$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: XPDJjqWZP2PeMTpcdpBpf5WtLPg/xZXiRm6JE1lQvOc= Subject key identifier: DF:04:E4:7E:70:AF:2E:E6:99:FC:FB:07:A5:D3:B2:74:21:1A:3D:1F Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 0968998777A7BF4A5A4F222986AF4CFF9FA61251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 0253 Signing time: Sun 01 Mar 2026 13:31:54 +0000 Manifest this update: Sun 01 Mar 2026 13:26:54 +0000 Manifest next update: Wed 04 Mar 2026 22:08:54 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: oPfd+jWOTFYaA7yaMkop20H68Tv7h1s+ckbTobikmHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:68:99:87:77:a7:bf:4a:5a:4f:22:29:86:af:4c:ff:9f:a6:12:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: Mar 1 13:26:54 2026 GMT Not After : Mar 4 22:08:54 2026 GMT Subject: CN=DF04E47E70AF2EE699FCFB07A5D3B274211A3D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:29:3d:72:44:fd:9d:34:08:06:e8:55:da:84: c0:e7:6f:5a:70:a1:ca:8d:a0:df:88:3c:0f:5a:75: ac:d1:d2:97:42:43:58:58:c5:9d:3c:89:75:ad:f3: 36:35:97:ae:ca:b0:cc:18:eb:3c:be:2d:53:a9:bb: c6:9f:25:ad:ae:e5:18:53:7a:a3:ed:5c:7f:59:f9: 44:bb:5d:95:90:fa:26:3e:96:09:f3:cc:8e:b3:aa: 5a:57:00:34:a7:69:46:2b:c0:df:79:28:d8:8b:49: 00:cc:f9:1d:27:87:72:21:61:22:cf:49:e5:44:51: 2c:fd:e4:0b:1f:fb:87:1c:11:a7:18:e7:8b:8d:ea: 60:3a:ee:35:7d:06:60:e7:db:98:f6:a4:9b:3d:1f: 89:37:8f:fa:be:3b:bb:70:7a:a6:a7:9a:50:61:72: ff:dd:b4:47:a2:0d:33:bd:b2:6d:d2:94:16:af:04: d9:74:fb:7d:54:2a:e7:6d:fc:a8:af:ed:77:c4:4a: a5:80:62:5a:0c:6a:e2:e5:38:23:02:6e:c0:cb:59: 66:40:31:20:45:69:67:29:da:0a:57:5d:7d:23:89: 68:72:28:2d:e2:e1:59:22:23:31:99:a3:a6:6a:16: 4e:e9:d4:ae:3a:8b:88:5a:b9:9d:b5:86:e9:90:bd: be:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:E4:7E:70:AF:2E:E6:99:FC:FB:07:A5:D3:B2:74:21:1A:3D:1F X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:96:f2:5b:93:f2:66:c4:2e:d5:9c:8f:e3:06:52:5a:54:65: c8:62:4c:e1:20:9e:2a:fe:df:ad:f4:1d:2a:67:9f:a8:0e:59: 1d:7c:db:38:42:dc:a8:53:bc:cb:47:7a:50:45:87:e0:57:65: 17:38:81:83:03:62:db:ca:6c:7e:2e:64:87:75:04:8b:8e:87: 5d:b4:bc:41:8a:88:5f:87:02:db:63:9a:70:ce:6f:c6:3e:24: 8e:64:12:0d:cf:55:80:88:44:d3:38:4d:80:51:0a:d3:e4:aa: 87:5a:c2:db:26:67:f1:d5:22:8f:a9:44:dc:56:2b:ad:dd:dd: fc:49:de:54:df:60:6a:90:44:3a:42:6d:fe:c1:db:84:1d:73: 57:35:b1:3c:c2:f6:0e:8a:6a:2e:c1:b5:09:e2:77:9b:90:28: 64:e8:6d:cd:6c:91:8b:8c:96:e4:4c:7b:44:5d:fe:e7:13:61: 5e:92:f8:a3:cb:97:e5:4c:56:2e:14:94:0b:f4:da:36:2a:71: 35:e2:83:f2:a8:34:4c:ef:71:93:2f:69:60:0a:ec:d0:72:61: a0:8c:42:c8:b4:28:6c:de:fa:8c:9d:d3:49:67:da:4d:d2:89: 03:d3:08:da:88:c4:e5:ff:41:27:59:8d:dd:0f:58:16:2a:64: 49:2f:6c:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWiZh3env0paTyIphq9M/5+mElEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNjAzMDExMzI2NTRaFw0yNjAzMDQyMjA4NTRaMDMxMTAvBgNV BAMTKERGMDRFNDdFNzBBRjJFRTY5OUZDRkIwN0E1RDNCMjc0MjExQTNEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKT1yRP2dNAgG6FXahMDnb1pw ocqNoN+IPA9adazR0pdCQ1hYxZ08iXWt8zY1l67KsMwY6zy+LVOpu8afJa2u5RhT eqPtXH9Z+US7XZWQ+iY+lgnzzI6zqlpXADSnaUYrwN95KNiLSQDM+R0nh3IhYSLP SeVEUSz95Asf+4ccEacY54uN6mA67jV9BmDn25j2pJs9H4k3j/q+O7tweqanmlBh cv/dtEeiDTO9sm3SlBavBNl0+31UKudt/Kiv7XfESqWAYloMauLlOCMCbsDLWWZA MSBFaWcp2gpXXX0jiWhyKC3i4VkiIzGZo6ZqFk7p1K46i4hauZ21humQvb4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wTkfnCvLuaZ/PsHpdOydCEaPR8wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGW8luT8mbELtWcj+MGUlpUZchiTOEgnir+ 3630HSpnn6gOWR182zhC3KhTvMtHelBFh+BXZRc4gYMDYtvKbH4uZId1BIuOh120 vEGKiF+HAttjmnDOb8Y+JI5kEg3PVYCIRNM4TYBRCtPkqodawtsmZ/HVIo+pRNxW K63d3fxJ3lTfYGqQRDpCbf7B24Qdc1c1sTzC9g6Kai7BtQnid5uQKGTobc1skYuM luRMe0Rd/ucTYV6S+KPLl+VMVi4UlAv02jYqcTXig/KoNEzvcZMvaWAK7NByYaCM Qsi0KGze+oyd00ln2k3SiQPTCNqIxOX/QSdZjd0PWBYqZEkvbDE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:21 2026 by rpki-client