$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: urQW5Kc2LcZ/wV9EJnwLJoXfSm0fD0PUhshJn/ACKtU= Subject key identifier: 32:5C:1C:C4:04:9A:54:D8:2E:04:C1:13:EF:59:21:98:AE:41:41:7B Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 53E94747AB17310CF9850836232E136CBF1D84F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: A7 Signing time: Sun 01 Mar 2026 08:51:24 +0000 Manifest this update: Sun 01 Mar 2026 08:46:24 +0000 Manifest next update: Wed 04 Mar 2026 13:03:24 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: gM4yJc3fpInHQgnGsR8ekqlC6oE0DLlnA6tx4WSYP+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e9:47:47:ab:17:31:0c:f9:85:08:36:23:2e:13:6c:bf:1d:84:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Mar 1 08:46:24 2026 GMT Not After : Mar 4 13:03:24 2026 GMT Subject: CN=325C1CC4049A54D82E04C113EF592198AE41417B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:77:cc:6e:34:e9:1a:e7:11:85:df:c8:77:d5: ac:26:32:10:80:b3:63:64:34:56:cd:4e:aa:31:5e: 27:4c:bd:7c:8d:44:85:33:39:b1:66:49:be:83:76: c5:86:da:dc:dd:23:c9:86:4c:40:04:d8:23:b3:ea: e8:5e:7f:a6:28:00:73:d8:1f:19:db:f2:00:16:00: 64:44:f2:49:80:15:10:75:99:87:a7:04:e2:79:aa: 75:69:10:96:ce:eb:21:2c:b3:f9:e4:22:b3:76:f1: e1:22:2f:35:42:ca:34:8e:f0:9c:0e:5f:44:2e:97: 33:83:ad:1b:c0:63:eb:6c:ba:89:bb:57:49:e7:6d: 17:38:91:1e:30:23:f6:63:ea:92:60:93:7c:74:5d: 25:56:69:8e:7d:9f:f3:24:fe:f6:c2:34:14:2e:fd: a3:c1:96:93:11:4d:8b:8c:38:32:28:2a:17:a7:7c: 7f:76:15:22:98:b5:9a:0d:24:e8:80:3a:df:9e:14: c8:ab:08:07:a0:c6:66:98:b0:7e:55:31:4d:77:89: 49:3d:dc:36:3a:d2:04:87:7a:c8:88:f8:0a:0c:02: e1:81:b7:52:90:51:48:28:ce:81:92:3b:c4:b6:e2: f0:43:c2:87:48:ef:c4:4b:09:46:fd:84:14:67:15: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5C:1C:C4:04:9A:54:D8:2E:04:C1:13:EF:59:21:98:AE:41:41:7B X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a4:6b:3c:a6:76:fa:87:11:f8:4d:a7:86:1e:b2:09:c5:20: 19:d4:58:ee:46:9a:c4:68:e8:86:b0:57:21:61:ad:26:a6:e7: b1:9a:24:5c:14:35:1a:ec:13:84:86:7d:9b:e6:28:96:20:8d: af:49:19:fd:11:4c:66:b9:bc:c7:57:4b:d7:25:f4:0f:6d:83: 65:80:28:ea:a2:2b:9a:59:15:94:62:3c:d5:cc:3e:59:7c:0d: 08:00:8c:c5:fe:46:d1:1a:79:62:23:7a:df:0a:bf:21:c5:6b: b2:dd:a0:b8:62:3f:e6:53:9e:05:a4:1f:80:05:39:25:79:29: 3e:9c:04:99:a0:ad:14:38:13:8c:a4:81:fb:bc:27:37:f1:c6: 68:4d:2e:e7:6e:9d:2f:26:9e:a3:7d:6c:89:7e:c0:fd:bc:a1: 9b:7e:0f:4c:e1:6b:ef:b6:2d:07:8a:49:d0:ae:be:db:38:3c: de:cb:11:10:e4:7d:3a:44:6e:48:68:d5:df:94:3f:8e:1f:5d: c7:87:72:e3:cd:2a:dc:12:74:47:3e:1d:2e:f2:71:4b:53:bf: 7a:b3:ed:6c:0e:82:f7:26:04:0e:75:b7:6c:30:09:ef:c9:97: 60:52:21:45:c0:d3:af:c2:af:bc:b5:32:66:84:1d:1d:0b:bf: 7d:cf:fd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+lHR6sXMQz5hQg2Iy4TbL8dhPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNjAzMDEwODQ2MjRaFw0yNjAzMDQxMzAzMjRaMDMxMTAvBgNV BAMTKDMyNUMxQ0M0MDQ5QTU0RDgyRTA0QzExM0VGNTkyMTk4QUU0MTQxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwd8xuNOka5xGF38h31awmMhCA s2NkNFbNTqoxXidMvXyNRIUzObFmSb6DdsWG2tzdI8mGTEAE2COz6uhef6YoAHPY Hxnb8gAWAGRE8kmAFRB1mYenBOJ5qnVpEJbO6yEss/nkIrN28eEiLzVCyjSO8JwO X0QulzODrRvAY+tsuom7V0nnbRc4kR4wI/Zj6pJgk3x0XSVWaY59n/Mk/vbCNBQu /aPBlpMRTYuMODIoKhenfH92FSKYtZoNJOiAOt+eFMirCAegxmaYsH5VMU13iUk9 3DY60gSHesiI+AoMAuGBt1KQUUgozoGSO8S24vBDwodI78RLCUb9hBRnFXArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMlwcxASaVNguBMET71khmK5BQXswHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2kazymdvqHEfhNp4YesgnFIBnUWO5GmsRo 6IawVyFhrSam57GaJFwUNRrsE4SGfZvmKJYgja9JGf0RTGa5vMdXS9cl9A9tg2WA KOqiK5pZFZRiPNXMPll8DQgAjMX+RtEaeWIjet8KvyHFa7LdoLhiP+ZTngWkH4AF OSV5KT6cBJmgrRQ4E4ykgfu8JzfxxmhNLudunS8mnqN9bIl+wP28oZt+D0zha++2 LQeKSdCuvts4PN7LERDkfTpEbkho1d+UP44fXceHcuPNKtwSdEc+HS7ycUtTv3qz 7WwOgvcmBA51t2wwCe/Jl2BSIUXA06/Cr7y1MmaEHR0Lv33P/TQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:40 2026 by rpki-client