$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: Typm4YhQxmuZY9lcYbUzyt0MF0w0Pg4Z07wLQU+INE0= Subject key identifier: 18:A4:82:75:00:2A:17:AA:3F:3A:99:F2:02:3B:2F:F8:1D:E8:32:EE Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 37EFFBCCA30C6166DED3A6B583791B6F4F5CAEAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 023F Signing time: Mon 02 Mar 2026 00:42:09 +0000 Manifest this update: Mon 02 Mar 2026 00:37:09 +0000 Manifest next update: Thu 05 Mar 2026 07:12:09 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: JeY/6SiJxFEPGF40yjwFPVC1mF2Rk5YsxtOUrHI8/0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ef:fb:cc:a3:0c:61:66:de:d3:a6:b5:83:79:1b:6f:4f:5c:ae:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Mar 2 00:37:09 2026 GMT Not After : Mar 5 07:12:09 2026 GMT Subject: CN=18A48275002A17AA3F3A99F2023B2FF81DE832EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:b4:54:b0:da:28:c3:7e:9a:5e:94:36:a4: 21:4b:b6:83:2e:74:7e:4c:6c:0f:58:ed:60:ff:36: ad:a1:f5:02:ac:5b:06:c7:c9:c8:e5:23:b1:f0:aa: d0:0d:c5:56:5e:c8:e6:47:ba:9e:ac:35:0b:49:e1: 11:29:6a:53:44:ee:c9:8c:f1:28:a1:dd:4d:97:61: 57:a1:ce:f4:50:58:f2:e6:11:28:42:a5:3c:df:ce: f8:e2:35:0e:ee:21:02:62:50:f1:a0:b7:c9:37:ff: 57:0d:d1:b5:44:1b:f9:9a:c2:0f:84:2e:15:3e:8e: b9:b4:17:b6:84:35:6e:37:fc:01:9a:a2:12:3c:12: 41:cd:37:6e:ec:58:6a:38:10:26:b9:76:2e:8c:f0: 93:a5:d2:17:ec:5a:8e:99:c4:3e:82:47:49:f5:f9: d4:94:e6:76:86:19:5c:63:31:1b:2d:32:ae:07:7a: 5e:e9:0b:5d:22:a7:de:a5:8e:a0:94:50:85:d9:25: f7:42:5e:c5:91:cf:50:bc:24:97:78:f1:c1:1e:ae: c8:1d:8f:c9:ce:50:21:4e:9b:8b:62:f5:f9:f8:f9: 90:e1:eb:95:94:5a:ce:5b:61:e1:07:05:ac:c8:ce: b2:3b:2a:35:65:74:ff:52:6c:99:ab:f7:44:65:45: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A4:82:75:00:2A:17:AA:3F:3A:99:F2:02:3B:2F:F8:1D:E8:32:EE X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:88:4e:b3:a6:24:88:4d:1f:b7:19:3b:37:f5:69:5b:f6: 76:fc:0c:32:a3:d9:44:c1:ad:c0:26:ef:de:30:80:9f:fe:71: ff:49:9f:25:f9:0b:ed:16:2f:e9:77:65:8a:e8:0a:0b:61:47: b7:38:16:ce:28:ce:e4:fb:05:5a:14:f7:c7:15:0e:f7:11:ed: bb:ec:86:a1:78:63:cc:35:fc:01:02:0b:24:00:52:89:09:54: fb:99:51:da:23:e3:92:31:9a:32:d4:d7:66:71:34:2e:8c:1f: b9:3d:8c:81:38:66:df:69:ab:7a:32:a3:2c:9b:4a:25:35:69: d0:6d:09:6d:0f:c9:5c:1d:04:0c:23:b9:ff:b0:66:4d:69:50: 1d:ed:f0:de:a0:3d:d8:dc:95:be:17:b7:36:b9:6b:0a:19:6f: 5d:dc:df:52:18:46:67:ed:76:e9:bf:aa:ce:af:66:ba:af:19: 3c:da:09:51:88:12:1e:2e:bc:39:fb:10:bf:8b:f7:cc:66:f7: ef:21:8a:d5:c5:d9:63:60:01:0e:12:3f:a6:bd:9a:6e:37:d7: 99:5c:63:9e:13:b6:fd:05:1f:0d:04:60:32:ad:ff:23:17:be: 09:da:13:aa:fb:54:d4:ce:1f:cc:53:86:fa:48:f4:70:52:22: 50:16:2e:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+/7zKMMYWbe06a1g3kbb09crq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNjAzMDIwMDM3MDlaFw0yNjAzMDUwNzEyMDlaMDMxMTAvBgNV BAMTKDE4QTQ4Mjc1MDAyQTE3QUEzRjNBOTlGMjAyM0IyRkY4MURFODMyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLA7RUsNoow36aXpQ2pCFLtoMu dH5MbA9Y7WD/Nq2h9QKsWwbHycjlI7HwqtANxVZeyOZHup6sNQtJ4REpalNE7smM 8Sih3U2XYVehzvRQWPLmEShCpTzfzvjiNQ7uIQJiUPGgt8k3/1cN0bVEG/mawg+E LhU+jrm0F7aENW43/AGaohI8EkHNN27sWGo4ECa5di6M8JOl0hfsWo6ZxD6CR0n1 +dSU5naGGVxjMRstMq4Hel7pC10ip96ljqCUUIXZJfdCXsWRz1C8JJd48cEersgd j8nOUCFOm4ti9fn4+ZDh65WUWs5bYeEHBazIzrI7KjVldP9SbJmr90RlRbGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKSCdQAqF6o/OpnyAjsv+B3oMu4wHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiZiE6zpiSITR+3GTs39Wlb9nb8DDKj2UTB rcAm794wgJ/+cf9JnyX5C+0WL+l3ZYroCgthR7c4Fs4ozuT7BVoU98cVDvcR7bvs hqF4Y8w1/AECCyQAUokJVPuZUdoj45IxmjLU12ZxNC6MH7k9jIE4Zt9pq3oyoyyb SiU1adBtCW0PyVwdBAwjuf+wZk1pUB3t8N6gPdjclb4Xtza5awoZb13c31IYRmft dum/qs6vZrqvGTzaCVGIEh4uvDn7EL+L98xm9+8hitXF2WNgAQ4SP6a9mm4315lc Y54Ttv0FHw0EYDKt/yMXvgnaE6r7VNTOH8xThvpI9HBSIlAWLnc= -----END CERTIFICATE-----Generated at Mon Mar 2 06:06:16 2026 by rpki-client