$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: SkSsV20hKtsSnbUlsdW90yVnpR14zS6iBg//Tf/Lbro= Subject key identifier: DC:58:8F:73:AC:53:66:00:33:9D:59:A2:FE:7C:A9:62:98:A9:FE:16 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 0F03B1B173588A21C676F9FB80652175723F0FF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 0160 Signing time: Tue 24 Mar 2026 20:52:19 +0000 Manifest this update: Tue 24 Mar 2026 20:47:19 +0000 Manifest next update: Sat 28 Mar 2026 04:40:19 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: COXiCr3Fnc7EP1FeUTExmUQjX/Li5oXx0lTg3I6tWH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:03:b1:b1:73:58:8a:21:c6:76:f9:fb:80:65:21:75:72:3f:0f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Mar 24 20:47:19 2026 GMT Not After : Mar 28 04:40:19 2026 GMT Subject: CN=DC588F73AC536600339D59A2FE7CA96298A9FE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:00:ec:51:8f:9f:a2:99:9e:63:44:62:ba: 7c:d0:5e:a1:26:0c:c1:51:a5:6d:35:20:09:3e:a9: 22:40:60:37:82:ae:c9:ba:19:a9:3b:6f:0f:c3:86: a3:c9:7f:e7:a1:5d:be:fb:32:20:40:9e:3b:65:a5: c3:3e:71:6c:03:c0:68:1c:8c:45:2e:d6:58:9b:ff: ac:c7:e3:08:34:6d:68:86:2e:d7:09:22:ef:9f:2d: 04:e0:3a:3b:3c:9a:8a:c0:69:3c:6c:36:6b:52:3e: 8a:88:6d:fb:58:aa:18:d4:55:e8:3a:b7:0b:e9:a4: 6e:e7:6e:72:10:e4:7b:a8:e2:44:d6:37:64:76:30: 09:87:5d:f0:77:a3:1f:4a:d4:4e:27:f4:45:6d:34: e4:10:57:79:eb:fb:69:7c:85:60:b0:2c:44:4a:f6: 5a:a5:14:b0:0e:8f:29:78:83:96:35:6a:3a:e9:98: 62:b5:30:30:67:2d:b3:07:32:15:05:02:f9:9a:97: 3d:f9:67:09:87:a7:fe:8c:cc:96:55:8b:73:e7:dc: 0a:38:e9:db:8a:1a:c1:7b:67:2e:db:82:4c:8f:ea: fb:6e:d4:e0:e6:6b:e4:4d:fa:98:62:4a:69:5f:68: b3:24:04:f6:79:88:4e:06:f9:0c:cf:29:5f:32:a2: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:58:8F:73:AC:53:66:00:33:9D:59:A2:FE:7C:A9:62:98:A9:FE:16 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ac:b6:2b:11:de:67:16:5a:a3:da:cd:5b:c3:ee:f4:43:ed: 86:41:5d:f5:72:71:73:7c:fc:04:c8:eb:f5:f5:aa:32:5f:b9: 0f:7c:ce:f7:0a:58:98:49:8b:1c:e5:89:1f:9a:c3:86:47:7d: f7:aa:5f:5a:8c:6f:ce:52:9e:da:64:9e:55:c7:26:d9:e0:52: 4f:b9:37:e5:98:d4:8b:ce:51:f8:5e:08:ee:de:ae:78:5d:d0: 1b:87:98:0d:95:1f:7d:51:f2:be:8c:b6:91:75:4f:43:b5:b2: e6:3f:75:89:d3:ac:52:79:35:cf:db:22:ec:0c:cb:f3:5f:b1: 3e:0b:e1:de:e3:c2:46:15:48:11:0f:1d:17:c3:16:84:70:8c: 93:3d:4e:b0:72:e2:d3:e1:80:06:93:dd:f8:2f:28:19:9d:6e: a7:4b:fb:4c:92:cb:66:c9:a4:82:9d:ee:4b:c5:9c:62:0b:bf: 59:e4:7c:b4:c9:61:02:8b:fc:22:70:88:2b:0c:80:b7:f6:8d: f2:f8:64:7e:2d:07:bf:48:65:8e:54:ee:40:fb:e0:dc:e6:9e: 7a:62:b0:97:cd:73:61:6e:d1:1f:2c:89:a9:94:58:33:69:79: 12:9d:ae:5d:ca:85:d2:d0:cf:68:5b:75:24:b2:35:62:ce:08: 5a:ca:81:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwOxsXNYiiHGdvn7gGUhdXI/D/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNjAzMjQyMDQ3MTlaFw0yNjAzMjgwNDQwMTlaMDMxMTAvBgNV BAMTKERDNTg4RjczQUM1MzY2MDAzMzlENTlBMkZFN0NBOTYyOThBOUZFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjgDsUY+fopmeY0RiunzQXqEm DMFRpW01IAk+qSJAYDeCrsm6Gak7bw/DhqPJf+ehXb77MiBAnjtlpcM+cWwDwGgc jEUu1lib/6zH4wg0bWiGLtcJIu+fLQTgOjs8morAaTxsNmtSPoqIbftYqhjUVeg6 twvppG7nbnIQ5Huo4kTWN2R2MAmHXfB3ox9K1E4n9EVtNOQQV3nr+2l8hWCwLERK 9lqlFLAOjyl4g5Y1ajrpmGK1MDBnLbMHMhUFAvmalz35ZwmHp/6MzJZVi3Pn3Ao4 6duKGsF7Zy7bgkyP6vtu1ODma+RN+phiSmlfaLMkBPZ5iE4G+QzPKV8yojN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FiPc6xTZgAznVmi/nypYpip/hYwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmstisR3mcWWqPazVvD7vRD7YZBXfVycXN8 /ATI6/X1qjJfuQ98zvcKWJhJixzliR+aw4ZHffeqX1qMb85SntpknlXHJtngUk+5 N+WY1IvOUfheCO7ernhd0BuHmA2VH31R8r6MtpF1T0O1suY/dYnTrFJ5Nc/bIuwM y/NfsT4L4d7jwkYVSBEPHRfDFoRwjJM9TrBy4tPhgAaT3fgvKBmdbqdL+0ySy2bJ pIKd7kvFnGILv1nkfLTJYQKL/CJwiCsMgLf2jfL4ZH4tB79IZY5U7kD74Nzmnnpi sJfNc2Fu0R8siamUWDNpeRKdrl3KhdLQz2hbdSSyNWLOCFrKgS0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:43 2026 by rpki-client