$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: q3GzEHmc6ptSZ548vuxqywSwAE0tShGpABcwgdJ04Ak= Subject key identifier: 11:58:E1:BE:12:48:56:8C:9B:C9:CB:24:72:82:74:14:4F:73:9B:51 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 39FC61034ED70AA0C2A1521CB6D233C77B307AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 0188 Signing time: Wed 25 Mar 2026 22:32:16 +0000 Manifest this update: Wed 25 Mar 2026 22:27:16 +0000 Manifest next update: Sun 29 Mar 2026 03:58:16 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: aoQOZnleGS6ecUYacj9/sxsja+pRBe8h2EPs2+h3XcY=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fc:61:03:4e:d7:0a:a0:c2:a1:52:1c:b6:d2:33:c7:7b:30:7a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Mar 25 22:27:16 2026 GMT Not After : Mar 29 03:58:16 2026 GMT Subject: CN=1158E1BE1248568C9BC9CB24728274144F739B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:3d:b6:e2:e5:a5:64:2b:96:8b:61:1d:79: 3e:54:61:13:1b:5e:bd:b6:7d:5f:0f:34:94:d2:89: f4:a4:9b:e2:30:f6:35:47:13:e5:cd:a9:2d:d2:14: e9:05:21:6d:04:9b:c1:02:49:92:13:b6:ae:4e:97: 64:ae:dd:2e:06:0c:90:ed:7f:9a:40:49:b0:34:88: 5e:f9:62:3e:c0:59:bb:fd:3a:ef:39:e1:ef:6e:63: 36:fd:40:90:95:bd:40:a9:a2:c7:5f:24:ce:09:ad: 65:26:cd:c3:9a:e2:c2:92:78:24:7d:27:e2:c8:a8: 7e:d9:d3:ad:12:4c:2d:bc:43:f5:c6:bf:e3:3f:6d: 40:b5:3c:e0:df:e4:fb:f6:f0:bc:c2:25:88:37:89: 2a:ae:55:b9:7c:da:22:31:f5:ad:ff:e2:31:7b:72: 6b:43:cc:88:f6:1c:69:bb:54:1f:7b:85:a6:55:2f: 6b:60:73:17:7a:21:4c:88:dd:35:ef:d7:b0:da:75: 26:1e:ec:d0:6d:20:af:b7:7f:41:6d:d7:79:bd:72: c6:95:75:2e:26:9d:13:da:13:02:16:8f:df:23:eb: 67:2f:dd:0d:ae:dc:eb:ed:56:0a:81:55:45:61:73: 32:a9:15:68:2a:63:0d:5e:34:53:86:14:2e:87:7f: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:58:E1:BE:12:48:56:8C:9B:C9:CB:24:72:82:74:14:4F:73:9B:51 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:83:8e:87:6d:f2:87:bb:42:c1:2e:1f:de:97:ae:13:be:77: 02:62:e5:67:67:29:63:2f:61:81:c3:a5:f2:59:74:77:bc:ba: b2:a7:ba:41:a4:0c:1a:df:6c:a0:42:2e:b0:9e:d5:4f:1b:ac: 8b:b7:b7:c7:b8:82:a9:76:36:9d:dc:3f:1c:f1:e9:eb:f8:fe: e0:4e:7c:f8:e3:10:f1:c1:57:69:9f:f7:b5:50:6d:88:6d:dc: 4c:fe:81:11:f7:b4:8e:72:c7:09:20:0d:98:f8:ec:8d:61:2e: 95:68:82:17:34:3e:3b:20:e8:5f:79:23:f1:37:e0:fe:ea:39: 54:94:fc:2d:3e:95:fd:94:77:9f:cf:09:cc:8d:68:03:f5:5a: 19:9e:b2:20:07:7f:08:c0:f8:b8:4b:85:ab:a5:02:72:2e:38: f9:78:60:b9:9e:83:3c:ef:38:fc:2f:29:2b:91:f1:6b:69:f5: 91:74:88:b4:ec:36:ad:43:35:01:dc:53:52:ed:8e:7b:5b:62: f3:73:3e:e6:46:bd:5a:e9:8b:51:99:b2:7e:1e:0a:53:d2:0f: f9:f3:45:15:32:ce:55:df:34:7a:8d:6b:57:c1:89:b2:63:2c: 20:29:2c:42:52:d9:ef:b2:6a:1a:f4:6d:a3:94:22:f4:d8:61: c4:c2:18:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOfxhA07XCqDCoVIcttIzx3swevUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNjAzMjUyMjI3MTZaFw0yNjAzMjkwMzU4MTZaMDMxMTAvBgNV BAMTKDExNThFMUJFMTI0ODU2OEM5QkM5Q0IyNDcyODI3NDE0NEY3MzlCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4z224uWlZCuWi2EdeT5UYRMb Xr22fV8PNJTSifSkm+Iw9jVHE+XNqS3SFOkFIW0Em8ECSZITtq5Ol2Su3S4GDJDt f5pASbA0iF75Yj7AWbv9Ou854e9uYzb9QJCVvUCposdfJM4JrWUmzcOa4sKSeCR9 J+LIqH7Z060STC28Q/XGv+M/bUC1PODf5Pv28LzCJYg3iSquVbl82iIx9a3/4jF7 cmtDzIj2HGm7VB97haZVL2tgcxd6IUyI3TXv17DadSYe7NBtIK+3f0Ft13m9csaV dS4mnRPaEwIWj98j62cv3Q2u3OvtVgqBVUVhczKpFWgqYw1eNFOGFC6Hf7ohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVjhvhJIVoybycskcoJ0FE9zm1EwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWDjodt8oe7QsEuH96XrhO+dwJi5WdnKWMv YYHDpfJZdHe8urKnukGkDBrfbKBCLrCe1U8brIu3t8e4gql2Np3cPxzx6ev4/uBO fPjjEPHBV2mf97VQbYht3Ez+gRH3tI5yxwkgDZj47I1hLpVoghc0Pjsg6F95I/E3 4P7qOVSU/C0+lf2Ud5/PCcyNaAP1WhmesiAHfwjA+LhLhaulAnIuOPl4YLmegzzv OPwvKSuR8Wtp9ZF0iLTsNq1DNQHcU1LtjntbYvNzPuZGvVrpi1GZsn4eClPSD/nz RRUyzlXfNHqNa1fBibJjLCApLEJS2e+yahr0baOUIvTYYcTCGL0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:33 2026 by rpki-client