$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: y4vZDCERAGLw69/9y9dvKrl/nBA0sIOTTSkuZ6arnqc= Subject key identifier: B4:BE:0C:8C:88:0A:7D:4E:54:04:80:89:52:92:BF:E4:97:55:6C:A5 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 35742CE32FF7D66E2A8393D6110D6F3932410479 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 0152 Signing time: Thu 26 Mar 2026 04:51:09 +0000 Manifest this update: Thu 26 Mar 2026 04:46:09 +0000 Manifest next update: Sun 29 Mar 2026 06:13:09 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: /YOUOkXJAffjtghAIJKfHCqIRWzoFBwlE2QRGg8tm8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:74:2c:e3:2f:f7:d6:6e:2a:83:93:d6:11:0d:6f:39:32:41:04:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Mar 26 04:46:09 2026 GMT Not After : Mar 29 06:13:09 2026 GMT Subject: CN=B4BE0C8C880A7D4E540480895292BFE497556CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:87:e3:0a:13:82:ff:86:89:e7:a4:1f:c9:b1: 3d:7e:e9:2e:39:34:0d:42:d1:a4:68:75:a5:6a:a4: 98:ac:3a:3e:34:8c:34:fb:05:25:3d:e6:3d:8f:8d: 7c:c4:2f:05:f6:74:9f:ed:e2:73:cd:f0:65:39:83: 3e:72:a8:93:72:07:0f:4a:82:8b:af:75:1e:1d:e0: 54:9b:5c:b1:f1:40:1a:18:40:cf:fc:14:25:3b:e6: 79:36:75:c2:31:26:74:16:d7:f1:56:62:1c:ef:f2: 47:f6:32:ab:f2:81:df:29:ef:52:3f:d4:c5:e8:cb: 0b:90:fc:83:f6:00:d5:6f:55:42:35:9f:3b:4e:9e: f2:76:90:45:5c:1d:fd:ac:1d:ab:c8:4c:f8:5f:4b: e7:70:26:f7:c7:14:dd:6f:4a:7d:eb:71:25:18:3f: 47:0a:a1:38:08:8c:c2:a3:67:ed:c6:d6:e2:1e:6b: 94:75:00:28:3e:f6:77:0a:93:e1:f2:9a:e2:c6:b8: 0f:19:08:2d:47:02:1d:25:b2:11:2f:60:e5:25:78: d6:47:a1:d0:eb:8a:a3:32:73:d9:c5:a1:f9:b1:0a: f7:2b:cd:d6:f8:a0:93:d2:81:40:41:b8:d0:b0:c4: b7:53:ce:1b:05:88:f5:b2:f9:95:2c:00:f9:ef:ca: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BE:0C:8C:88:0A:7D:4E:54:04:80:89:52:92:BF:E4:97:55:6C:A5 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e0:44:1a:bd:17:36:c6:ad:06:29:82:36:5c:0d:e4:ed:72: db:86:50:d2:8d:0c:ef:d2:dc:dd:ff:f6:94:57:51:96:58:aa: e5:59:ed:be:0b:94:b5:44:be:53:48:34:4f:fd:18:16:5b:6f: 8e:99:53:4b:b6:84:d9:fb:30:ad:50:70:92:51:12:ab:1d:19: 29:00:c9:37:83:1f:4a:fd:93:3c:d7:f8:47:c1:84:30:60:d6: 54:7b:98:b7:0d:94:65:c4:bd:a1:4f:49:fc:11:33:c4:27:3e: 48:d9:7d:a1:97:d3:87:4c:63:fb:2f:9f:dd:be:0a:75:a8:9a: d9:3d:c1:49:d6:ca:e0:3f:96:b6:65:b5:31:48:94:e6:95:35: 55:e6:a7:8d:45:1a:a9:4d:f4:4a:60:c8:0c:be:d4:cd:a1:a8: 94:ac:d4:a3:58:31:d0:be:42:05:d0:db:7e:f9:a3:9a:0c:fe: a2:18:f0:e4:45:a6:2e:c9:39:40:c4:64:b9:e7:74:d5:67:0d: 8e:4f:85:57:02:39:8f:50:e7:4d:59:ee:48:6a:c1:38:88:d9: b1:6d:68:2f:3c:ba:d7:7b:ac:a8:d1:01:2f:4a:5e:4c:cc:f7: fe:e7:1c:3b:43:b7:ee:72:a1:4d:4a:4c:da:38:64:e7:96:96: 1a:fb:7f:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXQs4y/31m4qg5PWEQ1vOTJBBHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNjAzMjYwNDQ2MDlaFw0yNjAzMjkwNjEzMDlaMDMxMTAvBgNV BAMTKEI0QkUwQzhDODgwQTdENEU1NDA0ODA4OTUyOTJCRkU0OTc1NTZDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsh+MKE4L/honnpB/JsT1+6S45 NA1C0aRodaVqpJisOj40jDT7BSU95j2PjXzELwX2dJ/t4nPN8GU5gz5yqJNyBw9K gouvdR4d4FSbXLHxQBoYQM/8FCU75nk2dcIxJnQW1/FWYhzv8kf2Mqvygd8p71I/ 1MXoywuQ/IP2ANVvVUI1nztOnvJ2kEVcHf2sHavITPhfS+dwJvfHFN1vSn3rcSUY P0cKoTgIjMKjZ+3G1uIea5R1ACg+9ncKk+HymuLGuA8ZCC1HAh0lshEvYOUleNZH odDriqMyc9nFofmxCvcrzdb4oJPSgUBBuNCwxLdTzhsFiPWy+ZUsAPnvyghHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtL4MjIgKfU5UBICJUpK/5JdVbKUwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbgRBq9FzbGrQYpgjZcDeTtctuGUNKNDO/S 3N3/9pRXUZZYquVZ7b4LlLVEvlNINE/9GBZbb46ZU0u2hNn7MK1QcJJREqsdGSkA yTeDH0r9kzzX+EfBhDBg1lR7mLcNlGXEvaFPSfwRM8QnPkjZfaGX04dMY/svn92+ CnWomtk9wUnWyuA/lrZltTFIlOaVNVXmp41FGqlN9EpgyAy+1M2hqJSs1KNYMdC+ QgXQ2375o5oM/qIY8ORFpi7JOUDEZLnndNVnDY5PhVcCOY9Q501Z7khqwTiI2bFt aC88utd7rKjRAS9KXkzM9/7nHDtDt+5yoU1KTNo4ZOeWlhr7f5I= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:51 2026 by rpki-client