$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: WzxvJ2DDN7trpMAHqSuGsBIzSDZrJiYKf8O7qjBiivM= Subject key identifier: D3:D7:84:95:EC:46:DA:7B:2A:36:66:33:DC:BF:55:38:BA:76:32:6D Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 667A41801279CE6B0D5EBB6F2B1D110565FE7A1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: B2 Signing time: Wed 25 Mar 2026 13:41:25 +0000 Manifest this update: Wed 25 Mar 2026 13:36:25 +0000 Manifest next update: Sat 28 Mar 2026 20:03:25 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: X8lV70zZ+dcC0Sp38qDZIwBUFTgZh0pf8lXExR8iMvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7a:41:80:12:79:ce:6b:0d:5e:bb:6f:2b:1d:11:05:65:fe:7a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Mar 25 13:36:25 2026 GMT Not After : Mar 28 20:03:25 2026 GMT Subject: CN=D3D78495EC46DA7B2A366633DCBF5538BA76326D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:c8:d6:fd:04:a5:2d:a2:66:76:e4:36:f5: 20:fd:1e:73:8d:5d:1b:28:f1:43:81:bd:01:9d:05: 64:95:1d:78:79:9e:7f:40:da:0a:8c:18:cd:8d:6e: bf:7e:d5:b8:19:01:f7:12:51:6d:75:e4:dc:3b:24: 67:fe:a5:61:21:6c:5a:62:d9:ba:6b:0a:43:dc:48: 9c:58:59:60:9e:88:92:fa:9b:69:36:bd:9d:99:22: 3e:8d:3d:8b:fc:87:fb:90:19:39:ba:5d:32:23:cf: c9:e2:c2:1c:18:7b:85:bb:66:c6:fe:ce:f0:52:93: a9:0d:b1:2b:f1:14:98:fb:88:3e:18:20:96:bd:7a: 77:ae:4b:30:fd:63:ef:79:20:19:2e:28:8f:7d:5e: 6d:22:0a:c5:21:8d:a2:fc:72:fb:63:b9:b9:28:69: 0e:84:c4:36:c7:93:49:03:6d:2d:36:e6:e4:d4:eb: 88:97:ed:b8:f4:c2:da:43:d6:6c:02:04:94:96:d4: 4f:7c:4d:a9:2e:2c:ad:55:a6:44:df:49:59:82:84: a5:2c:8c:31:ee:89:46:b5:76:83:21:cd:a2:ba:4a: df:00:41:66:56:70:1b:40:35:34:63:91:00:3c:ed: d4:b8:56:70:77:e3:45:90:20:11:21:c6:65:6b:92: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:84:95:EC:46:DA:7B:2A:36:66:33:DC:BF:55:38:BA:76:32:6D X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:d8:ad:6d:f7:b1:5d:75:a2:0d:70:2d:5c:23:bc:c7:ed:df: f8:27:d4:89:d1:ea:3c:12:da:0b:b8:cb:ea:f2:1a:18:7a:c8: bc:09:d4:af:be:05:e3:1e:f7:10:a4:b0:98:3b:3f:ed:6a:64: ac:32:9d:c2:a3:79:ef:b1:46:47:7e:6e:9f:a5:bc:35:32:8e: eb:1b:0c:c3:7e:d8:25:08:84:a3:c3:c0:a3:a5:c8:44:8a:21: b2:e3:ef:bc:74:5f:ac:f5:98:7b:c7:5a:ab:52:9b:82:48:47: bf:63:42:fb:71:b0:a3:a3:99:ca:f4:b7:e8:8a:1e:06:c6:78: a5:19:c4:bb:47:d4:9f:51:0c:e3:30:d2:70:0d:cf:ec:28:8f: 8d:a1:ee:67:c2:15:64:36:2b:43:d7:4c:c8:f4:99:9b:74:1c: 84:f3:28:1e:20:06:bc:ed:d7:f2:a6:43:8a:2d:2f:47:c7:90: aa:fc:c9:3e:fc:e0:25:85:05:f8:68:68:c7:d5:22:80:72:81: fd:25:18:1f:cb:26:90:4a:20:cc:17:2a:89:75:32:90:a2:93: 5a:4d:9b:79:ce:fd:f0:d2:3c:ff:80:b3:84:41:6f:f7:61:97: 27:19:b7:ba:ba:ce:9d:71:f2:8d:20:72:06:16:5f:23:5f:1d: db:9a:3b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnpBgBJ5zmsNXrtvKx0RBWX+ehowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNjAzMjUxMzM2MjVaFw0yNjAzMjgyMDAzMjVaMDMxMTAvBgNV BAMTKEQzRDc4NDk1RUM0NkRBN0IyQTM2NjYzM0RDQkY1NTM4QkE3NjMyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVsjW/QSlLaJmduQ29SD9HnON XRso8UOBvQGdBWSVHXh5nn9A2gqMGM2Nbr9+1bgZAfcSUW115Nw7JGf+pWEhbFpi 2bprCkPcSJxYWWCeiJL6m2k2vZ2ZIj6NPYv8h/uQGTm6XTIjz8niwhwYe4W7Zsb+ zvBSk6kNsSvxFJj7iD4YIJa9eneuSzD9Y+95IBkuKI99Xm0iCsUhjaL8cvtjubko aQ6ExDbHk0kDbS025uTU64iX7bj0wtpD1mwCBJSW1E98TakuLK1VpkTfSVmChKUs jDHuiUa1doMhzaK6St8AQWZWcBtANTRjkQA87dS4VnB340WQIBEhxmVrkszXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09eElexG2nsqNmYz3L9VOLp2Mm0wHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMvYrW33sV11og1wLVwjvMft3/gn1InR6jwS 2gu4y+ryGhh6yLwJ1K++BeMe9xCksJg7P+1qZKwyncKjee+xRkd+bp+lvDUyjusb DMN+2CUIhKPDwKOlyESKIbLj77x0X6z1mHvHWqtSm4JIR79jQvtxsKOjmcr0t+iK HgbGeKUZxLtH1J9RDOMw0nANz+woj42h7mfCFWQ2K0PXTMj0mZt0HITzKB4gBrzt 1/KmQ4otL0fHkKr8yT784CWFBfhoaMfVIoBygf0lGB/LJpBKIMwXKol1MpCik1pN m3nO/fDSPP+As4RBb/dhlycZt7q6zp1x8o0gcgYWXyNfHduaO7E= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:38 2026 by rpki-client