$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: MlcPvEDqGBT9HWgqCGyP6wlHwh99LiMii16TAHINsU8= Subject key identifier: 91:9D:22:7E:56:72:C0:BC:D5:DE:0E:99:9D:FA:92:0F:33:CC:5F:BA Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 1151DAEFB379E12C3779E1C4335F9861E17F7A08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 02A0 Signing time: Thu 26 Mar 2026 10:51:36 +0000 Manifest this update: Thu 26 Mar 2026 10:46:36 +0000 Manifest next update: Sun 29 Mar 2026 21:27:36 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: DSMcHlSKKOOEv1OJQGHSRlO8xXrpgOgSyqDPgJaniVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:51:da:ef:b3:79:e1:2c:37:79:e1:c4:33:5f:98:61:e1:7f:7a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Mar 26 10:46:36 2026 GMT Not After : Mar 29 21:27:36 2026 GMT Subject: CN=919D227E5672C0BCD5DE0E999DFA920F33CC5FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:3f:22:ec:7e:dc:e6:77:17:da:bd:f5:c7: de:54:f5:56:da:e6:48:43:47:9c:34:43:7b:7a:05: 04:d6:92:ad:c1:5c:b6:95:d7:ea:d9:4c:49:24:e5: b2:cc:e1:44:ee:2c:8f:0b:aa:8b:0d:0e:42:dc:82: 31:f9:7b:96:25:1c:6f:c5:1a:ed:ef:bb:29:45:59: 74:d2:4c:cf:ca:ae:10:4d:82:49:db:fa:82:69:df: 6d:c4:9a:ae:8c:e8:f8:4f:c5:90:b4:37:9d:e9:98: 7f:06:a4:b8:12:a3:02:e0:9a:25:5e:63:b4:6d:e3: 38:75:67:b5:6e:f1:9a:46:6d:bc:c1:72:bc:ca:13: d4:75:b4:77:ba:5a:e7:a0:78:e0:be:7c:db:f1:dc: 70:43:70:b0:da:37:94:48:74:02:6b:cc:8b:5f:20: 49:02:84:d0:e7:7c:38:1b:68:6a:89:2d:81:0e:7e: bd:17:85:9e:44:af:d7:03:b6:30:8f:2d:e1:b5:cb: 96:9e:98:87:a1:14:e9:31:0c:13:bd:f4:0a:63:50: e1:da:d3:d7:61:ef:0d:c3:4e:f0:dd:e7:3a:06:12: c5:60:1b:6c:97:b2:62:15:25:e4:aa:45:c1:ba:23: c6:f9:02:2a:90:54:ca:22:b9:d9:29:16:fa:eb:54: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:22:7E:56:72:C0:BC:D5:DE:0E:99:9D:FA:92:0F:33:CC:5F:BA X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:71:c3:87:fa:3c:c2:99:8e:21:f0:58:18:41:8c:45:05:f6: cd:78:2a:15:ee:52:01:cb:ec:1f:b3:f7:a8:dd:95:6a:7b:67: 0a:68:35:f9:6e:de:1b:84:3c:05:bf:3d:7f:80:d9:f1:c7:c4: 7c:ef:42:b3:01:da:52:9a:3f:1b:ab:94:cb:4c:d7:95:0a:56: 58:2e:d4:ec:e9:29:e9:36:3b:e8:2f:d9:2a:75:52:27:fe:4f: d6:fe:3a:2e:20:d6:16:48:a3:f8:95:a3:ec:da:10:30:5a:e2: 69:ad:9b:19:ec:f0:4e:90:ec:24:05:1c:7d:be:10:74:30:4b: d2:16:23:39:58:d8:01:c3:1b:cc:75:12:eb:ef:2b:6b:09:ce: aa:53:3a:11:9f:c5:53:af:fe:99:54:34:6b:02:87:b9:10:9c: 0d:8b:26:42:90:86:4a:aa:58:04:04:52:37:93:9d:77:32:48: a4:bb:1b:7e:72:39:01:b0:84:ac:ac:a3:79:3f:f4:18:23:e6: ec:fb:5c:16:2a:ba:f0:dd:73:ee:1d:1b:98:9c:33:a5:61:02: 52:16:a1:4c:a4:78:40:a5:8f:ed:95:b8:c6:45:4c:1a:d8:3c: 38:97:6a:a5:2f:84:c5:57:be:81:07:f5:dc:98:a7:24:b9:98: 65:e1:95:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVHa77N54Sw3eeHEM1+YYeF/eggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNjAzMjYxMDQ2MzZaFw0yNjAzMjkyMTI3MzZaMDMxMTAvBgNV BAMTKDkxOUQyMjdFNTY3MkMwQkNENURFMEU5OTlERkE5MjBGMzNDQzVGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+D8i7H7c5ncX2r31x95U9Vba 5khDR5w0Q3t6BQTWkq3BXLaV1+rZTEkk5bLM4UTuLI8LqosNDkLcgjH5e5YlHG/F Gu3vuylFWXTSTM/KrhBNgknb+oJp323Emq6M6PhPxZC0N53pmH8GpLgSowLgmiVe Y7Rt4zh1Z7Vu8ZpGbbzBcrzKE9R1tHe6WuegeOC+fNvx3HBDcLDaN5RIdAJrzItf IEkChNDnfDgbaGqJLYEOfr0XhZ5Er9cDtjCPLeG1y5aemIehFOkxDBO99ApjUOHa 09dh7w3DTvDd5zoGEsVgG2yXsmIVJeSqRcG6I8b5AiqQVMoiudkpFvrrVHp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZ0iflZywLzV3g6ZnfqSDzPMX7owHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxxw4f6PMKZjiHwWBhBjEUF9s14KhXuUgHL 7B+z96jdlWp7ZwpoNflu3huEPAW/PX+A2fHHxHzvQrMB2lKaPxurlMtM15UKVlgu 1OzpKek2O+gv2Sp1Uif+T9b+Oi4g1hZIo/iVo+zaEDBa4mmtmxns8E6Q7CQFHH2+ EHQwS9IWIzlY2AHDG8x1EuvvK2sJzqpTOhGfxVOv/plUNGsCh7kQnA2LJkKQhkqq WAQEUjeTnXcySKS7G35yOQGwhKyso3k/9Bgj5uz7XBYquvDdc+4dG5icM6VhAlIW oUykeEClj+2VuMZFTBrYPDiXaqUvhMVXvoEH9dyYpyS5mGXhlbk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:12 2026 by rpki-client