$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft File: 93D212CCFA351E8E694E5AFB214D80DC8C741916.mft (raw, json) Hash identifier: xhCAOBgP6hEiBZRKnEPxK1yCxuOHSzqJcY4jZutSuxo= Subject key identifier: B2:36:A5:D4:8C:66:2E:73:14:A4:4F:E6:A4:F7:66:D2:DD:DB:35:79 Authority key identifier: 93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 Certificate issuer: /CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Certificate serial: 482832A27FD8A1BA4F86AF82CF12727E2E32D94E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft Manifest number: 0140 Signing time: Wed 25 Mar 2026 03:00:53 +0000 Manifest this update: Wed 25 Mar 2026 02:55:53 +0000 Manifest next update: Sat 28 Mar 2026 05:26:53 +0000 Files and hashes: 1: 93D212CCFA351E8E694E5AFB214D80DC8C741916.crl (hash: bGIBJiJij6igpK3mCY8cu9bxaKW8b1LSGUwbmR/0PNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:28:32:a2:7f:d8:a1:ba:4f:86:af:82:cf:12:72:7e:2e:32:d9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Validity Not Before: Mar 25 02:55:53 2026 GMT Not After : Mar 28 05:26:53 2026 GMT Subject: CN=B236A5D48C662E7314A44FE6A4F766D2DDDB3579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:b1:1c:06:bb:44:68:d0:2f:6a:5c:7d:6f: 0f:89:47:86:ee:36:18:7d:78:f6:bf:e4:8e:ba:84: 57:c8:be:8f:c4:24:52:b8:e6:03:ee:4e:0d:58:29: 6b:86:6c:8b:17:0b:ff:a5:02:12:5f:09:34:45:5a: fd:f1:40:56:93:c3:26:1e:49:fd:f2:14:2c:ce:0c: 04:79:62:6f:5c:f8:a6:2c:a8:0e:d4:f6:f0:f6:6e: 18:8c:55:88:bd:d1:5f:6b:33:95:a9:8c:52:dd:42: 3a:26:6f:51:11:37:94:cd:bc:71:2e:84:be:d0:a4: 68:95:7f:0f:98:36:0f:ef:c1:99:96:0a:b6:32:93: 4c:88:fa:ce:94:fb:76:85:70:cf:1c:a5:52:a4:86: 57:26:36:31:f9:80:c2:00:38:8a:e6:30:e9:38:88: c4:b7:45:02:ab:6f:91:ae:8d:d5:ce:e6:03:d4:fc: 75:14:28:69:20:28:85:63:11:c1:84:15:99:ec:c2: 1d:b0:3c:c7:87:84:06:a3:a1:d3:ff:40:14:88:94: a0:55:de:58:02:6b:5a:14:c6:1b:22:f3:b6:5e:a3: 42:89:4d:c0:7f:cb:94:1c:4b:dc:97:ab:09:da:4c: 61:bf:dc:e3:8b:f0:c1:4b:3d:b3:29:a7:ca:a1:59: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:A5:D4:8C:66:2E:73:14:A4:4F:E6:A4:F7:66:D2:DD:DB:35:79 X509v3 Authority Key Identifier: keyid:93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ef:27:38:47:19:5d:5f:d2:36:ff:1f:ee:f9:2f:bf:da:f2: 57:e0:6a:cc:b3:38:91:78:c0:6e:ce:56:70:19:24:db:e7:3e: 4f:9c:f3:fb:8f:f7:2a:ad:f9:34:3e:8c:00:9d:4f:6f:2d:23: 96:f7:29:33:e3:d4:54:b6:c4:74:ef:46:55:5a:36:c6:82:b4: f9:41:8f:8c:f6:6d:e0:56:c0:a0:ec:b9:e5:1a:2f:c5:14:44: ac:2c:a4:aa:a6:77:8d:25:be:bf:2b:14:d4:72:a5:c3:f5:63: d0:e5:a5:ac:fa:05:1f:a2:44:72:c3:18:21:d5:e1:03:db:a5: 32:fb:12:85:38:68:fc:bc:7a:69:e3:aa:ca:ac:12:24:e6:48: c3:9f:d7:8a:15:52:6a:90:a8:f3:93:3b:65:ba:81:fc:82:aa: 54:3c:13:db:98:e5:83:95:ae:0d:ad:02:f0:03:f3:78:b9:e1: 5d:21:73:9a:7b:b3:7b:c2:83:26:a1:08:2c:b5:03:c0:5a:da: df:66:d6:9c:66:94:61:f7:5e:21:d7:e5:58:d2:51:ce:c8:c2: 84:80:96:71:30:ad:ef:9a:03:97:32:c0:c2:7d:d6:ce:0d:d8: c4:b0:ab:27:3b:af:b3:e6:32:e0:94:77:a9:4b:48:cb:37:37: b7:48:b2:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCgyon/YobpPhq+CzxJyfi4y2U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4 Qzc0MTkxNjAeFw0yNjAzMjUwMjU1NTNaFw0yNjAzMjgwNTI2NTNaMDMxMTAvBgNV BAMTKEIyMzZBNUQ0OEM2NjJFNzMxNEE0NEZFNkE0Rjc2NkQyREREQjM1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRLEcBrtEaNAvalx9bw+JR4bu Nhh9ePa/5I66hFfIvo/EJFK45gPuTg1YKWuGbIsXC/+lAhJfCTRFWv3xQFaTwyYe Sf3yFCzODAR5Ym9c+KYsqA7U9vD2bhiMVYi90V9rM5WpjFLdQjomb1ERN5TNvHEu hL7QpGiVfw+YNg/vwZmWCrYyk0yI+s6U+3aFcM8cpVKkhlcmNjH5gMIAOIrmMOk4 iMS3RQKrb5GujdXO5gPU/HUUKGkgKIVjEcGEFZnswh2wPMeHhAajodP/QBSIlKBV 3lgCa1oUxhsi87Zeo0KJTcB/y5QcS9yXqwnaTGG/3OOL8MFLPbMpp8qhWY0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsjal1IxmLnMUpE/mpPdm0t3bNXkwHwYDVR0j BBgwFoAUk9ISzPo1Ho5pTlr7IU2A3Ix0GRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMS85M0QyMTJDQ0ZB MzUxRThFNjk0RTVBRkIyMTREODBEQzhDNzQxOTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4Qzc0 MTkxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgw REM4Qzc0MTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/vJzhHGV1f0jb/H+75L7/a8lfgasyzOJF4 wG7OVnAZJNvnPk+c8/uP9yqt+TQ+jACdT28tI5b3KTPj1FS2xHTvRlVaNsaCtPlB j4z2beBWwKDsueUaL8UURKwspKqmd40lvr8rFNRypcP1Y9Dlpaz6BR+iRHLDGCHV 4QPbpTL7EoU4aPy8emnjqsqsEiTmSMOf14oVUmqQqPOTO2W6gfyCqlQ8E9uY5YOV rg2tAvAD83i54V0hc5p7s3vCgyahCCy1A8Ba2t9m1pxmlGH3XiHX5VjSUc7IwoSA lnEwre+aA5cywMJ91s4N2MSwqyc7r7PmMuCUd6lLSMs3N7dIspk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:39 2026 by rpki-client