$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: h2vQB1gYZOMR5ChQO6maKnTGR3IDbUQaHMN2HAqrqa4= Subject key identifier: CB:40:73:02:8E:66:85:AE:BF:22:E0:D4:B7:8F:52:17:BE:DC:75:CF Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 72CCB05F718ACFC446F2214AC7B2D8E93C144BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: 0137 Signing time: Sat 07 Mar 2026 03:02:17 +0000 Manifest this update: Sat 07 Mar 2026 02:57:17 +0000 Manifest next update: Tue 10 Mar 2026 04:59:17 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: /fLxU0ERKvyoT5JJAtWNqtwEwPznGL+db1POwJKUwHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:cc:b0:5f:71:8a:cf:c4:46:f2:21:4a:c7:b2:d8:e9:3c:14:4b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Mar 7 02:57:17 2026 GMT Not After : Mar 10 04:59:17 2026 GMT Subject: CN=CB4073028E6685AEBF22E0D4B78F5217BEDC75CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:45:7d:08:09:11:aa:70:b5:3e:e3:a5:1a:9f: ff:f1:4e:71:da:18:26:3e:4f:f4:f2:3e:8d:ab:25: 74:d2:05:54:b1:d1:85:f4:56:7f:ff:a6:63:f0:15: bb:dc:30:55:0c:48:a2:1b:f5:d8:c2:d7:d8:61:6b: 19:90:ce:17:41:11:b0:b3:6c:0c:25:74:95:ac:a0: e4:67:f2:88:82:b4:7c:ce:21:4f:78:2e:97:dd:97: fa:78:87:df:a6:95:60:1e:a5:4b:5b:7f:f7:c0:c4: 90:80:bc:bd:aa:00:1b:3a:13:c9:22:96:5a:88:5c: c0:d6:cf:50:a5:1d:8b:e9:ce:02:14:e0:5b:78:3b: cd:48:ab:91:84:01:64:6b:04:8d:7a:a5:eb:a3:ff: a7:62:72:6a:74:fa:6f:ee:eb:44:84:d9:8e:49:a9: 5d:0c:4a:78:98:4a:d2:1e:52:a2:37:2a:9f:53:6b: 9a:99:4f:1a:50:ee:f7:0d:0c:67:21:b4:22:5d:b8: 65:52:3c:ed:54:f3:4e:20:d2:ea:f1:3e:d3:36:b8: f2:da:85:7c:bf:71:e1:fb:91:10:52:38:43:3b:bd: fb:8c:1b:ee:da:c5:bb:90:3c:2f:35:fc:71:b2:e7: 0f:15:72:29:9f:b3:c4:50:3f:f8:ed:9c:ee:c5:26: b5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:73:02:8E:66:85:AE:BF:22:E0:D4:B7:8F:52:17:BE:DC:75:CF X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7c:75:e0:98:98:f2:b6:5e:0d:f2:ce:64:49:63:22:e6:84: d1:a4:a9:43:1b:cc:bd:ec:99:1e:08:b6:23:05:5a:d4:9d:5f: 4d:57:80:58:25:90:cd:32:ce:2f:c2:9e:ab:1c:52:44:a6:04: fe:3c:fd:ce:59:74:43:83:59:da:4b:00:87:3d:8c:4f:44:1c: c0:34:34:93:b1:68:4f:85:f5:53:04:9d:fb:12:ff:73:0e:30: 13:f1:fa:d8:31:ea:3a:90:47:2b:d6:b9:f5:45:82:f2:89:5d: 27:35:42:5d:6e:bf:cd:02:ac:97:0a:98:ed:4f:47:e6:15:4e: 87:42:72:0e:77:3c:bf:13:6e:f2:d0:b4:8b:c8:ff:be:e9:56: cd:ac:b8:7f:13:a7:df:1d:73:7b:f0:58:14:80:12:46:e6:48: 64:92:e3:66:8b:41:40:5f:31:df:ed:2b:ae:fe:32:a7:53:e1: a0:81:b3:cd:b7:cb:b9:b0:9c:d2:85:77:fa:c1:c3:82:05:68: af:e2:42:87:53:f3:dc:51:14:92:2f:64:0d:d1:fd:a4:cb:98: 12:3b:e5:3c:ad:e2:02:72:09:d9:cf:e7:92:17:33:63:fd:ad: cd:bb:dd:08:4c:02:58:67:c4:ab:d5:0d:de:3a:30:7f:da:b3: 0d:a9:2c:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsywX3GKz8RG8iFKx7LY6TwUS70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNjAzMDcwMjU3MTdaFw0yNjAzMTAwNDU5MTdaMDMxMTAvBgNV BAMTKENCNDA3MzAyOEU2Njg1QUVCRjIyRTBENEI3OEY1MjE3QkVEQzc1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWRX0ICRGqcLU+46Uan//xTnHa GCY+T/TyPo2rJXTSBVSx0YX0Vn//pmPwFbvcMFUMSKIb9djC19hhaxmQzhdBEbCz bAwldJWsoORn8oiCtHzOIU94Lpfdl/p4h9+mlWAepUtbf/fAxJCAvL2qABs6E8ki llqIXMDWz1ClHYvpzgIU4Ft4O81Iq5GEAWRrBI16peuj/6dicmp0+m/u60SE2Y5J qV0MSniYStIeUqI3Kp9Ta5qZTxpQ7vcNDGchtCJduGVSPO1U804g0urxPtM2uPLa hXy/ceH7kRBSOEM7vfuMG+7axbuQPC81/HGy5w8Vcimfs8RQP/jtnO7FJrWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy0BzAo5mha6/IuDUt49SF77cdc8wHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV8deCYmPK2Xg3yzmRJYyLmhNGkqUMbzL3s mR4ItiMFWtSdX01XgFglkM0yzi/CnqscUkSmBP48/c5ZdEODWdpLAIc9jE9EHMA0 NJOxaE+F9VMEnfsS/3MOMBPx+tgx6jqQRyvWufVFgvKJXSc1Ql1uv80CrJcKmO1P R+YVTodCcg53PL8TbvLQtIvI/77pVs2suH8Tp98dc3vwWBSAEkbmSGSS42aLQUBf Md/tK67+MqdT4aCBs823y7mwnNKFd/rBw4IFaK/iQodT89xRFJIvZA3R/aTLmBI7 5Tyt4gJyCdnP55IXM2P9rc273QhMAlhnxKvVDd46MH/asw2pLLA= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:41 2026 by rpki-client