$ rpki-client -vvf repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft File: 7769348B43C31740A116F7F9EEA09178E4104B66.mft (raw, json) Hash identifier: 4TUBp1Fhhqs3V8Iz5SU0AsHKdkYRSpqLqN9yA8ahXZk= Subject key identifier: 5F:08:72:8A:52:F0:98:CA:71:B1:7F:75:6B:9F:02:AF:4A:FD:4E:25 Authority key identifier: 77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 Certificate issuer: /CN=7769348B43C31740A116F7F9EEA09178E4104B66 Certificate serial: 151F39856C1065A16A9662B37BFF50AFBB917D28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft Manifest number: C3 Signing time: Wed 25 Mar 2026 08:22:19 +0000 Manifest this update: Wed 25 Mar 2026 08:17:19 +0000 Manifest next update: Sat 28 Mar 2026 17:05:19 +0000 Files and hashes: 1: 7769348B43C31740A116F7F9EEA09178E4104B66.crl (hash: 3LJQC4wciJTDBN65Ok8NqNStde45AgDqJs/549FWBYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1f:39:85:6c:10:65:a1:6a:96:62:b3:7b:ff:50:af:bb:91:7d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7769348B43C31740A116F7F9EEA09178E4104B66 Validity Not Before: Mar 25 08:17:19 2026 GMT Not After : Mar 28 17:05:19 2026 GMT Subject: CN=5F08728A52F098CA71B17F756B9F02AF4AFD4E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:68:d5:ad:31:b2:bb:9a:ea:cb:0d:e4:6a: 8c:2c:d5:e0:c5:e1:a0:26:32:90:1d:e5:a4:c1:ca: a0:8b:ee:65:22:54:70:b6:f7:ab:dd:9d:93:d6:b5: 1b:cf:23:35:93:97:e3:9e:5d:a0:3b:ce:88:8e:c3: a0:1e:d9:c7:c7:62:6f:97:af:c0:04:58:8c:87:c9: 76:60:db:ff:d0:1f:2a:f5:88:b6:a8:72:56:6f:5c: f2:c4:40:9d:95:12:e4:2e:56:6a:fb:ce:66:cb:63: bc:78:c7:3b:83:71:91:ba:02:56:46:43:46:e5:ba: 92:c9:9c:4a:01:73:57:6a:90:f1:42:9e:bc:a6:80: 5d:89:ac:19:86:dd:5b:3c:c2:d9:aa:e1:03:23:5d: f6:60:16:98:0b:37:c7:f3:87:6d:c5:36:a6:c8:b4: af:1b:19:a2:ad:be:0e:d0:5e:af:94:18:79:e9:65: 77:da:17:95:68:1c:9c:61:9b:ec:cf:0a:24:8b:3d: d0:02:75:c1:f3:b8:a8:4f:08:e1:6d:d5:b1:26:a7: fc:ce:fb:d1:00:5e:62:40:0d:a5:d4:6a:ab:4f:14: 14:b2:4a:76:b7:d6:e3:cb:68:3a:8f:ae:aa:a2:33: 54:8c:ef:45:61:62:c0:87:8c:94:9f:39:10:67:e5: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:08:72:8A:52:F0:98:CA:71:B1:7F:75:6B:9F:02:AF:4A:FD:4E:25 X509v3 Authority Key Identifier: keyid:77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a8:75:2b:1b:1f:72:5c:5e:e0:0d:e1:c4:69:83:1d:63:37: 60:e1:d9:3c:94:71:9b:fc:c6:a5:e6:1b:c3:66:38:61:f4:f5: 69:bb:2f:0e:dd:70:5c:48:fc:f8:48:02:0e:e0:79:22:28:c9: ea:7b:3b:f0:2e:35:4d:72:4b:83:cc:45:db:5b:c9:be:40:90: 84:f6:59:65:92:71:bb:85:05:04:25:f6:a0:ee:94:f1:7c:f9: 1a:85:8e:31:29:06:76:f2:86:b4:75:c7:eb:ab:54:27:b0:3a: 69:90:1f:08:83:e3:69:83:aa:e2:cc:94:be:89:51:0f:93:0b: 6e:64:5e:05:43:1c:93:3d:3d:6f:95:70:bb:58:b5:b4:fc:d0: 81:58:52:96:66:b6:ad:1b:b8:cc:b4:e3:e5:0a:31:be:b2:a4: a4:2a:9e:6a:5e:80:54:70:d3:da:77:6e:c2:c9:78:40:03:94: 9f:94:ac:7c:8e:6a:63:eb:bc:d2:02:c0:1b:e6:14:c2:f5:68: 00:7c:5b:e4:db:ef:2a:b4:18:3d:56:6f:7a:14:92:d7:7e:fb: 6f:08:62:a0:51:84:9e:17:f8:e9:f9:78:06:3c:e7:77:da:e4: 63:e5:7f:2f:a4:c5:28:5d:11:7e:9e:3b:34:c2:b2:7d:d3:c7: a4:1a:0d:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFR85hWwQZaFqlmKze/9Qr7uRfSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhF NDEwNEI2NjAeFw0yNjAzMjUwODE3MTlaFw0yNjAzMjgxNzA1MTlaMDMxMTAvBgNV BAMTKDVGMDg3MjhBNTJGMDk4Q0E3MUIxN0Y3NTZCOUYwMkFGNEFGRDRFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WmjVrTGyu5rqyw3kaows1eDF 4aAmMpAd5aTByqCL7mUiVHC296vdnZPWtRvPIzWTl+OeXaA7zoiOw6Ae2cfHYm+X r8AEWIyHyXZg2//QHyr1iLaoclZvXPLEQJ2VEuQuVmr7zmbLY7x4xzuDcZG6AlZG Q0blupLJnEoBc1dqkPFCnrymgF2JrBmG3Vs8wtmq4QMjXfZgFpgLN8fzh23FNqbI tK8bGaKtvg7QXq+UGHnpZXfaF5VoHJxhm+zPCiSLPdACdcHzuKhPCOFt1bEmp/zO +9EAXmJADaXUaqtPFBSySna31uPLaDqPrqqiM1SM70VhYsCHjJSfORBn5RTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwhyilLwmMpxsX91a58Cr0r9TiUwHwYDVR0j BBgwFoAUd2k0i0PDF0ChFvf57qCReOQQS2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWNkNDVjYi04ZDlmLTQzNTktOTZjMC02NGNmMjJhNWIwZmYvMC83NzY5MzQ4QjQz QzMxNzQwQTExNkY3RjlFRUEwOTE3OEU0MTA0QjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhFNDEw NEI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkx NzhFNDEwNEI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmodSsbH3JcXuAN4cRpgx1jN2Dh2TyUcZv8 xqXmG8NmOGH09Wm7Lw7dcFxI/PhIAg7geSIoyep7O/AuNU1yS4PMRdtbyb5AkIT2 WWWScbuFBQQl9qDulPF8+RqFjjEpBnbyhrR1x+urVCewOmmQHwiD42mDquLMlL6J UQ+TC25kXgVDHJM9PW+VcLtYtbT80IFYUpZmtq0buMy04+UKMb6ypKQqnmpegFRw 09p3bsLJeEADlJ+UrHyOamPrvNICwBvmFML1aAB8W+Tb7yq0GD1Wb3oUktd++28I YqBRhJ4X+On5eAY853fa5GPlfy+kxShdEX6eOzTCsn3Tx6QaDZo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:22:49 2026 by rpki-client