$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: G6BQHXR1Osn3J1INGPKlJcFI0T5Td5gMC41hjKO6miw= Subject key identifier: 37:CB:BE:FE:1F:DE:88:83:3B:89:20:79:52:5D:6A:DB:05:AF:15:58 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 67327743FCCF3B772F87727917CDF003EA76573B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 0135 Signing time: Sat 28 Feb 2026 18:41:55 +0000 Manifest this update: Sat 28 Feb 2026 18:36:55 +0000 Manifest next update: Wed 04 Mar 2026 02:08:55 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: Sd9vfMuMkYnmTUnoi418kedrIkdpna0dYUOK3aZu1+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:32:77:43:fc:cf:3b:77:2f:87:72:79:17:cd:f0:03:ea:76:57:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Feb 28 18:36:55 2026 GMT Not After : Mar 4 02:08:55 2026 GMT Subject: CN=37CBBEFE1FDE88833B892079525D6ADB05AF1558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:91:88:f4:4c:a2:6f:6e:75:32:e2:f1:e0:6c: 32:3c:6d:da:41:a2:cc:35:64:eb:a7:ad:80:81:0e: f0:74:4c:4a:91:70:c2:24:d4:c7:a2:e7:2d:a7:cc: c8:e7:93:bc:3f:51:92:d4:5a:5f:4e:aa:13:72:38: f2:dc:5c:f1:80:3f:19:e0:7b:38:7a:bd:2d:98:a0: 7f:be:9d:bd:a4:71:17:dc:fe:fe:60:13:6c:a1:e5: 18:0e:4f:e7:5f:e6:e4:9b:74:20:48:e2:70:5c:26: 85:ce:d6:f4:91:f0:00:b4:98:c5:24:1f:79:d9:fe: 2a:7f:22:2f:45:16:c0:80:47:9f:ed:a2:60:25:29: 64:7d:87:59:9e:48:b4:7f:7f:2a:1e:1a:cb:40:4d: 8d:57:77:38:3a:6c:6d:8e:ac:82:04:5d:a8:65:db: b8:04:74:87:fb:f3:a9:8b:03:d7:7e:f4:60:99:46: fc:a0:74:eb:5a:68:0d:28:f1:f2:37:29:c9:c1:49: da:4f:88:94:2a:55:d4:fb:fc:53:b1:3b:00:8f:b3: 26:da:8d:e3:c0:c7:91:ca:35:b9:1b:02:ee:ba:15: 02:03:10:eb:02:2c:61:ce:03:b7:a5:9d:77:39:f1: fb:41:ed:95:a8:85:2c:3d:cf:83:a5:36:ca:c0:51: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:BE:FE:1F:DE:88:83:3B:89:20:79:52:5D:6A:DB:05:AF:15:58 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:fb:8f:2c:51:d9:3e:a0:cd:99:1c:e0:ac:89:1d:70:36: 70:dd:23:6a:11:5e:83:6d:d7:12:1f:46:02:6d:3d:26:49:e5: f9:b2:e2:86:e1:f6:2a:d9:f1:b4:eb:d0:78:87:e3:ca:aa:67: d0:9b:2f:be:a9:3d:3b:6f:27:33:02:c8:0f:97:63:a6:89:61: 43:8c:7d:7e:56:bd:37:1d:f9:b9:26:15:85:65:18:59:26:71: 7c:4b:5e:69:fc:bc:c2:a3:eb:c9:fe:4f:fc:22:cb:10:66:a7: fe:42:a7:41:4e:d2:3c:69:d9:02:ce:e6:50:3e:fc:9b:af:29: c2:2a:ec:e4:54:74:50:1c:84:3b:72:36:15:3d:ad:a2:9f:a3: e4:ac:2a:74:50:f2:c8:8b:ab:28:bc:6f:b7:25:cd:dd:3a:0d: 38:1e:35:4d:ba:3d:8e:40:03:7d:a0:4d:a8:7a:45:cb:2f:90: bf:56:f0:26:ba:fc:ed:11:c7:13:85:f6:f7:00:26:c9:bb:9f: 47:67:77:36:b5:d2:96:80:87:41:71:f7:c8:22:fd:e3:5f:84: c2:89:81:f7:3d:62:39:a6:36:cd:c1:23:aa:49:a0:c2:f9:c0: d8:8d:c1:1c:5a:c2:16:a3:53:55:d9:f7:07:f1:e5:4c:a4:cd: 04:af:c5:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzJ3Q/zPO3cvh3J5F83wA+p2VzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNjAyMjgxODM2NTVaFw0yNjAzMDQwMjA4NTVaMDMxMTAvBgNV BAMTKDM3Q0JCRUZFMUZERTg4ODMzQjg5MjA3OTUyNUQ2QURCMDVBRjE1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDskYj0TKJvbnUy4vHgbDI8bdpB osw1ZOunrYCBDvB0TEqRcMIk1Mei5y2nzMjnk7w/UZLUWl9OqhNyOPLcXPGAPxng ezh6vS2YoH++nb2kcRfc/v5gE2yh5RgOT+df5uSbdCBI4nBcJoXO1vSR8AC0mMUk H3nZ/ip/Ii9FFsCAR5/tomAlKWR9h1meSLR/fyoeGstATY1Xdzg6bG2OrIIEXahl 27gEdIf786mLA9d+9GCZRvygdOtaaA0o8fI3KcnBSdpPiJQqVdT7/FOxOwCPsyba jePAx5HKNbkbAu66FQIDEOsCLGHOA7elnXc58ftB7ZWohSw9z4OlNsrAUQFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8u+/h/eiIM7iSB5Ul1q2wWvFVgwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbb+48sUdk+oM2ZHOCsiR1wNnDdI2oRXoNt 1xIfRgJtPSZJ5fmy4obh9irZ8bTr0HiH48qqZ9CbL76pPTtvJzMCyA+XY6aJYUOM fX5WvTcd+bkmFYVlGFkmcXxLXmn8vMKj68n+T/wiyxBmp/5Cp0FO0jxp2QLO5lA+ /JuvKcIq7ORUdFAchDtyNhU9raKfo+SsKnRQ8siLqyi8b7clzd06DTgeNU26PY5A A32gTah6RcsvkL9W8Ca6/O0RxxOF9vcAJsm7n0dndza10paAh0Fx98gi/eNfhMKJ gfc9YjmmNs3BI6pJoML5wNiNwRxawhajU1XZ9wfx5UykzQSvxWc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:54 2026 by rpki-client