$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: kDeSSHxAGAr4BZbdhrcMcxTmlFIM0OK+PG3NTdo+l9c= Subject key identifier: 06:71:51:1C:5B:57:DA:09:F7:4B:8E:87:DA:2D:28:D2:02:F3:BE:47 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 1AF6DAE27D307CB1AAFA1B0CC8D76B38037C80B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 0261 Signing time: Tue 24 Mar 2026 11:01:41 +0000 Manifest this update: Tue 24 Mar 2026 10:56:41 +0000 Manifest next update: Fri 27 Mar 2026 17:03:41 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: k2i2c9pW+/6ue0dfoOpTTrK0qkp6LiPdH7jVxVydN9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f6:da:e2:7d:30:7c:b1:aa:fa:1b:0c:c8:d7:6b:38:03:7c:80:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Mar 24 10:56:41 2026 GMT Not After : Mar 27 17:03:41 2026 GMT Subject: CN=0671511C5B57DA09F74B8E87DA2D28D202F3BE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:d1:bc:91:6c:bd:34:5b:02:ae:b1:6c:6e: 99:d9:ce:78:63:88:d5:33:3f:c7:00:17:b5:76:14: c6:74:c8:27:6d:c7:12:42:ec:3c:1c:bc:69:44:8f: b8:de:8e:b1:7c:82:3a:38:96:3c:4f:8e:70:71:de: 65:a7:46:11:bb:74:6b:1c:59:7f:63:b0:94:25:82: 96:f4:43:98:b2:2b:4a:a1:0e:5b:37:7f:96:6c:4c: 1f:b6:34:f3:bb:be:50:9c:2a:2e:40:02:1b:24:84: 54:2c:e4:35:2f:aa:0e:08:f0:eb:b5:a2:8d:09:cd: 7d:ba:66:45:89:ca:7c:97:37:3e:8d:95:98:04:8c: c3:13:43:84:4a:bd:e6:e6:67:63:2c:6e:09:a2:b2: ab:3f:7a:48:22:16:80:70:fd:23:d1:45:d2:ee:43: e2:ef:60:4b:13:5f:8d:99:f4:2c:6d:5c:01:fb:31: 4c:39:3c:be:1d:f4:62:df:9e:8a:ab:81:ec:9a:4d: d5:1c:53:5a:cb:0d:53:5e:4b:60:35:60:50:46:33: 10:5f:57:b6:1b:25:81:ea:ab:03:06:a9:f8:03:e5: 33:0b:60:06:ff:25:1f:17:5e:43:a4:be:ac:02:41: 05:6c:87:68:f1:67:bc:7f:56:f9:b9:29:04:24:ff: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:51:1C:5B:57:DA:09:F7:4B:8E:87:DA:2D:28:D2:02:F3:BE:47 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:58:06:3e:15:c3:9f:51:75:e6:e4:52:6c:7a:a8:01:d5:f7: 0b:1f:4e:c5:38:6e:c3:22:1a:2a:1a:d4:49:b7:ba:dd:28:ad: b4:11:83:15:d9:59:11:78:0a:5e:d0:ac:43:20:1d:bb:9d:c5: d8:76:89:fd:1e:80:e7:f1:9a:f7:43:a8:28:f1:64:ff:0c:ba: 93:d7:fe:58:e7:a4:62:79:19:f8:52:a5:42:53:ab:a1:e1:55: 72:23:63:ed:2a:ec:d5:a7:43:f3:02:da:d3:6b:23:3c:4e:ee: 58:7b:eb:eb:0e:42:c0:fd:a4:91:24:d5:19:52:b5:08:3a:aa: e6:a9:8a:fa:f5:4c:88:c7:0c:91:2a:56:6c:bd:ee:44:92:ad: 72:f9:f5:fc:9a:43:92:ac:6b:94:1d:1f:f7:89:c2:04:64:0e: a0:7b:2d:54:60:94:ca:e6:d9:21:c2:86:5a:a9:a9:d2:e2:8c: 1b:97:ac:ad:83:fc:34:2c:29:19:c1:5f:f5:4b:76:7f:87:9c: 90:d8:34:fe:5c:0b:77:37:9a:04:bf:10:bf:83:14:2e:b2:2c: 66:09:71:6c:07:95:1b:7f:75:dd:56:97:a5:bc:97:e7:a6:a3: 98:b0:ec:8c:13:d5:d3:40:ee:a6:f9:20:82:8e:e0:d9:b3:19: 99:bd:05:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvba4n0wfLGq+hsMyNdrOAN8gLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNjAzMjQxMDU2NDFaFw0yNjAzMjcxNzAzNDFaMDMxMTAvBgNV BAMTKDA2NzE1MTFDNUI1N0RBMDlGNzRCOEU4N0RBMkQyOEQyMDJGM0JFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3dG8kWy9NFsCrrFsbpnZznhj iNUzP8cAF7V2FMZ0yCdtxxJC7DwcvGlEj7jejrF8gjo4ljxPjnBx3mWnRhG7dGsc WX9jsJQlgpb0Q5iyK0qhDls3f5ZsTB+2NPO7vlCcKi5AAhskhFQs5DUvqg4I8Ou1 oo0JzX26ZkWJynyXNz6NlZgEjMMTQ4RKvebmZ2Msbgmisqs/ekgiFoBw/SPRRdLu Q+LvYEsTX42Z9CxtXAH7MUw5PL4d9GLfnoqrgeyaTdUcU1rLDVNeS2A1YFBGMxBf V7YbJYHqqwMGqfgD5TMLYAb/JR8XXkOkvqwCQQVsh2jxZ7x/Vvm5KQQk/x1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBnFRHFtX2gn3S46H2i0o0gLzvkcwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1YBj4Vw59RdebkUmx6qAHV9wsfTsU4bsMi Gioa1Em3ut0orbQRgxXZWRF4Cl7QrEMgHbudxdh2if0egOfxmvdDqCjxZP8MupPX /ljnpGJ5GfhSpUJTq6HhVXIjY+0q7NWnQ/MC2tNrIzxO7lh76+sOQsD9pJEk1RlS tQg6quapivr1TIjHDJEqVmy97kSSrXL59fyaQ5Ksa5QdH/eJwgRkDqB7LVRglMrm 2SHChlqpqdLijBuXrK2D/DQsKRnBX/VLdn+HnJDYNP5cC3c3mgS/EL+DFC6yLGYJ cWwHlRt/dd1Wl6W8l+emo5iw7IwT1dNA7qb5IIKO4NmzGZm9Bbw= -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:03 2026 by rpki-client