$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: m/KcjsjHZzrA4fIGzx+iVt8fd7Be0RaNKyHHSCwSPLY= Subject key identifier: 50:D1:CD:4B:B1:7D:94:5D:7E:30:D8:5C:08:DF:30:3B:6F:85:E0:B1 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 3168E54DA8982D72FED2E20E3F6942D02B24F05C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 024B Signing time: Sun 01 Mar 2026 18:42:11 +0000 Manifest this update: Sun 01 Mar 2026 18:37:11 +0000 Manifest next update: Wed 04 Mar 2026 20:04:11 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: RwXf3JL7OMhwrIm7w35u7q0s2FmOT3Cv2ikz6tHDs5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:e5:4d:a8:98:2d:72:fe:d2:e2:0e:3f:69:42:d0:2b:24:f0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Mar 1 18:37:11 2026 GMT Not After : Mar 4 20:04:11 2026 GMT Subject: CN=50D1CD4BB17D945D7E30D85C08DF303B6F85E0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:bd:64:3c:3e:2f:4f:b9:e9:08:aa:7c:71: 15:99:35:3a:75:d1:a5:58:33:d0:3e:e1:82:90:ca: af:c3:e8:f4:5a:be:d9:fb:15:bb:41:5c:82:ba:af: f4:ca:9d:03:f3:62:cf:11:72:7b:96:d4:6a:15:8b: 51:b6:20:04:2d:e3:a9:3c:56:75:30:f2:e0:3b:d8: b9:81:83:87:1d:ca:e3:f0:9a:74:b9:55:1f:3d:75: b1:b7:39:53:f9:7c:63:03:16:e2:36:5a:1f:07:5b: 97:ca:29:98:72:95:5d:20:ca:c9:98:c7:e5:1f:97: c0:47:ba:47:86:61:42:37:f5:4c:74:c9:c5:2b:da: d8:31:3e:ea:0c:bd:3c:72:61:e2:f2:b4:a7:f4:56: 18:67:1f:c1:81:17:3f:1e:ca:c6:ca:92:9d:07:0b: e4:dc:84:3d:20:0c:78:ca:34:a4:e8:c6:b7:ea:15: 9f:7f:c4:83:4a:ae:b9:6d:04:6d:e0:a9:62:0f:bd: 40:a2:3d:6e:54:23:5a:30:b1:fa:7c:17:28:84:39: d4:41:0d:c3:b3:d6:ba:b1:5f:5d:bf:3b:ef:b6:96: a4:55:4e:48:19:c8:f8:f4:63:a2:2d:7a:f4:b4:28: 06:79:86:1e:63:3c:0e:2a:fc:48:fa:cb:85:20:64: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D1:CD:4B:B1:7D:94:5D:7E:30:D8:5C:08:DF:30:3B:6F:85:E0:B1 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e4:b6:e2:f2:bf:01:57:04:63:26:04:94:38:c1:5b:c5:52: dc:40:44:90:da:2a:57:b6:3e:1d:17:54:4c:58:45:d0:31:4b: 5e:8a:20:56:1b:9f:2a:52:fe:d6:67:0c:4f:a3:7a:e4:24:29: 60:17:1f:ba:70:52:4e:d0:92:df:82:57:2c:31:9c:b5:9c:c5: c7:0d:e1:1c:62:84:45:73:dd:ed:48:fa:8a:cc:5e:0c:98:6c: b1:6a:51:6b:a5:85:6e:75:ff:b0:65:f8:48:fe:8b:8f:1f:9d: 64:2c:35:b0:ee:a9:93:e3:26:7e:f2:fc:02:0d:71:de:f2:54: b1:33:19:8b:51:e2:94:e6:a8:ed:cf:fb:fe:90:11:4a:21:bf: a4:d3:79:1c:46:37:44:ae:bf:cb:21:05:0b:b0:ab:d9:66:db: e8:cf:e0:3f:1a:ac:7a:a2:82:2a:e2:d6:13:c4:b5:50:ce:fc: bb:0b:ff:47:89:e9:1a:bf:03:b7:97:0b:89:16:b1:2f:bb:ec: c8:d8:27:e4:9b:f4:ed:78:d4:b8:f9:82:7f:7a:40:5d:3c:a7: d4:e2:c6:3c:d6:24:7d:43:31:a8:90:19:89:95:3f:b6:cf:b9: 4f:b8:22:f2:df:33:bd:33:bc:84:99:23:cc:4c:52:49:f4:b8: 0c:f0:f3:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWjlTaiYLXL+0uIOP2lC0Csk8FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNjAzMDExODM3MTFaFw0yNjAzMDQyMDA0MTFaMDMxMTAvBgNV BAMTKDUwRDFDRDRCQjE3RDk0NUQ3RTMwRDg1QzA4REYzMDNCNkY4NUUwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAr1kPD4vT7npCKp8cRWZNTp1 0aVYM9A+4YKQyq/D6PRavtn7FbtBXIK6r/TKnQPzYs8RcnuW1GoVi1G2IAQt46k8 VnUw8uA72LmBg4cdyuPwmnS5VR89dbG3OVP5fGMDFuI2Wh8HW5fKKZhylV0gysmY x+Ufl8BHukeGYUI39Ux0ycUr2tgxPuoMvTxyYeLytKf0VhhnH8GBFz8eysbKkp0H C+TchD0gDHjKNKToxrfqFZ9/xINKrrltBG3gqWIPvUCiPW5UI1owsfp8FyiEOdRB DcOz1rqxX12/O++2lqRVTkgZyPj0Y6ItevS0KAZ5hh5jPA4q/Ej6y4UgZI5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUNHNS7F9lF1+MNhcCN8wO2+F4LEwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzktuLyvwFXBGMmBJQ4wVvFUtxARJDaKle2 Ph0XVExYRdAxS16KIFYbnypS/tZnDE+jeuQkKWAXH7pwUk7Qkt+CVywxnLWcxccN 4RxihEVz3e1I+orMXgyYbLFqUWulhW51/7Bl+Ej+i48fnWQsNbDuqZPjJn7y/AIN cd7yVLEzGYtR4pTmqO3P+/6QEUohv6TTeRxGN0Suv8shBQuwq9lm2+jP4D8arHqi giri1hPEtVDO/LsL/0eJ6Rq/A7eXC4kWsS+77MjYJ+Sb9O141Lj5gn96QF08p9Ti xjzWJH1DMaiQGYmVP7bPuU+4IvLfM70zvISZI8xMUkn0uAzw8wA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:14 2026 by rpki-client