$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: AEDjQ2rKEyuXKx1aSVisO90nSKA9A7eHbo5LVqaDp04= Subject key identifier: 10:33:65:21:13:BD:DE:3F:F4:FA:E7:B8:1E:EF:F7:8F:C1:0D:B4:4C Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 3B8BFF68C9A0202C9BBBBC9A2E34E2C5FAF3534E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 0158 Signing time: Wed 25 Mar 2026 05:01:30 +0000 Manifest this update: Wed 25 Mar 2026 04:56:30 +0000 Manifest next update: Sat 28 Mar 2026 16:49:30 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: 5yn9W5nYqTGISDP/G7vG5y+tx3LPGQcaE+qzh+w9hPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8b:ff:68:c9:a0:20:2c:9b:bb:bc:9a:2e:34:e2:c5:fa:f3:53:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Mar 25 04:56:30 2026 GMT Not After : Mar 28 16:49:30 2026 GMT Subject: CN=1033652113BDDE3FF4FAE7B81EEFF78FC10DB44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:db:18:c5:52:54:69:4c:77:b9:8e:30:c3:45: 41:34:8a:b8:84:c6:44:b8:67:1b:4f:d8:45:aa:7b: 22:cc:d2:82:74:20:75:85:5f:28:df:00:fa:e3:78: 03:d1:a8:15:43:8b:40:91:55:f3:8e:9b:f9:f5:4f: 5b:b6:07:75:35:00:57:65:ed:19:d0:58:c3:60:90: c9:d0:df:3a:8e:db:f1:d0:7e:d2:d4:1c:6a:ab:b9: e8:47:c4:2f:06:f9:db:b7:37:3f:c4:13:df:01:05: 43:2b:6d:fb:02:02:69:f0:d7:f4:6a:7f:fd:e0:ca: 4b:c5:b6:7b:10:7c:da:94:6a:31:54:19:16:c0:6f: 95:82:f0:80:ee:ae:84:ba:9d:e2:ca:18:2c:56:c6: c6:34:a4:e9:d0:3b:39:2f:0c:ed:d9:d7:91:82:21: 55:19:f9:8e:4d:dd:5c:5e:d2:31:33:19:a9:8b:27: 8c:58:46:1d:22:26:5f:47:41:69:f5:e7:fa:6f:7c: e4:7c:18:ab:80:e2:6e:77:1a:8b:12:a4:64:5f:9d: 3d:c6:b9:f2:a5:fd:fe:21:1e:99:18:06:fa:90:0e: 31:29:ec:67:a7:d8:8c:b4:22:f7:27:c7:8d:a2:c8: f3:55:7b:b3:a7:a3:5e:c5:2d:68:fe:04:e6:a5:4f: 77:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:65:21:13:BD:DE:3F:F4:FA:E7:B8:1E:EF:F7:8F:C1:0D:B4:4C X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fc:99:6e:12:29:73:88:54:15:2d:f4:00:25:30:26:4a:2a: 40:64:57:01:ab:63:a8:0a:ef:a5:51:41:ab:d3:5c:93:e4:de: 94:f2:c0:29:ad:ab:d1:10:f0:1a:8d:ee:7d:e8:a1:54:96:7b: 83:d4:d8:1f:22:b1:f9:c6:df:db:3f:bd:db:d5:07:39:5d:4b: ec:1c:6d:67:d8:d2:c1:42:ca:de:9f:82:f7:bb:05:48:f1:6e: 68:51:c8:60:94:67:8a:22:71:81:6b:52:a0:6a:5a:31:2e:12: 9b:db:db:6d:aa:e2:51:38:1b:6b:9e:d3:ac:b2:e8:04:86:58: da:f4:84:4e:9d:97:8a:62:d3:90:ea:51:75:00:f8:ad:28:fc: 2e:db:9f:e7:96:35:d2:48:bd:1f:07:68:23:0a:b0:08:5e:a6: 72:91:ab:af:fc:41:03:1b:3f:ef:e3:6a:9b:20:32:90:e4:68: 1e:56:8e:dd:ca:3e:15:03:c8:3f:f9:7d:8f:30:f7:b6:67:b6: 1d:7e:03:08:4b:00:53:d3:1d:8c:e7:bc:57:4c:90:bd:e5:39: 8b:4d:88:a2:f5:63:a2:d5:a5:73:3d:3a:32:7b:8c:3e:b8:f4: 8e:45:62:c2:70:40:40:6f:bd:85:d4:9b:9a:5a:c8:4f:a5:43: b5:42:8a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4v/aMmgICybu7yaLjTixfrzU04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNjAzMjUwNDU2MzBaFw0yNjAzMjgxNjQ5MzBaMDMxMTAvBgNV BAMTKDEwMzM2NTIxMTNCRERFM0ZGNEZBRTdCODFFRUZGNzhGQzEwREI0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD02xjFUlRpTHe5jjDDRUE0iriE xkS4ZxtP2EWqeyLM0oJ0IHWFXyjfAPrjeAPRqBVDi0CRVfOOm/n1T1u2B3U1AFdl 7RnQWMNgkMnQ3zqO2/HQftLUHGqruehHxC8G+du3Nz/EE98BBUMrbfsCAmnw1/Rq f/3gykvFtnsQfNqUajFUGRbAb5WC8IDuroS6neLKGCxWxsY0pOnQOzkvDO3Z15GC IVUZ+Y5N3Vxe0jEzGamLJ4xYRh0iJl9HQWn15/pvfOR8GKuA4m53GosSpGRfnT3G ufKl/f4hHpkYBvqQDjEp7Gen2Iy0Ivcnx42iyPNVe7Ono17FLWj+BOalT3c/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEDNlIRO93j/0+ue4Hu/3j8ENtEwwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr8mW4SKXOIVBUt9AAlMCZKKkBkVwGrY6gK 76VRQavTXJPk3pTywCmtq9EQ8BqN7n3ooVSWe4PU2B8isfnG39s/vdvVBzldS+wc bWfY0sFCyt6fgve7BUjxbmhRyGCUZ4oicYFrUqBqWjEuEpvb222q4lE4G2ue06yy 6ASGWNr0hE6dl4pi05DqUXUA+K0o/C7bn+eWNdJIvR8HaCMKsAhepnKRq6/8QQMb P+/japsgMpDkaB5Wjt3KPhUDyD/5fY8w97Znth1+AwhLAFPTHYznvFdMkL3lOYtN iKL1Y6LVpXM9OjJ7jD649I5FYsJwQEBvvYXUm5payE+lQ7VCilc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:42 2026 by rpki-client