$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: pIpB/VEGWUD2K1oa8jSQDreeKwGZNb9XFcLD2NWgtB4= Subject key identifier: A6:71:82:B5:C4:83:2F:D2:E2:F0:B0:BA:84:4C:87:0F:6B:DE:65:27 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 415CB72FBEE6605B09CD5A7E773EB51EEB565727 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0162 Signing time: Wed 25 Mar 2026 05:11:25 +0000 Manifest this update: Wed 25 Mar 2026 05:06:25 +0000 Manifest next update: Sat 28 Mar 2026 10:40:25 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: H/g+ugbcCvYJG8RHPGYIEHiyeXcvdi77rMtlvxzQ31w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5c:b7:2f:be:e6:60:5b:09:cd:5a:7e:77:3e:b5:1e:eb:56:57:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Mar 25 05:06:25 2026 GMT Not After : Mar 28 10:40:25 2026 GMT Subject: CN=A67182B5C4832FD2E2F0B0BA844C870F6BDE6527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:25:38:6b:36:20:67:0c:a0:b5:5f:f6:f8: 50:fc:20:13:32:e8:5d:c3:b6:0c:38:63:ed:e8:6f: 60:3a:11:cd:46:2d:8e:e8:e1:5f:c6:e6:a9:7a:db: 83:a2:ad:c5:a7:38:38:f8:48:1f:8b:0a:c4:dc:af: 1c:1c:3b:45:9b:cf:af:aa:76:79:37:93:0c:7c:b6: 8f:5c:a8:75:09:c8:5f:4d:0f:9c:6f:83:84:d3:8a: 93:ef:7d:22:50:17:36:ca:cc:01:5c:11:14:ba:ed: 93:d9:e8:fc:db:a5:29:42:be:5d:8a:67:66:ac:6f: 1e:2c:45:84:09:3f:49:0b:b1:90:b3:16:3c:92:77: 28:20:82:02:48:2c:1a:a0:a1:86:a2:d6:96:c2:4e: 94:55:4e:4b:59:50:10:50:c5:99:9a:81:95:08:fa: 12:6d:52:63:82:cb:20:3d:0c:da:a8:41:03:ff:6c: ec:81:cc:79:70:a1:c2:c9:f3:27:b4:d0:d3:05:6e: b9:bc:af:49:cc:51:8b:c2:b3:c9:60:5d:f8:59:f3: bc:31:40:05:07:4f:2e:7d:01:d7:a3:a3:be:b9:a5: b1:f7:f1:5c:67:db:a3:24:9b:c4:29:06:1b:b9:00: 22:16:5e:58:7a:fb:8d:a7:ab:e6:53:15:fe:f5:13: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:71:82:B5:C4:83:2F:D2:E2:F0:B0:BA:84:4C:87:0F:6B:DE:65:27 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a4:48:27:50:c2:49:32:4e:57:fa:ca:69:4d:9d:a9:b2:8c: 9a:67:56:40:ee:7c:f3:69:81:40:42:18:38:f5:df:14:55:2d: c1:13:52:9f:b9:5d:31:7d:d6:53:74:e4:77:3f:d7:7c:97:c8: f5:86:40:02:75:d9:37:cf:d9:64:9d:7a:b0:f5:53:1a:37:5b: 57:0f:fc:8e:33:bf:78:05:10:ea:32:ed:46:13:28:1f:53:05: 4c:2a:36:7d:39:22:2b:36:06:94:6a:d2:6e:b7:19:0e:c4:01: ae:35:a0:52:0c:37:60:d2:3f:6f:15:c1:3f:e9:f9:38:82:6c: 65:3d:59:74:d3:6c:3d:4f:76:27:1c:5e:78:40:bb:ac:ae:2c: 08:33:29:99:d8:19:75:90:bd:93:65:a7:f2:e6:95:a9:eb:0e: f2:9d:40:f0:95:72:6d:7d:99:0a:ad:50:39:73:e9:65:18:24: 63:e2:ae:63:36:c9:48:a1:c4:94:55:f2:e6:b5:6a:96:21:f8: 48:3a:c9:cd:a6:41:a9:75:f3:8d:80:0c:ab:6a:37:3c:81:b4: ee:e3:8b:36:d3:07:82:2b:09:3f:53:88:73:34:4d:b3:af:ca: 5c:63:bb:39:60:a9:6a:3c:ff:b3:e1:d6:5b:09:28:5d:ef:2f: 7c:7d:f8:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVy3L77mYFsJzVp+dz61HutWVycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNjAzMjUwNTA2MjVaFw0yNjAzMjgxMDQwMjVaMDMxMTAvBgNV BAMTKEE2NzE4MkI1QzQ4MzJGRDJFMkYwQjBCQTg0NEM4NzBGNkJERTY1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fiU4azYgZwygtV/2+FD8IBMy 6F3Dtgw4Y+3ob2A6Ec1GLY7o4V/G5ql624OircWnODj4SB+LCsTcrxwcO0Wbz6+q dnk3kwx8to9cqHUJyF9ND5xvg4TTipPvfSJQFzbKzAFcERS67ZPZ6PzbpSlCvl2K Z2asbx4sRYQJP0kLsZCzFjySdyggggJILBqgoYai1pbCTpRVTktZUBBQxZmagZUI +hJtUmOCyyA9DNqoQQP/bOyBzHlwocLJ8ye00NMFbrm8r0nMUYvCs8lgXfhZ87wx QAUHTy59Adejo765pbH38Vxn26Mkm8QpBhu5ACIWXlh6+42nq+ZTFf71E4TRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnGCtcSDL9Li8LC6hEyHD2veZScwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABukSCdQwkkyTlf6ymlNnamyjJpnVkDufPNp gUBCGDj13xRVLcETUp+5XTF91lN05Hc/13yXyPWGQAJ12TfP2WSderD1Uxo3W1cP /I4zv3gFEOoy7UYTKB9TBUwqNn05Iis2BpRq0m63GQ7EAa41oFIMN2DSP28VwT/p +TiCbGU9WXTTbD1PdiccXnhAu6yuLAgzKZnYGXWQvZNlp/LmlanrDvKdQPCVcm19 mQqtUDlz6WUYJGPirmM2yUihxJRV8ua1apYh+Eg6yc2mQal1842ADKtqNzyBtO7j izbTB4IrCT9TiHM0TbOvylxjuzlgqWo8/7Ph1lsJKF3vL3x9+K8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:09 2026 by rpki-client