$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: mlUF21Bx8IMm+1P27OeoX7oq5/bDLT7yUbL2Xu1YDjs= Subject key identifier: 9E:93:8C:42:C7:75:2B:63:99:3E:AC:D7:45:9C:F8:E5:1F:9A:0B:CA Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 2D2E809637B00D52F4AADBC3615754F9C6629938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 01F7 Signing time: Wed 18 Mar 2026 20:31:17 +0000 Manifest this update: Wed 18 Mar 2026 20:26:17 +0000 Manifest next update: Sun 22 Mar 2026 05:47:17 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: hF4bGcEm7bottyIdPMkirsNgJ2dcJsT2aJdxAVl37+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2e:80:96:37:b0:0d:52:f4:aa:db:c3:61:57:54:f9:c6:62:99:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Mar 18 20:26:17 2026 GMT Not After : Mar 22 05:47:17 2026 GMT Subject: CN=9E938C42C7752B63993EACD7459CF8E51F9A0BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:6e:c6:0f:16:f6:ce:eb:61:96:c4:09:c2: 40:a2:04:bb:d1:24:e0:19:00:ee:b6:b7:89:60:53: be:e4:1e:d5:15:ef:10:d8:78:85:e6:6f:11:74:d2: 93:15:78:74:62:88:d2:11:17:4d:d4:76:ab:83:48: 41:13:ba:9b:c9:5c:2f:cf:7e:7d:9a:7e:18:2f:dc: d5:ec:c3:8d:a7:8a:b8:63:28:e4:b5:4f:27:ae:e1: ef:b0:01:13:d8:3b:40:2c:c3:87:93:d3:f1:da:6d: 8e:10:5d:f9:83:b5:ac:09:1f:bc:5b:4a:d9:22:5c: f4:25:2e:4b:da:8e:7d:38:c0:3b:66:dd:9d:d9:ed: 8b:d8:b9:5b:de:16:d4:55:46:15:5e:23:96:ff:35: 9a:26:fb:0c:97:99:6c:d9:aa:71:db:3e:53:e1:35: bd:07:78:76:77:a5:0f:92:f3:17:e9:a5:9b:a3:85: af:46:be:a3:c8:9b:b0:30:a8:96:62:c3:89:83:f2: 59:b8:21:4a:44:60:35:02:dd:75:9e:a9:b3:a4:8a: 70:37:b5:47:29:54:6a:01:8d:18:28:86:c8:f3:4b: f5:ad:ee:3f:c9:ee:76:12:f6:cf:1b:4d:cc:e4:6d: 3f:c4:79:83:c4:15:84:96:a5:f2:ee:cd:6e:c8:9d: 9f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:8C:42:C7:75:2B:63:99:3E:AC:D7:45:9C:F8:E5:1F:9A:0B:CA X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d6:f4:8c:0e:da:0c:3d:50:15:89:7b:3d:81:99:d3:c6:dc: 93:f3:6f:ba:c6:5b:d8:72:0c:b0:4e:19:32:66:a9:f2:a5:90: 1f:a7:d0:49:d4:ab:82:40:df:8d:f5:32:28:84:16:f9:15:b5: d8:e6:51:b8:71:82:b3:b8:19:e0:45:9c:a7:ec:55:01:04:1f: 85:60:46:19:f3:d0:80:7a:cb:e2:29:8c:38:6d:71:5d:6d:cb: 3d:4e:fa:a4:7a:53:d1:31:ee:e9:6f:31:94:7d:83:88:1d:ce: ec:e4:33:7d:78:7f:1e:bc:74:43:24:42:1e:3f:a4:5a:ac:70: 27:d4:63:ca:70:07:61:a7:1d:ed:92:f3:fa:06:78:97:81:86: 23:8d:d5:05:45:6a:a3:fd:89:20:75:01:45:8b:92:2e:18:45: 4c:ff:cc:ec:19:07:31:5e:82:cb:3f:b8:31:fb:09:13:71:8c: b3:f9:6c:34:63:bb:ab:78:d7:9d:88:b9:8b:30:29:a3:41:73: 72:ce:35:35:fb:31:24:b5:a7:d5:1d:99:59:d0:14:d7:7c:33: 74:b3:de:03:04:b7:24:f8:4d:5e:d4:49:a4:a8:a6:b2:77:7c: 69:dc:b6:18:b2:6f:dc:00:27:6e:f6:c4:a9:71:20:7b:98:b3: c8:99:c6:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULS6AljewDVL0qtvDYVdU+cZimTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNjAzMTgyMDI2MTdaFw0yNjAzMjIwNTQ3MTdaMDMxMTAvBgNV BAMTKDlFOTM4QzQyQzc3NTJCNjM5OTNFQUNENzQ1OUNGOEU1MUY5QTBCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCm7GDxb2zuthlsQJwkCiBLvR JOAZAO62t4lgU77kHtUV7xDYeIXmbxF00pMVeHRiiNIRF03UdquDSEETupvJXC/P fn2afhgv3NXsw42nirhjKOS1Tyeu4e+wARPYO0Asw4eT0/HabY4QXfmDtawJH7xb StkiXPQlLkvajn04wDtm3Z3Z7YvYuVveFtRVRhVeI5b/NZom+wyXmWzZqnHbPlPh Nb0HeHZ3pQ+S8xfppZujha9GvqPIm7AwqJZiw4mD8lm4IUpEYDUC3XWeqbOkinA3 tUcpVGoBjRgohsjzS/Wt7j/J7nYS9s8bTczkbT/EeYPEFYSWpfLuzW7InZ83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnpOMQsd1K2OZPqzXRZz45R+aC8owHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLW9IwO2gw9UBWJez2BmdPG3JPzb7rGW9hy DLBOGTJmqfKlkB+n0EnUq4JA3431MiiEFvkVtdjmUbhxgrO4GeBFnKfsVQEEH4Vg Rhnz0IB6y+IpjDhtcV1tyz1O+qR6U9Ex7ulvMZR9g4gdzuzkM314fx68dEMkQh4/ pFqscCfUY8pwB2GnHe2S8/oGeJeBhiON1QVFaqP9iSB1AUWLki4YRUz/zOwZBzFe gss/uDH7CRNxjLP5bDRju6t4152IuYswKaNBc3LONTX7MSS1p9UdmVnQFNd8M3Sz 3gMEtyT4TV7USaSoprJ3fGncthiyb9wAJ272xKlxIHuYs8iZxlM= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:28 2026 by rpki-client