$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: Dvr0PP1SkHUfjM0+9psJPe9IbiiNIbh7pc/QlxgzO0A= Subject key identifier: 28:BB:7E:C0:B7:8E:61:0F:4F:8F:72:5E:E5:3B:62:87:F8:C7:7F:2D Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 32BED949E407340D44DF9562EDBE82065A67DD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 029F Signing time: Tue 17 Mar 2026 14:00:53 +0000 Manifest this update: Tue 17 Mar 2026 13:55:53 +0000 Manifest next update: Fri 20 Mar 2026 14:08:53 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: ojCO5/EYFCOGIV3isOY4ACbzr+2MsZroTRPohzObHzo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 14:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:be:d9:49:e4:07:34:0d:44:df:95:62:ed:be:82:06:5a:67:dd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Mar 17 13:55:53 2026 GMT Not After : Mar 20 14:08:53 2026 GMT Subject: CN=28BB7EC0B78E610F4F8F725EE53B6287F8C77F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:d4:54:a4:ea:9c:47:86:68:44:4b:16:88: 5e:57:1e:d4:f7:26:5c:5a:ac:5e:1b:97:38:df:b8: 25:32:18:ce:fb:8c:28:c2:23:ac:e7:63:fb:43:24: 39:0d:0d:5a:b5:39:33:82:ef:0f:5a:88:ce:84:7a: db:bb:ca:fb:ea:d8:25:07:c7:ef:d2:53:b3:1f:51: 99:40:09:a9:5e:5e:94:be:e0:8c:8e:04:8f:36:0a: fd:d9:5a:5b:a4:41:48:39:9f:4e:4d:60:e1:1c:30: 9c:5f:1c:60:9c:6d:6d:db:d3:9b:55:d3:63:a9:db: 31:db:f0:32:d6:00:9e:9b:8a:aa:f9:bc:23:11:b4: e2:02:1a:08:7c:3d:d7:69:65:96:f1:70:9a:c0:84: 1f:4b:72:9a:ca:d0:1e:e5:93:ef:ab:cb:56:f5:53: e2:1a:b2:54:a7:0b:88:b1:54:70:be:ed:f3:db:73: 32:2a:e2:6d:57:7f:70:c6:c3:14:45:db:6a:db:61: 2a:8d:e7:04:5c:d8:5d:e8:51:a9:57:55:72:ab:4c: ad:81:e4:62:e6:df:17:dd:3b:14:cd:a3:41:f4:42: db:48:67:97:11:bd:7f:8b:33:c4:3b:b8:21:4e:8f: c9:2a:e6:2d:5d:83:c2:c9:c3:56:51:9b:f1:f5:3d: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BB:7E:C0:B7:8E:61:0F:4F:8F:72:5E:E5:3B:62:87:F8:C7:7F:2D X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6d:5b:c3:7b:f2:0b:b9:c4:91:e3:04:1e:de:d0:98:bf:9a: b5:86:be:a9:e5:c1:c8:59:c8:44:02:87:77:d1:cf:d3:dc:64: 70:54:c2:0d:98:89:c2:b7:49:ae:4b:8b:cb:37:25:ea:c0:7a: 6a:39:46:a4:c4:10:94:20:8d:7b:cd:d2:e8:3c:ce:8e:68:5b: 89:41:88:24:b5:d0:3e:f5:c4:a9:1c:7e:c4:9b:7d:65:e1:6f: c2:ea:a4:37:5b:fc:c4:09:95:e9:67:43:c1:66:a8:08:3f:3f: 4f:06:26:ea:e1:9f:56:14:4a:0c:dc:4b:5c:de:eb:1f:25:2c: 2e:8c:c5:7b:ae:a0:11:67:80:11:71:42:9e:36:a1:c5:db:b4: 15:10:b6:e0:60:20:1e:bb:7b:32:f5:b1:3f:5e:f1:93:d9:a9: 1f:e3:37:9e:9a:b1:9f:ea:55:3a:be:dc:82:6f:d6:04:c9:a1: d5:a9:05:9a:2e:2d:40:4c:11:4c:48:07:c8:85:57:2f:e8:02: d4:97:55:25:74:28:62:7e:bf:12:97:13:f3:72:ef:a5:97:69: 32:c2:73:f2:08:40:aa:29:b9:a8:a2:81:16:9b:bb:21:20:c2: a7:39:9a:69:52:3a:57:76:15:86:87:ce:db:69:31:11:0f:4f: f6:15:b0:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMr7ZSeQHNA1E35Vi7b6CBlpn3XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNjAzMTcxMzU1NTNaFw0yNjAzMjAxNDA4NTNaMDMxMTAvBgNV BAMTKDI4QkI3RUMwQjc4RTYxMEY0RjhGNzI1RUU1M0I2Mjg3RjhDNzdGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLtRUpOqcR4ZoREsWiF5XHtT3 JlxarF4blzjfuCUyGM77jCjCI6znY/tDJDkNDVq1OTOC7w9aiM6Eetu7yvvq2CUH x+/SU7MfUZlACaleXpS+4IyOBI82Cv3ZWlukQUg5n05NYOEcMJxfHGCcbW3b05tV 02Op2zHb8DLWAJ6biqr5vCMRtOICGgh8PddpZZbxcJrAhB9LcprK0B7lk++ry1b1 U+IaslSnC4ixVHC+7fPbczIq4m1Xf3DGwxRF22rbYSqN5wRc2F3oUalXVXKrTK2B 5GLm3xfdOxTNo0H0QttIZ5cRvX+LM8Q7uCFOj8kq5i1dg8LJw1ZRm/H1PbTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKLt+wLeOYQ9Pj3Je5Ttih/jHfy0wHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhtW8N78gu5xJHjBB7e0Ji/mrWGvqnlwchZ yEQCh3fRz9PcZHBUwg2YicK3Sa5Li8s3JerAemo5RqTEEJQgjXvN0ug8zo5oW4lB iCS10D71xKkcfsSbfWXhb8LqpDdb/MQJlelnQ8FmqAg/P08GJurhn1YUSgzcS1ze 6x8lLC6MxXuuoBFngBFxQp42ocXbtBUQtuBgIB67ezL1sT9e8ZPZqR/jN56asZ/q VTq+3IJv1gTJodWpBZouLUBMEUxIB8iFVy/oAtSXVSV0KGJ+vxKXE/Ny76WXaTLC c/IIQKopuaiigRabuyEgwqc5mmlSOld2FYaHzttpMREPT/YVsBU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:44 2026 by rpki-client