$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft File: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft (raw, json) Hash identifier: 8P2m4lGiaJcJRr1nqPsnxHcvISQJ/9I02HBqHGMR8vU= Subject key identifier: 86:42:CE:4A:71:34:E7:F5:D3:A9:46:CE:FA:0C:E6:5E:A6:32:45:38 Authority key identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB Certificate issuer: /CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Certificate serial: 6F52B91CFB2700C244D8681E135350A4BBA27889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft Manifest number: 0D Signing time: Tue 24 Mar 2026 13:21:58 +0000 Manifest this update: Tue 24 Mar 2026 13:16:58 +0000 Manifest next update: Fri 27 Mar 2026 14:07:58 +0000 Files and hashes: 1: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl (hash: iePAHjfdtH4LlRxvGBQLtYAPvbSVpHeGm1lsa/OEYcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:52:b9:1c:fb:27:00:c2:44:d8:68:1e:13:53:50:a4:bb:a2:78:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Validity Not Before: Mar 24 13:16:58 2026 GMT Not After : Mar 27 14:07:58 2026 GMT Subject: CN=8642CE4A7134E7F5D3A946CEFA0CE65EA6324538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b3:87:8f:78:01:96:30:d4:0a:fb:9b:e7:52: 11:b3:70:da:60:4c:79:35:ec:4b:54:5f:78:19:8a: c7:d9:02:1c:60:bc:4b:b1:cd:a8:56:15:10:1c:26: fc:84:26:d7:9c:b5:93:f1:3a:4e:68:a0:5b:fb:ee: 3e:48:ad:a1:b1:17:3e:2d:d8:d9:47:59:4e:12:5d: bb:5f:5d:17:2a:ba:65:7f:94:6e:d7:9c:2c:6b:d8: 8e:30:e3:50:c1:55:fe:0a:27:cc:1b:3e:93:61:f9: 7e:97:91:a8:a2:71:6c:48:a3:d0:ef:04:7f:1f:45: 43:c4:3f:85:b0:d2:3c:ec:01:04:3e:e9:2b:62:70: c0:8b:16:83:15:ff:b4:82:42:31:c6:2b:9e:9d:8d: e1:e6:41:a2:a2:af:ad:e1:d0:58:95:d5:8c:c7:0a: 40:9a:ec:d2:c5:a3:e6:1a:a4:c9:11:5d:4a:72:0d: 25:34:7e:5f:22:31:cd:5b:c2:49:eb:d3:f6:dc:25: 82:f4:3e:e1:e0:7c:07:c8:f5:05:57:67:21:5e:1f: 4b:b9:3d:1f:6e:83:5c:e9:ea:1b:7d:1a:23:4b:3d: ef:1e:1f:e7:18:57:0b:5e:dd:a8:71:35:b6:d9:b0: 4c:fe:86:3a:21:92:c8:3a:24:b4:5a:28:c1:2f:e6: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:42:CE:4A:71:34:E7:F5:D3:A9:46:CE:FA:0C:E6:5E:A6:32:45:38 X509v3 Authority Key Identifier: keyid:1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a0:aa:83:a0:35:86:d2:a4:20:b6:48:a8:6b:75:2f:45:71: 90:55:b0:9b:cc:f1:b3:5a:c0:3f:4b:90:13:b1:b4:2d:51:45: 79:51:7f:fb:c6:d8:59:04:75:8f:e1:bf:ed:15:8e:4b:a0:62: 6a:d3:3d:98:51:fe:7a:57:d5:8c:30:1d:dc:23:ba:5a:cf:39: 6a:e5:c4:dd:07:d2:f7:10:82:58:12:d8:55:0c:40:d0:e8:ec: fa:15:53:93:b4:1c:b8:95:c8:b1:3b:91:e8:7a:62:c2:63:a9: f2:41:df:76:3b:65:b6:ed:f9:26:30:6c:59:8e:2f:b1:e9:76: 24:cf:45:b1:d5:6a:4d:d0:1d:9e:c4:1e:2d:63:6d:2b:60:79: 91:c6:d8:fa:bd:4c:57:89:4f:82:0a:91:a2:2c:8c:71:56:1a: 06:a0:62:6d:97:3f:30:54:26:52:93:76:ea:b0:44:ec:e1:38: 52:26:ee:4c:d5:58:8b:ff:9b:6c:51:27:a1:2d:e5:a6:ed:db: 20:44:40:e5:14:87:7a:2f:8d:4b:4a:26:8b:7f:af:a0:31:9f: ae:b6:55:a8:3a:62:9f:c5:7c:1c:5d:dc:24:ed:d9:40:63:70: db:1a:28:ad:53:6b:18:5f:2f:fd:24:b9:67:95:19:41:4d:3a: e4:3c:2d:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1K5HPsnAMJE2GgeE1NQpLuieIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMz NENENUFGQjAeFw0yNjAzMjQxMzE2NThaFw0yNjAzMjcxNDA3NThaMDMxMTAvBgNV BAMTKDg2NDJDRTRBNzEzNEU3RjVEM0E5NDZDRUZBMENFNjVFQTYzMjQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4s4ePeAGWMNQK+5vnUhGzcNpg THk17EtUX3gZisfZAhxgvEuxzahWFRAcJvyEJtectZPxOk5ooFv77j5IraGxFz4t 2NlHWU4SXbtfXRcqumV/lG7XnCxr2I4w41DBVf4KJ8wbPpNh+X6XkaiicWxIo9Dv BH8fRUPEP4Ww0jzsAQQ+6SticMCLFoMV/7SCQjHGK56djeHmQaKir63h0FiV1YzH CkCa7NLFo+YapMkRXUpyDSU0fl8iMc1bwknr0/bcJYL0PuHgfAfI9QVXZyFeH0u5 PR9ug1zp6ht9GiNLPe8eH+cYVwte3ahxNbbZsEz+hjohksg6JLRaKMEv5lAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhkLOSnE05/XTqUbO+gzmXqYyRTgwHwYDVR0j BBgwFoAUHaaBgxuTtBgXFIfPZfqg7DTNWvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMS8xREE2ODE4MzFC OTNCNDE4MTcxNDg3Q0Y2NUZBQTBFQzM0Q0Q1QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMzNENE NUFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEw RUMzNENENUFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqgqoOgNYbSpCC2SKhrdS9FcZBVsJvM8bNa wD9LkBOxtC1RRXlRf/vG2FkEdY/hv+0VjkugYmrTPZhR/npX1YwwHdwjulrPOWrl xN0H0vcQglgS2FUMQNDo7PoVU5O0HLiVyLE7keh6YsJjqfJB33Y7Zbbt+SYwbFmO L7HpdiTPRbHVak3QHZ7EHi1jbStgeZHG2Pq9TFeJT4IKkaIsjHFWGgagYm2XPzBU JlKTduqwROzhOFIm7kzVWIv/m2xRJ6Et5abt2yBEQOUUh3ovjUtKJot/r6Axn662 Vag6Yp/FfBxd3CTt2UBjcNsaKK1TaxhfL/0kuWeVGUFNOuQ8LXQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:12:38 2026 by rpki-client