$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: rKgmLJy2+lAtx7aqyg55YnhoNHtZSUDsO+NEBZAdu4Q= Subject key identifier: C4:8F:6E:4D:B5:E1:DD:F7:CA:2A:6C:D0:C1:41:B9:7C:4F:35:FE:48 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 74CA46EA163375433B304ACB97F43810B99AB483 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 0252 Signing time: Tue 17 Mar 2026 11:32:13 +0000 Manifest this update: Tue 17 Mar 2026 11:27:13 +0000 Manifest next update: Fri 20 Mar 2026 19:12:13 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: 2GNrVQHNZAaFUaX6AahOgXafR9BT9EU0O2oX6bixSms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 19:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ca:46:ea:16:33:75:43:3b:30:4a:cb:97:f4:38:10:b9:9a:b4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Mar 17 11:27:13 2026 GMT Not After : Mar 20 19:12:13 2026 GMT Subject: CN=C48F6E4DB5E1DDF7CA2A6CD0C141B97C4F35FE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:1e:bb:e2:95:bf:21:e7:46:0b:20:2b:89: b7:26:40:3f:34:55:17:fd:a4:1d:12:eb:95:71:12: 95:78:ed:d0:c1:0b:df:55:0e:70:9b:e0:4a:70:dc: 44:73:a5:7b:7a:0f:15:e6:af:31:aa:09:bd:07:bc: 3f:c9:c6:99:b7:d2:f2:05:1a:c9:24:0a:b7:5b:47: e4:77:10:86:f6:e7:d7:64:46:91:14:25:1f:3e:1c: 75:e4:e6:b1:da:5f:57:25:f4:c9:4b:46:00:6a:db: 56:76:96:4c:b4:33:f4:e1:f4:bc:71:c7:ac:85:ef: 65:f2:97:c3:8b:e0:7c:7e:32:fa:18:2c:6c:81:9c: a5:2c:1e:d2:0f:1b:84:cf:b7:81:ac:76:34:c9:00: ef:c0:25:bd:ae:f8:09:d6:6f:14:96:ea:99:23:94: 5d:02:f5:fd:e6:e4:85:8c:26:bd:e2:3c:15:58:e7: 60:6c:ec:59:bd:21:be:6e:1e:ff:f9:61:12:19:9e: df:d1:cf:f0:bf:45:4b:4a:93:f9:59:08:14:01:52: 7d:d1:e1:23:6c:6a:12:05:75:98:87:d4:3a:9d:bb: c5:93:4b:f1:83:21:0a:69:b2:ef:ab:d1:f4:5b:99: 93:85:38:4e:fd:d5:3c:de:bf:7e:99:2f:22:80:55: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8F:6E:4D:B5:E1:DD:F7:CA:2A:6C:D0:C1:41:B9:7C:4F:35:FE:48 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:90:cf:3b:83:bc:42:10:2a:30:42:eb:70:c1:9d:07:c5:58: f2:f9:cc:d5:2e:47:2e:8d:61:06:3b:4a:14:4a:3f:8e:8e:5d: 8a:cf:f7:b9:8c:53:78:bf:0e:85:02:84:4c:88:bd:9b:11:21: 0a:b1:0c:1f:c4:66:b1:55:fe:65:51:36:5a:82:68:43:1c:d5: 5f:8a:23:1e:00:f0:c6:10:08:60:42:8e:6b:5d:89:7b:41:a0: f3:aa:2c:8f:39:b8:69:63:89:1b:05:18:c6:04:71:d4:8f:47: e0:f1:48:b1:79:6b:1d:5d:ab:28:9b:1d:52:5a:15:d8:c1:82: 7b:da:13:09:ae:20:6f:c3:36:c0:33:49:a4:54:ea:93:18:77: 70:bb:b7:76:e6:94:78:7f:5b:35:ba:60:61:9b:23:07:1b:59: e4:71:e5:26:9c:65:3c:79:08:7f:30:1e:f3:d5:e7:00:c3:05: 86:d6:0c:a1:da:bd:82:da:ea:4e:df:0b:79:7d:ef:ca:17:22: 95:64:36:63:01:8a:c4:28:0d:0a:fa:d0:cc:87:0d:16:8a:79: e1:6c:d5:7b:26:37:96:ad:21:de:59:a9:35:2c:e8:88:ce:bc: 2d:01:ff:30:59:ff:54:8e:a1:1b:fa:4d:cc:ac:26:68:1d:86: 62:2a:b3:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMpG6hYzdUM7MErLl/Q4ELmatIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNjAzMTcxMTI3MTNaFw0yNjAzMjAxOTEyMTNaMDMxMTAvBgNV BAMTKEM0OEY2RTREQjVFMURERjdDQTJBNkNEMEMxNDFCOTdDNEYzNUZFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRB674pW/IedGCyAribcmQD80 VRf9pB0S65VxEpV47dDBC99VDnCb4Epw3ERzpXt6DxXmrzGqCb0HvD/Jxpm30vIF GskkCrdbR+R3EIb259dkRpEUJR8+HHXk5rHaX1cl9MlLRgBq21Z2lky0M/Th9Lxx x6yF72Xyl8OL4Hx+MvoYLGyBnKUsHtIPG4TPt4GsdjTJAO/AJb2u+AnWbxSW6pkj lF0C9f3m5IWMJr3iPBVY52Bs7Fm9Ib5uHv/5YRIZnt/Rz/C/RUtKk/lZCBQBUn3R 4SNsahIFdZiH1Dqdu8WTS/GDIQppsu+r0fRbmZOFOE791Tzev36ZLyKAVcgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxI9uTbXh3ffKKmzQwUG5fE81/kgwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyQzzuDvEIQKjBC63DBnQfFWPL5zNUuRy6N YQY7ShRKP46OXYrP97mMU3i/DoUChEyIvZsRIQqxDB/EZrFV/mVRNlqCaEMc1V+K Ix4A8MYQCGBCjmtdiXtBoPOqLI85uGljiRsFGMYEcdSPR+DxSLF5ax1dqyibHVJa FdjBgnvaEwmuIG/DNsAzSaRU6pMYd3C7t3bmlHh/WzW6YGGbIwcbWeRx5SacZTx5 CH8wHvPV5wDDBYbWDKHavYLa6k7fC3l978oXIpVkNmMBisQoDQr60MyHDRaKeeFs 1XsmN5atId5ZqTUs6IjOvC0B/zBZ/1SOoRv6TcysJmgdhmIqs8U= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:53 2026 by rpki-client