$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: QTwqVUL3YSVIxQcb3nkzPIRQfsJ69XAL3b0SL0jjMWQ= Subject key identifier: 7B:B2:B9:05:21:4C:FA:E7:9D:6E:0D:13:6E:0D:1C:06:DD:0C:FD:39 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 6FA0AD1697368EA6849C8E583ADE1756302C4203 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 0111 Signing time: Wed 18 Mar 2026 01:52:01 +0000 Manifest this update: Wed 18 Mar 2026 01:47:01 +0000 Manifest next update: Sat 21 Mar 2026 01:52:01 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: cmnBrC0Ot0o5PknOlUtXqI1MTMlCJ1/s+d7sX/lqwXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 01:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a0:ad:16:97:36:8e:a6:84:9c:8e:58:3a:de:17:56:30:2c:42:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Mar 18 01:47:01 2026 GMT Not After : Mar 21 01:52:01 2026 GMT Subject: CN=7BB2B905214CFAE79D6E0D136E0D1C06DD0CFD39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:27:75:e3:38:9c:d0:16:c5:ce:4a:a6:4d:c2: e3:43:e8:7b:1e:16:38:d5:69:ef:80:fe:7f:34:21: f9:be:cf:98:63:de:3a:74:ce:bd:53:bc:c0:30:16: 1b:bf:0c:22:e6:a6:01:16:d5:7c:58:b7:58:c7:16: 1d:fc:87:cb:62:c2:60:d5:d0:ef:cd:6c:e9:50:35: 1b:45:f8:e8:90:f7:5f:15:70:97:0d:f8:6c:71:51: 11:59:e7:cd:13:d9:6a:b7:0b:aa:40:1f:eb:a5:b1: 65:ec:e9:36:00:99:a0:b1:0a:c9:c7:09:3b:0f:55: 1b:72:73:3a:75:b3:2b:92:52:7d:3f:1e:ca:ab:90: 2b:b6:b6:0f:06:6d:98:31:50:8d:05:9b:4b:a1:fd: 89:ef:d3:e0:3c:f7:a7:bf:ce:0b:f8:94:06:82:06: 4e:d5:14:fb:84:4d:91:f2:68:e5:db:86:4d:3f:4c: 99:af:e3:61:0c:b4:81:4c:7e:03:c3:44:08:6b:29: ef:5a:53:2b:df:e7:50:45:04:94:96:50:d3:d5:2e: de:32:ee:07:b9:b5:bb:0c:15:ee:9e:ed:8c:27:00: 9d:f0:22:0f:f7:18:e1:8a:25:67:53:c9:64:1f:78: 07:f9:ab:8c:7d:3d:60:d1:72:b4:18:8b:a7:b9:9c: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B2:B9:05:21:4C:FA:E7:9D:6E:0D:13:6E:0D:1C:06:DD:0C:FD:39 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:46:69:e5:1c:ea:3b:40:03:f8:21:3f:9e:86:54:b2:96:db: 49:a0:a4:dc:96:4d:7d:2e:d0:6a:1d:43:62:cb:e3:e0:06:c4: d1:a6:a1:da:9b:be:63:35:b7:b4:9c:3e:8d:f6:9f:35:e0:94: 3a:fd:b2:24:55:93:c2:97:93:9d:ea:b6:93:79:06:41:0d:d1: 18:33:6e:f4:8f:5f:67:1b:c2:aa:ad:37:5c:a3:bb:1d:64:b3: 46:81:c5:00:b3:ca:fb:f1:24:38:0a:73:e6:60:b4:33:c2:1e: 36:91:43:28:91:42:8c:83:56:ca:47:44:85:47:ff:e3:b0:72: 8b:b4:d9:b3:9c:17:17:1f:cf:84:7d:ac:90:f6:cc:6f:22:9b: 28:24:55:54:50:48:14:5f:d4:0f:eb:02:92:22:6b:e7:2a:8f: bb:9d:ee:a9:a0:57:c6:a9:89:6d:c7:4e:77:0b:50:5e:6c:c1: 51:e2:3a:5d:ea:a9:de:7d:80:7a:03:13:5c:34:ea:2f:5b:dd: 35:7d:46:45:c5:3c:6a:f3:13:3f:0d:1e:2c:fc:3a:c5:82:8c: d3:6f:d2:64:8c:03:97:76:07:de:02:14:44:66:d4:05:0b:db: 79:05:d5:7e:ad:25:08:eb:e8:90:3b:23:1e:68:dc:18:fe:92: de:86:46:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6CtFpc2jqaEnI5YOt4XVjAsQgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNjAzMTgwMTQ3MDFaFw0yNjAzMjEwMTUyMDFaMDMxMTAvBgNV BAMTKDdCQjJCOTA1MjE0Q0ZBRTc5RDZFMEQxMzZFMEQxQzA2REQwQ0ZEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJ3XjOJzQFsXOSqZNwuND6Hse FjjVae+A/n80Ifm+z5hj3jp0zr1TvMAwFhu/DCLmpgEW1XxYt1jHFh38h8tiwmDV 0O/NbOlQNRtF+OiQ918VcJcN+GxxURFZ580T2Wq3C6pAH+ulsWXs6TYAmaCxCsnH CTsPVRtyczp1syuSUn0/HsqrkCu2tg8GbZgxUI0Fm0uh/Ynv0+A896e/zgv4lAaC Bk7VFPuETZHyaOXbhk0/TJmv42EMtIFMfgPDRAhrKe9aUyvf51BFBJSWUNPVLt4y 7ge5tbsMFe6e7YwnAJ3wIg/3GOGKJWdTyWQfeAf5q4x9PWDRcrQYi6e5nA+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7K5BSFM+uedbg0Tbg0cBt0M/TkwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClGaeUc6jtAA/ghP56GVLKW20mgpNyWTX0u 0GodQ2LL4+AGxNGmodqbvmM1t7ScPo32nzXglDr9siRVk8KXk53qtpN5BkEN0Rgz bvSPX2cbwqqtN1yjux1ks0aBxQCzyvvxJDgKc+ZgtDPCHjaRQyiRQoyDVspHRIVH /+Owcou02bOcFxcfz4R9rJD2zG8imygkVVRQSBRf1A/rApIia+cqj7ud7qmgV8ap iW3HTncLUF5swVHiOl3qqd59gHoDE1w06i9b3TV9RkXFPGrzEz8NHiz8OsWCjNNv 0mSMA5d2B94CFERm1AUL23kF1X6tJQjr6JA7Ix5o3Bj+kt6GRvE= -----END CERTIFICATE-----Generated at Thu Mar 19 09:29:36 2026 by rpki-client