$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: 0tnsUxglgnVx7yeQYYj8Zi4TLzB630Nl03HBAwCkXeY= Subject key identifier: 14:B1:1B:ED:68:44:77:CC:3E:A4:D9:E0:6A:BC:B6:D8:31:1E:2F:4A Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 3B8DCDE3E514D22D910AF79226138C695BFA04E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 03C6 Signing time: Tue 24 Mar 2026 14:11:53 +0000 Manifest this update: Tue 24 Mar 2026 14:06:53 +0000 Manifest next update: Fri 27 Mar 2026 21:27:53 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: Mo4r6ezKC+79hcpY235hqmtxfmezMD2SC6iayJSxcc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8d:cd:e3:e5:14:d2:2d:91:0a:f7:92:26:13:8c:69:5b:fa:04:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Mar 24 14:06:53 2026 GMT Not After : Mar 27 21:27:53 2026 GMT Subject: CN=14B11BED684477CC3EA4D9E06ABCB6D8311E2F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:d5:64:74:d4:a8:03:c1:5e:20:00:ae:81: 6a:08:ef:64:59:1b:4a:5b:2d:91:65:f0:42:9f:70: b4:55:38:a0:d5:71:89:d9:da:b3:d2:dc:ac:5b:76: e1:2c:7e:02:0f:a6:84:14:45:44:b7:f0:58:b0:04: 9c:d0:2f:7c:03:36:88:19:9e:0f:af:6d:bf:fe:e5: a7:15:b4:4f:0f:57:13:6f:60:8d:71:ee:5b:86:9b: e5:d4:fa:f9:91:21:12:94:a2:b8:59:1f:0a:79:3b: 17:03:ab:f9:10:f8:f5:65:79:be:22:89:26:34:4e: 15:bd:28:93:36:24:79:76:a4:39:83:8b:ff:b4:ba: b4:c1:7b:b8:da:2d:e0:a9:bf:64:4e:b5:66:0f:db: f7:d6:9b:45:41:16:4b:05:47:fd:6f:c7:4e:d7:a6: 24:5b:ca:11:22:96:09:54:2f:a4:7a:ca:d3:38:27: d5:1c:ef:49:2d:56:24:50:c7:60:e9:f5:1c:53:8c: 14:e1:6a:49:09:b6:83:61:77:60:a7:51:e1:4e:cd: 6e:50:06:9d:60:62:38:2d:be:58:cd:64:d5:03:97: 86:64:ca:2b:4e:ff:43:07:f8:a2:81:d6:67:3b:1b: cc:d5:30:5d:2e:64:4d:a1:bc:87:cd:95:c3:b7:77: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B1:1B:ED:68:44:77:CC:3E:A4:D9:E0:6A:BC:B6:D8:31:1E:2F:4A X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9b:75:9d:2e:89:03:19:74:11:de:67:ea:06:88:b9:2c:86: 41:9e:02:6b:da:59:87:c5:a2:ee:f2:87:a6:2f:5e:44:32:81: cd:c6:07:11:ce:d8:75:17:7f:27:e7:e7:e1:df:50:f6:d3:74: 33:40:62:1d:e5:85:ea:93:d1:16:b0:a9:37:45:4d:be:d1:d1: e3:69:2c:df:8c:50:7d:84:ac:d2:54:7c:e1:a5:99:a3:d9:77: 33:33:e0:46:6f:7d:0d:2d:05:1b:29:da:5c:3d:65:8f:12:fb: cb:d5:08:33:84:20:48:41:99:22:a7:51:53:60:01:be:49:b1: 16:8b:51:8b:29:ff:cb:ea:e8:bc:6c:bd:67:17:dc:02:26:2f: 0c:aa:ac:51:2a:f3:33:b5:c2:93:fa:91:cf:01:0c:c9:b4:5e: 1d:69:2c:7f:5d:21:21:fd:b2:fb:9c:12:c5:44:00:5f:0f:33: 2c:cf:33:2d:dc:f8:8a:7c:55:e6:fc:91:f2:3a:59:39:37:36: 8f:35:49:89:18:6a:60:93:a6:2b:71:f7:60:af:42:26:83:c7: 48:12:ab:a1:7c:0c:c1:74:77:c8:e9:ca:87:a4:57:15:88:0b: 7b:c0:c8:a3:30:af:ef:1f:f5:38:e7:5c:67:39:6c:11:d8:08: d8:b5:b2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO43N4+UU0i2RCveSJhOMaVv6BOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNjAzMjQxNDA2NTNaFw0yNjAzMjcyMTI3NTNaMDMxMTAvBgNV BAMTKDE0QjExQkVENjg0NDc3Q0MzRUE0RDlFMDZBQkNCNkQ4MzExRTJGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CdVkdNSoA8FeIACugWoI72RZ G0pbLZFl8EKfcLRVOKDVcYnZ2rPS3KxbduEsfgIPpoQURUS38FiwBJzQL3wDNogZ ng+vbb/+5acVtE8PVxNvYI1x7luGm+XU+vmRIRKUorhZHwp5OxcDq/kQ+PVleb4i iSY0ThW9KJM2JHl2pDmDi/+0urTBe7jaLeCpv2ROtWYP2/fWm0VBFksFR/1vx07X piRbyhEilglUL6R6ytM4J9Uc70ktViRQx2Dp9RxTjBThakkJtoNhd2CnUeFOzW5Q Bp1gYjgtvljNZNUDl4ZkyitO/0MH+KKB1mc7G8zVMF0uZE2hvIfNlcO3d+VhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFLEb7WhEd8w+pNngary22DEeL0owHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACibdZ0uiQMZdBHeZ+oGiLkshkGeAmvaWYfF ou7yh6YvXkQygc3GBxHO2HUXfyfn5+HfUPbTdDNAYh3lheqT0RawqTdFTb7R0eNp LN+MUH2ErNJUfOGlmaPZdzMz4EZvfQ0tBRsp2lw9ZY8S+8vVCDOEIEhBmSKnUVNg Ab5JsRaLUYsp/8vq6LxsvWcX3AImLwyqrFEq8zO1wpP6kc8BDMm0Xh1pLH9dISH9 svucEsVEAF8PMyzPMy3c+Ip8Veb8kfI6WTk3No81SYkYamCTpitx92CvQiaDx0gS q6F8DMF0d8jpyoekVxWIC3vAyKMwr+8f9TjnXGc5bBHYCNi1smI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:29 2026 by rpki-client