$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: OeCAfFMABu0ywwgcowM62novRxl5b3EH5bfTJrNVnZQ= Subject key identifier: 79:5F:D2:E2:F1:6F:4F:8F:55:76:40:7C:0F:8E:CA:49:22:09:66:83 Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 11CA75B7D868DB38ED2E22C9B1168093ACF3CEAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 0263 Signing time: Sat 28 Feb 2026 10:22:10 +0000 Manifest this update: Sat 28 Feb 2026 10:17:10 +0000 Manifest next update: Tue 03 Mar 2026 15:22:10 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: 7ksBwOsr4sgxhQuRP+t3binsZVp2mQM0EKTx93EMxso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ca:75:b7:d8:68:db:38:ed:2e:22:c9:b1:16:80:93:ac:f3:ce:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Feb 28 10:17:10 2026 GMT Not After : Mar 3 15:22:10 2026 GMT Subject: CN=795FD2E2F16F4F8F5576407C0F8ECA4922096683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:0a:31:b5:03:6a:e0:9f:b4:c4:75:7e:af: 2d:a7:b3:ee:12:49:ca:2f:0e:f2:7a:64:4c:ac:1a: 52:21:d7:c2:dd:61:46:51:84:8d:eb:6a:b9:fa:86: 28:94:1c:be:90:a5:5d:35:64:97:f9:d7:4f:8e:2c: 4f:30:58:fe:11:f7:bf:4d:12:1a:ae:8c:13:c8:8a: 04:23:ad:d0:5d:96:6b:23:3d:57:06:c7:ef:88:3c: 49:bf:80:65:88:e4:e0:83:f7:6f:ab:f5:20:a5:d8: 78:85:4b:ad:98:00:d2:98:04:c5:01:ef:63:bb:ff: 69:a4:ba:fa:a6:ce:59:b6:0a:94:1f:17:59:fe:01: 9d:77:61:ba:88:9c:f1:b0:3d:4c:b6:bd:7c:43:c8: 9b:9b:1e:b5:36:58:ad:ce:06:16:44:76:b6:99:24: c1:88:9e:95:27:14:7e:bb:57:89:04:a8:7b:bf:a5: 21:7f:de:36:63:4a:53:36:88:68:2c:52:0c:d2:1f: c1:88:65:bd:87:15:89:fa:d7:a0:04:7c:ee:36:c0: ec:79:bd:e0:ec:b9:03:59:79:37:4b:ce:6b:3e:dc: 67:a4:d4:42:06:ee:d2:f9:ed:82:40:e3:e6:52:74: 65:95:24:a5:f6:44:86:e7:cd:4b:6b:ce:79:ec:ca: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:D2:E2:F1:6F:4F:8F:55:76:40:7C:0F:8E:CA:49:22:09:66:83 X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:db:5b:eb:1e:d7:c7:75:7c:c5:85:49:44:29:0f:78:a4:fc: d3:f9:c6:ba:f9:0b:d9:78:03:0d:7d:19:b3:00:c4:eb:53:f9: 4a:24:56:0f:07:4c:e7:33:71:5f:64:62:a9:f4:bb:9e:80:b8: f7:68:96:42:78:e6:bd:9b:4b:34:ed:ee:7c:ab:3c:03:69:a9: 88:5b:9c:a2:50:73:1b:29:15:ac:3d:92:59:e1:6f:33:5c:37: 99:4b:3a:92:f2:37:85:61:06:fb:3e:2b:4d:3e:69:a2:29:a0: 2f:8c:e0:3e:38:c3:35:c0:7a:30:8e:aa:1c:b4:58:41:db:b8: 4e:7f:36:df:f7:2a:52:c0:4a:70:9e:a0:c7:ca:b6:3c:83:b4: 6b:6a:5f:97:0d:f9:91:a8:15:ac:8a:26:82:e4:48:31:db:77: 8b:8b:25:bb:9e:7d:82:b7:b3:e9:04:7b:1e:9e:b1:ac:7e:ae: d1:43:c6:0d:d9:f4:04:60:b7:f4:e6:34:58:e4:ff:67:45:e4: 59:71:48:62:39:c7:b2:3f:37:e2:7a:cb:5a:07:c1:97:b2:5f: 41:63:23:52:d1:91:0e:3c:62:16:93:ca:90:1d:5b:17:d2:63: 69:a5:b6:34:70:99:5f:3b:e3:55:f1:97:c9:96:30:64:56:02: ac:e6:e0:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcp1t9ho2zjtLiLJsRaAk6zzzq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNjAyMjgxMDE3MTBaFw0yNjAzMDMxNTIyMTBaMDMxMTAvBgNV BAMTKDc5NUZEMkUyRjE2RjRGOEY1NTc2NDA3QzBGOEVDQTQ5MjIwOTY2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEgoxtQNq4J+0xHV+ry2ns+4S ScovDvJ6ZEysGlIh18LdYUZRhI3rarn6hiiUHL6QpV01ZJf510+OLE8wWP4R979N EhqujBPIigQjrdBdlmsjPVcGx++IPEm/gGWI5OCD92+r9SCl2HiFS62YANKYBMUB 72O7/2mkuvqmzlm2CpQfF1n+AZ13YbqInPGwPUy2vXxDyJubHrU2WK3OBhZEdraZ JMGInpUnFH67V4kEqHu/pSF/3jZjSlM2iGgsUgzSH8GIZb2HFYn616AEfO42wOx5 veDsuQNZeTdLzms+3Gek1EIG7tL57YJA4+ZSdGWVJKX2RIbnzUtrznnsymN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeV/S4vFvT49VdkB8D47KSSIJZoMwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7bW+se18d1fMWFSUQpD3ik/NP5xrr5C9l4 Aw19GbMAxOtT+UokVg8HTOczcV9kYqn0u56AuPdolkJ45r2bSzTt7nyrPANpqYhb nKJQcxspFaw9klnhbzNcN5lLOpLyN4VhBvs+K00+aaIpoC+M4D44wzXAejCOqhy0 WEHbuE5/Nt/3KlLASnCeoMfKtjyDtGtqX5cN+ZGoFayKJoLkSDHbd4uLJbuefYK3 s+kEex6esax+rtFDxg3Z9ARgt/TmNFjk/2dF5FlxSGI5x7I/N+J6y1oHwZeyX0Fj I1LRkQ48YhaTypAdWxfSY2mltjRwmV8741Xxl8mWMGRWAqzm4Oo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:53 2026 by rpki-client