$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: f84Te1UqujEo+phSoMhk6/3LqMTHwW6Oe2RCLB2+j6g= Subject key identifier: E2:AE:2F:66:1D:42:73:DA:95:60:74:6E:60:EB:24:BA:5B:C2:1B:23 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 30108AC880D3DF7DC44131CB5BB7868D6288F588 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 0256 Signing time: Thu 26 Mar 2026 12:52:18 +0000 Manifest this update: Thu 26 Mar 2026 12:47:18 +0000 Manifest next update: Sun 29 Mar 2026 14:50:18 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: OnEDEi3BkscOXX3SNsqNuAYdxiEeJ5WEzzu7NR33eJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:10:8a:c8:80:d3:df:7d:c4:41:31:cb:5b:b7:86:8d:62:88:f5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Mar 26 12:47:18 2026 GMT Not After : Mar 29 14:50:18 2026 GMT Subject: CN=E2AE2F661D4273DA9560746E60EB24BA5BC21B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:81:cb:52:cb:57:8a:39:fc:62:a3:53:1b: d0:6e:e2:7c:fb:1f:b0:83:6f:67:02:e1:64:ef:60: fc:39:bb:dd:23:83:0f:e0:32:ec:01:2f:24:05:cc: 31:a1:92:32:1c:f4:0c:01:d5:d3:c8:85:14:c1:e0: 74:4f:9d:19:c2:77:cc:f0:96:3a:00:39:6e:1b:49: 9f:28:fc:19:a1:80:e3:00:97:e8:71:bf:32:e3:f1: fc:a0:68:5f:d6:1a:d3:cc:ae:fe:31:df:63:00:06: c8:98:87:16:1f:85:05:cb:ae:49:4e:19:1c:28:e0: b6:86:37:71:b5:bb:c8:ca:92:a1:09:b5:5c:48:26: 63:34:51:b0:ce:56:25:f0:2f:74:af:e7:bc:70:8f: 4c:37:bf:13:6c:c3:39:76:de:f1:f3:e0:f3:42:6e: bf:03:1f:20:e4:d6:63:c7:7b:85:19:2c:e1:8c:91: 04:51:50:f9:99:57:7a:fa:48:b5:bc:be:80:6a:a7: 4e:1e:6e:0e:6f:fe:5a:21:f6:a1:7e:54:3b:dc:04: cb:d9:a6:60:e0:ac:21:c0:a4:18:45:c3:80:9a:b7: d4:5d:cc:b7:29:68:51:87:02:44:d7:d8:a0:e7:41: ec:af:d6:ac:e5:26:8c:95:f8:dd:6c:6b:e3:dc:da: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:2F:66:1D:42:73:DA:95:60:74:6E:60:EB:24:BA:5B:C2:1B:23 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e4:02:bd:00:e4:f0:ae:d4:57:48:e1:53:f7:18:bf:be:e1: 72:90:c7:00:cf:2a:6c:aa:41:07:f0:bc:c3:39:80:c8:e9:99: 61:f0:47:cd:dc:b6:7e:dc:e7:8b:32:2a:00:e1:4d:f9:cd:37: e1:b7:7a:e3:4a:05:1f:1c:7c:a4:42:d2:59:74:68:df:c3:2c: 22:88:af:7d:11:1c:e6:93:e6:09:4a:5d:71:43:08:5e:56:9f: ec:21:fd:5b:c1:f1:2b:c8:dd:a4:fd:2f:00:59:14:66:5d:42: cc:7d:db:e3:af:c7:dc:d8:4b:99:f1:66:25:97:36:4e:e0:2f: 6b:2f:6c:7f:ef:56:05:70:88:f0:55:61:bb:49:af:e4:05:53: 16:f0:90:88:2b:e2:e8:72:d2:a1:28:48:2c:56:5c:b2:9b:b2: b3:ad:af:d3:cb:8f:fd:30:53:e3:27:cf:2b:0f:16:7d:72:9b: 18:72:5b:98:f5:30:01:4f:d1:6a:f6:ae:b2:41:9a:70:50:fb: a6:21:34:47:49:6f:a2:64:f6:52:f3:52:dd:c5:54:b0:12:e6: 4a:de:8c:0d:73:25:b6:8f:f4:f3:47:84:ce:65:5e:89:3e:a4: 57:bc:ab:22:9b:47:35:87:78:d9:2e:2a:b1:50:80:1f:6b:22: 47:2e:14:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBCKyIDT333EQTHLW7eGjWKI9YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNjAzMjYxMjQ3MThaFw0yNjAzMjkxNDUwMThaMDMxMTAvBgNV BAMTKEUyQUUyRjY2MUQ0MjczREE5NTYwNzQ2RTYwRUIyNEJBNUJDMjFCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1IHLUstXijn8YqNTG9Bu4nz7 H7CDb2cC4WTvYPw5u90jgw/gMuwBLyQFzDGhkjIc9AwB1dPIhRTB4HRPnRnCd8zw ljoAOW4bSZ8o/BmhgOMAl+hxvzLj8fygaF/WGtPMrv4x32MABsiYhxYfhQXLrklO GRwo4LaGN3G1u8jKkqEJtVxIJmM0UbDOViXwL3Sv57xwj0w3vxNswzl23vHz4PNC br8DHyDk1mPHe4UZLOGMkQRRUPmZV3r6SLW8voBqp04ebg5v/loh9qF+VDvcBMvZ pmDgrCHApBhFw4Cat9RdzLcpaFGHAkTX2KDnQeyv1qzlJoyV+N1sa+Pc2rmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4q4vZh1Cc9qVYHRuYOskulvCGyMwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/kAr0A5PCu1FdI4VP3GL++4XKQxwDPKmyq QQfwvMM5gMjpmWHwR83ctn7c54syKgDhTfnNN+G3euNKBR8cfKRC0ll0aN/DLCKI r30RHOaT5glKXXFDCF5Wn+wh/VvB8SvI3aT9LwBZFGZdQsx92+Ovx9zYS5nxZiWX Nk7gL2svbH/vVgVwiPBVYbtJr+QFUxbwkIgr4uhy0qEoSCxWXLKbsrOtr9PLj/0w U+MnzysPFn1ymxhyW5j1MAFP0Wr2rrJBmnBQ+6YhNEdJb6Jk9lLzUt3FVLAS5kre jA1zJbaP9PNHhM5lXok+pFe8qyKbRzWHeNkuKrFQgB9rIkcuFGM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:29 2026 by rpki-client