$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: uZkUA2UKPXpZH8QbutXwbmG2aJOgDi7TbF4L/Z0SC7o= Subject key identifier: 33:BA:82:3D:0E:C4:49:9D:96:A2:D4:3A:C5:CA:52:3D:FC:15:0F:55 Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 54D9E0695EF894096907E8D477146BF14D647DFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 0127 Signing time: Fri 06 Mar 2026 06:21:01 +0000 Manifest this update: Fri 06 Mar 2026 06:16:01 +0000 Manifest next update: Mon 09 Mar 2026 15:28:01 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: 0cyOrKmWUZDEWKNczrcPr6eyIGk2oJaJPj/5pt824t0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d9:e0:69:5e:f8:94:09:69:07:e8:d4:77:14:6b:f1:4d:64:7d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Mar 6 06:16:01 2026 GMT Not After : Mar 9 15:28:01 2026 GMT Subject: CN=33BA823D0EC4499D96A2D43AC5CA523DFC150F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:0f:23:9e:71:f6:6d:36:e8:d2:f6:86:d2: e6:31:31:cb:e5:f2:38:de:cb:55:3c:2f:df:94:ce: 80:0d:be:0e:7e:c7:e4:a3:f4:fb:d5:6b:34:fc:e5: 79:11:fe:47:2d:35:aa:fd:aa:3f:ed:aa:f2:4b:a2: 9e:8f:fd:4b:53:78:07:b4:1c:ca:31:6f:e3:bb:b1: 01:ad:97:72:62:b5:b8:27:63:f3:ea:84:33:39:27: f9:7d:c4:da:ce:88:e3:97:37:ae:2b:ff:ff:70:cf: 60:0f:64:81:8e:1b:b8:9d:7b:c1:a0:a7:c0:43:ad: 1e:74:64:74:98:6a:63:31:4f:9d:2e:2a:9c:41:98: b8:11:70:4e:c2:64:15:d6:9a:dc:3d:f8:ad:41:e3: 47:0b:c9:c0:d0:ae:78:2c:f7:ac:72:bf:c4:61:54: c6:27:46:c3:35:76:8c:6c:d5:53:3a:20:08:09:ec: e1:b1:97:3d:e1:50:e9:d2:ab:14:83:ed:bd:35:17: 02:5b:e9:c2:96:c9:0d:38:64:5b:e4:15:a2:8d:1c: 86:ae:9d:39:85:1a:ea:e0:84:ef:17:c4:ee:8d:66: ba:14:39:23:f0:bd:ef:ea:cf:5c:15:21:b4:07:3f: 11:db:60:2d:06:fb:df:99:19:1f:e0:45:76:b7:e8: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:82:3D:0E:C4:49:9D:96:A2:D4:3A:C5:CA:52:3D:FC:15:0F:55 X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f7:c1:65:0f:2c:fd:0c:ca:46:39:9e:c7:ce:f0:6b:06:5b:31: 70:92:2a:b3:33:37:23:72:d3:9b:40:27:58:0c:31:49:a9:34: 0f:c1:98:cb:4a:48:2b:5b:f7:25:24:ea:ca:c6:a6:d9:60:9e: ac:94:0b:ff:39:f0:ac:9e:7d:d6:91:9a:db:a6:bc:57:32:0c: b9:bd:bd:8f:0e:67:4b:ea:76:93:7b:b4:be:3b:9f:6b:9e:37: 05:ca:da:28:69:6e:10:10:5d:4b:c5:9a:68:7b:11:5a:fb:bb: 18:08:68:fe:9c:26:39:12:c8:39:fe:15:3f:7c:70:5c:d1:b9: 10:17:d2:17:bb:78:27:35:c8:55:d9:24:c2:a4:83:c8:43:7e: a7:ad:e6:23:56:02:4f:2b:3f:b7:25:69:19:05:37:f7:c0:2b: cd:07:66:d7:9e:8e:e5:42:96:e0:8a:d7:12:a2:8c:dd:8b:95: 17:4b:da:c6:28:c8:bb:97:27:6b:50:47:84:92:f5:42:a0:0b: d7:59:18:19:7a:d7:67:82:7f:51:53:4d:eb:f6:85:c0:1e:d9: 07:01:fe:41:7f:30:7b:b9:96:1a:78:5a:90:4a:df:44:ab:52: c8:89:d4:c3:4e:d4:c8:ae:5e:79:15:54:21:64:dd:f7:90:69: 2f:dd:e9:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNngaV74lAlpB+jUdxRr8U1kffswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNjAzMDYwNjE2MDFaFw0yNjAzMDkxNTI4MDFaMDMxMTAvBgNV BAMTKDMzQkE4MjNEMEVDNDQ5OUQ5NkEyRDQzQUM1Q0E1MjNERkMxNTBGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQA8jnnH2bTbo0vaG0uYxMcvl 8jjey1U8L9+UzoANvg5+x+Sj9PvVazT85XkR/kctNar9qj/tqvJLop6P/UtTeAe0 HMoxb+O7sQGtl3JitbgnY/PqhDM5J/l9xNrOiOOXN64r//9wz2APZIGOG7ide8Gg p8BDrR50ZHSYamMxT50uKpxBmLgRcE7CZBXWmtw9+K1B40cLycDQrngs96xyv8Rh VMYnRsM1doxs1VM6IAgJ7OGxlz3hUOnSqxSD7b01FwJb6cKWyQ04ZFvkFaKNHIau nTmFGurghO8XxO6NZroUOSPwve/qz1wVIbQHPxHbYC0G+9+ZGR/gRXa36HeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7qCPQ7ESZ2WotQ6xcpSPfwVD1UwHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPfBZQ8s/QzKRjmex87wawZbMXCSKrMzNyNy 05tAJ1gMMUmpNA/BmMtKSCtb9yUk6srGptlgnqyUC/858KyefdaRmtumvFcyDLm9 vY8OZ0vqdpN7tL47n2ueNwXK2ihpbhAQXUvFmmh7EVr7uxgIaP6cJjkSyDn+FT98 cFzRuRAX0he7eCc1yFXZJMKkg8hDfqet5iNWAk8rP7claRkFN/fAK80HZteejuVC luCK1xKijN2LlRdL2sYoyLuXJ2tQR4SS9UKgC9dZGBl612eCf1FTTev2hcAe2QcB /kF/MHu5lhp4WpBK30SrUsiJ1MNO1MiuXnkVVCFk3feQaS/d6fc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:29 2026 by rpki-client