$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: yHvcXYGufkZYVuRM3yGz5Ievc/PKGkxt/jNQxl2+fk4= Subject key identifier: E2:84:B3:D9:73:AA:82:2D:1D:92:84:22:B0:D0:2C:3C:52:E3:97:61 Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 22DE8ED693495CA1DB69E81CDAEAFFF487061F33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 01F9 Signing time: Mon 23 Mar 2026 16:41:19 +0000 Manifest this update: Mon 23 Mar 2026 16:36:19 +0000 Manifest next update: Fri 27 Mar 2026 03:23:19 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: Mm6ckFvYYzZPVQ2EdYHfBwx115pcsl2VHGMSsP1pnQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:de:8e:d6:93:49:5c:a1:db:69:e8:1c:da:ea:ff:f4:87:06:1f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Mar 23 16:36:19 2026 GMT Not After : Mar 27 03:23:19 2026 GMT Subject: CN=E284B3D973AA822D1D928422B0D02C3C52E39761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:9c:42:04:b5:dc:30:26:f6:d2:c5:c0:6a: a0:44:f8:5d:99:cb:77:d3:7d:24:a9:ff:f0:ea:20: d2:07:14:3d:18:f5:ff:a4:f0:7a:e4:ae:92:8e:b0: 59:18:cd:f4:91:ca:b1:7f:eb:f4:ed:07:8a:92:34: a0:cc:dc:8d:4d:39:eb:17:7d:84:9f:a7:5b:24:90: 36:eb:a4:7a:00:95:ec:05:dd:5c:1d:7c:e3:6e:d3: 9e:13:38:7c:86:dd:59:60:eb:2f:11:11:84:80:f0: 0e:fa:fd:ed:35:0b:bd:22:1f:8e:f0:32:8c:9f:c0: 22:ed:91:89:7a:98:35:ae:f1:36:ea:5b:cd:7a:c2: 65:78:1b:77:ee:1b:dd:f5:62:ff:ad:55:99:ac:05: 87:f1:75:e9:4a:b4:bb:09:42:d0:9c:95:a6:b4:40: 1c:38:4c:2f:3b:b7:6c:50:a7:1d:a3:44:72:ef:57: fa:05:d0:89:87:d2:dc:59:1a:8b:3e:17:45:67:43: 97:f8:14:8d:43:38:8e:59:51:21:cf:32:dc:44:db: 59:33:77:0f:60:9c:11:1b:a2:a1:80:fd:4d:79:50: 80:18:27:0b:5a:47:56:01:b2:f7:01:d1:1f:c0:8e: 21:0b:26:9b:c2:88:d8:1c:6d:a5:1d:57:e5:5d:10: 61:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:84:B3:D9:73:AA:82:2D:1D:92:84:22:B0:D0:2C:3C:52:E3:97:61 X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:07:0d:da:d6:68:a5:6f:cd:5d:b4:a5:50:a7:63:ae:ff:f6: e1:76:95:40:82:89:61:67:03:d4:8e:30:1d:24:3c:a8:b9:c9: 7b:25:b9:87:34:6a:69:36:a0:15:49:4d:ca:c7:c1:41:a9:f8: 85:f4:a0:ed:c0:b2:fd:a4:22:41:83:d5:c7:a4:5d:e3:d3:52: 61:e5:55:c3:b3:57:0f:1e:80:93:67:4c:f4:08:1e:93:24:5f: 73:16:0a:61:77:29:3f:50:af:26:72:8c:6d:4a:d9:6b:fe:cc: 7e:84:f3:a8:60:66:74:02:04:61:1d:e7:27:4c:e4:d6:3c:a5: e5:ce:e8:24:80:8d:1c:b0:43:dc:9f:dc:28:bc:0d:56:87:9d: 7a:de:8d:a3:b9:e7:6f:d2:b4:d4:cd:4d:08:5c:c3:8b:c5:d0: 2e:fc:e7:ea:62:04:94:64:1b:0d:f6:d0:8a:f6:72:08:81:78: dd:3f:44:29:6c:a1:67:29:5e:a4:f9:bc:dc:3e:b9:49:a9:f7: 1b:f6:f0:57:d9:5f:4a:c6:6a:75:ea:4b:7c:3a:5b:cf:bb:e8: 8e:8c:4f:d6:06:b3:41:e4:c7:08:bf:fb:e2:9f:c8:a9:23:6b: 82:c5:a2:56:94:12:d6:d1:11:b3:bd:56:25:d5:46:f4:5d:57: e2:06:41:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIt6O1pNJXKHbaegc2ur/9IcGHzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNjAzMjMxNjM2MTlaFw0yNjAzMjcwMzIzMTlaMDMxMTAvBgNV BAMTKEUyODRCM0Q5NzNBQTgyMkQxRDkyODQyMkIwRDAyQzNDNTJFMzk3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/o5xCBLXcMCb20sXAaqBE+F2Z y3fTfSSp//DqINIHFD0Y9f+k8HrkrpKOsFkYzfSRyrF/6/TtB4qSNKDM3I1NOesX fYSfp1skkDbrpHoAlewF3VwdfONu054TOHyG3Vlg6y8REYSA8A76/e01C70iH47w MoyfwCLtkYl6mDWu8TbqW816wmV4G3fuG931Yv+tVZmsBYfxdelKtLsJQtCclaa0 QBw4TC87t2xQpx2jRHLvV/oF0ImH0txZGos+F0VnQ5f4FI1DOI5ZUSHPMtxE21kz dw9gnBEboqGA/U15UIAYJwtaR1YBsvcB0R/AjiELJpvCiNgcbaUdV+VdEGEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oSz2XOqgi0dkoQisNAsPFLjl2EwHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsHDdrWaKVvzV20pVCnY67/9uF2lUCCiWFn A9SOMB0kPKi5yXsluYc0amk2oBVJTcrHwUGp+IX0oO3Asv2kIkGD1cekXePTUmHl VcOzVw8egJNnTPQIHpMkX3MWCmF3KT9QryZyjG1K2Wv+zH6E86hgZnQCBGEd5ydM 5NY8peXO6CSAjRywQ9yf3Ci8DVaHnXrejaO552/StNTNTQhcw4vF0C785+piBJRk Gw320Ir2cgiBeN0/RClsoWcpXqT5vNw+uUmp9xv28FfZX0rGanXqS3w6W8+76I6M T9YGs0Hkxwi/++KfyKkja4LFolaUEtbREbO9ViXVRvRdV+IGQVQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:52:00 2026 by rpki-client