$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: sW6+7jrQVgBHIiSAv47b+Ze4bzNNDZjLniyYxDWwPrY= Subject key identifier: 55:C0:C5:EA:79:A1:ED:F8:07:1F:53:00:48:BF:9D:7E:CE:66:C5:BF Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 0387EDB20B2C5F5742F71C0704A5600614E70A37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 054B Signing time: Wed 25 Mar 2026 18:12:31 +0000 Manifest this update: Wed 25 Mar 2026 18:07:31 +0000 Manifest next update: Sun 29 Mar 2026 04:22:31 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: X8wdezuwDsCYUdOlys+h7+POtY4xSEOWx8LDInlhtRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:87:ed:b2:0b:2c:5f:57:42:f7:1c:07:04:a5:60:06:14:e7:0a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Mar 25 18:07:31 2026 GMT Not After : Mar 29 04:22:31 2026 GMT Subject: CN=55C0C5EA79A1EDF8071F530048BF9D7ECE66C5BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:73:b8:a2:46:70:f1:7f:bc:88:06:5e:b2: a6:04:d4:20:6f:ac:f3:db:b2:19:14:8d:25:8d:1f: 52:6a:ea:07:2a:56:62:ec:ee:c6:49:c6:e1:22:48: 52:b4:03:31:23:1d:52:00:1c:c4:f2:40:47:eb:bd: a3:6c:09:7f:95:c0:a3:1f:08:4b:8f:9c:41:8b:39: 7b:8b:26:c8:46:4a:99:d3:35:e8:9d:ac:6d:95:c8: 85:da:02:3d:b5:06:6a:ff:9a:72:2f:a1:c9:c4:51: 0c:86:a1:09:91:54:42:f0:c2:93:0b:fd:00:b7:bc: 58:90:8a:bd:e5:35:d0:77:ea:9d:44:fb:a1:90:c2: f7:72:b9:b1:9b:27:17:52:e2:0c:b8:91:cc:4f:cc: 1a:32:d5:1f:03:d9:ee:57:5b:df:c6:5f:0d:80:30: bb:9b:77:74:16:7a:69:62:41:e5:c4:3b:01:2b:59: fd:ff:d8:73:14:d8:dd:23:7c:d4:5c:24:8a:13:33: 3e:88:97:82:8d:d9:f8:6f:14:bc:96:73:49:5b:2e: 61:b8:8d:dd:f9:05:5c:bb:73:22:fa:c4:2a:a0:fa: 91:f4:fd:05:71:d1:86:d0:7c:d0:ae:01:83:5b:20: 64:2a:f6:9d:d9:86:8b:9c:70:7c:dc:c9:50:e6:5a: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C0:C5:EA:79:A1:ED:F8:07:1F:53:00:48:BF:9D:7E:CE:66:C5:BF X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6f:21:4f:6b:ce:c7:f1:54:b6:b3:10:93:39:b0:aa:36:52: 53:2e:c0:7a:d7:6b:c9:7c:b0:89:aa:56:b7:a7:00:7c:45:19: 78:ab:47:2b:89:aa:b0:26:9c:9b:84:55:c4:b5:05:b3:2e:42: 0a:d4:73:62:67:77:90:9a:43:78:59:c4:1c:b3:c8:fd:f0:e8: 4b:d7:65:a1:e4:d9:0e:2f:47:77:8a:1f:09:ca:20:d1:7d:10: 70:8b:df:96:e6:c3:a8:39:dd:50:9f:c0:81:c2:3a:ce:44:3a: a4:8f:cc:bd:04:dc:8a:44:53:0d:34:8a:72:c6:b0:ac:07:c7: 9e:2d:f7:57:1e:9e:ea:e0:02:a7:37:f5:e1:c5:d4:76:ea:70: 7f:36:6e:42:59:ce:0f:20:8d:9a:bc:f1:a5:58:8c:d5:74:31: 0a:b9:6b:fa:bd:14:b7:c9:12:c0:16:a4:21:c3:c9:cc:68:9c: 2e:33:70:f4:a1:c4:d2:ec:7c:14:64:03:b1:b6:e5:82:b1:36: 5d:b8:0d:19:c2:35:74:f5:a0:a7:af:38:7f:98:02:94:da:69: 6b:d2:88:c5:6c:3f:41:21:4c:78:27:bd:a8:71:90:02:fb:e1: 65:9c:cb:10:4e:d7:dd:51:c1:1b:30:7e:a9:8b:87:d4:b1:22: 46:6b:85:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4ftsgssX1dC9xwHBKVgBhTnCjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNjAzMjUxODA3MzFaFw0yNjAzMjkwNDIyMzFaMDMxMTAvBgNV BAMTKDU1QzBDNUVBNzlBMUVERjgwNzFGNTMwMDQ4QkY5RDdFQ0U2NkM1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBM3O4okZw8X+8iAZesqYE1CBv rPPbshkUjSWNH1Jq6gcqVmLs7sZJxuEiSFK0AzEjHVIAHMTyQEfrvaNsCX+VwKMf CEuPnEGLOXuLJshGSpnTNeidrG2VyIXaAj21Bmr/mnIvocnEUQyGoQmRVELwwpML /QC3vFiQir3lNdB36p1E+6GQwvdyubGbJxdS4gy4kcxPzBoy1R8D2e5XW9/GXw2A MLubd3QWemliQeXEOwErWf3/2HMU2N0jfNRcJIoTMz6Il4KN2fhvFLyWc0lbLmG4 jd35BVy7cyL6xCqg+pH0/QVx0YbQfNCuAYNbIGQq9p3ZhouccHzcyVDmWjDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVcDF6nmh7fgHH1MASL+dfs5mxb8wHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhvIU9rzsfxVLazEJM5sKo2UlMuwHrXa8l8 sImqVrenAHxFGXirRyuJqrAmnJuEVcS1BbMuQgrUc2Jnd5CaQ3hZxByzyP3w6EvX ZaHk2Q4vR3eKHwnKINF9EHCL35bmw6g53VCfwIHCOs5EOqSPzL0E3IpEUw00inLG sKwHx54t91cenurgAqc39eHF1HbqcH82bkJZzg8gjZq88aVYjNV0MQq5a/q9FLfJ EsAWpCHDycxonC4zcPShxNLsfBRkA7G25YKxNl24DRnCNXT1oKevOH+YApTaaWvS iMVsP0EhTHgnvahxkAL74WWcyxBO191RwRswfqmLh9SxIkZrheE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:27 2026 by rpki-client