$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: wfC5uuOUHhfHce6aT049IDYbsx0rE0XrSgWV8cqqims= Subject key identifier: CA:C0:8B:4E:D5:DE:7A:10:10:B2:76:5E:08:54:54:3B:A2:22:E7:8E Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 7D1848A67DE6C4F29867DDBF6268035634CCBE5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 02A1 Signing time: Thu 26 Mar 2026 05:12:23 +0000 Manifest this update: Thu 26 Mar 2026 05:07:23 +0000 Manifest next update: Sun 29 Mar 2026 14:14:23 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 5yM7LenZibhT3u2W6Gk+hwUkn9tMVVAypF3ucNqsDtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:18:48:a6:7d:e6:c4:f2:98:67:dd:bf:62:68:03:56:34:cc:be:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Mar 26 05:07:23 2026 GMT Not After : Mar 29 14:14:23 2026 GMT Subject: CN=CAC08B4ED5DE7A1010B2765E0854543BA222E78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:43:db:56:0e:4e:c0:94:b2:5f:39:bb:ee: e7:9c:e6:75:d9:59:ab:51:a7:9a:1c:15:0b:c6:b6: 9c:f6:7b:a8:41:b3:d8:8f:ed:11:ba:1a:b4:c2:dc: 7e:6e:0b:4c:70:d7:9c:4e:0c:b5:ae:ba:ad:e4:0a: 6d:f6:04:29:67:77:9d:a4:5f:31:ce:ad:3a:58:92: 33:e9:93:e6:f8:9a:84:05:19:91:7f:e9:a8:a4:27: d6:c6:97:a0:c1:78:92:f2:d2:f2:f0:08:5f:8a:43: 0e:b4:0d:1c:0d:c2:4a:44:b1:18:eb:94:c2:06:5a: 4a:4f:ea:fc:86:48:03:6a:e6:93:72:1c:f5:0c:e8: 75:97:26:47:09:d5:ef:3f:a9:8c:2c:23:80:22:da: 1b:6b:01:1c:4d:0a:ec:1f:f2:cb:6a:7e:fc:eb:7d: 41:89:bc:1a:16:09:9a:20:3d:1e:69:5b:4b:f4:88: 3f:c0:d4:db:15:c1:01:e5:41:12:f0:8a:f3:80:63: 98:2f:07:eb:6a:6a:2d:0f:c2:23:3b:b8:a4:c4:e9: 42:a2:ae:25:95:d4:3a:dc:3c:24:74:8e:d3:38:23: d9:b0:cd:f7:19:2a:a2:26:d8:17:6e:2c:97:7d:da: 64:9f:90:38:eb:e4:a4:72:d8:ff:72:63:d4:60:73: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C0:8B:4E:D5:DE:7A:10:10:B2:76:5E:08:54:54:3B:A2:22:E7:8E X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:cc:28:62:cb:fe:8d:78:09:ff:44:46:78:c1:e5:69:2b:d6: 08:59:50:f7:0a:2e:bd:01:b4:a2:88:1a:df:35:10:8f:6f:8b: dc:b9:b6:18:36:63:a6:9d:de:70:ed:b5:3f:84:2d:97:90:5d: f4:ca:c7:b8:00:a6:9c:80:2f:26:d9:0c:0b:c5:e7:23:05:ec: 93:45:2d:e2:33:fe:25:5d:d5:64:2c:16:87:a2:b0:c6:8f:01: c2:59:3e:4d:bf:ba:5c:be:b5:e6:87:99:1e:41:c1:17:a0:95: 08:1b:b6:02:fa:6e:38:19:47:60:f0:d1:29:bc:9d:eb:21:bf: 48:d9:87:50:1d:29:4c:b8:1b:6c:be:8c:d7:6e:bc:d4:7c:d4: 19:8d:bc:01:9f:7d:74:c8:93:d5:7b:61:dd:8a:f4:ce:7f:c2: b9:8c:51:b1:21:72:b4:e3:1e:ef:05:59:ce:30:55:15:a0:78: 0f:89:70:dc:9f:56:f1:1a:82:0f:1e:41:80:cf:9f:cd:91:42: f2:24:d6:f0:86:63:0b:27:01:ab:7a:4e:ce:bf:b2:96:69:79: 64:ce:3b:36:a5:28:58:38:5d:48:34:ca:0c:d0:62:03:af:eb: c6:de:7e:86:b8:59:d0:e9:f7:04:55:bf:db:3b:8c:cd:ff:8f: 5b:d2:04:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRhIpn3mxPKYZ92/YmgDVjTMvl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNjAzMjYwNTA3MjNaFw0yNjAzMjkxNDE0MjNaMDMxMTAvBgNV BAMTKENBQzA4QjRFRDVERTdBMTAxMEIyNzY1RTA4NTQ1NDNCQTIyMkU3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2EPbVg5OwJSyXzm77uec5nXZ WatRp5ocFQvGtpz2e6hBs9iP7RG6GrTC3H5uC0xw15xODLWuuq3kCm32BClnd52k XzHOrTpYkjPpk+b4moQFGZF/6aikJ9bGl6DBeJLy0vLwCF+KQw60DRwNwkpEsRjr lMIGWkpP6vyGSANq5pNyHPUM6HWXJkcJ1e8/qYwsI4Ai2htrARxNCuwf8stqfvzr fUGJvBoWCZogPR5pW0v0iD/A1NsVwQHlQRLwivOAY5gvB+tqai0PwiM7uKTE6UKi riWV1DrcPCR0jtM4I9mwzfcZKqIm2BduLJd92mSfkDjr5KRy2P9yY9Rgc1czAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysCLTtXeehAQsnZeCFRUO6Ii544wHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrMKGLL/o14Cf9ERnjB5Wkr1ghZUPcKLr0B tKKIGt81EI9vi9y5thg2Y6ad3nDttT+ELZeQXfTKx7gAppyALybZDAvF5yMF7JNF LeIz/iVd1WQsFoeisMaPAcJZPk2/uly+teaHmR5BwReglQgbtgL6bjgZR2Dw0Sm8 neshv0jZh1AdKUy4G2y+jNduvNR81BmNvAGffXTIk9V7Yd2K9M5/wrmMUbEhcrTj Hu8FWc4wVRWgeA+JcNyfVvEagg8eQYDPn82RQvIk1vCGYwsnAat6Ts6/spZpeWTO OzalKFg4XUg0ygzQYgOv68befoa4WdDp9wRVv9s7jM3/j1vSBBo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:27 2026 by rpki-client