$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: 7E9gku6N7X5PIBXOojjE2J0DB/6OKZHg0ulwKoc7zv4= Subject key identifier: D4:7E:DE:67:48:E2:25:E2:D4:33:45:CB:FA:C6:2B:24:CB:B8:55:05 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 729FF082E6FD895B75433FC9AA9502CD21D901D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 010C Signing time: Sat 28 Feb 2026 10:31:28 +0000 Manifest this update: Sat 28 Feb 2026 10:26:28 +0000 Manifest next update: Tue 03 Mar 2026 15:43:28 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: Y3pIDTiXDE5yEx+wKxY8ft89XjekSCj8PaZ2ajN6DbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9f:f0:82:e6:fd:89:5b:75:43:3f:c9:aa:95:02:cd:21:d9:01:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Feb 28 10:26:28 2026 GMT Not After : Mar 3 15:43:28 2026 GMT Subject: CN=D47EDE6748E225E2D43345CBFAC62B24CBB85505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a4:37:6a:51:44:f4:94:ad:77:de:6e:8b:b0: ff:0f:5f:c9:ba:91:61:d4:75:3b:f9:2f:fa:91:31: 98:c0:a1:5b:a8:42:6b:e6:5c:89:2b:6f:b4:ca:65: a2:fd:ed:ea:f7:a3:35:df:13:1d:74:b2:ab:f9:ee: be:df:e0:ac:51:b1:5c:2e:e7:53:9a:b0:cf:38:69: 89:6b:e6:cc:ae:56:c1:34:f2:68:2c:4c:43:5f:3e: 37:11:5a:74:f4:fa:19:3a:41:e2:52:5d:97:5f:7a: dc:bc:4e:f6:98:17:0b:66:06:87:8e:bc:57:b4:60: a9:0d:c4:10:76:16:cd:9c:a6:9a:4b:ef:ca:eb:42: b0:d8:29:9a:27:be:f6:77:91:58:bd:3e:51:00:2b: 0d:35:d2:27:9e:1e:c2:4f:e2:4c:44:d3:f1:d7:4d: c3:7b:d7:e2:8f:c7:d2:42:ba:d3:62:dd:71:75:90: f0:91:47:a1:46:11:0a:6f:74:86:43:d9:9f:62:19: e2:fb:c4:d7:08:ee:df:21:75:dc:e6:1c:13:80:09: 7e:22:7c:4a:2c:38:de:ad:d7:32:ac:4f:8f:86:df: 4f:b8:90:7a:f8:da:0f:61:2c:e4:58:df:7b:60:23: 7a:cb:14:35:59:84:c0:ec:a6:1d:c9:d4:79:37:38: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:DE:67:48:E2:25:E2:D4:33:45:CB:FA:C6:2B:24:CB:B8:55:05 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:e2:71:fc:a0:56:61:6f:da:7e:d9:3f:d2:f4:df:cb:fc:74: 68:87:63:08:55:ce:83:b4:fb:52:2d:e3:0b:44:b9:5b:f7:fe: 47:4d:b1:f5:4f:2b:e9:84:57:5d:94:76:81:a5:12:a4:b4:85: bc:d4:2c:33:7a:a2:1b:45:ab:d8:83:27:83:64:de:14:31:c3: 67:d7:1e:a3:2e:f1:db:73:66:7f:9b:b7:91:fd:9d:69:f0:c5: 39:6a:fb:a3:74:39:8d:11:fe:75:e6:2e:fd:ce:cd:35:9e:fe: bf:b2:32:b6:ab:ef:11:e6:1a:2c:5d:d5:98:75:d3:3c:28:06: 41:72:1b:3e:fe:97:59:d2:68:f6:5a:44:04:59:f5:9d:2b:3f: 3c:9f:8b:a7:37:f8:69:f3:e6:04:ee:fb:0c:79:77:bd:02:2b: 11:d0:9d:7d:c4:e7:76:5d:25:19:ce:a8:10:b5:ec:ef:f3:68: d8:98:91:2d:48:d7:b0:13:96:e3:ae:47:34:72:6c:9f:df:bc: c7:1d:f7:d5:8e:8c:4c:7d:a4:da:bb:ee:ee:45:07:00:7f:8a: b0:77:7d:8c:79:52:4d:13:04:55:e4:d7:20:04:6f:b2:c5:5f: 11:d5:ea:56:6f:4d:8a:4b:94:39:03:26:ed:7f:1b:8f:c3:9c: 20:68:9e:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcp/wgub9iVt1Qz/JqpUCzSHZAdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNjAyMjgxMDI2MjhaFw0yNjAzMDMxNTQzMjhaMDMxMTAvBgNV BAMTKEQ0N0VERTY3NDhFMjI1RTJENDMzNDVDQkZBQzYyQjI0Q0JCODU1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqpDdqUUT0lK133m6LsP8PX8m6 kWHUdTv5L/qRMZjAoVuoQmvmXIkrb7TKZaL97er3ozXfEx10sqv57r7f4KxRsVwu 51OasM84aYlr5syuVsE08mgsTENfPjcRWnT0+hk6QeJSXZdfety8TvaYFwtmBoeO vFe0YKkNxBB2Fs2cpppL78rrQrDYKZonvvZ3kVi9PlEAKw010ieeHsJP4kxE0/HX TcN71+KPx9JCutNi3XF1kPCRR6FGEQpvdIZD2Z9iGeL7xNcI7t8hddzmHBOACX4i fEosON6t1zKsT4+G30+4kHr42g9hLORY33tgI3rLFDVZhMDsph3J1Hk3OEB7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1H7eZ0jiJeLUM0XL+sYrJMu4VQUwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOzicfygVmFv2n7ZP9L038v8dGiHYwhVzoO0 +1It4wtEuVv3/kdNsfVPK+mEV12UdoGlEqS0hbzULDN6ohtFq9iDJ4Nk3hQxw2fX HqMu8dtzZn+bt5H9nWnwxTlq+6N0OY0R/nXmLv3OzTWe/r+yMrar7xHmGixd1Zh1 0zwoBkFyGz7+l1nSaPZaRARZ9Z0rPzyfi6c3+Gnz5gTu+wx5d70CKxHQnX3E53Zd JRnOqBC17O/zaNiYkS1I17ATluOuRzRybJ/fvMcd99WOjEx9pNq77u5FBwB/irB3 fYx5Uk0TBFXk1yAEb7LFXxHV6lZvTYpLlDkDJu1/G4/DnCBoni0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:50 2026 by rpki-client