$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft File: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft (raw, json) Hash identifier: JGfSh5L9Z3YujIVgMR5AHM4mV0vrWydqdZNE55p4VZs= Subject key identifier: 94:87:F7:30:AA:C4:F4:04:BC:D7:FB:95:BF:F8:44:01:46:C0:B4:2A Authority key identifier: D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 Certificate issuer: /CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Certificate serial: 125CA48DCF552B6ED185DB9554EF86DE53A51E40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft Manifest number: 0F Signing time: Wed 18 Mar 2026 00:31:26 +0000 Manifest this update: Wed 18 Mar 2026 00:26:26 +0000 Manifest next update: Sat 21 Mar 2026 00:45:26 +0000 Files and hashes: 1: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl (hash: xmS+s9Bk5qOUPRAzsOaEF7C7i7HE3J4+yMg9/d8cmvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 00:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5c:a4:8d:cf:55:2b:6e:d1:85:db:95:54:ef:86:de:53:a5:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Validity Not Before: Mar 18 00:26:26 2026 GMT Not After : Mar 21 00:45:26 2026 GMT Subject: CN=9487F730AAC4F404BCD7FB95BFF8440146C0B42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fe:c5:40:6e:cd:b6:f1:7c:4f:eb:ab:c4:f7: cd:2d:1f:fb:4b:87:46:e1:0b:2a:14:56:d7:b8:98: b3:1a:4e:7a:f4:9f:eb:03:72:47:0d:48:83:3a:a1: 97:28:69:ef:93:94:f6:85:48:e0:fd:9a:b3:ad:50: bf:7e:47:d2:cb:f0:a4:f0:f4:54:bf:81:78:a2:c3: 24:a1:f9:83:31:79:ae:f0:04:bb:dd:8d:61:db:26: bb:19:bc:20:ba:e7:a0:e5:4e:a5:ce:f8:2a:67:bd: aa:02:63:c1:12:ac:d1:f8:24:59:40:d9:5b:05:a1: 88:06:93:3a:85:2a:7e:54:ea:f1:8b:b6:32:6a:b9: bc:7f:7a:65:d8:66:cd:92:88:be:15:f8:29:20:fe: c7:75:3b:bf:68:bf:43:8b:a2:39:eb:c7:db:c5:a5: 1b:94:41:58:1c:e4:8d:7e:f2:ca:0e:b0:0f:c9:87: dc:4a:62:db:b1:a5:c8:7c:03:28:6b:97:50:ad:b8: b8:55:46:59:95:c7:ea:e2:2e:19:85:af:79:5d:be: 30:4d:88:7a:cc:0d:5a:71:ff:c8:b9:98:41:7f:5c: d6:9d:8e:15:20:49:c9:44:df:e4:76:48:55:11:d1: 30:57:95:5e:b3:cc:c9:70:98:c8:ac:d7:46:a4:25: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:87:F7:30:AA:C4:F4:04:BC:D7:FB:95:BF:F8:44:01:46:C0:B4:2A X509v3 Authority Key Identifier: keyid:D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:21:8b:5d:e0:47:40:5a:1a:a0:bc:71:8c:5a:58:e0:66:43: ce:39:fa:1f:84:43:eb:5c:f1:b9:9b:fb:8f:ed:b7:8c:2b:6e: cd:bc:ad:77:0c:83:c6:cd:16:11:04:40:34:1d:72:72:02:72: 31:c8:55:54:9d:1c:42:64:99:67:61:64:50:83:24:0a:05:f5: 82:e8:0d:44:17:80:88:19:ef:ed:dc:01:42:b3:0e:40:27:e2: 4f:3e:1d:68:b7:48:2d:b4:05:52:80:5b:b8:03:16:ea:94:6a: 54:4d:7a:f4:91:1c:a2:02:8a:c5:2a:11:8b:76:3d:e2:22:9b: 3a:d4:12:95:43:8d:91:21:ad:04:bd:96:58:d7:3f:6a:b9:31: 5a:be:f7:19:30:f7:74:76:0c:ad:90:e4:39:73:a2:93:c5:ba: e5:d5:92:e7:5f:2f:c6:65:55:0e:d7:43:2f:b4:14:ef:ec:54: 55:48:a3:62:03:8d:6e:89:81:3f:04:14:64:42:68:ac:36:a7: d2:17:c1:c4:2b:e4:98:65:36:c9:1a:5d:5b:7a:c6:24:79:df: 4c:9e:e9:cf:80:b8:ee:8f:1d:6e:55:17:0d:b2:2d:5a:21:e8: 3f:ee:e2:e3:f3:c1:84:9a:62:51:63:76:b8:8a:b5:3e:17:86: e7:04:bf:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElykjc9VK27RhduVVO+G3lOlHkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIy NUFGQzlFNzAeFw0yNjAzMTgwMDI2MjZaFw0yNjAzMjEwMDQ1MjZaMDMxMTAvBgNV BAMTKDk0ODdGNzMwQUFDNEY0MDRCQ0Q3RkI5NUJGRjg0NDAxNDZDMEI0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi/sVAbs228XxP66vE980tH/tL h0bhCyoUVte4mLMaTnr0n+sDckcNSIM6oZcoae+TlPaFSOD9mrOtUL9+R9LL8KTw 9FS/gXiiwySh+YMxea7wBLvdjWHbJrsZvCC656DlTqXO+CpnvaoCY8ESrNH4JFlA 2VsFoYgGkzqFKn5U6vGLtjJqubx/emXYZs2SiL4V+Ckg/sd1O79ov0OLojnrx9vF pRuUQVgc5I1+8soOsA/Jh9xKYtuxpch8Ayhrl1CtuLhVRlmVx+riLhmFr3ldvjBN iHrMDVpx/8i5mEF/XNadjhUgSclE3+R2SFUR0TBXlV6zzMlwmMis10akJb3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIf3MKrE9AS81/uVv/hEAUbAtCowHwYDVR0j BBgwFoAU0ecjZoYek/02vVjwXPCAmyWvyecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMS9EMUU3MjM2Njg2 MUU5M0ZEMzZCRDU4RjA1Q0YwODA5QjI1QUZDOUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIyNUFG QzlFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzEvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgw OUIyNUFGQzlFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMhi13gR0BaGqC8cYxaWOBmQ845+h+EQ+tc 8bmb+4/tt4wrbs28rXcMg8bNFhEEQDQdcnICcjHIVVSdHEJkmWdhZFCDJAoF9YLo DUQXgIgZ7+3cAUKzDkAn4k8+HWi3SC20BVKAW7gDFuqUalRNevSRHKICisUqEYt2 PeIimzrUEpVDjZEhrQS9lljXP2q5MVq+9xkw93R2DK2Q5DlzopPFuuXVkudfL8Zl VQ7XQy+0FO/sVFVIo2IDjW6JgT8EFGRCaKw2p9IXwcQr5JhlNskaXVt6xiR530ye 6c+AuO6PHW5VFw2yLVoh6D/u4uPzwYSaYlFjdriKtT4XhucEvyU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:35:57 2026 by rpki-client