$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: 064Mz9fTayziiKxBrki0OYXioafQkmO1s/uOCQgyA40= Subject key identifier: 61:6D:E4:34:CA:A5:9A:FE:C4:95:0F:68:F4:D9:9F:46:AD:41:64:CA Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 19D3A7B3C347D85DA2D0AE890C509736E1625A9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 0269 Signing time: Wed 25 Mar 2026 23:31:00 +0000 Manifest this update: Wed 25 Mar 2026 23:26:00 +0000 Manifest next update: Sun 29 Mar 2026 04:25:00 +0000 Files and hashes: 1: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: 7hpPY+CpNynf/1U163asQVpGBU2iXYXCR6LdhTwwurM=) 2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: nZ1CR/rbID4ESxk42tIk0CS9T1eppeEb7s7cp74yVZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d3:a7:b3:c3:47:d8:5d:a2:d0:ae:89:0c:50:97:36:e1:62:5a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Mar 25 23:26:00 2026 GMT Not After : Mar 29 04:25:00 2026 GMT Subject: CN=616DE434CAA59AFEC4950F68F4D99F46AD4164CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:e4:97:fb:64:e9:09:6a:ff:48:0d:4b:29: 09:e9:23:38:2b:35:2e:64:be:ae:d1:2e:dc:4f:89: 87:3c:10:c9:6e:09:f3:48:27:80:b3:a9:08:ae:96: 59:66:57:04:6a:41:66:e3:26:ef:b8:01:02:5e:c1: d7:cf:47:20:00:f6:de:60:5f:4d:ac:c1:3e:74:2c: d5:40:a1:89:12:87:49:e5:7f:4f:be:11:17:08:47: 3c:84:5e:01:7b:28:bf:5f:77:63:52:f4:2e:d0:9f: 0e:4e:73:07:00:1f:a8:3e:f8:46:63:d1:e8:a3:f4: 7b:dd:5b:26:07:7d:2e:e1:f9:7e:25:7d:a6:d3:40: 86:36:4b:a5:55:7c:a8:06:6a:a0:55:6d:b5:73:bb: f4:08:05:37:c5:0b:3f:d8:0d:34:d2:c2:23:e9:18: 14:bd:1b:32:39:ce:a3:6a:18:9c:f7:1b:d4:65:5a: b9:5a:e2:56:9d:e7:21:69:a2:36:ed:f3:9e:fd:53: d3:e8:92:d1:a1:dd:a8:ec:f0:62:e4:24:42:6e:3f: b1:05:bf:4a:2b:ed:45:c7:76:dc:32:9d:28:a1:f8: 92:42:85:48:72:ae:e5:c5:1d:4e:a2:3d:46:57:b2: dd:8a:f4:e7:2e:de:f2:61:7f:98:5d:bf:4b:c2:19: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6D:E4:34:CA:A5:9A:FE:C4:95:0F:68:F4:D9:9F:46:AD:41:64:CA X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e4:09:3b:e9:a2:53:db:2a:25:f7:8d:e7:cc:0e:c8:d8:62: 52:cb:13:a0:7c:d5:23:d3:bb:f8:3e:fd:00:2f:e3:c7:50:cb: 4f:4b:3e:f7:c4:a4:a2:40:85:26:07:27:a3:e6:7f:f6:a9:ce: b8:63:99:30:ee:84:c9:97:a9:24:11:73:e0:31:69:26:46:3d: 0c:fa:e3:bf:e5:01:ca:13:23:5c:db:16:80:2e:3a:24:61:b1: cc:df:dc:c1:a8:1f:0b:43:36:70:ee:48:a0:d3:1b:ea:ed:52: 70:ce:9d:ca:0a:24:9b:fd:1c:43:1a:3a:05:8e:3c:c9:88:57: 31:56:ef:37:1f:ad:9d:a3:e4:37:27:b9:b4:be:3d:bb:f1:ab: 3d:c3:ba:9c:ae:62:36:1a:ef:79:2c:4f:5a:f2:83:58:6d:53: 8b:b5:15:45:25:c5:40:18:88:68:13:ce:5b:ed:cc:a7:ce:2b: 30:8a:4d:c3:03:dd:33:01:2f:f2:3a:97:63:bf:38:4d:62:90: 95:a6:30:36:0b:ad:c4:50:4d:61:79:02:48:ef:76:19:aa:b6: 05:bb:f4:80:64:74:69:80:fd:e9:50:23:c9:63:f2:62:99:72: d3:e8:4e:5e:9b:9b:98:bc:1c:7c:a6:fa:78:10:23:d9:79:b7: 10:06:94:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdOns8NH2F2i0K6JDFCXNuFiWp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNjAzMjUyMzI2MDBaFw0yNjAzMjkwNDI1MDBaMDMxMTAvBgNV BAMTKDYxNkRFNDM0Q0FBNTlBRkVDNDk1MEY2OEY0RDk5RjQ2QUQ0MTY0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1eSX+2TpCWr/SA1LKQnpIzgr NS5kvq7RLtxPiYc8EMluCfNIJ4CzqQiulllmVwRqQWbjJu+4AQJewdfPRyAA9t5g X02swT50LNVAoYkSh0nlf0++ERcIRzyEXgF7KL9fd2NS9C7Qnw5OcwcAH6g++EZj 0eij9HvdWyYHfS7h+X4lfabTQIY2S6VVfKgGaqBVbbVzu/QIBTfFCz/YDTTSwiPp GBS9GzI5zqNqGJz3G9RlWrla4lad5yFpojbt8579U9PoktGh3ajs8GLkJEJuP7EF v0or7UXHdtwynSih+JJChUhyruXFHU6iPUZXst2K9Ocu3vJhf5hdv0vCGUDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYW3kNMqlmv7ElQ9o9NmfRq1BZMowHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDkCTvpolPbKiX3jefMDsjYYlLLE6B81SPT u/g+/QAv48dQy09LPvfEpKJAhSYHJ6Pmf/apzrhjmTDuhMmXqSQRc+AxaSZGPQz6 47/lAcoTI1zbFoAuOiRhsczf3MGoHwtDNnDuSKDTG+rtUnDOncoKJJv9HEMaOgWO PMmIVzFW7zcfrZ2j5DcnubS+Pbvxqz3DupyuYjYa73ksT1ryg1htU4u1FUUlxUAY iGgTzlvtzKfOKzCKTcMD3TMBL/I6l2O/OE1ikJWmMDYLrcRQTWF5AkjvdhmqtgW7 9IBkdGmA/elQI8lj8mKZctPoTl6bm5i8HHym+ngQI9l5txAGlLg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:04 2026 by rpki-client