$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: deiATed4A8cr/j67Ye54WAprMy1nmzf8Om7SfIUOjzQ= Subject key identifier: D3:C7:FA:DC:E7:AF:9F:5A:A0:43:31:6E:83:69:F5:80:39:A4:E6:8E Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 4260CA72DB7879F819F287594C7680AF53F808DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 01D0 Signing time: Tue 24 Mar 2026 10:11:22 +0000 Manifest this update: Tue 24 Mar 2026 10:06:22 +0000 Manifest next update: Fri 27 Mar 2026 13:11:22 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: G+LoLfcLIR37SYm6uMUv+iGgtSFvDwSJkVjGSUwwYUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:60:ca:72:db:78:79:f8:19:f2:87:59:4c:76:80:af:53:f8:08:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Mar 24 10:06:22 2026 GMT Not After : Mar 27 13:11:22 2026 GMT Subject: CN=D3C7FADCE7AF9F5AA043316E8369F58039A4E68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:ec:6c:c4:bf:e8:86:8c:69:9a:02:d0:a7: ba:b3:40:d7:61:46:8b:34:c0:6a:0c:55:e2:14:12: a0:5f:d4:57:fe:a4:ff:78:f0:ad:74:28:2d:0c:8e: 9a:a9:98:fd:6d:fb:87:24:f0:00:64:5c:7d:3e:f2: 80:57:b0:69:6b:08:21:1b:bc:48:e9:0b:80:8c:6f: 53:d3:12:72:62:70:db:2b:01:05:d5:84:c2:85:6f: b1:00:89:b6:be:7a:cb:42:27:04:fb:5c:cf:58:5f: 00:6f:2b:db:c6:ba:5e:d2:d8:e6:ca:a6:42:25:98: 74:16:14:8d:e7:12:6f:2d:cd:5e:37:d7:ed:2e:be: 7a:d8:5b:fb:db:25:3a:f3:13:68:fc:76:5b:17:0f: 30:a3:57:cb:dc:34:4e:28:2c:44:83:73:ae:d4:8e: a0:c5:73:8a:a5:aa:af:dd:8c:92:45:cd:08:55:b3: 5c:48:31:b6:67:cd:2d:d0:cd:a4:5c:2f:48:8d:01: 47:dc:42:48:4d:a1:dd:ec:ed:f3:bc:21:87:55:d8: cc:cc:04:14:53:b1:1d:bf:39:dc:27:21:05:84:d4: 84:b1:10:32:12:af:d1:7d:90:4a:a3:12:46:28:cb: c8:f4:91:1c:6b:7c:41:64:2e:52:e5:50:cd:fa:26: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:FA:DC:E7:AF:9F:5A:A0:43:31:6E:83:69:F5:80:39:A4:E6:8E X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:44:78:3f:10:66:2b:ac:c9:bf:18:46:c1:fb:eb:94:13:b4: b5:18:27:40:7e:4f:ef:7c:86:b0:0e:f7:cd:31:ca:02:35:0b: e6:b1:91:18:d3:40:ae:80:ce:d0:25:8a:34:ab:56:13:5b:f3: 64:15:f4:77:f0:d9:ab:7e:02:c5:7a:b5:8f:2a:70:28:c4:f2: 4d:1e:9f:b6:2d:df:53:79:f5:7d:55:c0:3c:b9:10:be:dd:a5: 8d:ef:12:b1:20:8d:7d:1c:83:f6:a0:33:e6:31:ff:64:3b:ef: 23:59:a4:79:ef:2f:04:47:89:bb:c3:d1:22:d0:b1:24:c8:ce: ee:2d:00:bf:c2:95:0e:2c:7b:56:99:ba:dc:ab:4a:d9:28:9e: 43:3e:74:76:4d:f8:9c:40:92:7e:12:fa:13:a8:07:d4:5a:78: f5:e3:18:98:ae:b7:6d:d3:2f:45:cc:cd:09:7b:3c:22:bf:f8: cf:5f:66:52:58:a1:d7:83:4f:19:ba:48:75:a1:52:a1:72:2e: 08:3e:b7:69:0a:3d:36:0a:22:14:97:e0:b4:4e:d0:ea:6e:44: 38:76:f9:3e:8b:e6:6b:61:93:ea:50:1d:83:50:7c:76:b5:56: 01:66:78:9a:59:a0:ad:f7:c9:0e:68:e6:50:14:84:fb:3a:38: 84:d9:e9:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmDKctt4efgZ8odZTHaAr1P4CN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNjAzMjQxMDA2MjJaFw0yNjAzMjcxMzExMjJaMDMxMTAvBgNV BAMTKEQzQzdGQURDRTdBRjlGNUFBMDQzMzE2RTgzNjlGNTgwMzlBNEU2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdw+xsxL/ohoxpmgLQp7qzQNdh Ros0wGoMVeIUEqBf1Ff+pP948K10KC0MjpqpmP1t+4ck8ABkXH0+8oBXsGlrCCEb vEjpC4CMb1PTEnJicNsrAQXVhMKFb7EAiba+estCJwT7XM9YXwBvK9vGul7S2ObK pkIlmHQWFI3nEm8tzV431+0uvnrYW/vbJTrzE2j8dlsXDzCjV8vcNE4oLESDc67U jqDFc4qlqq/djJJFzQhVs1xIMbZnzS3QzaRcL0iNAUfcQkhNod3s7fO8IYdV2MzM BBRTsR2/OdwnIQWE1ISxEDISr9F9kEqjEkYoy8j0kRxrfEFkLlLlUM36JuDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08f63Oevn1qgQzFug2n1gDmk5o4wHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpEeD8QZiusyb8YRsH765QTtLUYJ0B+T+98 hrAO980xygI1C+axkRjTQK6AztAlijSrVhNb82QV9Hfw2at+AsV6tY8qcCjE8k0e n7Yt31N59X1VwDy5EL7dpY3vErEgjX0cg/agM+Yx/2Q77yNZpHnvLwRHibvD0SLQ sSTIzu4tAL/ClQ4se1aZutyrStkonkM+dHZN+JxAkn4S+hOoB9RaePXjGJiut23T L0XMzQl7PCK/+M9fZlJYodeDTxm6SHWhUqFyLgg+t2kKPTYKIhSX4LRO0OpuRDh2 +T6L5mthk+pQHYNQfHa1VgFmeJpZoK33yQ5o5lAUhPs6OITZ6cc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:11 2026 by rpki-client