$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: rNoce924blSZcQKD0g1lgbdXJmMYJtUFKYfrwwzMTi8= Subject key identifier: 35:8A:7A:53:AB:9D:6B:00:CB:95:99:96:C5:9E:52:60:4B:37:88:41 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 0138CAB5F9FBC723284CCE41CC2F4A031D928113 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: 0101 Signing time: Thu 26 Mar 2026 10:41:07 +0000 Manifest this update: Thu 26 Mar 2026 10:36:07 +0000 Manifest next update: Sun 29 Mar 2026 12:43:07 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: CwCZpwGXpWs7v5CsiGW8NxBKk5h97zYLO57Jle7Wfwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:38:ca:b5:f9:fb:c7:23:28:4c:ce:41:cc:2f:4a:03:1d:92:81:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Mar 26 10:36:07 2026 GMT Not After : Mar 29 12:43:07 2026 GMT Subject: CN=358A7A53AB9D6B00CB959996C59E52604B378841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:f8:f4:70:6b:e0:17:0b:d2:e2:52:f4:99: 1e:b6:07:68:de:5c:6c:65:99:8c:46:9d:19:89:5f: 40:f3:25:5b:de:2d:6e:fb:18:4c:96:8f:73:7b:8d: 13:00:a7:87:23:d5:87:e8:c2:66:84:ee:89:a2:ee: 33:11:ee:1b:ef:26:d8:c3:f7:60:8f:8d:6f:d8:a7: 40:30:c0:fe:41:eb:15:c2:48:41:5b:ff:cd:33:94: 27:08:f9:be:94:9e:fb:8a:2b:43:f1:0a:aa:5f:d4: 06:5e:9e:eb:d7:0e:4c:1b:59:ba:fc:3a:63:78:ae: a6:8b:49:f5:be:ed:c6:4f:28:13:f0:c9:f6:bd:28: 22:d1:70:57:be:e8:a9:24:4e:d9:c7:82:b9:1a:00: 94:62:8d:5e:ec:ab:bf:86:7e:20:97:60:68:af:32: dd:af:9e:40:92:ff:31:d5:e6:03:d9:a5:8c:10:88: c2:c5:dc:1f:f7:1a:b7:c3:15:24:34:5e:74:88:c1: 40:39:f8:80:dc:79:cc:18:c7:f3:b8:70:0d:f9:1d: 38:4b:b4:4b:de:22:f2:fd:a9:9c:31:3a:3c:bb:a1: 22:9b:68:b2:14:d7:59:02:39:8e:3a:43:0c:d4:20: 78:6f:a3:d4:99:3c:5e:66:6a:20:29:43:74:2b:b4: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8A:7A:53:AB:9D:6B:00:CB:95:99:96:C5:9E:52:60:4B:37:88:41 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:94:d1:c6:0b:3e:b4:11:d4:75:36:dd:e6:d3:49:ac:d0:59: 24:08:87:fc:b2:37:0c:a5:41:3e:1e:ba:ad:a4:02:1c:6e:8c: 4c:b5:40:f9:d5:55:af:07:de:9f:c3:14:f9:0a:78:c3:0b:62: d2:33:ad:b1:ab:c8:a3:2c:2b:d5:96:cc:bf:47:a4:83:79:3e: c4:ae:3d:bc:bf:7d:d6:23:93:10:60:54:91:f4:20:c3:15:a2: 44:15:74:ab:19:e2:05:81:6b:8e:c2:12:28:33:76:1d:7a:7b: e4:fe:05:d4:cc:46:c4:57:1d:65:e1:26:28:56:c9:1e:80:ed: 97:d1:1c:35:2b:2c:36:53:67:2a:76:f0:84:6e:04:7d:af:ff: 52:1d:15:51:5a:00:ae:90:c1:c2:8f:e1:1c:5e:04:6f:20:c7: 36:6c:2d:88:e8:ed:e4:80:da:cf:02:4b:5e:8a:6f:34:ac:11: b5:0b:49:51:d5:e1:48:d9:da:bf:b5:b3:e3:d0:a6:7b:df:47: 19:a7:67:64:1c:2f:f0:20:4e:58:53:d3:b3:c4:4e:fd:71:8c: f2:22:41:1d:91:48:72:9f:b5:57:e1:de:72:74:b6:01:5d:92: 09:6d:16:a3:ee:82:cf:5e:59:eb:24:de:46:30:8a:2c:2c:72: a8:75:26:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATjKtfn7xyMoTM5BzC9KAx2SgRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNjAzMjYxMDM2MDdaFw0yNjAzMjkxMjQzMDdaMDMxMTAvBgNV BAMTKDM1OEE3QTUzQUI5RDZCMDBDQjk1OTk5NkM1OUU1MjYwNEIzNzg4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd7/j0cGvgFwvS4lL0mR62B2je XGxlmYxGnRmJX0DzJVveLW77GEyWj3N7jRMAp4cj1YfowmaE7omi7jMR7hvvJtjD 92CPjW/Yp0AwwP5B6xXCSEFb/80zlCcI+b6UnvuKK0PxCqpf1AZenuvXDkwbWbr8 OmN4rqaLSfW+7cZPKBPwyfa9KCLRcFe+6KkkTtnHgrkaAJRijV7sq7+GfiCXYGiv Mt2vnkCS/zHV5gPZpYwQiMLF3B/3GrfDFSQ0XnSIwUA5+IDcecwYx/O4cA35HThL tEveIvL9qZwxOjy7oSKbaLIU11kCOY46QwzUIHhvo9SZPF5maiApQ3QrtC8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYp6U6udawDLlZmWxZ5SYEs3iEEwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuU0cYLPrQR1HU23ebTSazQWSQIh/yyNwyl QT4euq2kAhxujEy1QPnVVa8H3p/DFPkKeMMLYtIzrbGryKMsK9WWzL9HpIN5PsSu Pby/fdYjkxBgVJH0IMMVokQVdKsZ4gWBa47CEigzdh16e+T+BdTMRsRXHWXhJihW yR6A7ZfRHDUrLDZTZyp28IRuBH2v/1IdFVFaAK6QwcKP4RxeBG8gxzZsLYjo7eSA 2s8CS16KbzSsEbULSVHV4UjZ2r+1s+PQpnvfRxmnZ2QcL/AgTlhT07PETv1xjPIi QR2RSHKftVfh3nJ0tgFdkgltFqPugs9eWesk3kYwiiwscqh1JgQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:18 2026 by rpki-client