$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: kWKveo9BuWc9m0Uxbnam02TONEUPXVc+uYj7vhKwBsk= Subject key identifier: B3:38:37:17:A9:66:B5:F1:0D:39:14:99:28:D8:B8:9A:D0:E1:E7:94 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 4D75A523B4CEFCEFC60CFE86EE430059C7599B83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 0126 Signing time: Tue 24 Mar 2026 19:51:33 +0000 Manifest this update: Tue 24 Mar 2026 19:46:33 +0000 Manifest next update: Fri 27 Mar 2026 20:34:33 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: jPJ2+8gqsROlNQoDi3ZpWR+8yU4Tsn6za92w1UVGD60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:75:a5:23:b4:ce:fc:ef:c6:0c:fe:86:ee:43:00:59:c7:59:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Mar 24 19:46:33 2026 GMT Not After : Mar 27 20:34:33 2026 GMT Subject: CN=B3383717A966B5F10D39149928D8B89AD0E1E794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:1d:49:6a:0b:09:40:ec:13:14:7e:49:f3: f0:99:7a:e8:b5:d6:76:a5:58:16:4c:b0:5a:d5:e3: 9b:48:f0:2e:58:b9:f9:61:df:fa:0f:b5:7c:d6:ef: ac:e5:6b:2e:0e:96:2a:7f:87:b9:bc:f4:e1:9a:b1: 92:25:8e:ee:12:20:92:82:73:7c:61:ed:32:10:4c: c4:83:6a:bb:66:64:34:b4:6c:71:ff:27:a7:cc:de: 84:50:b0:3e:08:3e:f6:99:3d:fc:e1:3a:8d:1c:e8: 04:3f:bd:30:b5:44:8a:82:62:61:3f:5b:f3:f4:cf: ba:03:5c:55:e5:9a:37:25:08:78:3a:30:02:04:3f: 96:f7:3b:cd:4a:ed:c0:c6:ed:da:75:e0:1f:84:8d: 13:a4:77:ac:ca:2e:64:cc:1c:39:06:cf:ec:ff:d1: be:dd:2c:0b:89:f6:47:c3:99:7a:59:f8:90:dd:a4: d2:88:81:b8:a7:91:55:21:2c:dd:ef:d9:a0:be:66: 4f:21:d8:bb:51:8c:b4:a2:19:2a:63:60:1e:2e:2a: 0d:da:78:88:00:00:22:a7:eb:9d:d1:1c:38:b5:b2: 31:e1:9e:bf:02:e0:08:eb:cd:c2:3e:7e:47:1d:08: 19:be:a9:f2:51:6d:cb:8b:47:10:8a:07:2f:ec:84: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:38:37:17:A9:66:B5:F1:0D:39:14:99:28:D8:B8:9A:D0:E1:E7:94 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bf:10:fe:28:aa:17:c1:4e:08:40:e0:6f:a1:e0:ac:9a:4d: d0:85:6a:c4:3c:d9:14:61:a7:6f:33:1f:65:1f:be:7e:34:0c: 56:cd:a9:ac:ae:d6:54:eb:7f:33:6a:e9:bf:4f:75:53:ef:21: 25:94:33:28:59:1a:c9:c8:81:02:dc:e9:b7:0e:c4:fb:54:44: e0:a7:c9:6b:fb:b9:52:7f:b8:88:ea:0d:65:ab:eb:21:62:91: b7:06:a6:26:04:92:7c:43:e7:e2:bc:8f:c2:69:61:64:df:8c: c1:6a:f3:b9:8f:98:7a:18:2d:8b:17:16:a8:64:ff:ea:08:2c: 43:5c:a6:84:26:be:8f:f6:f1:52:39:10:c0:17:6d:02:75:2c: 93:b3:6d:e0:01:b3:5e:1d:e5:65:8c:cc:21:ae:9d:53:d8:7f: 4b:9e:6d:3e:2d:9d:b4:40:94:00:39:cc:3b:ab:37:87:f1:e9: 07:03:40:7f:06:5f:d4:ae:05:9d:72:e1:23:26:e3:11:0c:37: db:a6:5c:48:80:23:52:f1:a5:ce:ac:e0:f2:c9:9c:a7:84:ef: 50:65:9f:67:b5:0f:bb:79:f2:c2:f6:5d:31:31:ad:d9:85:58: c7:27:d5:e6:c1:8e:4a:00:65:76:8a:26:93:89:45:88:ac:44: 8c:a1:1b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXWlI7TO/O/GDP6G7kMAWcdZm4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNjAzMjQxOTQ2MzNaFw0yNjAzMjcyMDM0MzNaMDMxMTAvBgNV BAMTKEIzMzgzNzE3QTk2NkI1RjEwRDM5MTQ5OTI4RDhCODlBRDBFMUU3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXB1JagsJQOwTFH5J8/CZeui1 1nalWBZMsFrV45tI8C5Yuflh3/oPtXzW76zlay4Olip/h7m89OGasZIlju4SIJKC c3xh7TIQTMSDartmZDS0bHH/J6fM3oRQsD4IPvaZPfzhOo0c6AQ/vTC1RIqCYmE/ W/P0z7oDXFXlmjclCHg6MAIEP5b3O81K7cDG7dp14B+EjROkd6zKLmTMHDkGz+z/ 0b7dLAuJ9kfDmXpZ+JDdpNKIgbinkVUhLN3v2aC+Zk8h2LtRjLSiGSpjYB4uKg3a eIgAACKn653RHDi1sjHhnr8C4AjrzcI+fkcdCBm+qfJRbcuLRxCKBy/shDi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszg3F6lmtfENORSZKNi4mtDh55QwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu/EP4oqhfBTghA4G+h4KyaTdCFasQ82RRh p28zH2Ufvn40DFbNqayu1lTrfzNq6b9PdVPvISWUMyhZGsnIgQLc6bcOxPtUROCn yWv7uVJ/uIjqDWWr6yFikbcGpiYEknxD5+K8j8JpYWTfjMFq87mPmHoYLYsXFqhk /+oILENcpoQmvo/28VI5EMAXbQJ1LJOzbeABs14d5WWMzCGunVPYf0uebT4tnbRA lAA5zDurN4fx6QcDQH8GX9SuBZ1y4SMm4xEMN9umXEiAI1Lxpc6s4PLJnKeE71Bl n2e1D7t58sL2XTExrdmFWMcn1ebBjkoAZXaKJpOJRYisRIyhG7Y= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:26 2026 by rpki-client