$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: di3/0cBuZgC4fU5Te54r1ntrzxtIqRzXWAPvyW2gd3g= Subject key identifier: B8:62:BF:1D:9D:56:CB:1F:54:20:9A:29:FB:1D:C6:96:7F:32:50:A7 Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 04A3D49EE90FC2846E1FC25AC987DCBB38A5F653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 64 Signing time: Wed 25 Mar 2026 03:41:38 +0000 Manifest this update: Wed 25 Mar 2026 03:36:38 +0000 Manifest next update: Sat 28 Mar 2026 06:19:38 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: YgkXr3BDg5v6L4glloB33C74KSfcn0Pf3kogRC8A594=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a3:d4:9e:e9:0f:c2:84:6e:1f:c2:5a:c9:87:dc:bb:38:a5:f6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Mar 25 03:36:38 2026 GMT Not After : Mar 28 06:19:38 2026 GMT Subject: CN=B862BF1D9D56CB1F54209A29FB1DC6967F3250A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:94:50:f6:94:ff:54:bf:05:ba:4a:86:cc: 47:2f:72:71:a8:ca:cd:73:0d:10:4b:9e:83:a0:c3: bc:40:62:0e:a8:38:c3:61:10:ef:43:b6:fd:c7:1f: 2f:e6:44:8b:62:86:2f:cc:8c:24:36:db:8b:86:ac: 99:ba:ad:74:38:d3:51:f3:fa:de:1d:9c:02:c0:b0: a7:98:3f:8f:fe:fc:17:33:95:c5:4a:79:a8:32:94: 12:16:62:78:d8:b6:0b:e9:3a:17:eb:72:53:9f:ec: 23:92:3b:89:fc:81:a5:b9:da:3b:8b:10:b7:8a:5a: a4:c4:30:6e:b8:aa:fd:11:16:6e:b4:2e:fa:11:c3: 39:1c:bb:69:9d:d9:f4:c1:8e:4a:70:5a:9b:78:8c: a0:99:bd:fd:b7:3c:99:22:7d:38:09:37:01:88:cd: a2:e2:37:25:ef:8a:4a:99:82:f9:36:4a:8f:55:6d: 05:5e:b5:2d:75:3c:73:de:83:a1:00:64:70:ec:18: 26:3e:55:27:b2:c7:80:d2:ae:9e:5b:2c:22:d9:32: 9d:6b:7c:9b:55:34:db:d4:08:24:8b:0b:d6:f6:d6: 8e:9d:1c:3b:3f:66:c8:0f:23:3a:36:09:5f:d7:29: d3:ce:88:a6:13:9d:e7:21:2f:c4:a1:91:3c:22:9d: a8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:BF:1D:9D:56:CB:1F:54:20:9A:29:FB:1D:C6:96:7F:32:50:A7 X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9a:b4:aa:46:3f:19:89:36:b6:34:39:9f:07:15:ff:38:48: 99:45:ad:bb:3f:d6:bc:9b:50:87:a1:fe:fb:78:03:0a:fe:34: 6a:40:a4:7f:2d:33:1e:22:20:e4:57:db:99:d3:ac:08:b8:90: f6:1b:10:a4:a8:17:6a:a5:91:ba:18:49:2d:eb:79:19:31:60: 84:ae:01:61:8a:11:28:1d:80:9b:56:be:59:d0:89:9f:fd:cc: 54:f3:68:1c:b0:b9:c1:b7:8d:1a:63:77:da:ff:5a:65:5c:6d: b9:05:ca:cf:0b:57:ad:94:c9:5c:b2:31:9a:be:93:df:09:e6: e7:2f:fb:29:53:8f:af:91:57:34:74:4d:df:de:f3:00:ff:82: b1:8f:c0:3a:ba:7e:c5:ea:62:58:f8:21:56:2e:10:ca:40:37: 81:34:d9:9f:33:b8:82:d7:08:8a:74:c4:37:60:1b:11:b9:a3: af:66:7a:83:ec:e5:1a:30:3b:a9:41:8f:db:7c:0d:83:99:58: cf:ff:72:62:b2:04:af:33:68:34:74:61:47:1e:2a:d4:24:6c: 95:b4:8e:ef:d6:06:49:eb:50:67:dc:f9:48:99:c7:91:5b:8e: 11:d4:32:50:30:84:5c:50:68:32:b5:c4:b6:73:5e:bd:8b:3f: 6b:3b:76:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKPUnukPwoRuH8JayYfcuzil9lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNjAzMjUwMzM2MzhaFw0yNjAzMjgwNjE5MzhaMDMxMTAvBgNV BAMTKEI4NjJCRjFEOUQ1NkNCMUY1NDIwOUEyOUZCMURDNjk2N0YzMjUwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn5RQ9pT/VL8FukqGzEcvcnGo ys1zDRBLnoOgw7xAYg6oOMNhEO9Dtv3HHy/mRItihi/MjCQ224uGrJm6rXQ401Hz +t4dnALAsKeYP4/+/BczlcVKeagylBIWYnjYtgvpOhfrclOf7COSO4n8gaW52juL ELeKWqTEMG64qv0RFm60LvoRwzkcu2md2fTBjkpwWpt4jKCZvf23PJkifTgJNwGI zaLiNyXvikqZgvk2So9VbQVetS11PHPeg6EAZHDsGCY+VSeyx4DSrp5bLCLZMp1r fJtVNNvUCCSLC9b21o6dHDs/ZsgPIzo2CV/XKdPOiKYTnechL8ShkTwinagHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGK/HZ1Wyx9UIJop+x3Gln8yUKcwHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCatKpGPxmJNrY0OZ8HFf84SJlFrbs/1ryb UIeh/vt4Awr+NGpApH8tMx4iIORX25nTrAi4kPYbEKSoF2qlkboYSS3reRkxYISu AWGKESgdgJtWvlnQiZ/9zFTzaBywucG3jRpjd9r/WmVcbbkFys8LV62UyVyyMZq+ k98J5ucv+ylTj6+RVzR0Td/e8wD/grGPwDq6fsXqYlj4IVYuEMpAN4E02Z8zuILX CIp0xDdgGxG5o69meoPs5RowO6lBj9t8DYOZWM//cmKyBK8zaDR0YUceKtQkbJW0 ju/WBknrUGfc+UiZx5FbjhHUMlAwhFxQaDK1xLZzXr2LP2s7dso= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:49 2026 by rpki-client