$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: ZKmNfJi6fr0FIiXcm0MhKDTW+6mNhKv1ij0p5tMNCm4= Subject key identifier: 25:40:9D:7B:79:58:9F:6A:47:47:67:47:B2:39:DB:22:F9:83:F3:A2 Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 36528CA06125997EC3620D28E9FF646526A958F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 0224 Signing time: Wed 25 Mar 2026 04:01:58 +0000 Manifest this update: Wed 25 Mar 2026 03:56:58 +0000 Manifest next update: Sat 28 Mar 2026 06:59:58 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: TDmMLwtAfWVmyfCMdc846guF1uI/lDuvak2RIYXUkM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:52:8c:a0:61:25:99:7e:c3:62:0d:28:e9:ff:64:65:26:a9:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Mar 25 03:56:58 2026 GMT Not After : Mar 28 06:59:58 2026 GMT Subject: CN=25409D7B79589F6A47476747B239DB22F983F3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:91:57:34:01:b0:a2:04:fb:40:76:6b:32: 48:2b:47:2e:1a:ae:be:e1:97:e8:3c:4e:74:86:58: 42:0c:23:15:27:c7:20:19:85:97:92:0f:11:17:2b: b5:68:bf:58:cb:74:9f:ad:8c:86:5c:c5:1c:89:ba: 8f:fd:a4:e8:33:22:d2:fe:f2:d9:84:48:ae:88:51: 61:f4:56:fa:2f:ee:0c:07:c3:05:b6:9c:dd:36:e5: de:df:fa:21:35:f4:c6:b6:64:e6:f3:8b:a7:b7:03: 7c:a6:f5:de:46:5e:28:b7:31:cf:22:b3:b0:be:e5: 33:df:67:28:03:9b:da:90:99:7f:13:af:fc:c5:83: 33:6d:38:85:44:18:38:32:cb:ed:2a:f5:42:ab:2d: 3c:49:52:f2:56:f6:53:8d:29:26:56:ef:d8:0a:04: 88:6a:12:42:4d:5c:c9:47:ad:89:f3:0c:a9:58:7e: 31:59:c8:d8:10:9c:d7:e4:30:58:97:85:99:0f:e3: ce:4f:04:b3:c2:09:b0:cf:9a:54:d5:77:ad:35:c0: f6:53:bc:a3:4f:0b:46:23:dc:d4:1e:9f:75:b9:c1: 42:3f:24:5f:9d:74:9e:7b:d2:72:4e:e4:ca:15:26: de:a2:92:d8:9d:e3:67:72:af:1f:35:2c:a5:49:af: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:9D:7B:79:58:9F:6A:47:47:67:47:B2:39:DB:22:F9:83:F3:A2 X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:28:17:4b:40:96:42:3b:51:e9:76:6a:bf:10:df:e2:54: e7:da:30:9f:8f:2b:6d:1b:d6:af:16:42:49:21:e8:68:66:a2: 91:4f:b3:fd:c8:c2:fe:8f:7a:ab:7b:ec:5b:5e:69:d1:bc:4c: 4f:38:de:86:49:08:29:46:2e:e7:a9:11:0b:50:a5:56:c0:ad: bd:02:3b:e2:0e:70:d6:cd:35:54:70:3e:e4:62:f2:15:91:28: 4b:ab:2a:0d:7d:5a:b6:e2:f5:71:e4:c0:b5:95:58:db:9e:34: 6a:07:bf:68:17:a3:46:62:d8:57:50:63:d1:f3:be:5e:3f:6b: c3:b8:23:82:b2:3d:c0:5f:55:79:81:12:b3:f4:6c:e6:95:5b: 7e:0c:8a:14:d0:f3:ba:48:35:8d:e0:10:e3:b5:d4:71:11:dc: 94:e1:d7:17:ce:0d:ee:77:93:ab:8b:40:66:5f:d6:b3:5e:39: 64:8e:6b:dd:3e:bf:60:d2:81:4f:c9:a3:e4:d8:f3:d4:a5:67: a2:ce:b5:73:2e:c5:66:91:bd:9f:f9:23:b0:f4:32:a3:a8:b4: f9:92:46:5b:76:9d:66:35:29:2b:31:7d:ae:40:05:02:fb:5b: 93:1d:5f:d1:86:fe:45:61:50:65:a3:28:38:ef:13:63:9d:ba: f0:87:f7:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlKMoGElmX7DYg0o6f9kZSapWPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNjAzMjUwMzU2NThaFw0yNjAzMjgwNjU5NThaMDMxMTAvBgNV BAMTKDI1NDA5RDdCNzk1ODlGNkE0NzQ3Njc0N0IyMzlEQjIyRjk4M0YzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQZFXNAGwogT7QHZrMkgrRy4a rr7hl+g8TnSGWEIMIxUnxyAZhZeSDxEXK7Vov1jLdJ+tjIZcxRyJuo/9pOgzItL+ 8tmESK6IUWH0Vvov7gwHwwW2nN025d7f+iE19Ma2ZObzi6e3A3ym9d5GXii3Mc8i s7C+5TPfZygDm9qQmX8Tr/zFgzNtOIVEGDgyy+0q9UKrLTxJUvJW9lONKSZW79gK BIhqEkJNXMlHrYnzDKlYfjFZyNgQnNfkMFiXhZkP485PBLPCCbDPmlTVd601wPZT vKNPC0Yj3NQen3W5wUI/JF+ddJ570nJO5MoVJt6iktid42dyrx81LKVJr8wlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJUCde3lYn2pHR2dHsjnbIvmD86IwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsRKBdLQJZCO1Hpdmq/EN/iVOfaMJ+PK20b 1q8WQkkh6GhmopFPs/3Iwv6Peqt77FteadG8TE843oZJCClGLuepEQtQpVbArb0C O+IOcNbNNVRwPuRi8hWRKEurKg19Wrbi9XHkwLWVWNueNGoHv2gXo0Zi2FdQY9Hz vl4/a8O4I4KyPcBfVXmBErP0bOaVW34MihTQ87pINY3gEOO11HER3JTh1xfODe53 k6uLQGZf1rNeOWSOa90+v2DSgU/Jo+TY89SlZ6LOtXMuxWaRvZ/5I7D0MqOotPmS Rlt2nWY1KSsxfa5ABQL7W5MdX9GG/kVhUGWjKDjvE2OduvCH97c= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:56 2026 by rpki-client