$ rpki-client -vvf repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft File: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft (raw, json) Hash identifier: j4XgPaeLP9/OhxhwB6ZMp5n2AtpXt42FU3uK15V6cS0= Subject key identifier: 7E:D9:EC:28:1D:4A:E5:F6:21:62:90:95:98:36:82:57:93:53:10:31 Authority key identifier: 2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 Certificate issuer: /CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Certificate serial: 7BCE2B493C60C3683ABA93043239966D987BC5DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft Manifest number: 06 Signing time: Wed 25 Mar 2026 12:11:02 +0000 Manifest this update: Wed 25 Mar 2026 12:06:02 +0000 Manifest next update: Sat 28 Mar 2026 12:26:02 +0000 Files and hashes: 1: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl (hash: eMnXfgac13KNA9qdRR2usqcrcDQCIu/TtW3t3gjfT+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ce:2b:49:3c:60:c3:68:3a:ba:93:04:32:39:96:6d:98:7b:c5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Validity Not Before: Mar 25 12:06:02 2026 GMT Not After : Mar 28 12:26:02 2026 GMT Subject: CN=7ED9EC281D4AE5F6216290959836825793531031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:16:22:f9:ad:d5:46:f1:49:12:54:58:71: 03:13:5e:2d:a0:51:fa:ba:00:97:89:04:00:5d:9a: 76:3a:1f:d1:0c:4e:a6:7b:f3:6e:bd:b7:fb:32:af: 57:61:e0:41:4f:01:51:93:61:35:0d:a6:33:b6:d5: d8:db:fe:b4:27:c7:ea:98:13:cb:e7:c8:d5:a3:4d: cf:72:2b:ac:74:2b:b5:6a:4d:4b:21:80:17:c3:10: b8:42:31:73:02:bb:e4:e9:a7:70:9e:aa:66:ea:8f: dc:df:6d:d6:83:b3:13:a6:65:b3:51:3d:d8:ca:38: 29:db:d3:c1:18:3f:95:5e:05:a3:ab:0d:fd:e4:5c: b5:eb:3d:15:c9:3e:ac:91:b4:6d:3c:42:77:3e:44: 3d:4b:ff:9c:89:ab:34:04:13:7d:16:58:b0:d1:5c: da:3f:bb:c0:7d:a2:43:a2:a4:97:1d:10:f1:e4:74: c2:64:eb:bb:d6:08:15:38:43:4a:0b:2e:fc:92:88: b4:38:b8:f1:3d:90:c6:e8:ce:4a:69:71:f3:8f:11: 71:94:94:35:fd:b9:19:12:90:81:99:68:5b:2e:7c: 4a:4a:73:30:02:49:31:96:54:46:a3:ab:fd:58:51: 6e:70:ee:ef:c0:58:9b:7a:d8:49:9c:0a:5b:d1:84: 83:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D9:EC:28:1D:4A:E5:F6:21:62:90:95:98:36:82:57:93:53:10:31 X509v3 Authority Key Identifier: keyid:2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e7:d0:69:b8:f4:27:d5:ec:9b:cd:71:5a:42:45:e8:74:ef: 2a:1f:2f:16:77:4a:58:76:89:99:33:ba:82:ce:2c:2b:40:48: 3b:5b:fc:55:6d:4a:f9:2f:8c:24:49:d8:c5:df:94:e7:ec:2d: ee:ba:64:02:f7:db:04:2e:ab:ac:9b:10:22:a0:cb:77:0e:67: be:cf:05:c9:2f:ba:39:87:5d:cd:1b:77:7e:11:75:ba:85:64: 7d:67:97:aa:24:4e:d5:b6:72:ad:ef:bb:06:90:6f:10:a9:ea: 0b:b6:ec:02:e6:f1:80:42:7f:6b:57:71:5f:64:2e:f8:8d:9c: 91:b7:53:23:2d:c5:6e:ab:79:67:ae:73:3d:4b:50:11:5c:88: 40:7b:4a:e9:cc:72:24:7c:12:2d:b1:76:73:b7:f9:ae:fb:40: 2e:91:98:4e:2d:03:94:7d:70:2f:68:5a:27:6c:9b:56:7f:29: 61:38:18:b4:62:77:7f:53:c3:a5:04:88:bb:df:9f:93:c3:e7: 62:0b:60:86:79:ea:f2:27:e2:24:ea:10:97:af:62:fd:35:79: 23:ee:b4:77:d6:ba:4a:2f:cf:65:fd:b8:be:d0:86:f8:70:53: 04:aa:a4:7f:32:55:e7:83:19:27:aa:71:fc:36:88:3d:27:a4: c7:3c:8e:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe84rSTxgw2g6upMEMjmWbZh7xdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENFODRE RjNDQUIwMzAeFw0yNjAzMjUxMjA2MDJaFw0yNjAzMjgxMjI2MDJaMDMxMTAvBgNV BAMTKDdFRDlFQzI4MUQ0QUU1RjYyMTYyOTA5NTk4MzY4MjU3OTM1MzEwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+hYi+a3VRvFJElRYcQMTXi2g Ufq6AJeJBABdmnY6H9EMTqZ78269t/syr1dh4EFPAVGTYTUNpjO21djb/rQnx+qY E8vnyNWjTc9yK6x0K7VqTUshgBfDELhCMXMCu+Tpp3Ceqmbqj9zfbdaDsxOmZbNR PdjKOCnb08EYP5VeBaOrDf3kXLXrPRXJPqyRtG08Qnc+RD1L/5yJqzQEE30WWLDR XNo/u8B9okOipJcdEPHkdMJk67vWCBU4Q0oLLvySiLQ4uPE9kMbozkppcfOPEXGU lDX9uRkSkIGZaFsufEpKczACSTGWVEajq/1YUW5w7u/AWJt62EmcClvRhIOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftnsKB1K5fYhYpCVmDaCV5NTEDEwHwYDVR0j BBgwFoAULyJaBpkHS1Y0kj5pqaTOhN88qwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMC8yRjIyNUEwNjk5 MDc0QjU2MzQ5MjNFNjlBOUE0Q0U4NERGM0NBQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENFODRERjND QUIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzAvMkYyMjVBMDY5OTA3NEI1NjM0OTIzRTY5QTlBNENF ODRERjNDQUIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXn0Gm49CfV7JvNcVpCReh07yofLxZ3Slh2 iZkzuoLOLCtASDtb/FVtSvkvjCRJ2MXflOfsLe66ZAL32wQuq6ybECKgy3cOZ77P BckvujmHXc0bd34RdbqFZH1nl6okTtW2cq3vuwaQbxCp6gu27ALm8YBCf2tXcV9k LviNnJG3UyMtxW6reWeucz1LUBFciEB7SunMciR8Ei2xdnO3+a77QC6RmE4tA5R9 cC9oWidsm1Z/KWE4GLRid39Tw6UEiLvfn5PD52ILYIZ56vIn4iTqEJevYv01eSPu tHfWukovz2X9uL7QhvhwUwSqpH8yVeeDGSeqcfw2iD0npMc8jq8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:33:59 2026 by rpki-client