$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: 36U+fUbV5o3GG24iIzvhmUHnl4XSOVvvw8W72jIBZRo= Subject key identifier: 4C:9C:04:B9:F9:35:4E:9F:AA:78:E5:FD:4E:96:4E:4B:EE:3B:98:6A Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 446F2D384558EEC598990403F1F566192A5792A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 03DD Signing time: Wed 25 Mar 2026 00:12:08 +0000 Manifest this update: Wed 25 Mar 2026 00:07:08 +0000 Manifest next update: Sat 28 Mar 2026 01:11:08 +0000 Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: aKUD6uWMzlYnVG2Ym8Cb95F4uIpbVHoaAGnS3x5rNoA=) 2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6f:2d:38:45:58:ee:c5:98:99:04:03:f1:f5:66:19:2a:57:92:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Mar 25 00:07:08 2026 GMT Not After : Mar 28 01:11:08 2026 GMT Subject: CN=4C9C04B9F9354E9FAA78E5FD4E964E4BEE3B986A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:1b:31:12:d1:26:21:1e:6e:d6:13:10:db: f7:7f:9a:21:8e:c2:55:33:a8:56:0b:bc:7c:a8:36: 3b:b5:78:f8:8b:d4:00:b8:21:08:a2:1c:8f:22:e1: 30:23:ce:7a:2d:50:06:76:4f:0d:aa:69:c0:14:5e: 4f:09:92:76:98:2e:b4:91:93:8e:7f:93:3a:17:be: d6:a9:17:7b:32:bf:96:a0:53:08:1c:88:bb:25:7c: ad:02:00:fc:4d:30:51:c9:ab:00:6f:15:e3:70:65: f8:59:62:f6:e1:15:2c:86:0b:c9:91:60:ba:98:0f: 4f:c9:f1:41:ee:4c:9d:67:3a:2c:c8:1d:21:16:9f: 1a:3f:d7:54:85:a7:22:30:6a:d3:1c:b6:8e:e5:17: ee:58:ca:e4:47:c8:71:3d:2e:72:b9:77:2b:4d:e0: 2c:91:8f:64:83:a2:62:f3:df:be:02:4b:c8:bf:97: f4:bc:09:38:8d:55:41:fc:e0:15:e6:7e:28:75:ec: f5:36:c3:2d:42:31:9e:99:0e:08:b0:aa:22:3e:d1: 57:0e:bc:e6:c6:31:27:01:96:19:34:11:5b:9b:75: 64:b8:b3:e5:ed:d5:aa:a9:5d:e3:6b:95:2a:8e:34: 85:f7:a1:a8:73:03:c8:83:db:d1:fe:79:35:89:ec: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9C:04:B9:F9:35:4E:9F:AA:78:E5:FD:4E:96:4E:4B:EE:3B:98:6A X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:54:4e:6b:f9:4d:9d:27:7f:e8:ad:d2:7e:af:73:a0:d2:92: f6:18:d1:d9:b8:78:7a:10:69:2d:8f:52:83:b1:87:a8:26:4d: 5f:f9:35:a0:ad:7e:e8:39:c2:03:ea:b1:da:27:fc:72:92:63: 47:58:fb:7b:5d:a9:04:77:60:11:ac:14:4c:e9:7d:54:80:5c: 81:aa:ce:31:43:d8:c2:85:94:6e:51:cb:f1:c6:3f:c4:a9:5a: e2:c9:e7:66:31:d0:f3:ed:5c:bf:f3:82:a8:56:e6:ad:90:5a: 9a:a6:08:b5:ef:91:2a:0a:5f:aa:0a:b4:3d:0f:d4:3e:e8:5b: a2:27:8e:d1:17:82:a7:d8:bb:c7:be:04:09:91:70:5c:c5:6c: 37:a7:d1:53:0d:b3:c1:00:47:19:07:58:36:04:32:2d:49:37: 42:90:ec:0b:6c:0c:7b:bc:94:a1:6a:fa:62:5e:82:00:45:8d: c4:3b:03:5f:b1:12:38:a4:51:23:05:95:4b:3d:c8:7f:13:80: 4d:4a:8b:12:b8:e1:54:9f:d4:74:a7:ea:1f:14:64:d2:55:2b: 2c:5d:38:47:53:60:a6:f5:9b:c6:90:a3:cd:62:47:8f:1e:3c: 5c:5a:ea:d4:ce:cd:3a:89:02:2d:ee:8a:b8:e6:f6:b8:d2:cd: 6c:10:ad:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURG8tOEVY7sWYmQQD8fVmGSpXkqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNjAzMjUwMDA3MDhaFw0yNjAzMjgwMTExMDhaMDMxMTAvBgNV BAMTKDRDOUMwNEI5RjkzNTRFOUZBQTc4RTVGRDRFOTY0RTRCRUUzQjk4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5BsxEtEmIR5u1hMQ2/d/miGO wlUzqFYLvHyoNju1ePiL1AC4IQiiHI8i4TAjznotUAZ2Tw2qacAUXk8JknaYLrSR k45/kzoXvtapF3syv5agUwgciLslfK0CAPxNMFHJqwBvFeNwZfhZYvbhFSyGC8mR YLqYD0/J8UHuTJ1nOizIHSEWnxo/11SFpyIwatMcto7lF+5YyuRHyHE9LnK5dytN 4CyRj2SDomLz374CS8i/l/S8CTiNVUH84BXmfih17PU2wy1CMZ6ZDgiwqiI+0VcO vObGMScBlhk0EVubdWS4s+Xt1aqpXeNrlSqONIX3oahzA8iD29H+eTWJ7JPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJwEufk1Tp+qeOX9TpZOS+47mGowHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpUTmv5TZ0nf+it0n6vc6DSkvYY0dm4eHoQ aS2PUoOxh6gmTV/5NaCtfug5wgPqsdon/HKSY0dY+3tdqQR3YBGsFEzpfVSAXIGq zjFD2MKFlG5Ry/HGP8SpWuLJ52Yx0PPtXL/zgqhW5q2QWpqmCLXvkSoKX6oKtD0P 1D7oW6InjtEXgqfYu8e+BAmRcFzFbDen0VMNs8EARxkHWDYEMi1JN0KQ7AtsDHu8 lKFq+mJeggBFjcQ7A1+xEjikUSMFlUs9yH8TgE1KixK44VSf1HSn6h8UZNJVKyxd OEdTYKb1m8aQo81iR48ePFxa6tTOzTqJAi3uirjm9rjSzWwQrfU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:56 2026 by rpki-client