$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: KHXLFpjlS31ygiJyiJLCkv9rgScyiEOuG1yusDaTFbQ= Subject key identifier: E5:62:7A:1C:A8:45:7C:E0:86:B0:06:07:C4:9C:FD:91:B3:1C:DB:E9 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 14C2139DF6AD0F8C3059F58C16C744FD3FA47464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 16:21:58 +0000 Manifest this update: Wed 25 Mar 2026 16:16:58 +0000 Manifest next update: Sat 28 Mar 2026 22:11:58 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: fxczMKmNBbFNlfLOjx1yI65ll/RAiY6vXk8m24Zm2k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c2:13:9d:f6:ad:0f:8c:30:59:f5:8c:16:c7:44:fd:3f:a4:74:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Mar 25 16:16:58 2026 GMT Not After : Mar 28 22:11:58 2026 GMT Subject: CN=E5627A1CA8457CE086B00607C49CFD91B31CDBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:a8:38:ad:23:9c:22:e4:74:00:7a:35:22: 43:53:d0:d4:86:4c:33:6e:bd:b3:21:31:14:90:86: 21:69:5a:4b:ef:07:35:84:91:58:4e:d0:c3:b4:2f: 40:95:d6:71:ef:55:44:96:08:a6:87:b2:17:f2:06: 9d:fb:09:b6:81:3c:84:eb:02:0c:78:b7:b1:41:fb: 17:b3:c2:33:b0:4e:0d:d8:68:d2:e7:1a:89:0d:1f: 4e:d6:d3:bd:87:3b:f5:aa:1f:07:b8:4a:ad:dd:6a: 9d:81:27:81:f2:92:41:c6:bd:ea:75:f0:f9:71:12: 38:25:81:e9:20:e0:ce:f5:e2:f3:ed:f2:77:99:0d: 2b:a4:e5:0d:a6:57:25:5f:56:07:b2:d1:df:5a:83: ad:52:83:55:4b:6b:11:59:1f:86:25:5c:5e:0e:6a: 20:2b:21:ce:18:fe:ec:a3:15:4d:d0:1e:6a:56:72: af:df:69:fb:d6:ae:f8:d5:b3:1a:07:7c:ff:a6:85: 0e:84:77:37:f4:12:a6:48:9c:57:e3:e2:77:48:0b: b6:6b:c8:e8:77:c1:eb:7b:67:90:08:12:05:76:08: 8d:94:d0:6e:4e:b9:5e:0f:8a:f6:38:4a:2f:ce:99: 48:b1:60:d6:29:f9:7c:b0:a1:df:72:12:5f:69:57: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:62:7A:1C:A8:45:7C:E0:86:B0:06:07:C4:9C:FD:91:B3:1C:DB:E9 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:74:07:e3:e3:d6:ab:fb:b9:37:92:2d:f3:e3:86:79:50:da: c6:8d:f6:f3:f5:6d:23:36:e0:78:04:8c:72:9a:8c:43:a8:aa: 1b:78:a0:57:e4:0c:86:08:c2:25:05:8a:ba:8b:19:02:c4:e3: eb:61:11:b8:43:b5:1d:e0:41:b2:ec:41:73:74:df:62:4c:92: 63:cb:57:ea:58:47:9e:87:fb:97:06:cd:a7:c0:28:de:3c:50: f9:e2:13:dd:be:65:12:f5:35:e1:48:2d:cc:9a:e4:0f:6b:61: a1:8e:fd:68:d5:e4:ce:ce:9e:7a:59:8f:b8:19:0d:97:bd:6f: 95:5d:e0:2d:f3:ab:1b:fc:87:22:99:28:3b:d2:d7:f4:d0:43: 7e:67:ec:ec:6b:8b:c8:88:0d:e1:d9:ce:e3:87:92:26:15:2a: ee:b9:5e:f0:9b:51:42:53:cd:e2:3a:9c:f9:3a:64:21:e0:5e: 16:46:09:fb:13:d3:30:6d:21:a5:08:f1:d5:18:c5:21:a7:84: 4f:52:10:b9:ae:c7:d0:15:e1:a6:79:f3:64:fe:d9:9e:18:2b: 3c:b7:ef:1a:c1:e5:5b:b1:e1:51:59:01:48:38:55:34:0b:58: 16:78:7c:78:94:c8:34:ab:58:8b:42:e6:21:00:6b:86:8f:08: 0b:ca:99:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFMITnfatD4wwWfWMFsdE/T+kdGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNjAzMjUxNjE2NThaFw0yNjAzMjgyMjExNThaMDMxMTAvBgNV BAMTKEU1NjI3QTFDQTg0NTdDRTA4NkIwMDYwN0M0OUNGRDkxQjMxQ0RCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmag4rSOcIuR0AHo1IkNT0NSG TDNuvbMhMRSQhiFpWkvvBzWEkVhO0MO0L0CV1nHvVUSWCKaHshfyBp37CbaBPITr Agx4t7FB+xezwjOwTg3YaNLnGokNH07W072HO/WqHwe4Sq3dap2BJ4HykkHGvep1 8PlxEjglgekg4M714vPt8neZDSuk5Q2mVyVfVgey0d9ag61Sg1VLaxFZH4YlXF4O aiArIc4Y/uyjFU3QHmpWcq/fafvWrvjVsxoHfP+mhQ6Edzf0EqZInFfj4ndIC7Zr yOh3wet7Z5AIEgV2CI2U0G5OuV4PivY4Si/OmUixYNYp+Xywod9yEl9pV5I7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5WJ6HKhFfOCGsAYHxJz9kbMc2+kwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp0B+Pj1qv7uTeSLfPjhnlQ2saN9vP1bSM2 4HgEjHKajEOoqht4oFfkDIYIwiUFirqLGQLE4+thEbhDtR3gQbLsQXN032JMkmPL V+pYR56H+5cGzafAKN48UPniE92+ZRL1NeFILcya5A9rYaGO/WjV5M7OnnpZj7gZ DZe9b5Vd4C3zqxv8hyKZKDvS1/TQQ35n7Oxri8iIDeHZzuOHkiYVKu65XvCbUUJT zeI6nPk6ZCHgXhZGCfsT0zBtIaUI8dUYxSGnhE9SELmux9AV4aZ582T+2Z4YKzy3 7xrB5Vux4VFZAUg4VTQLWBZ4fHiUyDSrWItC5iEAa4aPCAvKmes= -----END CERTIFICATE-----Generated at Thu Mar 26 07:20:11 2026 by rpki-client