$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: klH4BXnn1aOAnpQfSGIBv1oU61cCI6tOtooZjSVwzn4= Subject key identifier: B8:61:50:5B:EE:8A:79:74:BC:65:20:95:0B:C8:C9:D4:CF:1F:F5:19 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 5A3B5E185570A26EC6B68EC4D9F95B2B46D6AD6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0182 Signing time: Wed 25 Mar 2026 01:20:54 +0000 Manifest this update: Wed 25 Mar 2026 01:15:54 +0000 Manifest next update: Sat 28 Mar 2026 07:20:54 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: yWdcpF/vUyHmvGKA/XcTmaOmQITIbgXF9LPVIbt3rmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3b:5e:18:55:70:a2:6e:c6:b6:8e:c4:d9:f9:5b:2b:46:d6:ad:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Mar 25 01:15:54 2026 GMT Not After : Mar 28 07:20:54 2026 GMT Subject: CN=B861505BEE8A7974BC6520950BC8C9D4CF1FF519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:fe:69:59:d2:90:f1:6e:4c:e6:37:2a:b9: ac:89:22:ea:a2:af:6c:1c:87:7e:92:68:23:78:5b: be:cd:86:2c:68:75:ff:3a:13:f5:29:48:1b:16:a8: ee:69:f2:42:ec:e4:ad:96:f8:ae:ec:82:51:53:1a: e3:d2:c5:b8:b1:81:c8:ad:e6:84:bf:cf:b4:e5:74: d5:37:62:d4:8b:20:8f:e4:f1:9e:d3:d1:4c:ab:5b: e8:ff:68:e2:52:3c:20:61:73:b0:d9:1d:bf:8c:a6: b7:7a:f4:b8:fb:f9:bb:28:e3:b8:32:84:ac:6b:e7: d9:27:01:6b:f4:76:5b:be:32:29:26:0a:fd:07:24: 79:36:f0:af:91:d9:af:4c:3c:4c:26:8e:d7:6d:2d: 41:65:47:a1:ec:f9:e6:29:c8:3a:0a:b7:4b:8c:d0: 06:56:bf:69:e8:d7:c2:36:8a:d1:e9:30:97:61:56: 6e:ed:d8:91:04:c7:85:5a:30:35:7e:1c:f7:ee:ce: 83:bf:ab:0d:9d:2b:cc:5f:5c:a8:b6:1c:24:ef:13: d6:17:a5:ad:16:fa:cc:ff:44:9b:aa:2e:a8:7c:2f: 2e:d3:4c:d3:d1:fb:be:dd:7f:b8:f6:4a:8b:63:74: ea:1c:c4:2d:48:8c:3b:39:27:8e:c5:f1:7f:2f:f7: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:50:5B:EE:8A:79:74:BC:65:20:95:0B:C8:C9:D4:CF:1F:F5:19 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cb:ba:4d:02:36:d6:b9:c9:ed:cd:58:75:db:ee:ad:cf:ec: 11:4b:64:a8:b1:38:49:33:67:3a:f7:94:7b:0d:1b:49:c5:41: 10:4f:04:8c:cf:94:85:bc:05:31:2a:5f:06:78:17:a1:38:d5: 66:f0:04:30:21:b7:0a:5d:94:0a:76:7f:11:68:42:07:88:ce: e1:b9:99:c9:c5:57:79:dd:27:30:c3:2d:26:fb:c2:94:70:a6: 27:ca:71:6c:72:ba:16:8d:ae:1e:b7:58:e0:e9:fe:56:a1:b2: 35:97:1f:1d:a8:a0:e9:72:2c:b2:7b:04:b8:2e:03:b9:a8:51: b5:65:4a:13:7b:e0:26:a5:c2:fa:4c:02:25:9b:13:0c:7a:50: 0d:63:8a:4d:5b:5d:3f:c3:9b:c4:07:36:0a:82:aa:73:c8:99: 65:aa:c6:a7:0e:43:0a:45:94:fe:9e:ed:ae:db:4f:fe:85:0e: 3a:9a:3a:0d:33:fa:61:ea:fc:fd:8e:93:87:96:11:e0:00:3f: 28:d1:b6:f1:c2:a7:b3:18:ce:ce:4a:5b:4c:76:fe:c8:e0:4e: 28:5e:60:93:46:e2:3c:98:45:df:1e:81:c9:5f:cc:ea:5f:6e: c1:44:d8:7f:46:cc:9e:25:81:ca:29:46:c6:79:a4:67:4f:fe: 4c:34:a4:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjteGFVwom7Gto7E2flbK0bWrWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNjAzMjUwMTE1NTRaFw0yNjAzMjgwNzIwNTRaMDMxMTAvBgNV BAMTKEI4NjE1MDVCRUU4QTc5NzRCQzY1MjA5NTBCQzhDOUQ0Q0YxRkY1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnv5pWdKQ8W5M5jcquayJIuqi r2wch36SaCN4W77Nhixodf86E/UpSBsWqO5p8kLs5K2W+K7sglFTGuPSxbixgcit 5oS/z7TldNU3YtSLII/k8Z7T0UyrW+j/aOJSPCBhc7DZHb+Mprd69Lj7+bso47gy hKxr59knAWv0dlu+MikmCv0HJHk28K+R2a9MPEwmjtdtLUFlR6Hs+eYpyDoKt0uM 0AZWv2no18I2itHpMJdhVm7t2JEEx4VaMDV+HPfuzoO/qw2dK8xfXKi2HCTvE9YX pa0W+sz/RJuqLqh8Ly7TTNPR+77df7j2SotjdOocxC1IjDs5J47F8X8v9zuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGFQW+6KeXS8ZSCVC8jJ1M8f9RkwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnLuk0CNta5ye3NWHXb7q3P7BFLZKixOEkz Zzr3lHsNG0nFQRBPBIzPlIW8BTEqXwZ4F6E41WbwBDAhtwpdlAp2fxFoQgeIzuG5 mcnFV3ndJzDDLSb7wpRwpifKcWxyuhaNrh63WODp/lahsjWXHx2ooOlyLLJ7BLgu A7moUbVlShN74CalwvpMAiWbEwx6UA1jik1bXT/Dm8QHNgqCqnPImWWqxqcOQwpF lP6e7a7bT/6FDjqaOg0z+mHq/P2Ok4eWEeAAPyjRtvHCp7MYzs5KW0x2/sjgTihe YJNG4jyYRd8egclfzOpfbsFE2H9GzJ4lgcopRsZ5pGdP/kw0pM8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:15 2026 by rpki-client