$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: njPuDQGQkVjtvFNejvFFgY2UA+r1QVIFuqjqu2gO1SQ= Subject key identifier: 97:49:45:96:F6:65:4B:58:3E:54:6E:D4:CA:3B:ED:96:5F:FA:B2:9A Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 6CD16CFD2852216BDB69CE18761EE0D3334CCABE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 01C2 Signing time: Tue 24 Mar 2026 08:42:12 +0000 Manifest this update: Tue 24 Mar 2026 08:37:12 +0000 Manifest next update: Fri 27 Mar 2026 09:13:12 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: dGIIc339zubbqnAnwgEjGEbFcaT238MGKPGNVwPz328=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d1:6c:fd:28:52:21:6b:db:69:ce:18:76:1e:e0:d3:33:4c:ca:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Mar 24 08:37:12 2026 GMT Not After : Mar 27 09:13:12 2026 GMT Subject: CN=97494596F6654B583E546ED4CA3BED965FFAB29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:18:da:14:11:d9:4e:0b:ec:d1:9b:0d:e9: 80:28:dc:c4:82:5c:93:fa:7b:f4:99:01:78:82:98: c1:21:fc:2d:d6:4d:c3:e1:26:14:01:49:96:f9:5e: 3c:d2:ca:30:f5:f6:c9:00:13:40:b8:f9:69:e4:f6: 03:b0:0a:7a:fc:c4:02:47:ce:e9:c0:4c:07:ea:5d: cd:e8:2f:94:80:99:f6:8a:b3:00:bc:e9:82:be:d0: 84:e2:70:2d:3e:45:45:35:f3:06:ae:7f:b3:02:99: 48:f4:fc:fa:ba:56:6b:0a:bb:54:1b:99:23:fb:49: f0:6b:7f:a5:5a:06:49:a6:71:59:b7:63:07:20:7e: cf:e4:a4:cd:93:b4:ba:b6:0e:53:08:21:a9:00:67: df:47:2b:bd:c4:ba:d1:c7:c2:2b:c1:91:5e:0a:b8: 4e:e3:4a:bc:19:9e:5c:3f:a3:5d:81:49:db:2e:b8: d7:58:4c:a6:59:51:8a:29:3d:d3:85:5b:3f:67:5c: 5a:9b:a6:bf:72:be:0a:fc:6e:ca:6f:c2:50:19:c2: 71:f2:0d:87:75:4c:5e:67:15:59:f1:cb:8b:ed:49: 47:ef:cf:30:0c:83:47:4a:3b:67:70:e3:74:e2:73: 1d:10:d3:8f:31:84:ee:78:0d:79:c0:c2:70:f0:ba: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:49:45:96:F6:65:4B:58:3E:54:6E:D4:CA:3B:ED:96:5F:FA:B2:9A X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9e:91:58:a4:5c:15:ab:55:2b:65:d0:3e:a6:da:17:75:73: 5e:dc:94:ea:29:2d:c2:43:bc:de:b9:c1:ba:3c:0e:2c:c1:69: ee:d3:cb:3d:4a:a9:7b:1f:5a:66:b2:ad:f1:da:68:5a:08:b6: fe:45:70:39:a5:05:73:a3:76:6c:3c:5c:62:7a:73:02:4c:db: 67:b3:3c:6c:89:ae:4b:1a:07:03:e7:0c:2d:20:f4:66:ba:c1: 85:22:29:e6:fe:96:ba:52:cf:1e:82:c1:4d:fb:2d:e7:92:8e: ce:5c:ee:aa:17:9d:40:d0:62:c1:79:d7:8a:37:2a:87:2c:37: d6:58:da:10:5f:b8:07:e0:a7:f6:b5:61:e5:8f:d9:12:17:16: 5e:9f:b4:61:5a:1a:4d:b0:9f:5e:06:53:ed:02:ed:7e:1f:db: 23:65:13:33:75:77:08:50:78:97:48:76:2d:a1:57:46:8c:1d: 82:5c:60:29:17:d8:7c:af:ea:aa:11:ab:f5:71:27:d4:c6:c0: 9d:5d:18:31:98:3f:f7:42:b8:a9:19:4f:1d:a5:02:ee:25:c3: fd:2c:c6:68:fb:00:21:cd:79:7e:0c:cd:ea:bb:1d:22:86:85: 46:b5:af:45:98:67:d1:7a:b9:29:5f:79:7d:3e:5a:4c:fb:42: 68:33:75:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNFs/ShSIWvbac4Ydh7g0zNMyr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNjAzMjQwODM3MTJaFw0yNjAzMjcwOTEzMTJaMDMxMTAvBgNV BAMTKDk3NDk0NTk2RjY2NTRCNTgzRTU0NkVENENBM0JFRDk2NUZGQUIyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DxjaFBHZTgvs0ZsN6YAo3MSC XJP6e/SZAXiCmMEh/C3WTcPhJhQBSZb5XjzSyjD19skAE0C4+Wnk9gOwCnr8xAJH zunATAfqXc3oL5SAmfaKswC86YK+0ITicC0+RUU18wauf7MCmUj0/Pq6VmsKu1Qb mSP7SfBrf6VaBkmmcVm3Ywcgfs/kpM2TtLq2DlMIIakAZ99HK73EutHHwivBkV4K uE7jSrwZnlw/o12BSdsuuNdYTKZZUYopPdOFWz9nXFqbpr9yvgr8bspvwlAZwnHy DYd1TF5nFVnxy4vtSUfvzzAMg0dKO2dw43Ticx0Q048xhO54DXnAwnDwun8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0lFlvZlS1g+VG7Uyjvtll/6spowHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWekVikXBWrVStl0D6m2hd1c17clOopLcJD vN65wbo8DizBae7Tyz1KqXsfWmayrfHaaFoItv5FcDmlBXOjdmw8XGJ6cwJM22ez PGyJrksaBwPnDC0g9Ga6wYUiKeb+lrpSzx6CwU37LeeSjs5c7qoXnUDQYsF514o3 KocsN9ZY2hBfuAfgp/a1YeWP2RIXFl6ftGFaGk2wn14GU+0C7X4f2yNlEzN1dwhQ eJdIdi2hV0aMHYJcYCkX2Hyv6qoRq/VxJ9TGwJ1dGDGYP/dCuKkZTx2lAu4lw/0s xmj7ACHNeX4Mzeq7HSKGhUa1r0WYZ9F6uSlfeX0+Wkz7QmgzddQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:06 2026 by rpki-client