$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: 6cQq5EFSJ94QxY7QbfqTqNqhiojyf3Pt59xC629Ddm4= Subject key identifier: D2:5C:3D:85:4E:18:CB:7E:43:9E:CC:BD:72:72:12:4B:83:B4:A6:8A Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 1773E50D8B28595554993A2EE577F6F7310CBD8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0182 Signing time: Wed 25 Mar 2026 03:21:04 +0000 Manifest this update: Wed 25 Mar 2026 03:16:04 +0000 Manifest next update: Sat 28 Mar 2026 10:01:04 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: NcZX8EzdE7A7cVEFBnPnX5Ro70bhzs7BTeEj5pqZY+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:73:e5:0d:8b:28:59:55:54:99:3a:2e:e5:77:f6:f7:31:0c:bd:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Mar 25 03:16:04 2026 GMT Not After : Mar 28 10:01:04 2026 GMT Subject: CN=D25C3D854E18CB7E439ECCBD7272124B83B4A68A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:ce:25:51:55:e6:d6:0c:23:69:60:4e:fc: 1b:d5:fc:5e:35:42:b0:11:7d:6f:9d:a1:c9:ac:7b: 29:69:0a:34:69:51:54:96:30:db:a4:e4:0e:dc:b3: f7:78:3e:9e:9c:97:60:a6:97:61:dd:21:9c:90:9f: cf:31:6d:61:80:aa:d8:75:38:ef:0a:93:50:59:e6: fa:d5:4b:bd:9f:5d:a9:00:79:27:51:db:9a:e2:e7: 5b:82:f3:41:2c:76:65:d5:a2:cd:9b:fe:8b:b1:ed: de:f3:d2:d5:ee:4c:47:d9:6b:8d:b8:4b:88:22:f7: db:ba:d2:2a:3d:9d:4f:87:b0:45:8c:32:0f:90:45: b3:41:38:a0:90:e3:f0:1c:d6:6b:50:72:7e:ae:a9: 7e:dd:b0:e4:58:f0:6e:d9:83:a8:af:08:23:37:63: cd:c9:67:10:7d:e5:80:6e:ad:4b:16:55:10:da:54: 62:9a:4d:e7:35:bd:83:09:17:35:09:6b:e7:56:d1: 3f:e4:ef:11:6c:32:46:0b:e9:09:89:3f:35:c5:4c: 73:5a:05:97:e8:5c:c7:c8:92:91:e9:56:92:cb:bd: 1a:9c:b9:65:15:77:e1:85:c2:8a:a3:c4:b0:f9:08: f2:4b:0a:4a:7d:03:4e:7f:76:84:0c:e1:32:1c:27: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5C:3D:85:4E:18:CB:7E:43:9E:CC:BD:72:72:12:4B:83:B4:A6:8A X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8f:7b:40:93:87:5c:bc:1e:ae:08:d2:0e:e5:39:77:95:03: 69:5b:da:49:fb:a3:b7:eb:6a:e9:b2:d3:81:34:41:8d:da:a1: 7d:6b:bf:b9:1f:fc:2e:60:cd:b9:82:80:e1:09:b6:1d:0c:78: e7:bf:61:7e:ce:4c:e4:da:b5:41:80:96:87:e1:84:e9:d1:99: 64:90:15:8a:b2:75:df:b2:cd:fe:b3:99:7b:ae:47:c5:1e:93: b6:af:e6:6d:9d:f7:6a:18:ce:05:e6:56:08:e0:6a:6f:86:53: d6:2b:1e:46:be:07:d1:6b:47:73:95:66:cf:40:fb:e6:3f:2e: b0:7c:d0:dd:8f:59:20:54:94:23:61:02:a5:f3:85:84:29:2c: eb:d4:d9:39:dd:0b:db:4a:97:a4:7f:7e:3b:92:87:a6:b7:25: 3e:1d:16:f6:ba:59:00:fa:ae:dc:89:5c:2f:f5:07:38:d5:1c: 9e:2e:da:0d:05:2d:95:e1:21:d4:2c:d6:35:51:98:d7:ef:ae: e8:f0:ea:06:5e:50:48:f1:c2:82:57:19:e1:b1:1e:b1:e6:96: 20:55:68:19:ee:89:e5:77:56:84:ca:81:98:e7:72:36:14:f5: 20:46:15:39:73:7a:d2:c6:d7:2a:aa:5e:20:a5:c2:67:6e:f8: 50:0c:bf:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3PlDYsoWVVUmTou5Xf29zEMvY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNjAzMjUwMzE2MDRaFw0yNjAzMjgxMDAxMDRaMDMxMTAvBgNV BAMTKEQyNUMzRDg1NEUxOENCN0U0MzlFQ0NCRDcyNzIxMjRCODNCNEE2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4184lUVXm1gwjaWBO/BvV/F41 QrARfW+docmseylpCjRpUVSWMNuk5A7cs/d4Pp6cl2Cml2HdIZyQn88xbWGAqth1 OO8Kk1BZ5vrVS72fXakAeSdR25ri51uC80EsdmXVos2b/oux7d7z0tXuTEfZa424 S4gi99u60io9nU+HsEWMMg+QRbNBOKCQ4/Ac1mtQcn6uqX7dsORY8G7Zg6ivCCM3 Y83JZxB95YBurUsWVRDaVGKaTec1vYMJFzUJa+dW0T/k7xFsMkYL6QmJPzXFTHNa BZfoXMfIkpHpVpLLvRqcuWUVd+GFwoqjxLD5CPJLCkp9A05/doQM4TIcJ7kxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lw9hU4Yy35Dnsy9cnISS4O0poowHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6Pe0CTh1y8Hq4I0g7lOXeVA2lb2kn7o7fr aumy04E0QY3aoX1rv7kf/C5gzbmCgOEJth0MeOe/YX7OTOTatUGAlofhhOnRmWSQ FYqydd+yzf6zmXuuR8Uek7av5m2d92oYzgXmVgjgam+GU9YrHka+B9FrR3OVZs9A ++Y/LrB80N2PWSBUlCNhAqXzhYQpLOvU2TndC9tKl6R/fjuSh6a3JT4dFva6WQD6 rtyJXC/1BzjVHJ4u2g0FLZXhIdQs1jVRmNfvrujw6gZeUEjxwoJXGeGxHrHmliBV aBnuieV3VoTKgZjncjYU9SBGFTlzetLG1yqqXiClwmdu+FAMv2w= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:00 2026 by rpki-client