$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: ITE/bWyYz9/oldA9bza33ucsYfL0HSiMc+rM5QfoRZ4= Subject key identifier: F4:6A:6D:AC:D4:C1:8E:55:34:54:36:46:F5:BC:EE:AF:CF:D8:D9:A4 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 0B1FC26610448EFDF9F1771EFE9A91B4B9A15BE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 0147 Signing time: Sun 01 Mar 2026 13:41:11 +0000 Manifest this update: Sun 01 Mar 2026 13:36:11 +0000 Manifest next update: Thu 05 Mar 2026 00:39:11 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: /tMR9i87AXSqMmw0huUmJueOjONqG5Am72zQnNOzKGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1f:c2:66:10:44:8e:fd:f9:f1:77:1e:fe:9a:91:b4:b9:a1:5b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Mar 1 13:36:11 2026 GMT Not After : Mar 5 00:39:11 2026 GMT Subject: CN=F46A6DACD4C18E5534543646F5BCEEAFCFD8D9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:8a:5c:8e:e3:f5:9a:d6:49:7c:1f:b3:22: 95:61:bc:e5:23:f7:ae:d4:dc:18:a0:20:e8:64:c3: 64:5b:dc:61:1c:93:cf:f9:55:d2:27:3c:48:d1:96: e1:40:b4:5d:78:e0:44:27:e6:0a:d7:5d:1a:6d:30: 79:3a:55:fd:af:24:5e:dd:58:82:d6:64:0d:0d:22: 85:04:02:0d:1d:ac:a9:23:16:3f:c6:25:36:d1:79: 94:64:27:3c:0b:9a:10:16:91:e8:ed:b2:91:9f:55: 99:cc:31:ea:6f:c9:90:ee:34:0a:36:c2:e2:e3:48: 9b:c9:95:00:02:3a:de:e3:2a:6b:09:1b:3f:ff:dc: f2:4d:e0:28:34:13:60:80:6a:49:6b:a4:d7:46:70: 74:cb:11:b3:80:a5:6c:14:31:69:cf:c5:19:6b:f6: af:8d:5b:67:4b:2b:be:ed:56:ec:1a:c7:7e:dd:52: 2a:59:ff:29:7b:4c:5e:b9:ac:44:d0:5f:28:6d:a9: 34:e6:51:64:22:be:f6:3c:28:58:eb:42:76:15:42: 99:69:a5:8d:1e:4e:01:db:93:1d:94:ab:ad:f2:16: 24:6c:40:8c:8b:fc:ec:4a:c4:f0:6b:f3:fc:3d:40: 0e:97:db:ee:91:92:dd:fc:ce:e8:43:d3:9b:fd:16: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6A:6D:AC:D4:C1:8E:55:34:54:36:46:F5:BC:EE:AF:CF:D8:D9:A4 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b4:9f:79:34:65:1e:64:6f:3c:07:cb:43:07:5f:8f:c0:55: 90:81:60:ef:6a:a5:8c:2a:63:99:00:01:2e:b6:e9:c7:5b:3c: db:13:59:75:e4:19:7e:0f:92:c1:fa:4e:da:47:49:35:6a:65: a4:d1:03:af:b4:1a:a6:03:8f:92:cb:e9:8a:18:2c:bf:92:f9: ec:13:60:51:a9:f7:92:48:8f:62:28:d1:e6:11:7a:0b:c9:0f: 06:40:7b:dd:d2:50:a0:3d:d9:c0:3a:04:bf:7c:07:d0:90:4c: ca:fc:41:eb:5b:98:3c:c3:44:2c:29:ed:58:59:ac:33:f7:bf: 7c:4a:7c:4e:13:31:4a:2f:b1:19:57:84:92:57:7c:d5:ef:b2: a0:45:9b:d2:7f:65:9f:39:0f:38:ce:8f:4e:fd:95:46:39:97: 0c:9f:2b:60:e4:61:7f:d7:d5:82:f1:60:6f:ad:0a:20:75:3f: 37:fd:dd:86:eb:2d:8b:99:8a:5a:9d:b3:9b:1b:db:19:44:f5: 31:b3:b0:a5:ee:fd:de:34:b0:cb:e2:ae:f1:36:b0:51:7b:af: 3f:84:6f:40:34:1f:72:24:55:c8:cc:57:86:c2:91:3d:1f:2c: 48:de:5d:dd:23:e4:a9:71:64:23:a7:01:32:07:d6:00:86:22: 0f:4f:a6:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCx/CZhBEjv358Xce/pqRtLmhW+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNjAzMDExMzM2MTFaFw0yNjAzMDUwMDM5MTFaMDMxMTAvBgNV BAMTKEY0NkE2REFDRDRDMThFNTUzNDU0MzY0NkY1QkNFRUFGQ0ZEOEQ5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpf4pcjuP1mtZJfB+zIpVhvOUj 967U3BigIOhkw2Rb3GEck8/5VdInPEjRluFAtF144EQn5grXXRptMHk6Vf2vJF7d WILWZA0NIoUEAg0drKkjFj/GJTbReZRkJzwLmhAWkejtspGfVZnMMepvyZDuNAo2 wuLjSJvJlQACOt7jKmsJGz//3PJN4Cg0E2CAaklrpNdGcHTLEbOApWwUMWnPxRlr 9q+NW2dLK77tVuwax37dUipZ/yl7TF65rETQXyhtqTTmUWQivvY8KFjrQnYVQplp pY0eTgHbkx2Uq63yFiRsQIyL/OxKxPBr8/w9QA6X2+6Rkt38zuhD05v9FhIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9GptrNTBjlU0VDZG9bzur8/Y2aQwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO0n3k0ZR5kbzwHy0MHX4/AVZCBYO9qpYwq Y5kAAS626cdbPNsTWXXkGX4PksH6TtpHSTVqZaTRA6+0GqYDj5LL6YoYLL+S+ewT YFGp95JIj2Io0eYRegvJDwZAe93SUKA92cA6BL98B9CQTMr8QetbmDzDRCwp7VhZ rDP3v3xKfE4TMUovsRlXhJJXfNXvsqBFm9J/ZZ85DzjOj079lUY5lwyfK2DkYX/X 1YLxYG+tCiB1Pzf93YbrLYuZilqds5sb2xlE9TGzsKXu/d40sMvirvE2sFF7rz+E b0A0H3IkVcjMV4bCkT0fLEjeXd0j5KlxZCOnATIH1gCGIg9PphM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:18 2026 by rpki-client