$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: TqTJCfUe5wMAw3gFFeEiJKpEpl0q+9SwWMDNhBXVNsQ= Subject key identifier: 6B:E7:D3:8D:15:3D:E3:3B:66:97:58:66:3A:80:A3:03:60:BD:C2:8D Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 094F5827C64BD867D3436C18FB5640101D8CF54D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 0211 Signing time: Thu 26 Mar 2026 13:51:08 +0000 Manifest this update: Thu 26 Mar 2026 13:46:08 +0000 Manifest next update: Sun 29 Mar 2026 23:01:08 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: r/RGTdFwrCK/s/6hRrTLN/9ChG0eGG0CNzQH3Abflfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4f:58:27:c6:4b:d8:67:d3:43:6c:18:fb:56:40:10:1d:8c:f5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Mar 26 13:46:08 2026 GMT Not After : Mar 29 23:01:08 2026 GMT Subject: CN=6BE7D38D153DE33B669758663A80A30360BDC28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:0c:be:4c:b1:f7:a4:1e:a1:3c:1b:d9:a0: 5d:73:d4:dc:bf:67:32:89:40:69:04:2d:e1:c3:80: 3a:ee:c9:70:d7:7d:9a:7c:44:34:b4:8f:ee:1b:ff: 49:ee:4a:f0:ec:cf:26:cb:7a:e4:08:d3:b0:29:2e: 8a:2e:5b:c4:82:a1:61:ae:4d:a9:65:64:45:d4:c6: 32:52:f7:1a:72:11:12:ef:1b:f0:cb:61:f7:f2:ff: 74:a9:17:18:7b:d1:4b:5d:33:5a:05:2b:2b:de:6e: 05:48:b1:3b:2f:0a:8a:99:4d:60:63:a2:cf:ba:60: f1:e8:da:ac:50:f9:8a:67:0d:d3:e2:aa:d6:43:ef: 65:27:92:00:5d:1f:71:dd:b1:4a:c0:9b:e3:9b:6d: 43:0b:1d:17:a7:12:ee:5d:06:65:0b:ea:ae:2c:66: 28:55:ea:33:27:5d:8f:8e:16:57:90:4d:af:d9:ad: 5b:dc:df:ba:33:8a:76:73:e3:b9:49:71:c1:71:a3: 69:eb:55:64:52:d8:b1:e8:be:60:00:4d:4f:88:25: 5d:40:a8:ac:ee:7c:ae:8c:b0:21:e5:cd:07:fb:c9: 24:ab:5e:7a:73:23:66:e7:af:77:c7:22:1b:ef:bb: 82:2d:cd:91:8a:a8:04:a8:58:2b:90:35:c9:b0:52: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E7:D3:8D:15:3D:E3:3B:66:97:58:66:3A:80:A3:03:60:BD:C2:8D X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b9:38:33:c2:72:60:72:4f:d0:9d:31:30:b8:b8:fd:43:59: 1c:0a:3b:19:27:00:b0:55:96:68:ca:49:71:dc:60:3f:53:c6: da:8d:47:3c:f6:c4:35:c6:3d:25:6b:90:33:6f:e8:98:e3:65: 21:bc:e2:18:6c:48:dd:cc:df:2c:b6:40:7a:9f:84:43:38:d5: 2a:6c:2b:7a:07:cd:d1:f3:4c:f0:e7:1f:88:56:09:07:59:91: 3d:62:bc:a4:e7:73:50:b3:82:78:46:85:f1:ad:99:59:c8:54: c9:db:dd:89:32:c0:37:42:86:80:7e:97:e8:af:19:78:1b:28: 20:90:b3:d1:43:14:c8:41:d0:c5:3c:94:ce:f4:f6:5a:20:fa: 2f:bd:9b:b7:18:c7:19:41:13:d8:55:93:4c:47:95:c9:e9:23: 38:d3:04:10:d1:0a:32:c1:da:76:46:cb:96:54:51:ca:45:22: 16:a1:83:04:1d:26:86:fb:03:42:be:04:0a:5d:fe:eb:06:38: e7:58:f4:f0:bc:68:6d:6b:3b:f1:2e:37:55:ce:d4:7b:35:21: 9d:8c:f1:12:27:64:70:c4:f0:b7:36:e6:51:a2:03:9f:70:d0: 32:1a:cc:4d:da:b5:f3:81:9d:21:f1:c2:45:aa:13:14:93:5a: c9:61:5e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCU9YJ8ZL2GfTQ2wY+1ZAEB2M9U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNjAzMjYxMzQ2MDhaFw0yNjAzMjkyMzAxMDhaMDMxMTAvBgNV BAMTKDZCRTdEMzhEMTUzREUzM0I2Njk3NTg2NjNBODBBMzAzNjBCREMyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIAy+TLH3pB6hPBvZoF1z1Ny/ ZzKJQGkELeHDgDruyXDXfZp8RDS0j+4b/0nuSvDszybLeuQI07ApLoouW8SCoWGu TallZEXUxjJS9xpyERLvG/DLYffy/3SpFxh70UtdM1oFKyvebgVIsTsvCoqZTWBj os+6YPHo2qxQ+YpnDdPiqtZD72UnkgBdH3HdsUrAm+ObbUMLHRenEu5dBmUL6q4s ZihV6jMnXY+OFleQTa/ZrVvc37ozinZz47lJccFxo2nrVWRS2LHovmAATU+IJV1A qKzufK6MsCHlzQf7ySSrXnpzI2bnr3fHIhvvu4ItzZGKqASoWCuQNcmwUrctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa+fTjRU94ztml1hmOoCjA2C9wo0wHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH25ODPCcmByT9CdMTC4uP1DWRwKOxknALBV lmjKSXHcYD9TxtqNRzz2xDXGPSVrkDNv6JjjZSG84hhsSN3M3yy2QHqfhEM41Sps K3oHzdHzTPDnH4hWCQdZkT1ivKTnc1CzgnhGhfGtmVnIVMnb3YkywDdChoB+l+iv GXgbKCCQs9FDFMhB0MU8lM709log+i+9m7cYxxlBE9hVk0xHlcnpIzjTBBDRCjLB 2nZGy5ZUUcpFIhahgwQdJob7A0K+BApd/usGOOdY9PC8aG1rO/EuN1XO1Hs1IZ2M 8RInZHDE8Lc25lGiA59w0DIazE3atfOBnSHxwkWqExSTWslhXuM= -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:28 2026 by rpki-client