$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: nO9TPcizSgZLF14urqaVAbnvxtJPF+V1ziEDN0IJN3A= Subject key identifier: A5:C9:81:8A:70:17:BA:79:2B:28:14:B9:B0:96:40:89:DE:B8:B4:5E Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 5C47CB24FBC9595FC1B85DE2C5C293DA32D94B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 017F Signing time: Wed 18 Mar 2026 04:41:09 +0000 Manifest this update: Wed 18 Mar 2026 04:36:09 +0000 Manifest next update: Sat 21 Mar 2026 13:09:09 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: Wc3fi1s4stloK7I31FBI5Jc5UnqupYG/TbxKhxAHUOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 13:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:47:cb:24:fb:c9:59:5f:c1:b8:5d:e2:c5:c2:93:da:32:d9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Mar 18 04:36:09 2026 GMT Not After : Mar 21 13:09:09 2026 GMT Subject: CN=A5C9818A7017BA792B2814B9B0964089DEB8B45E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:77:20:25:b9:16:d0:a2:8c:38:92:7c:97: 34:55:7d:4f:f1:99:d1:b2:ef:c7:fd:8e:53:78:db: ec:5e:7c:e6:0e:91:e4:2a:39:1d:2d:36:fe:05:6c: 9a:77:12:c1:00:db:be:ff:45:5e:7d:e3:7e:94:d7: a5:8b:d2:9b:8a:75:42:4a:e7:9d:bb:a7:ca:c0:94: 52:22:ec:b0:e8:4a:43:93:7a:12:d7:34:ea:07:64: e6:73:71:ac:02:2c:35:b2:38:54:75:33:44:dc:6f: 3a:55:12:6e:1c:9d:b0:a6:c0:48:c9:fa:54:dd:e7: d9:57:a7:88:16:26:5b:fd:92:b2:49:69:d5:50:2a: 93:49:68:e8:b2:78:1e:59:0e:2f:6c:51:00:31:61: 05:3b:22:e4:e7:ca:a9:40:31:89:04:6a:3e:d9:e8: 34:c9:06:a0:ae:1e:cf:07:c6:f8:1b:21:60:cb:62: f7:a7:79:01:0a:3e:b4:09:0e:61:79:a6:fc:e2:11: 8d:27:96:eb:4b:76:c8:c7:ac:f4:58:e2:14:0a:b4: ee:95:d5:0d:fe:71:36:15:1f:54:ec:ef:20:cc:0d: 1d:03:ce:14:e6:2a:d3:78:78:a8:c0:f4:73:f6:e2: 3c:02:0e:6e:31:ca:28:25:d0:74:93:99:38:01:a7: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C9:81:8A:70:17:BA:79:2B:28:14:B9:B0:96:40:89:DE:B8:B4:5E X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:33:4e:41:cd:4c:87:a6:78:20:5a:b0:a2:73:f6:ec:cb: b9:a4:fa:63:06:79:53:78:27:ee:b5:4b:e2:02:74:f2:a3:86: 68:35:d2:e6:2e:46:02:94:79:f1:4e:1a:27:97:c1:93:b5:03: f7:e5:26:53:dd:b5:84:4a:f4:2b:58:c6:9c:f0:ad:c2:ba:90: 7e:4e:49:47:09:eb:d5:3b:55:df:e7:ad:d8:ac:93:9e:8e:c9: 3b:92:70:bf:b6:f0:86:98:09:52:ff:7d:b8:7e:6d:4b:34:b9: 2d:19:42:7b:ea:a9:aa:0a:29:13:aa:f4:ed:10:c5:46:51:e7: 2b:6e:fa:91:6c:0a:02:a8:e2:d4:8b:23:4a:e5:08:0c:98:6d: 98:ef:7b:5c:79:1e:54:e6:d0:d4:6b:dd:1a:25:8e:47:55:8d: 16:93:7f:a0:32:78:d9:c0:5b:43:93:94:19:ac:ca:15:ec:0a: c3:00:5b:82:7b:f6:b2:fe:bb:eb:df:87:fc:12:17:56:6c:69: 4e:91:bf:8b:77:63:48:a1:47:31:e8:28:08:2f:ae:af:29:fc: 83:80:b3:cf:5a:24:97:c4:06:59:e3:1e:6c:36:4e:52:05:40: 01:3e:51:ab:87:2d:c7:fe:21:81:f4:9e:20:2e:3b:b5:29:79: e1:d8:ad:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITXEfLJPvJWV/BuF3ixcKT2jLZSzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGMjE1ODlGRjQ0OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAw NUQ3NDBDMB4XDTI2MDMxODA0MzYwOVoXDTI2MDMyMTEzMDkwOVowMzExMC8GA1UE AxMoQTVDOTgxOEE3MDE3QkE3OTJCMjgxNEI5QjA5NjQwODlERUI4QjQ1RTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHSdyAluRbQoow4knyXNFV9T/GZ 0bLvx/2OU3jb7F585g6R5Co5HS02/gVsmncSwQDbvv9FXn3jfpTXpYvSm4p1Qkrn nbunysCUUiLssOhKQ5N6Etc06gdk5nNxrAIsNbI4VHUzRNxvOlUSbhydsKbASMn6 VN3n2VeniBYmW/2Ssklp1VAqk0lo6LJ4HlkOL2xRADFhBTsi5OfKqUAxiQRqPtno NMkGoK4ezwfG+BshYMti96d5AQo+tAkOYXmm/OIRjSeW60t2yMes9FjiFAq07pXV Df5xNhUfVOzvIMwNHQPOFOYq03h4qMD0c/biPAIObjHKKCXQdJOZOAGnklECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSlyYGKcBe6eSsoFLmwlkCJ3ri0XjAfBgNVHSME GDAWgBTyFYn/RJzGlQZC+2gmz1QWAF10DDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUw NmIxYmM3LWM2NWEtNGExMS05MjczLTgxNGM0NjBiNmNiYS8wL0YyMTU4OUZGNDQ5 Q0M2OTUwNjQyRkI2ODI2Q0Y1NDE2MDA1RDc0MEMuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GMjE1ODlGRjQ0OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3 NDBDLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81MDZiMWJjNy1jNjVhLTRhMTEtOTI3 My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0OUNDNjk1MDY0MkZCNjgyNkNGNTQx NjAwNUQ3NDBDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEANX4zTkHNTIemeCBasKJz9uzLuaT6YwZ5U3gn 7rVL4gJ08qOGaDXS5i5GApR58U4aJ5fBk7UD9+UmU921hEr0K1jGnPCtwrqQfk5J Rwnr1TtV3+et2KyTno7JO5Jwv7bwhpgJUv99uH5tSzS5LRlCe+qpqgopE6r07RDF RlHnK276kWwKAqji1IsjSuUIDJhtmO97XHkeVObQ1GvdGiWOR1WNFpN/oDJ42cBb Q5OUGazKFewKwwBbgnv2sv6769+H/BIXVmxpTpG/i3djSKFHMegoCC+uryn8g4Cz z1okl8QGWeMebDZOUgVAAT5Rq4ctx/4hgfSeIC47tSl54diteA== -----END CERTIFICATE-----Generated at Thu Mar 19 09:25:13 2026 by rpki-client