$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: /VdrffgvDWpbCIJTr1gImnYIixRuOg9eP8Wh4L3Far4= Subject key identifier: D0:8A:D5:0E:CF:F5:9F:D6:58:5E:9E:D0:18:16:3B:14:78:52:2C:EE Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 79BC9F3BBB70395099A063E188B1AAC9759DA7E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 0117 Signing time: Wed 25 Mar 2026 05:41:38 +0000 Manifest this update: Wed 25 Mar 2026 05:36:38 +0000 Manifest next update: Sat 28 Mar 2026 11:03:38 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: uMMTjtTnzerk/gBHBULcyzBlr7lxV+xcWLa5PhVPjYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bc:9f:3b:bb:70:39:50:99:a0:63:e1:88:b1:aa:c9:75:9d:a7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Mar 25 05:36:38 2026 GMT Not After : Mar 28 11:03:38 2026 GMT Subject: CN=D08AD50ECFF59FD6585E9ED018163B1478522CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:b3:2a:bd:1c:38:ef:94:cf:ea:e8:46:a9: ed:eb:f6:06:b9:ef:b7:85:34:8f:cf:ff:5c:1e:51: dd:ac:9c:d2:b2:de:41:53:8c:9d:af:91:78:91:05: 52:a4:db:6d:6b:0b:aa:a9:5e:fa:43:55:1b:08:87: f6:96:a2:8b:7b:ff:c9:38:0b:73:3e:75:3d:57:a9: 1b:eb:bc:5d:54:c9:78:5a:f7:4e:ea:81:ef:da:55: ac:89:58:f0:68:c0:ff:5c:0c:b0:1a:d3:29:09:e5: 63:a1:06:72:65:9b:5a:b4:1b:79:b9:68:bb:a3:2a: c1:41:11:50:76:93:8b:6f:fb:9b:16:01:52:b8:83: 4b:ab:55:17:33:ca:28:de:69:ef:76:01:3e:4d:35: 26:30:80:5e:70:5a:93:d8:d6:d0:3a:69:85:46:68: 90:c7:99:80:3f:cc:81:96:45:39:79:d9:34:54:82: 07:73:3e:ca:87:20:30:52:08:1a:56:5d:da:4e:dd: 69:19:5b:a4:42:25:69:39:1a:3d:ec:84:d9:d5:39: 68:bd:98:05:2a:b5:5d:66:24:fd:8d:4f:dd:11:72: d5:10:a3:7b:d7:9d:21:2e:ea:7c:a7:46:e3:3d:63: 8c:e6:33:1d:7b:07:e4:10:9e:c8:e5:04:09:df:71: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8A:D5:0E:CF:F5:9F:D6:58:5E:9E:D0:18:16:3B:14:78:52:2C:EE X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d5:4f:d9:62:65:1d:22:2e:82:8d:4e:ee:da:ce:1c:f8:18: 54:c4:c4:69:e1:72:5f:a5:1f:3c:98:ef:72:a9:e0:fe:f6:73: 09:e6:46:5e:ed:82:29:71:ac:f7:b4:5c:f7:2e:77:92:5e:be: 86:34:ca:6c:c4:03:a4:36:22:14:1b:84:aa:34:6b:6e:0b:cc: a6:59:77:4d:8f:b2:e8:21:1a:63:57:de:91:df:56:07:d2:67: 24:bf:04:5c:0c:c4:2e:51:6d:09:47:a4:28:1c:cf:d4:51:44: f9:6b:93:0d:60:40:99:bc:ff:5d:ec:11:a5:34:38:b8:6f:0e: b9:a3:e6:f4:f7:cc:e7:67:f2:c6:52:10:6a:ad:3f:c1:e8:9b: 5f:49:eb:3e:7c:b8:af:10:e0:f0:46:67:94:c7:5d:89:e9:e7: 39:26:4b:28:eb:fd:17:dd:03:08:c6:49:b3:39:69:00:7a:cb: 11:fc:c8:9a:4c:0e:f7:fa:b5:16:84:88:70:68:89:df:66:78: 44:86:d4:10:89:3d:9f:50:3c:bb:88:79:83:53:56:66:50:ff: 57:33:d1:43:94:96:6b:59:24:10:63:df:5c:5b:a4:9e:4c:38: b2:71:95:4d:67:2e:43:2b:92:02:8e:6f:57:32:88:2c:42:72: 90:ad:5a:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebyfO7twOVCZoGPhiLGqyXWdp+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNjAzMjUwNTM2MzhaFw0yNjAzMjgxMTAzMzhaMDMxMTAvBgNV BAMTKEQwOEFENTBFQ0ZGNTlGRDY1ODVFOUVEMDE4MTYzQjE0Nzg1MjJDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jLMqvRw475TP6uhGqe3r9ga5 77eFNI/P/1weUd2snNKy3kFTjJ2vkXiRBVKk221rC6qpXvpDVRsIh/aWoot7/8k4 C3M+dT1XqRvrvF1UyXha907qge/aVayJWPBowP9cDLAa0ykJ5WOhBnJlm1q0G3m5 aLujKsFBEVB2k4tv+5sWAVK4g0urVRczyijeae92AT5NNSYwgF5wWpPY1tA6aYVG aJDHmYA/zIGWRTl52TRUggdzPsqHIDBSCBpWXdpO3WkZW6RCJWk5Gj3shNnVOWi9 mAUqtV1mJP2NT90RctUQo3vXnSEu6nynRuM9Y4zmMx17B+QQnsjlBAnfcaoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IrVDs/1n9ZYXp7QGBY7FHhSLO4wHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbVT9liZR0iLoKNTu7azhz4GFTExGnhcl+l HzyY73Kp4P72cwnmRl7tgilxrPe0XPcud5JevoY0ymzEA6Q2IhQbhKo0a24LzKZZ d02PsughGmNX3pHfVgfSZyS/BFwMxC5RbQlHpCgcz9RRRPlrkw1gQJm8/13sEaU0 OLhvDrmj5vT3zOdn8sZSEGqtP8Hom19J6z58uK8Q4PBGZ5THXYnp5zkmSyjr/Rfd AwjGSbM5aQB6yxH8yJpMDvf6tRaEiHBoid9meESG1BCJPZ9QPLuIeYNTVmZQ/1cz 0UOUlmtZJBBj31xbpJ5MOLJxlU1nLkMrkgKOb1cyiCxCcpCtWvM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:18 2026 by rpki-client