$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: CyR/2D+78OH/hAN5VxDkk87pqYNIgDVop3uvJWu5HZA= Subject key identifier: F7:78:16:58:0F:8A:0B:DB:24:C1:56:D5:69:89:C3:F1:3E:6C:64:22 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 702A3AA716A6A4892F6895D7CA1A5D73C9B68541 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: 011F Signing time: Tue 24 Mar 2026 09:22:36 +0000 Manifest this update: Tue 24 Mar 2026 09:17:36 +0000 Manifest next update: Fri 27 Mar 2026 16:26:36 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: nMNHsmZmJCH/paMHdgFxPCIlj4Ozdecj3jr8/SPqSHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2a:3a:a7:16:a6:a4:89:2f:68:95:d7:ca:1a:5d:73:c9:b6:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Mar 24 09:17:36 2026 GMT Not After : Mar 27 16:26:36 2026 GMT Subject: CN=F77816580F8A0BDB24C156D56989C3F13E6C6422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:51:db:2a:bd:73:80:e1:c8:ef:81:df:3e: f2:d4:44:90:4c:f2:68:f9:85:b9:1c:7e:32:26:84: 54:2f:2d:30:fa:66:e8:09:f2:02:e2:a2:af:30:c5: c8:f2:54:a2:6b:cd:73:bf:89:dd:89:8c:b2:47:84: 43:61:f3:85:be:a1:1a:3b:f4:4d:43:9b:d0:bd:1a: be:c6:f9:ef:d2:49:8d:69:50:52:ef:ee:d9:ba:58: 00:2d:4c:93:06:c3:da:c4:6a:16:e3:a6:64:0b:bb: 77:38:42:01:02:7e:f7:77:22:5e:c6:a3:df:e0:75: b8:d8:b0:98:69:cc:84:50:ae:bb:29:d3:5d:04:69: 80:2e:8d:6c:01:e6:e6:12:ae:1f:f3:e6:20:1d:df: 7b:01:79:87:b8:ba:7f:ef:f2:3e:d7:80:0d:26:7e: fd:3d:6f:2f:5f:30:97:2f:8a:48:92:ce:32:24:45: 78:39:03:eb:0a:ce:a0:fc:2c:3c:b6:d3:ba:dc:34: ee:75:90:c2:7e:b4:67:1e:0f:ca:07:a9:f0:a8:da: 9b:f2:63:bd:bd:ff:e7:bb:f4:e8:ba:59:7d:5f:76: 18:54:a0:e2:2d:6e:03:5d:9e:48:ab:d5:82:5b:b7: 49:ba:11:a6:d8:29:b5:c7:10:71:e1:f2:a6:80:54: 57:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:16:58:0F:8A:0B:DB:24:C1:56:D5:69:89:C3:F1:3E:6C:64:22 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:05:82:94:4c:e3:c4:90:7e:21:3b:f2:36:f3:3f:bf:ea:e0: f9:4c:63:f1:09:46:4b:ee:13:40:c9:55:b2:d3:2f:7f:4b:59: 9a:d7:41:f3:22:53:87:6d:bb:51:45:b2:de:fb:87:9a:24:42: f0:a1:22:f8:d2:2b:34:4e:ce:05:c7:24:41:66:58:67:f1:29: a8:77:45:d7:aa:99:91:66:2b:28:0c:f1:9d:eb:a6:0a:1c:85: 33:40:42:27:01:a1:d8:75:b1:b3:b2:bb:ad:49:cc:6b:32:4f: 40:74:36:84:fe:d7:a2:f4:46:8b:5c:8e:db:f5:58:3f:93:c8: 04:26:f0:f3:13:3b:8d:92:24:1a:73:b6:ce:4b:cb:34:96:09: 42:b8:f3:11:33:3a:e1:f6:81:4f:c3:fb:80:e7:0e:89:a9:b1: ac:2c:bb:69:07:a0:af:ee:09:b3:ae:df:a2:f2:a6:9c:79:9c: 39:82:fa:d2:01:ed:6a:f5:5e:e6:f3:a9:87:28:98:2a:11:db: 05:01:b5:11:fc:db:e5:64:2f:e3:64:c1:4b:8e:17:0d:49:84: fd:d2:00:88:0d:bd:94:ee:c5:20:fd:a7:eb:2d:17:38:f2:4a: d7:0c:91:2f:3b:16:83:94:f5:c1:19:0b:00:7f:86:b0:bc:00: d7:6a:f9:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCo6pxampIkvaJXXyhpdc8m2hUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNjAzMjQwOTE3MzZaFw0yNjAzMjcxNjI2MzZaMDMxMTAvBgNV BAMTKEY3NzgxNjU4MEY4QTBCREIyNEMxNTZENTY5ODlDM0YxM0U2QzY0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnlHbKr1zgOHI74HfPvLURJBM 8mj5hbkcfjImhFQvLTD6ZugJ8gLioq8wxcjyVKJrzXO/id2JjLJHhENh84W+oRo7 9E1Dm9C9Gr7G+e/SSY1pUFLv7tm6WAAtTJMGw9rEahbjpmQLu3c4QgECfvd3Il7G o9/gdbjYsJhpzIRQrrsp010EaYAujWwB5uYSrh/z5iAd33sBeYe4un/v8j7XgA0m fv09by9fMJcvikiSzjIkRXg5A+sKzqD8LDy207rcNO51kMJ+tGceD8oHqfCo2pvy Y729/+e79Oi6WX1fdhhUoOItbgNdnkir1YJbt0m6EabYKbXHEHHh8qaAVFfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93gWWA+KC9skwVbVaYnD8T5sZCIwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANEFgpRM48SQfiE78jbzP7/q4PlMY/EJRkvu E0DJVbLTL39LWZrXQfMiU4dtu1FFst77h5okQvChIvjSKzROzgXHJEFmWGfxKah3 RdeqmZFmKygM8Z3rpgochTNAQicBodh1sbOyu61JzGsyT0B0NoT+16L0Rotcjtv1 WD+TyAQm8PMTO42SJBpzts5LyzSWCUK48xEzOuH2gU/D+4DnDompsawsu2kHoK/u CbOu36Lyppx5nDmC+tIB7Wr1XubzqYcomCoR2wUBtRH82+VkL+NkwUuOFw1JhP3S AIgNvZTuxSD9p+stFzjyStcMkS87FoOU9cEZCwB/hrC8ANdq+Vo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:23 2026 by rpki-client