$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: V0WE1Mx78RrIqq0ouEk7U697a0wY41/+uab6zLOBzzA= Subject key identifier: AD:90:D9:09:FA:26:09:88:9C:CE:4E:B4:4B:D2:3F:CD:F2:EB:7F:30 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 76AFC93FE5B8DDBDAE697C79C54BF80CAD8F7B68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 05:42:27 +0000 Manifest this update: Wed 25 Mar 2026 05:37:27 +0000 Manifest next update: Sat 28 Mar 2026 07:31:27 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: wT1wSK14QIjhOOMMDWlbEyvcv33IlbcJpjbieNAPgwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:af:c9:3f:e5:b8:dd:bd:ae:69:7c:79:c5:4b:f8:0c:ad:8f:7b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Mar 25 05:37:27 2026 GMT Not After : Mar 28 07:31:27 2026 GMT Subject: CN=AD90D909FA2609889CCE4EB44BD23FCDF2EB7F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:d5:93:7f:7e:5d:1c:aa:98:90:4c:6e:43: 5b:40:d2:91:2d:d8:eb:f8:9e:a4:98:c4:63:30:25: 8a:13:c7:57:b0:13:4c:4f:58:64:5b:26:9f:14:5b: 14:e1:7b:3d:04:e1:14:89:1a:f0:75:a4:0b:f2:48: 7a:b3:e9:bd:64:cf:2f:3d:b8:b0:f6:e5:7f:e3:86: fe:1d:d3:70:4b:9a:a5:e2:9b:1b:4e:bf:74:be:9c: 5d:80:e3:a3:67:f4:9a:14:ba:0c:ce:bd:ad:d3:02: e2:d6:42:fd:ff:b5:aa:1c:c3:9a:97:7e:7d:d1:8b: 86:d3:e4:10:80:b6:b2:61:f6:ef:2c:70:84:01:9b: 7c:f1:6b:3e:a9:00:ad:63:7c:b5:35:28:92:c5:18: ac:82:72:2c:21:d7:4e:4a:51:83:51:a1:c5:68:44: fa:8a:58:18:e7:ca:c4:02:2e:c3:f4:6b:41:0f:c8: 10:0e:a9:d6:6d:7e:29:b0:62:65:fe:ee:43:ba:ff: 1a:80:fe:cc:e1:a0:ea:76:cd:5b:4c:29:e3:a5:85: bb:4a:f7:13:b3:f6:63:73:a9:95:a2:5c:fd:56:d3: 1a:b8:c8:d6:88:14:de:22:b2:cb:d1:8a:e8:d6:64: 8f:4a:fe:cb:91:b3:01:52:04:52:c3:94:16:11:b2: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:D9:09:FA:26:09:88:9C:CE:4E:B4:4B:D2:3F:CD:F2:EB:7F:30 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7b:45:ed:ce:78:61:3b:52:7a:ad:41:c0:6c:80:04:89:52: 34:dc:51:af:67:64:97:eb:1e:9a:36:f4:cd:2c:9f:5b:42:e1: 4c:7d:e9:49:3c:bc:b5:0f:78:1e:ce:21:a1:e3:b5:c9:1e:69: fd:79:66:33:5f:e2:d9:d9:d2:bf:2e:69:68:9e:c8:79:53:af: c8:36:0a:95:13:cd:9e:10:0e:e2:73:e2:2e:3d:40:b4:eb:63: a3:bf:18:6b:6f:8a:a6:59:aa:68:52:0a:2c:eb:33:1b:c6:cb: fa:ff:91:92:6f:c9:a5:88:51:5e:13:f9:d2:49:7b:93:51:97: 78:be:a8:b4:e8:1f:32:19:4c:12:5f:3f:1a:44:36:8e:e0:be: 8c:fb:6e:d8:b6:7e:ab:dc:e9:54:cc:43:e9:2d:9f:59:9c:9a: de:4f:36:6f:11:9c:4a:34:1a:69:89:17:7b:da:5e:bd:4c:2f: b8:57:04:27:33:35:33:7c:f1:a7:2a:ed:b3:1f:93:27:d5:37: 79:e2:19:a4:33:1e:f6:3e:b0:54:7f:16:a0:20:b3:42:c7:c3: bc:48:17:94:2f:17:60:f1:21:f4:cb:ec:21:59:1b:e3:11:3c: be:d8:f7:8b:50:2f:1e:81:45:13:e9:b2:7c:42:46:84:62:f8: 20:a3:67:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdq/JP+W43b2uaXx5xUv4DK2Pe2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNjAzMjUwNTM3MjdaFw0yNjAzMjgwNzMxMjdaMDMxMTAvBgNV BAMTKEFEOTBEOTA5RkEyNjA5ODg5Q0NFNEVCNDRCRDIzRkNERjJFQjdGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAudWTf35dHKqYkExuQ1tA0pEt 2Ov4nqSYxGMwJYoTx1ewE0xPWGRbJp8UWxThez0E4RSJGvB1pAvySHqz6b1kzy89 uLD25X/jhv4d03BLmqXimxtOv3S+nF2A46Nn9JoUugzOva3TAuLWQv3/taocw5qX fn3Ri4bT5BCAtrJh9u8scIQBm3zxaz6pAK1jfLU1KJLFGKyCciwh105KUYNRocVo RPqKWBjnysQCLsP0a0EPyBAOqdZtfimwYmX+7kO6/xqA/szhoOp2zVtMKeOlhbtK 9xOz9mNzqZWiXP1W0xq4yNaIFN4issvRiujWZI9K/suRswFSBFLDlBYRsgzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZDZCfomCYiczk60S9I/zfLrfzAwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKB7Re3OeGE7UnqtQcBsgASJUjTcUa9nZJfr Hpo29M0sn1tC4Ux96Uk8vLUPeB7OIaHjtckeaf15ZjNf4tnZ0r8uaWieyHlTr8g2 CpUTzZ4QDuJz4i49QLTrY6O/GGtviqZZqmhSCizrMxvGy/r/kZJvyaWIUV4T+dJJ e5NRl3i+qLToHzIZTBJfPxpENo7gvoz7bti2fqvc6VTMQ+ktn1mcmt5PNm8RnEo0 GmmJF3vaXr1ML7hXBCczNTN88acq7bMfkyfVN3niGaQzHvY+sFR/FqAgs0LHw7xI F5QvF2DxIfTL7CFZG+MRPL7Y94tQLx6BRRPpsnxCRoRi+CCjZzA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:12:51 2026 by rpki-client