$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft File: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft (raw, json) Hash identifier: At38vWQnXrIfGtoHFJObQwY6IwWfVq7le6IoTgHMZ7o= Subject key identifier: 00:28:C9:84:6D:42:B6:C6:97:AB:31:81:DC:9E:1C:32:F8:BA:16:7F Authority key identifier: D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 Certificate issuer: /CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Certificate serial: 5F9234FE6508B1F30FAA1D5AA756BEF4EE332310 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft Manifest number: 07 Signing time: Sat 28 Feb 2026 02:01:24 +0000 Manifest this update: Sat 28 Feb 2026 01:56:24 +0000 Manifest next update: Tue 03 Mar 2026 06:25:24 +0000 Files and hashes: 1: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl (hash: yBIcE8QwKaJsPYGk4CVuxGfljPwQyvZ7l39eRSOd0Sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:92:34:fe:65:08:b1:f3:0f:aa:1d:5a:a7:56:be:f4:ee:33:23:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Validity Not Before: Feb 28 01:56:24 2026 GMT Not After : Mar 3 06:25:24 2026 GMT Subject: CN=0028C9846D42B6C697AB3181DC9E1C32F8BA167F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:7b:a0:c0:81:4c:d0:bc:f5:f9:bc:40:4b: 28:26:4d:ce:43:c2:23:13:62:bc:11:a1:cf:31:d2: ca:a5:82:ff:61:69:99:16:82:1b:17:44:18:29:a3: 40:60:38:70:c6:70:57:c3:3e:a0:8c:b1:7d:83:09: ab:a8:57:b0:f6:af:97:a7:de:8c:b9:91:59:23:07: 33:16:ef:3c:c0:ac:e5:24:42:80:00:86:bd:4a:e2: 30:79:cd:f4:aa:da:54:4e:bd:c4:43:44:7e:e7:4a: 3c:1c:81:21:61:d1:c5:cd:e0:78:37:5b:40:c7:66: c4:21:1d:56:a7:0d:61:d3:99:34:61:6d:b1:d8:96: dd:40:6f:ad:f9:33:24:e0:fc:b2:c0:1c:da:04:d3: d9:99:78:21:06:02:80:fd:21:31:5f:f3:45:2a:00: 91:c1:cf:5c:8d:10:16:8b:da:93:c7:92:4d:b2:1f: 39:d2:16:33:fc:65:fc:2f:88:96:75:3f:aa:67:60: 30:2a:69:45:4f:47:cc:84:f8:e5:56:33:2b:9b:c0: 02:29:ac:74:52:0a:39:30:4d:53:c5:56:c7:f5:78: 5d:9c:e9:1f:ea:d5:90:da:5f:e7:aa:df:13:3b:0b: f5:22:59:76:8a:d8:5a:2a:fc:ca:4d:3b:67:8b:77: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:C9:84:6D:42:B6:C6:97:AB:31:81:DC:9E:1C:32:F8:BA:16:7F X509v3 Authority Key Identifier: keyid:D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:15:40:4a:4b:93:92:ce:fa:db:b8:37:02:8d:99:c8:3e:8a: 25:0c:c1:f4:11:96:36:19:f1:f9:eb:ec:d7:b2:a7:80:95:6c: 21:25:f7:e4:52:0a:53:72:91:da:21:da:e2:53:97:fb:e1:8b: aa:17:96:44:52:d6:03:bd:d9:01:5e:e0:d9:a0:fb:3d:d5:0b: 9e:c4:18:f4:c3:c6:94:71:fb:db:17:ed:64:0c:7e:be:ba:3d: 15:01:7f:02:0b:a3:0e:a9:d4:e7:ba:43:7c:ea:f6:03:f9:f6: 2f:f8:ea:67:48:1b:77:90:98:64:fd:71:44:59:2b:2a:0a:5f: a5:29:fd:76:d8:2b:80:86:ad:54:89:10:03:1e:08:ec:67:5b: f7:b3:ef:1a:9a:46:1d:ba:79:87:d7:b9:c4:23:f1:09:a9:2d: ac:aa:a6:ff:d5:1e:b8:40:9e:1d:bb:ce:12:e0:a8:8d:77:08: 0d:03:33:39:99:ef:84:72:ae:47:0e:02:05:34:bd:9e:86:28: 66:f3:c7:99:72:e5:a7:07:ee:20:ec:f9:fd:f2:48:37:ba:a8: 35:f7:eb:90:56:74:fc:a1:e5:81:7a:d8:c5:6e:e5:2d:c7:e0: c3:ff:95:64:e5:66:c6:cc:a2:5d:22:47:ae:3c:84:ab:19:5b: 45:26:6a:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5I0/mUIsfMPqh1ap1a+9O4zIxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIy NUFGQzlFNzAeFw0yNjAyMjgwMTU2MjRaFw0yNjAzMDMwNjI1MjRaMDMxMTAvBgNV BAMTKDAwMjhDOTg0NkQ0MkI2QzY5N0FCMzE4MURDOUUxQzMyRjhCQTE2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGXugwIFM0Lz1+bxASygmTc5D wiMTYrwRoc8x0sqlgv9haZkWghsXRBgpo0BgOHDGcFfDPqCMsX2DCauoV7D2r5en 3oy5kVkjBzMW7zzArOUkQoAAhr1K4jB5zfSq2lROvcRDRH7nSjwcgSFh0cXN4Hg3 W0DHZsQhHVanDWHTmTRhbbHYlt1Ab635MyTg/LLAHNoE09mZeCEGAoD9ITFf80Uq AJHBz1yNEBaL2pPHkk2yHznSFjP8ZfwviJZ1P6pnYDAqaUVPR8yE+OVWMyubwAIp rHRSCjkwTVPFVsf1eF2c6R/q1ZDaX+eq3xM7C/UiWXaK2Foq/MpNO2eLdwn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUACjJhG1CtsaXqzGB3J4cMvi6Fn8wHwYDVR0j BBgwFoAU0ecjZoYek/02vVjwXPCAmyWvyecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMS9EMUU3MjM2Njg2 MUU5M0ZEMzZCRDU4RjA1Q0YwODA5QjI1QUZDOUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgwOUIyNUFG QzlFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzEvRDFFNzIzNjY4NjFFOTNGRDM2QkQ1OEYwNUNGMDgw OUIyNUFGQzlFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIVQEpLk5LO+tu4NwKNmcg+iiUMwfQRljYZ 8fnr7Neyp4CVbCEl9+RSClNykdoh2uJTl/vhi6oXlkRS1gO92QFe4Nmg+z3VC57E GPTDxpRx+9sX7WQMfr66PRUBfwILow6p1Oe6Q3zq9gP59i/46mdIG3eQmGT9cURZ KyoKX6Up/XbYK4CGrVSJEAMeCOxnW/ez7xqaRh26eYfXucQj8QmpLayqpv/VHrhA nh27zhLgqI13CA0DMzmZ74RyrkcOAgU0vZ6GKGbzx5ly5acH7iDs+f3ySDe6qDX3 65BWdPyh5YF62MVu5S3H4MP/lWTlZsbMol0iR648hKsZW0Umak8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:08 2026 by rpki-client