$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: 49TYb5/WmjLi7vUsAG0f1e36iMLxiYkWX1JI0czwWfE= Subject key identifier: 96:F2:19:93:F8:03:A2:B0:A4:79:3E:08:8D:2D:30:71:D7:9E:81:15 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 259308DAB65F38D82776224E565F129F9291DABB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0177 Signing time: Sat 28 Feb 2026 08:20:54 +0000 Manifest this update: Sat 28 Feb 2026 08:15:54 +0000 Manifest next update: Tue 03 Mar 2026 13:14:54 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: eTu3SoLa8PR1fugdyUxZB5V1I7Dsr0NMvJpVtdzbxO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:93:08:da:b6:5f:38:d8:27:76:22:4e:56:5f:12:9f:92:91:da:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Feb 28 08:15:54 2026 GMT Not After : Mar 3 13:14:54 2026 GMT Subject: CN=96F21993F803A2B0A4793E088D2D3071D79E8115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:bd:08:75:7f:a8:f0:78:2c:80:b8:53:99: fa:6e:4c:79:e5:ce:84:ac:1a:59:14:48:68:ab:c9: f0:88:7c:2a:36:39:8d:d5:30:41:96:40:a7:74:9b: ab:98:52:36:a9:e0:b1:32:80:f2:f1:b1:e6:e6:30: a1:a3:07:02:de:f3:41:86:df:2e:60:20:5b:3a:ad: 27:81:25:af:68:96:e5:ec:15:91:23:e0:e9:d8:78: ec:15:9b:3f:bd:6a:11:32:c1:e3:94:c5:1f:42:1a: 20:77:5e:66:9c:92:ad:49:37:40:8d:c8:5b:ec:28: 60:60:17:16:4e:82:04:38:42:7d:38:3f:7c:9f:d6: 23:b2:04:5b:0a:b2:e7:ec:79:7c:6a:9d:2d:76:77: 22:dd:ff:dc:ac:bc:a5:fb:ab:ef:a1:cf:85:e4:ee: df:1c:38:29:f8:9c:46:e4:e8:15:d6:60:e5:83:1f: d3:52:b1:ff:88:f6:b1:75:c8:43:24:b7:6e:5b:c5: d5:de:c5:7f:e8:b8:a7:8e:91:82:74:5a:ea:e0:ae: 11:d2:e6:7a:62:4d:fd:cd:48:a8:cd:19:04:d0:33: ed:b5:bb:f3:c4:9e:60:db:68:01:96:95:a7:38:20: cf:b7:83:1d:53:72:50:81:79:95:df:28:6f:ec:6b: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:19:93:F8:03:A2:B0:A4:79:3E:08:8D:2D:30:71:D7:9E:81:15 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9e:b6:54:66:d9:fd:0b:e4:90:d7:f7:f2:60:75:bf:8c:b2: e1:52:73:ce:87:e6:c7:a4:21:22:4d:e3:93:1e:1b:3f:6b:38: 7f:74:e2:33:10:df:dd:dc:f5:24:e4:b5:76:55:7f:a3:35:34: 52:d9:ee:80:e8:e6:c9:55:62:07:02:3c:0c:9d:e9:5e:05:50: fd:ec:dc:9e:7b:5c:09:cd:41:0f:e1:7d:34:3a:c3:9e:67:ab: cc:fc:8c:74:31:1f:62:0e:24:3e:a9:d2:9c:f2:97:8b:d9:ea: a0:0b:99:92:a0:01:fa:c0:2b:e6:50:e9:43:af:79:c2:55:41: cb:9b:d9:1f:2b:87:a0:13:1c:b7:c8:92:f8:d2:53:28:5f:17: e8:01:4d:fb:9f:45:ff:7a:1f:7a:a9:3b:11:c9:43:3d:b3:7a: a0:3f:52:d1:c4:d6:76:78:03:12:08:5d:71:76:ac:36:fc:69: 30:cc:06:32:03:f4:fe:00:98:c8:e9:19:69:8b:d4:c7:30:5c: 89:f9:88:14:83:d6:af:f2:33:04:48:4e:ae:3f:9e:d3:c3:46: 99:c4:6a:27:72:ae:ad:26:e1:9f:b1:6e:a8:ae:4d:b2:01:33: 0e:37:36:ca:9d:da:6c:b8:7a:2c:b6:cd:03:56:2a:67:12:fb: c6:7e:96:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZMI2rZfONgndiJOVl8Sn5KR2rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNjAyMjgwODE1NTRaFw0yNjAzMDMxMzE0NTRaMDMxMTAvBgNV BAMTKDk2RjIxOTkzRjgwM0EyQjBBNDc5M0UwODhEMkQzMDcxRDc5RTgxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gr0IdX+o8HgsgLhTmfpuTHnl zoSsGlkUSGiryfCIfCo2OY3VMEGWQKd0m6uYUjap4LEygPLxsebmMKGjBwLe80GG 3y5gIFs6rSeBJa9oluXsFZEj4OnYeOwVmz+9ahEyweOUxR9CGiB3Xmackq1JN0CN yFvsKGBgFxZOggQ4Qn04P3yf1iOyBFsKsufseXxqnS12dyLd/9ysvKX7q++hz4Xk 7t8cOCn4nEbk6BXWYOWDH9NSsf+I9rF1yEMkt25bxdXexX/ouKeOkYJ0WurgrhHS 5npiTf3NSKjNGQTQM+21u/PEnmDbaAGWlac4IM+3gx1TclCBeZXfKG/sayDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvIZk/gDorCkeT4IjS0wcdeegRUwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqetlRm2f0L5JDX9/Jgdb+MsuFSc86H5sek ISJN45MeGz9rOH904jMQ393c9STktXZVf6M1NFLZ7oDo5slVYgcCPAyd6V4FUP3s 3J57XAnNQQ/hfTQ6w55nq8z8jHQxH2IOJD6p0pzyl4vZ6qALmZKgAfrAK+ZQ6UOv ecJVQcub2R8rh6ATHLfIkvjSUyhfF+gBTfufRf96H3qpOxHJQz2zeqA/UtHE1nZ4 AxIIXXF2rDb8aTDMBjID9P4AmMjpGWmL1McwXIn5iBSD1q/yMwRITq4/ntPDRpnE aidyrq0m4Z+xbqiuTbIBMw43Nsqd2my4eiy2zQNWKmcS+8Z+luQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:38 2026 by rpki-client