$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: 4wheeLtilxsNwLKW8GKKwhpK8v5Kx0mAyG8R7GwbdJg= Subject key identifier: 24:06:BF:F2:51:87:81:58:F3:26:D6:65:8F:2D:F2:55:EC:CD:A1:9C Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 06D4BAAD8497D6A916A16172906DCC9AFD561A20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 01E2 Signing time: Wed 25 Mar 2026 19:23:55 +0000 Manifest this update: Wed 25 Mar 2026 19:18:55 +0000 Manifest next update: Sun 29 Mar 2026 04:02:55 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: YT5mJNjvMafuB3YB3z7x3bUBQI4+NKml0877ht6sFmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d4:ba:ad:84:97:d6:a9:16:a1:61:72:90:6d:cc:9a:fd:56:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Mar 25 19:18:55 2026 GMT Not After : Mar 29 04:02:55 2026 GMT Subject: CN=2406BFF251878158F326D6658F2DF255ECCDA19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6a:de:aa:08:dc:a8:59:c4:11:ef:7f:0f:ec: 6a:b1:24:3a:65:22:d3:27:5b:c3:76:d2:70:c2:9e: 4b:00:d2:eb:3e:b5:85:bd:3a:24:21:dd:f6:35:d6: 2e:dd:02:1d:d0:90:6b:3b:09:36:30:08:21:23:8b: af:ca:56:0f:f1:27:4e:b5:87:95:d1:b0:1d:63:e0: 73:d5:f7:ac:30:22:46:54:86:9d:93:29:8d:6c:05: eb:95:8f:76:cd:88:7e:8f:23:a7:80:a5:ab:7f:2c: ee:34:a4:16:89:50:cf:16:13:4c:63:a6:5e:9f:f6: b7:83:5c:c4:7c:19:78:3c:35:53:f4:3d:7f:e1:f5: 84:25:55:60:2c:64:a7:91:0d:81:c1:09:e5:b2:5d: e1:30:5f:2b:7b:dc:db:11:77:ba:24:d2:22:bf:ac: 77:16:0a:5d:d6:69:a5:ba:a4:91:b5:fb:08:c2:c1: 77:a6:37:1d:42:cb:5f:b3:e8:9a:b5:00:0c:6f:71: e1:7e:35:7e:60:5a:4a:da:32:4d:18:73:d5:ae:0f: ca:02:94:f4:e8:4f:63:f9:fa:92:5d:94:b8:86:9c: 0a:e1:35:02:e3:e5:ab:8e:fb:ff:8c:7e:3f:b2:3e: b0:38:4c:7c:fe:95:a5:b5:4e:81:f9:25:06:aa:e0: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:BF:F2:51:87:81:58:F3:26:D6:65:8F:2D:F2:55:EC:CD:A1:9C X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:af:01:c0:ae:34:b1:fb:bc:61:d7:48:95:74:20:c5:20: 46:ea:a8:7b:da:62:2c:81:aa:13:06:be:f5:73:be:92:bd:62: 8f:bc:a6:0c:a9:21:b2:f6:73:b5:41:70:a6:f8:d3:76:9a:34: ca:40:a7:c4:08:c9:08:5d:45:cd:35:43:73:f6:5d:dc:c7:54: 35:10:6b:32:aa:5d:a9:b1:ed:7b:45:13:a1:f1:25:8e:dc:61: f1:5c:d0:70:cb:d1:b5:5e:04:b6:e9:5a:cd:3b:d4:bb:96:60: 32:5f:6f:13:60:a4:03:c4:39:34:b6:1c:e8:30:e6:ba:55:f9: f3:54:29:8f:55:73:93:e4:34:3c:96:be:f3:1d:a1:8a:df:fa: 58:3f:4d:47:fc:5d:44:52:50:35:8b:e7:b9:7b:54:48:c1:ae: 38:6d:e2:52:1a:7e:12:35:e0:19:8b:4f:b7:94:b2:6c:49:46: 89:bb:56:7f:1f:67:95:a6:71:db:82:e4:7c:4e:89:0e:16:e0: e3:49:cf:19:48:8d:4d:ac:87:8c:48:3e:ac:47:66:2a:4f:fb: 93:2b:1d:5e:46:5e:85:fe:be:1d:af:00:8d:9a:87:90:a5:8d: 0e:30:4d:8f:36:95:60:6b:f3:d6:fc:ed:31:e3:e8:f5:ca:e3: af:3f:da:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtS6rYSX1qkWoWFykG3Mmv1WGiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNjAzMjUxOTE4NTVaFw0yNjAzMjkwNDAyNTVaMDMxMTAvBgNV BAMTKDI0MDZCRkYyNTE4NzgxNThGMzI2RDY2NThGMkRGMjU1RUNDREExOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoat6qCNyoWcQR738P7GqxJDpl ItMnW8N20nDCnksA0us+tYW9OiQh3fY11i7dAh3QkGs7CTYwCCEji6/KVg/xJ061 h5XRsB1j4HPV96wwIkZUhp2TKY1sBeuVj3bNiH6PI6eApat/LO40pBaJUM8WE0xj pl6f9reDXMR8GXg8NVP0PX/h9YQlVWAsZKeRDYHBCeWyXeEwXyt73NsRd7ok0iK/ rHcWCl3WaaW6pJG1+wjCwXemNx1Cy1+z6Jq1AAxvceF+NX5gWkraMk0Yc9WuD8oC lPToT2P5+pJdlLiGnArhNQLj5auO+/+Mfj+yPrA4THz+laW1ToH5JQaq4KkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAa/8lGHgVjzJtZljy3yVezNoZwwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZMrwHArjSx+7xh10iVdCDFIEbqqHvaYiyB qhMGvvVzvpK9Yo+8pgypIbL2c7VBcKb403aaNMpAp8QIyQhdRc01Q3P2XdzHVDUQ azKqXamx7XtFE6HxJY7cYfFc0HDL0bVeBLbpWs071LuWYDJfbxNgpAPEOTS2HOgw 5rpV+fNUKY9Vc5PkNDyWvvMdoYrf+lg/TUf8XURSUDWL57l7VEjBrjht4lIafhI1 4BmLT7eUsmxJRom7Vn8fZ5WmcduC5HxOiQ4W4ONJzxlIjU2sh4xIPqxHZipP+5Mr HV5GXoX+vh2vAI2ah5CljQ4wTY82lWBr89b87THj6PXK468/2vA= -----END CERTIFICATE-----Generated at Fri Mar 27 03:40:04 2026 by rpki-client