$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: Cgh0XajcwWyCIi8ug9ztfYeJSVZfYio/Z0Zcb6AjI+Y= Subject key identifier: 68:EF:1B:C5:28:A8:26:09:D0:C8:4E:17:DB:F7:06:0F:76:10:21:80 Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 2549C2A6245A967CE4C654E07C7B13CA52DF6055 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 01B8 Signing time: Sun 01 Mar 2026 11:22:04 +0000 Manifest this update: Sun 01 Mar 2026 11:17:04 +0000 Manifest next update: Wed 04 Mar 2026 23:13:04 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: NINtf9BUzrg3xgUxeZkC8Rlrur36JdNDJWo0o4JXIm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:49:c2:a6:24:5a:96:7c:e4:c6:54:e0:7c:7b:13:ca:52:df:60:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Mar 1 11:17:04 2026 GMT Not After : Mar 4 23:13:04 2026 GMT Subject: CN=68EF1BC528A82609D0C84E17DBF7060F76102180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:e8:a9:92:33:dc:30:e3:0b:cd:a0:d2:46: 13:4e:d5:14:a8:02:b8:4b:b7:0d:dc:3b:12:ee:53: e0:20:1b:49:f8:13:30:01:0d:ee:3d:a9:93:cd:5e: 99:81:e0:b6:51:5f:50:e9:ab:ff:09:29:f9:41:57: 33:4e:10:24:1c:0f:44:6a:e9:23:b1:75:f3:fe:19: 73:94:f7:ca:5a:e0:26:26:48:df:5a:4c:4b:84:db: 69:7f:64:49:4a:9e:6e:7a:eb:27:96:8c:10:4e:1f: 41:ed:42:bf:2d:40:dc:21:9d:44:ad:32:a1:48:05: d3:32:9c:25:55:c7:ee:15:63:ee:02:e6:ca:d7:e1: 9c:1b:63:f8:49:5f:01:57:5c:55:9c:0f:92:4a:6b: b4:ee:b7:92:6b:9c:1d:08:4f:72:e9:8a:07:59:40: 3a:30:75:0d:39:9b:7b:d7:16:c2:05:bd:21:cd:1b: 53:44:cd:a0:51:c2:e7:b3:f0:97:50:89:80:0f:8f: b8:8a:1a:1f:fa:e1:ec:74:d2:e3:a7:f2:15:53:93: 08:4a:e1:f0:dc:86:ae:60:7a:e3:23:73:c5:20:35: 39:37:5c:59:f8:0f:55:e9:71:1e:26:78:66:41:81: ba:93:bb:85:be:96:1b:5d:17:ef:4f:53:27:1b:01: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EF:1B:C5:28:A8:26:09:D0:C8:4E:17:DB:F7:06:0F:76:10:21:80 X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1f:6c:37:13:c6:53:c7:01:84:30:ed:59:3f:75:55:a7:b4: f9:05:86:61:55:5f:23:97:28:cb:5e:bc:4f:b3:8c:1d:f7:67: 00:cc:30:44:3f:44:3c:02:f6:6a:73:54:83:8b:0e:26:03:b1: ff:ae:6e:52:4b:09:2c:22:e5:c3:fd:f7:11:63:b7:af:d3:30: f0:57:dc:5a:a1:cb:7d:c5:8e:e6:39:4c:f4:c0:10:88:a8:27: 79:a9:b0:3b:df:fd:65:10:ea:0f:d1:34:6a:cc:30:6b:39:17: aa:50:a6:dd:c4:16:83:a7:eb:d1:a4:81:95:9a:ac:2b:f3:ac: 7c:18:5c:23:3c:1a:b9:78:db:a1:f9:38:52:af:20:ac:2d:a3: 06:6d:33:0c:f7:05:5b:13:94:8d:3d:2c:ab:c0:1d:49:b7:f3: 38:f6:ec:0a:bf:ee:a0:f9:7c:57:d0:4f:d4:79:14:6e:05:c7: 32:7d:8a:cc:36:61:2c:db:8f:fa:49:23:68:ad:13:16:70:6b: b6:ba:29:89:c3:f2:95:ea:32:84:68:23:69:be:1d:b8:9e:ea: 45:00:0b:92:08:06:d4:f5:f2:f5:d0:4b:18:f0:2d:6c:27:e0: 20:7f:88:e5:4c:2d:bc:b2:3b:5e:80:eb:5e:81:d9:49:ca:28: f2:fa:b2:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUnCpiRalnzkxlTgfHsTylLfYFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNjAzMDExMTE3MDRaFw0yNjAzMDQyMzEzMDRaMDMxMTAvBgNV BAMTKDY4RUYxQkM1MjhBODI2MDlEMEM4NEUxN0RCRjcwNjBGNzYxMDIxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkuipkjPcMOMLzaDSRhNO1RSo ArhLtw3cOxLuU+AgG0n4EzABDe49qZPNXpmB4LZRX1Dpq/8JKflBVzNOECQcD0Rq 6SOxdfP+GXOU98pa4CYmSN9aTEuE22l/ZElKnm566yeWjBBOH0HtQr8tQNwhnUSt MqFIBdMynCVVx+4VY+4C5srX4ZwbY/hJXwFXXFWcD5JKa7Tut5JrnB0IT3LpigdZ QDowdQ05m3vXFsIFvSHNG1NEzaBRwuez8JdQiYAPj7iKGh/64ex00uOn8hVTkwhK 4fDchq5geuMjc8UgNTk3XFn4D1XpcR4meGZBgbqTu4W+lhtdF+9PUycbAWVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaO8bxSioJgnQyE4X2/cGD3YQIYAwHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUfbDcTxlPHAYQw7Vk/dVWntPkFhmFVXyOX KMtevE+zjB33ZwDMMEQ/RDwC9mpzVIOLDiYDsf+ublJLCSwi5cP99xFjt6/TMPBX 3Fqhy33FjuY5TPTAEIioJ3mpsDvf/WUQ6g/RNGrMMGs5F6pQpt3EFoOn69GkgZWa rCvzrHwYXCM8Grl426H5OFKvIKwtowZtMwz3BVsTlI09LKvAHUm38zj27Aq/7qD5 fFfQT9R5FG4FxzJ9isw2YSzbj/pJI2itExZwa7a6KYnD8pXqMoRoI2m+Hbie6kUA C5IIBtT18vXQSxjwLWwn4CB/iOVMLbyyO16A616B2UnKKPL6ssw= -----END CERTIFICATE-----Generated at Mon Mar 2 19:50:04 2026 by rpki-client