC503D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:82:e4:64:74:30:4d:f2:2f:7d:79:28:07: 0e:56:6e:67:6d:01:02:21:f0:50:da:a6:bc:fd:6c: 6e:72:42:ef:b2:a7:49:6c:2a:19:aa:e6:dd:df:20: 04:ee:cd:5b:71:14:be:4c:57:31:29:b9:4b:f7:4d: 17:04:3b:d8:7c:ea:34:f1:33:b1:0e:92:a3:ec:c8: a8:ae:10:d5:bd:00:11:99:82:7c:30:69:63:66:a8: b3:0c:74:43:66:b4:46:a4:f6:e5:70:9c:43:14:5f: cc:36:27:42:3d:c7:53:c8:fc:d1:8a:cc:f5:a8:7f: 03:e3:aa:de:26:22:b4:a3:36:aa:36:15:47:b0:1b: 92:82:c7:68:af:fc:65:bc:7b:2e:b6:5f:5d:01:44: 12:41:5c:57:65:6d:e1:52:44:00:4f:cc:24:4c:69: 52:b6:37:31:c2:67:21:20:4a:71:a2:d5:46:7e:06: 0c:5b:9d:81:87:50:50:f6:eb:c5:fa:c7:35:d8:e9: 87:6c:6c:20:c6:5b:7e:d0:f1:55:54:70:a0:92:82: 21:52:7a:60:b0:e0:e6:90:2b:43:57:32:14:ef:19: 36:75:95:da:4d:63:18:f7:67:86:a3:67:34:31:11: 52:4f:3f:de:26:e0:67:39:6a:14:f6:00:3b:6c:f5: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:15:14:DB:C2:F7:58:DD:6F:09:F8:46:3E:09:4F:E0:78:AC:50:3D X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:58:70:88:2b:d7:40:f2:81:9f:d8:45:88:06:65:0d:2b:7a: 22:a8:64:d0:58:41:30:4d:f5:fa:e3:46:02:22:5d:24:3f:d9: b4:13:7b:f9:59:9e:e8:cb:c2:c3:1f:c8:7a:6f:c3:82:61:0e: ec:b0:69:f3:a4:91:7c:9d:fc:91:b7:87:27:77:7a:82:58:3c: af:90:18:94:e3:30:f3:39:ae:c1:d2:9b:e8:b2:f0:44:8e:da: 42:3e:0f:ef:37:b9:3e:4a:3b:38:ab:66:8d:b0:d0:a1:7c:f2: 34:92:3d:7c:f8:df:e2:42:b2:e9:de:82:cb:5b:5f:1b:e5:41: 4b:64:d2:49:28:69:0f:58:1e:29:e0:53:e5:72:bc:1b:41:94: 34:62:c0:b1:a1:06:e3:b2:9e:16:82:88:63:e3:72:54:4e:8e: b5:bf:5e:af:67:7f:09:e2:e4:7c:9c:5f:18:3a:98:47:f4:19: 58:2a:8d:1b:61:be:45:37:9f:0c:2f:74:40:4e:c1:d0:db:ee: bf:e4:a2:93:1d:c6:22:63:43:f1:83:7e:e3:9b:43:4d:2a:66: 66:58:27:74:49:a3:b1:53:f4:84:a9:4e:14:13:c6:a8:f3:e7: fe:77:39:9d:6d:6c:5a:7a:4f:a9:94:dd:c5:21:45:51:f5:c0: 6a:f7:a1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrsgVz77f7LsUROgBIcSIFDhCWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNjAzMDIwNTM2NTRaFw0yNjAzMDUxNDE0NTRaMDMxMTAvBgNV BAMTKDIwMTUxNERCQzJGNzU4REQ2RjA5Rjg0NjNFMDk0RkUwNzhBQzUwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzYLkZHQwTfIvfXkoBw5Wbmdt AQIh8FDaprz9bG5yQu+yp0lsKhmq5t3fIATuzVtxFL5MVzEpuUv3TRcEO9h86jTx M7EOkqPsyKiuENW9ABGZgnwwaWNmqLMMdENmtEak9uVwnEMUX8w2J0I9x1PI/NGK zPWofwPjqt4mIrSjNqo2FUewG5KCx2iv/GW8ey62X10BRBJBXFdlbeFSRABPzCRM aVK2NzHCZyEgSnGi1UZ+BgxbnYGHUFD268X6xzXY6YdsbCDGW37Q8VVUcKCSgiFS emCw4OaQK0NXMhTvGTZ1ldpNYxj3Z4ajZzQxEVJPP94m4Gc5ahT2ADts9dYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBUU28L3WN1vCfhGPglP4HisUD0wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNYcIgr10DygZ/YRYgGZQ0reiKoZNBYQTBN 9frjRgIiXSQ/2bQTe/lZnujLwsMfyHpvw4JhDuywafOkkXyd/JG3hyd3eoJYPK+Q GJTjMPM5rsHSm+iy8ESO2kI+D+83uT5KOzirZo2w0KF88jSSPXz43+JCsunegstb XxvlQUtk0kkoaQ9YHingU+VyvBtBlDRiwLGhBuOynhaCiGPjclROjrW/Xq9nfwni 5HycXxg6mEf0GVgqjRthvkU3nwwvdEBOwdDb7r/kopMdxiJjQ/GDfuObQ00qZmZY J3RJo7FT9ISpThQTxqjz5/53OZ1tbFp6T6mU3cUhRVH1wGr3oeU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:53 2026 by rpki-client