$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft File: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft (raw, json) Hash identifier: 9rru0w+oneDYPVTU0E2iYEliYjkvu/EaDzaelRosIe0= Subject key identifier: D3:8F:87:93:1D:94:B8:53:6D:15:7C:EA:E8:F2:EB:4C:D4:B1:96:F5 Authority key identifier: D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 Certificate issuer: /CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Certificate serial: 04DE6B49EDE12DB4952C5189DFBCDBCAE295CFC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft Manifest number: 12 Signing time: Tue 24 Mar 2026 12:01:28 +0000 Manifest this update: Tue 24 Mar 2026 11:56:28 +0000 Manifest next update: Fri 27 Mar 2026 19:02:28 +0000 Files and hashes: 1: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl (hash: ZAXScrBJbWwMN5HiwpE/TzUzKYrSp4btpTKO1dByxL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:de:6b:49:ed:e1:2d:b4:95:2c:51:89:df:bc:db:ca:e2:95:cf:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Validity Not Before: Mar 24 11:56:28 2026 GMT Not After : Mar 27 19:02:28 2026 GMT Subject: CN=D38F87931D94B8536D157CEAE8F2EB4CD4B196F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:10:77:e6:9d:24:97:5c:bf:53:da:f0:9a:0d: 29:54:80:b2:e9:04:80:d6:af:07:b7:1d:bb:91:6f: ce:91:7e:84:48:91:29:9f:d8:6d:e8:c0:5e:66:3d: 9e:db:f9:1a:59:1c:15:03:ae:1b:42:8e:a3:c0:c4: 3d:3d:40:e2:6c:52:3a:f1:21:ce:52:6f:1b:5f:06: 97:bf:71:35:a9:0b:d0:ad:fc:9a:21:ee:56:a6:41: 3e:17:09:04:f9:d3:94:a1:e3:91:31:f6:00:3d:26: 08:af:d3:32:5e:27:cb:dd:8d:75:9c:de:fa:1f:2e: 28:0c:29:52:fd:55:84:df:12:1d:ba:b7:aa:dd:37: a8:6c:55:ce:3f:37:2b:38:72:79:f4:6a:d5:f9:0e: 0b:e1:9e:f0:03:d1:bf:78:f1:0a:df:24:d6:67:e3: 77:80:f5:73:69:5e:52:49:fe:06:e4:f4:0f:6d:54: d0:fb:9a:4f:62:46:bf:c5:a1:66:64:d7:7e:82:b3: 86:14:dc:56:5e:12:04:89:59:45:f8:bf:49:7c:e2: 7f:98:02:6a:e0:cd:10:4b:78:4f:91:21:b1:8d:5c: f4:37:6c:75:e5:52:e8:f0:a1:c8:83:2d:b0:cc:5c: a4:60:71:ab:35:8d:ca:be:a3:36:6a:9f:04:c3:3f: dc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8F:87:93:1D:94:B8:53:6D:15:7C:EA:E8:F2:EB:4C:D4:B1:96:F5 X509v3 Authority Key Identifier: keyid:D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:07:b9:ad:93:90:7e:3e:7f:17:66:3d:c1:72:04:1b:dc:d7: 4a:73:95:0c:63:8b:4a:33:aa:82:21:f7:e4:8e:51:08:ad:79: d2:28:bc:c8:ec:25:4e:c0:ce:4b:bd:fb:27:7a:bb:92:04:ac: 9f:45:fa:99:d5:db:aa:9c:67:8d:d0:5a:18:76:0b:67:cb:40: f4:2d:6f:cc:29:aa:04:0a:e1:fe:c1:5a:e1:a5:2d:fb:37:39: ae:c8:5b:6b:52:ea:c3:9e:e5:63:01:5c:17:25:5e:46:d0:b1: ed:67:19:9f:50:bd:44:19:2e:b0:94:87:6b:10:53:c8:8e:7b: 9c:b6:8d:b0:ff:9c:59:4d:11:a0:fe:fe:1b:7b:a2:7f:1b:c2: b7:e8:11:f6:b4:e7:e3:af:67:05:30:7b:c6:62:eb:64:43:74: a5:78:0a:3f:49:4c:81:c6:df:59:2f:fa:17:31:be:7c:92:bf: 37:db:f1:95:f5:d8:ec:5b:b2:3e:b6:d5:63:09:12:9a:8b:d0: 75:ee:f2:0c:a6:32:bb:7e:25:13:dc:5c:49:91:df:04:31:69: af:ef:3f:89:2d:d6:09:22:59:2f:40:69:53:50:02:33:86:9f: b2:b7:82:52:06:79:25:1f:de:7d:a0:bd:67:34:28:27:e8:df: 29:9b:d1:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBN5rSe3hLbSVLFGJ37zbyuKVz8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIy NUFGQzlFNzAeFw0yNjAzMjQxMTU2MjhaFw0yNjAzMjcxOTAyMjhaMDMxMTAvBgNV BAMTKEQzOEY4NzkzMUQ5NEI4NTM2RDE1N0NFQUU4RjJFQjRDRDRCMTk2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEHfmnSSXXL9T2vCaDSlUgLLp BIDWrwe3HbuRb86RfoRIkSmf2G3owF5mPZ7b+RpZHBUDrhtCjqPAxD09QOJsUjrx Ic5SbxtfBpe/cTWpC9Ct/Joh7lamQT4XCQT505Sh45Ex9gA9Jgiv0zJeJ8vdjXWc 3vofLigMKVL9VYTfEh26t6rdN6hsVc4/Nys4cnn0atX5DgvhnvAD0b948QrfJNZn 43eA9XNpXlJJ/gbk9A9tVND7mk9iRr/FoWZk136Cs4YU3FZeEgSJWUX4v0l84n+Y AmrgzRBLeE+RIbGNXPQ3bHXlUujwociDLbDMXKRgcas1jcq+ozZqnwTDP9xTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04+Hkx2UuFNtFXzq6PLrTNSxlvUwHwYDVR0j BBgwFoAU0ecjZoYek/02vVjwXPCAmyWvyecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMS9EMUU3MjM2Njg2 MUU5M0ZEMzZCRDU4RjA1Q0YwODA5QjI1QUZDOUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIyNUFG QzlFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzEvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgw OUIyNUFGQzlFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUHua2TkH4+fxdmPcFyBBvc10pzlQxji0oz qoIh9+SOUQitedIovMjsJU7Azku9+yd6u5IErJ9F+pnV26qcZ43QWhh2C2fLQPQt b8wpqgQK4f7BWuGlLfs3Oa7IW2tS6sOe5WMBXBclXkbQse1nGZ9QvUQZLrCUh2sQ U8iOe5y2jbD/nFlNEaD+/ht7on8bwrfoEfa05+OvZwUwe8Zi62RDdKV4Cj9JTIHG 31kv+hcxvnySvzfb8ZX12Oxbsj621WMJEpqL0HXu8gymMrt+JRPcXEmR3wQxaa/v P4kt1gkiWS9AaVNQAjOGn7K3glIGeSUf3n2gvWc0KCfo3ymb0UE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:06 2026 by rpki-client