$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: 8gL6YPoo/MOq2dQp87JrZsGtJ548ZtD/g4bFWsikbpA= Subject key identifier: 68:08:C5:8F:9E:CE:B1:3C:0C:0E:4A:DC:77:4D:99:C9:20:88:93:FC Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 0C618BAD963A15705CF78F144BB251269C5CC0AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0296 Signing time: Sun 01 Mar 2026 15:32:19 +0000 Manifest this update: Sun 01 Mar 2026 15:27:19 +0000 Manifest next update: Wed 04 Mar 2026 20:54:19 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: a5pgPJKuSf1OqpqDiupc4e9M2l1BTD34xRUG5t9HuJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:61:8b:ad:96:3a:15:70:5c:f7:8f:14:4b:b2:51:26:9c:5c:c0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Mar 1 15:27:19 2026 GMT Not After : Mar 4 20:54:19 2026 GMT Subject: CN=6808C58F9ECEB13C0C0E4ADC774D99C9208893FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:66:9b:62:20:7f:a2:9d:b5:05:98:45:26: db:15:32:22:37:40:28:be:5a:b1:a3:aa:1a:41:d9: c6:f8:55:77:39:a6:b4:e4:8b:c9:4f:9e:58:91:b3: 72:b0:63:c1:68:6a:58:ec:79:83:44:77:16:25:6f: 3f:34:ce:1b:28:7c:a0:78:d3:51:33:fd:2f:e7:eb: f6:d2:f3:e5:3b:b0:38:4d:91:49:cb:91:59:fd:38: 46:13:ef:84:7c:71:7d:bf:8a:58:b3:38:d3:a4:88: 93:1a:fe:0d:3b:50:0d:ba:75:34:c2:8d:bc:2b:59: 5a:b2:3f:05:aa:27:40:69:e2:c6:f9:6f:27:60:e7: e7:e4:6c:f4:d9:7f:06:de:5c:5b:24:6a:3a:15:fe: ba:ba:b5:3c:0f:d1:b5:aa:60:00:02:e4:58:8f:55: d9:66:3c:85:b1:80:7a:8e:f2:d5:b4:8b:d4:95:fc: dc:ea:70:af:80:dc:4c:e6:11:0a:94:40:9d:37:8f: be:89:c9:ca:6f:b3:b2:ff:78:47:f0:2f:c6:d5:81: 4c:51:ab:dc:52:b4:6a:8d:72:af:98:e7:3c:75:83: 61:ea:af:65:dd:67:90:a2:f8:b5:c5:c5:62:be:4f: 55:29:77:d0:88:6e:14:6e:82:66:b2:f8:08:b7:a8: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:08:C5:8F:9E:CE:B1:3C:0C:0E:4A:DC:77:4D:99:C9:20:88:93:FC X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4c:1d:37:85:8f:34:e0:f9:4d:1d:dc:66:d4:a7:bf:7e:ca: f9:71:43:51:a1:29:f3:fd:47:60:af:e3:96:31:73:a8:a0:fc: 65:85:86:37:71:99:a6:df:91:ff:8b:40:87:15:80:76:4d:dd: 50:80:3b:2e:35:6f:ff:87:cc:fc:d1:03:6e:d2:51:9a:16:c4: 57:cd:21:68:71:78:46:3b:b1:c5:9b:5d:94:86:d1:ce:1e:82: 8a:fa:e3:cc:22:57:25:a8:08:dc:71:ca:83:43:44:5a:b1:10: ea:7d:df:94:d0:fb:23:4a:5c:65:93:b4:a7:4b:13:2e:28:fa: fb:6b:52:aa:f7:25:3b:25:d9:cf:2a:2b:7d:e0:f0:32:6e:3a: 03:68:a5:a5:d6:b4:7f:30:16:e3:8d:c3:85:c7:8e:2a:2c:e7: 98:56:c7:a7:58:ab:d5:8a:77:2e:be:d0:94:b6:bc:50:66:14: f0:47:2c:09:07:96:c4:92:b9:fa:a5:09:6c:52:b0:aa:07:4e: 15:e2:10:99:9c:a0:95:d1:70:93:54:03:25:fd:e8:6a:f4:ad: ee:fb:b6:a4:1a:51:63:4c:5d:fe:2a:de:85:1c:f9:7b:42:b3: 2f:77:18:34:4c:aa:56:22:ad:ef:b3:ad:d4:96:46:5f:9a:ce: 49:db:b6:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGGLrZY6FXBc948US7JRJpxcwKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNjAzMDExNTI3MTlaFw0yNjAzMDQyMDU0MTlaMDMxMTAvBgNV BAMTKDY4MDhDNThGOUVDRUIxM0MwQzBFNEFEQzc3NEQ5OUM5MjA4ODkzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55WabYiB/op21BZhFJtsVMiI3 QCi+WrGjqhpB2cb4VXc5prTki8lPnliRs3KwY8FoaljseYNEdxYlbz80zhsofKB4 01Ez/S/n6/bS8+U7sDhNkUnLkVn9OEYT74R8cX2/ilizONOkiJMa/g07UA26dTTC jbwrWVqyPwWqJ0Bp4sb5bydg5+fkbPTZfwbeXFskajoV/rq6tTwP0bWqYAAC5FiP VdlmPIWxgHqO8tW0i9SV/NzqcK+A3EzmEQqUQJ03j76Jycpvs7L/eEfwL8bVgUxR q9xStGqNcq+Y5zx1g2Hqr2XdZ5Ci+LXFxWK+T1Upd9CIbhRugmay+Ai3qKqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaAjFj57OsTwMDkrcd02ZySCIk/wwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpMHTeFjzTg+U0d3GbUp79+yvlxQ1GhKfP9 R2Cv45Yxc6ig/GWFhjdxmabfkf+LQIcVgHZN3VCAOy41b/+HzPzRA27SUZoWxFfN IWhxeEY7scWbXZSG0c4egor648wiVyWoCNxxyoNDRFqxEOp935TQ+yNKXGWTtKdL Ey4o+vtrUqr3JTsl2c8qK33g8DJuOgNopaXWtH8wFuONw4XHjios55hWx6dYq9WK dy6+0JS2vFBmFPBHLAkHlsSSufqlCWxSsKoHThXiEJmcoJXRcJNUAyX96Gr0re77 tqQaUWNMXf4q3oUc+XtCsy93GDRMqlYire+zrdSWRl+azknbtuI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:26:29 2026 by rpki-client