$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: crv3xXQ9VlYTyU7rEL0ZpGodONRWkSW9K3y2N6XlbnE= Subject key identifier: B1:E0:72:6D:01:F3:CD:46:FF:78:BF:CF:00:05:57:1C:90:BD:9D:94 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 0E86EF0F69B4F0694248DE908FD14D7BC41C681C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 01BF Signing time: Tue 17 Mar 2026 08:22:09 +0000 Manifest this update: Tue 17 Mar 2026 08:17:09 +0000 Manifest next update: Fri 20 Mar 2026 15:32:09 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: 1795QwXrWY9AXMlWvEBZsZ1jZVjPJAiI8Qhv7AEXScY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:86:ef:0f:69:b4:f0:69:42:48:de:90:8f:d1:4d:7b:c4:1c:68:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Mar 17 08:17:09 2026 GMT Not After : Mar 20 15:32:09 2026 GMT Subject: CN=B1E0726D01F3CD46FF78BFCF0005571C90BD9D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:86:b3:65:3f:0e:18:f2:94:e8:f9:25:b4: bf:4c:48:18:29:fc:53:40:c2:ba:4c:64:b1:9c:a8: 4d:0e:cc:98:a6:c2:89:cf:14:87:73:52:c6:79:ff: f4:b1:29:85:e8:f3:82:fa:6c:63:0d:54:1e:fe:c9: 5e:49:89:48:c7:08:f0:e7:3d:07:c9:7a:54:71:fa: 98:fa:e8:f5:f4:81:84:6b:98:a2:52:6e:a0:be:bc: 4f:ab:e1:71:98:19:08:d6:5a:69:8d:f4:92:9b:37: 85:8a:4c:f7:b2:26:eb:d5:e6:76:90:c7:60:c5:cc: dc:36:74:c3:12:37:a7:99:b2:51:11:7d:d7:5b:4e: 4c:2a:41:e1:fc:8e:08:4b:b0:b3:56:51:e5:ac:e2: d7:fa:41:b8:a1:54:26:29:11:5b:3a:5d:bb:b3:dd: 47:c8:29:e6:6d:63:92:5f:26:db:cc:d8:41:42:ea: 6c:33:5f:2d:05:65:70:ea:af:3f:78:a9:0b:ab:cf: c1:50:4a:b4:b7:89:0a:10:0d:de:e5:e0:6b:e4:14: fd:58:49:e0:f0:d1:82:e7:1e:e6:b4:d9:2a:a3:99: f2:db:c5:ab:c6:05:90:ea:c8:9b:5f:ef:9d:3e:bd: 91:5f:47:f0:39:cb:d8:4b:d9:65:f7:65:4f:a7:6f: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E0:72:6D:01:F3:CD:46:FF:78:BF:CF:00:05:57:1C:90:BD:9D:94 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:38:5d:78:8a:c1:74:45:ac:18:cc:81:c2:31:de:2d:de:e2: 58:2d:63:7c:47:e4:c9:2e:f4:3f:31:2c:28:d0:4c:22:26:b4: 82:73:5a:8b:82:45:2e:00:a7:ce:3b:08:08:cf:89:c6:e4:76: 7e:eb:14:43:75:98:ae:8f:ba:05:68:93:90:b2:51:5d:b7:ce: 92:e4:a4:05:c1:a1:13:d2:11:20:0d:9b:6f:cc:48:26:27:4c: 11:51:ad:e4:16:40:c9:22:8f:6b:b7:54:d5:96:70:4b:ba:2f: a3:02:06:dd:b0:aa:46:91:63:3d:ea:af:4e:d6:c1:43:1d:e1: 16:65:cb:1f:52:87:71:42:27:03:92:51:37:2b:57:11:c2:6d: e1:53:49:b6:22:31:b2:9d:ca:b6:a8:e2:9b:2e:c2:33:3a:f2: 0b:b7:14:f7:ea:76:2c:c1:b9:51:e0:11:36:c2:b8:82:78:fa: d8:8e:79:13:f3:1c:88:bc:53:06:6b:4f:b7:db:d0:e1:51:49: e5:3a:01:57:f0:21:18:cb:ac:03:1e:07:84:ab:20:b9:13:1c: 53:d9:da:ae:c4:88:11:a5:1a:96:e2:45:ea:bf:16:89:50:e9: 72:c6:1d:63:bf:4c:fd:38:dc:0f:3b:18:a4:9f:67:72:4d:55: 53:d9:09:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDobvD2m08GlCSN6Qj9FNe8QcaBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNjAzMTcwODE3MDlaFw0yNjAzMjAxNTMyMDlaMDMxMTAvBgNV BAMTKEIxRTA3MjZEMDFGM0NENDZGRjc4QkZDRjAwMDU1NzFDOTBCRDlEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQoazZT8OGPKU6PkltL9MSBgp /FNAwrpMZLGcqE0OzJimwonPFIdzUsZ5//SxKYXo84L6bGMNVB7+yV5JiUjHCPDn PQfJelRx+pj66PX0gYRrmKJSbqC+vE+r4XGYGQjWWmmN9JKbN4WKTPeyJuvV5naQ x2DFzNw2dMMSN6eZslERfddbTkwqQeH8jghLsLNWUeWs4tf6QbihVCYpEVs6Xbuz 3UfIKeZtY5JfJtvM2EFC6mwzXy0FZXDqrz94qQurz8FQSrS3iQoQDd7l4GvkFP1Y SeDw0YLnHua02SqjmfLbxavGBZDqyJtf750+vZFfR/A5y9hL2WX3ZU+nb6I5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseBybQHzzUb/eL/PAAVXHJC9nZQwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM04XXiKwXRFrBjMgcIx3i3e4lgtY3xH5Mku 9D8xLCjQTCImtIJzWouCRS4Ap847CAjPicbkdn7rFEN1mK6PugVok5CyUV23zpLk pAXBoRPSESANm2/MSCYnTBFRreQWQMkij2u3VNWWcEu6L6MCBt2wqkaRYz3qr07W wUMd4RZlyx9Sh3FCJwOSUTcrVxHCbeFTSbYiMbKdyrao4psuwjM68gu3FPfqdizB uVHgETbCuIJ4+tiOeRPzHIi8UwZrT7fb0OFRSeU6AVfwIRjLrAMeB4SrILkTHFPZ 2q7EiBGlGpbiReq/FolQ6XLGHWO/TP043A87GKSfZ3JNVVPZCdk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:26:58 2026 by rpki-client