$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: tpnKCAyJdi/D3QV8G0WA5K2aI12NKyE6k2HdQXnRobI= Subject key identifier: 24:38:45:66:BE:25:6D:4D:5A:99:CA:59:08:77:0B:F8:FD:71:40:DF Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 443110705B80338B2895954E04F094CAADB47EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 01EF Signing time: Sun 01 Mar 2026 04:01:17 +0000 Manifest this update: Sun 01 Mar 2026 03:56:17 +0000 Manifest next update: Wed 04 Mar 2026 08:37:17 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: PEqOB8QDLxJ6fiM6n7mzhkKtTuPxwYqTQJeGs+SozSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:31:10:70:5b:80:33:8b:28:95:95:4e:04:f0:94:ca:ad:b4:7e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Mar 1 03:56:17 2026 GMT Not After : Mar 4 08:37:17 2026 GMT Subject: CN=24384566BE256D4D5A99CA5908770BF8FD7140DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:bf:60:0c:11:3d:4c:6a:c9:07:be:a6:bd: 4a:a1:ee:f5:61:bc:bf:01:c1:4a:e2:3e:17:68:08: bb:a4:c1:3e:8f:d6:93:5d:b9:fe:7f:92:19:17:3c: c4:a8:58:60:d4:23:fe:3d:bd:70:96:7a:bc:6c:12: 5c:cd:f6:b5:97:9d:2a:84:f8:c5:ce:98:c2:e8:a0: 97:28:d9:a5:c8:63:d4:f1:06:c8:27:8d:c0:3b:f0: da:15:97:47:f5:ef:14:99:42:28:9e:54:87:7f:da: 19:81:fd:90:65:d2:04:da:a7:25:8d:b4:be:63:4a: 2e:80:6a:19:c8:74:d0:b1:dc:2d:61:51:37:b5:79: a9:fc:72:46:98:9d:44:c4:88:bd:40:ef:91:d6:50: 77:92:af:d5:1b:61:bb:03:25:5b:c4:03:d7:11:d6: 5b:e7:28:92:f7:f1:c2:c3:74:2c:5b:1f:5c:97:c7: 55:76:54:40:b9:06:dd:41:61:e3:e2:bc:3f:d9:06: ea:6f:5b:d1:7c:7f:6f:36:98:34:a9:63:68:99:be: b6:c0:8f:ed:71:fc:b0:13:08:e7:4b:16:87:05:2a: cf:65:cb:f5:90:e2:cb:be:ba:90:f5:86:bf:dd:43: 4b:50:bb:f0:8c:63:78:ca:64:7d:77:89:a2:8d:24: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:38:45:66:BE:25:6D:4D:5A:99:CA:59:08:77:0B:F8:FD:71:40:DF X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:99:23:98:45:41:70:a5:ac:f5:0c:6d:7e:a9:a4:c1:71:b8: 86:ed:1c:e0:1a:5a:f2:ae:a6:49:5f:8f:14:3f:e9:2b:17:b3: 69:8d:97:31:80:76:9f:88:3d:c3:46:48:d5:68:b2:8d:a9:f0: 82:c5:47:50:6f:99:df:ed:9c:8a:33:dd:b1:35:72:a5:ad:3b: 69:3b:4f:f6:c3:54:f6:85:77:0c:17:38:3c:9d:a5:f4:b7:0c: 80:3b:38:60:2e:ca:bb:a4:3c:7b:2b:cc:69:6f:6f:4b:ca:9f: 7a:8f:ea:cb:01:b8:99:0a:a2:12:a0:e6:dd:5a:87:4b:a5:9d: 05:87:7d:ee:06:4a:ba:2a:fb:38:d3:25:8f:8f:eb:bf:2f:8e: 1f:9b:ea:2a:7e:68:66:71:6b:89:69:75:86:86:a8:b7:4e:93: af:15:8f:ec:a5:f7:8f:99:12:9d:53:be:10:8f:60:20:70:84: 21:e8:4b:82:51:5f:1e:2a:5f:f3:f6:b8:e1:bd:66:98:f1:dd: 11:5f:82:5f:92:8d:50:af:34:ef:78:d5:b0:38:f5:97:98:43: 9c:89:3f:6b:e8:06:51:bd:da:80:e0:23:74:df:51:41:3c:f9: 47:51:a6:31:fd:f0:c5:0d:bb:0e:d9:37:49:ac:af:65:84:76: 46:04:e4:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDEQcFuAM4solZVOBPCUyq20fvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNjAzMDEwMzU2MTdaFw0yNjAzMDQwODM3MTdaMDMxMTAvBgNV BAMTKDI0Mzg0NTY2QkUyNTZENEQ1QTk5Q0E1OTA4NzcwQkY4RkQ3MTQwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+L9gDBE9TGrJB76mvUqh7vVh vL8BwUriPhdoCLukwT6P1pNduf5/khkXPMSoWGDUI/49vXCWerxsElzN9rWXnSqE +MXOmMLooJco2aXIY9TxBsgnjcA78NoVl0f17xSZQiieVId/2hmB/ZBl0gTapyWN tL5jSi6AahnIdNCx3C1hUTe1ean8ckaYnUTEiL1A75HWUHeSr9UbYbsDJVvEA9cR 1lvnKJL38cLDdCxbH1yXx1V2VEC5Bt1BYePivD/ZBupvW9F8f282mDSpY2iZvrbA j+1x/LATCOdLFocFKs9ly/WQ4su+upD1hr/dQ0tQu/CMY3jKZH13iaKNJDZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDhFZr4lbU1amcpZCHcL+P1xQN8wHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+ZI5hFQXClrPUMbX6ppMFxuIbtHOAaWvKu pklfjxQ/6SsXs2mNlzGAdp+IPcNGSNVoso2p8ILFR1Bvmd/tnIoz3bE1cqWtO2k7 T/bDVPaFdwwXODydpfS3DIA7OGAuyrukPHsrzGlvb0vKn3qP6ssBuJkKohKg5t1a h0ulnQWHfe4GSroq+zjTJY+P678vjh+b6ip+aGZxa4lpdYaGqLdOk68Vj+yl94+Z Ep1TvhCPYCBwhCHoS4JRXx4qX/P2uOG9Zpjx3RFfgl+SjVCvNO941bA49ZeYQ5yJ P2voBlG92oDgI3TfUUE8+UdRpjH98MUNuw7ZN0msr2WEdkYE5LA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:16 2026 by rpki-client