$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft File: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft (raw, json) Hash identifier: 14NEFewRnNsODTxM1s1OCu5miRXnaFLBYlvsEPqz3OM= Subject key identifier: 3F:68:6E:30:3B:63:06:47:E3:CD:D5:1E:03:03:90:4E:91:8D:EC:78 Authority key identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB Certificate issuer: /CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Certificate serial: 6B1016F2080B8CAC07AA377CFB56F69CCA89FE5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft Manifest number: 03 Signing time: Sun 01 Mar 2026 16:51:51 +0000 Manifest this update: Sun 01 Mar 2026 16:46:51 +0000 Manifest next update: Wed 04 Mar 2026 18:58:51 +0000 Files and hashes: 1: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl (hash: WyYPCwtkCoAKARaavhatREji4lCMNfWVQSYJ5kQLSz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:10:16:f2:08:0b:8c:ac:07:aa:37:7c:fb:56:f6:9c:ca:89:fe:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Validity Not Before: Mar 1 16:46:51 2026 GMT Not After : Mar 4 18:58:51 2026 GMT Subject: CN=3F686E303B630647E3CDD51E0303904E918DEC78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:20:a2:d7:9f:c3:02:ce:a4:ec:69:7c:13: 85:85:1e:86:70:92:a3:58:c6:09:18:b6:13:e7:05: 1a:6a:29:d9:6d:14:88:a5:6b:ab:b7:2b:97:34:22: 8a:ed:cc:ed:e1:65:8d:93:79:1f:6c:30:1c:c1:d7: 60:2b:27:05:dd:8f:b6:e8:49:70:44:3f:3b:49:73: 81:7e:87:82:57:de:73:8c:14:b9:5c:6b:90:b1:45: f5:28:f4:c7:23:3b:fb:98:80:93:b7:42:34:cf:50: d3:3c:83:73:e2:f6:5d:7f:5c:50:0c:22:a4:65:2c: e1:95:c5:a9:39:ae:7d:d3:0a:2d:df:7f:2d:4d:ef: 4f:cd:1f:7f:66:a6:db:ba:c6:08:85:86:e5:eb:8d: 43:b6:d1:d8:86:4d:9e:33:75:08:f5:af:bc:03:e8: f4:57:d5:40:9c:c9:b3:1d:8f:76:3c:d7:0b:68:4a: e4:4f:97:b4:6b:c1:ff:98:43:65:fd:94:e8:99:49: f0:35:90:e0:a7:bf:20:71:55:bb:28:c2:0c:3a:ab: c0:87:80:32:b9:3a:0b:5c:9a:aa:3b:63:bc:71:ac: 87:34:a4:b6:a5:a4:01:a4:19:e2:42:7d:2b:c6:68: 2c:bf:d0:d5:aa:58:24:61:41:e0:c1:b5:83:b5:66: e5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:68:6E:30:3B:63:06:47:E3:CD:D5:1E:03:03:90:4E:91:8D:EC:78 X509v3 Authority Key Identifier: keyid:1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5f:43:b8:d2:65:1d:7d:21:a8:6d:7d:b6:a2:4d:5a:cc:54: de:40:b9:c6:69:6b:99:a0:b2:73:cd:3d:83:14:db:3a:00:e1: 54:64:94:18:ea:6a:f1:68:08:03:7e:4b:22:79:10:a7:d6:a8: ee:1a:0b:51:ca:65:ca:bc:e9:02:ff:23:cc:cc:41:ce:af:8c: 87:d4:87:37:35:0f:82:33:eb:94:4e:11:c2:96:0c:4e:01:4a: dc:b3:9e:bd:2d:47:89:01:f6:fe:45:e4:7a:94:d5:ec:c8:82: fc:52:67:4f:f8:0a:6c:c7:df:f2:c4:ab:14:7d:b3:bf:8d:bf: 1a:8a:88:ab:f3:bb:6e:fa:5d:c4:5b:a3:83:24:c1:26:79:83: 39:6a:78:9b:67:ef:a8:8f:9d:82:3f:66:b1:ae:fb:70:35:42: bf:43:6d:99:5a:fd:27:c7:74:01:78:59:56:82:51:5b:0f:58: 45:7b:b9:28:52:0b:b6:ef:a2:81:1a:fd:31:58:82:02:fa:b2: 76:56:84:50:f2:0d:c3:ed:da:15:2f:f4:a6:9a:7c:38:8c:63: 51:a2:3a:f7:cf:22:d4:31:eb:1b:3c:0f:c7:e2:87:5f:ae:1c: 74:6b:d8:0e:88:3e:8f:cb:85:94:3c:72:c5:78:a5:28:65:a8: cb:df:88:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxAW8ggLjKwHqjd8+1b2nMqJ/lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMz NENENUFGQjAeFw0yNjAzMDExNjQ2NTFaFw0yNjAzMDQxODU4NTFaMDMxMTAvBgNV BAMTKDNGNjg2RTMwM0I2MzA2NDdFM0NERDUxRTAzMDM5MDRFOTE4REVDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLyCi15/DAs6k7Gl8E4WFHoZw kqNYxgkYthPnBRpqKdltFIila6u3K5c0IortzO3hZY2TeR9sMBzB12ArJwXdj7bo SXBEPztJc4F+h4JX3nOMFLlca5CxRfUo9McjO/uYgJO3QjTPUNM8g3Pi9l1/XFAM IqRlLOGVxak5rn3TCi3ffy1N70/NH39mptu6xgiFhuXrjUO20diGTZ4zdQj1r7wD 6PRX1UCcybMdj3Y81wtoSuRPl7Rrwf+YQ2X9lOiZSfA1kOCnvyBxVbsowgw6q8CH gDK5Ogtcmqo7Y7xxrIc0pLalpAGkGeJCfSvGaCy/0NWqWCRhQeDBtYO1ZuVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP2huMDtjBkfjzdUeAwOQTpGN7HgwHwYDVR0j BBgwFoAUHaaBgxuTtBgXFIfPZfqg7DTNWvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMS8xREE2ODE4MzFC OTNCNDE4MTcxNDg3Q0Y2NUZBQTBFQzM0Q0Q1QUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEwRUMzNENE NUFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvMURBNjgxODMxQjkzQjQxODE3MTQ4N0NGNjVGQUEw RUMzNENENUFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5fQ7jSZR19IahtfbaiTVrMVN5AucZpa5mg snPNPYMU2zoA4VRklBjqavFoCAN+SyJ5EKfWqO4aC1HKZcq86QL/I8zMQc6vjIfU hzc1D4Iz65ROEcKWDE4BStyznr0tR4kB9v5F5HqU1ezIgvxSZ0/4CmzH3/LEqxR9 s7+NvxqKiKvzu276XcRbo4MkwSZ5gzlqeJtn76iPnYI/ZrGu+3A1Qr9DbZla/SfH dAF4WVaCUVsPWEV7uShSC7bvooEa/TFYggL6snZWhFDyDcPt2hUv9KaafDiMY1Gi OvfPItQx6xs8D8fih1+uHHRr2A6IPo/LhZQ8csV4pShlqMvfiGo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:41:06 2026 by rpki-client