$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: O6CjE75X84bROHeMO/RVfpPKeREuBwLnbyOIbPRG0F0= Subject key identifier: A6:0B:82:FB:D8:62:4F:92:85:98:CF:97:6A:18:1C:22:25:E0:8F:AA Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 1EB34B55F59D54E8539E5D2F0FACF16C915FA9C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 0219 Signing time: Fri 27 Feb 2026 14:11:55 +0000 Manifest this update: Fri 27 Feb 2026 14:06:55 +0000 Manifest next update: Tue 03 Mar 2026 01:54:55 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: fDf+h5y4zQZxV/QuH9rwfxF2Q5eirTVYxKMDyzaYMnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b3:4b:55:f5:9d:54:e8:53:9e:5d:2f:0f:ac:f1:6c:91:5f:a9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Feb 27 14:06:55 2026 GMT Not After : Mar 3 01:54:55 2026 GMT Subject: CN=A60B82FBD8624F928598CF976A181C2225E08FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:52:57:ae:7e:42:0c:da:9b:55:d3:6d:77: 3b:c1:f4:21:c3:38:97:2e:a8:ee:00:da:7a:b2:9a: 4d:10:e8:69:73:ac:fe:b4:36:e5:d9:40:25:e0:8d: 5d:12:b6:71:0a:c8:06:67:4b:16:fe:cd:1d:e5:8c: 55:ec:03:83:e4:28:0d:6b:3d:e2:f4:44:70:38:d8: bb:0c:6a:31:8d:97:db:2a:5c:e0:d8:43:48:0f:37: 30:41:e7:73:75:ab:ae:d8:68:49:3e:97:2d:c7:56: 24:46:27:ae:a3:73:6d:61:a0:42:fd:1e:a3:41:ab: 60:f3:a3:21:ed:7d:05:3a:fa:ea:32:32:45:13:17: 39:94:f1:e2:8a:f8:4f:0b:bd:00:bb:40:70:04:d4: 34:f8:8e:55:73:52:b5:b4:d7:49:f5:5f:9d:c6:14: e9:69:d8:ab:f1:3a:86:03:f7:95:ce:fa:70:2e:06: 86:97:19:d1:6d:f2:97:48:18:7c:c4:56:81:52:9a: bc:4a:48:f3:4d:34:0a:57:e9:d8:58:a6:68:90:07: 28:e3:12:f4:8a:5c:3f:c0:3a:57:de:24:c5:49:de: db:b0:e7:91:0a:ed:1e:47:da:a7:c2:6c:9a:7e:e7: 91:f2:00:99:0b:a8:1e:59:27:81:f3:7c:6c:3c:cc: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0B:82:FB:D8:62:4F:92:85:98:CF:97:6A:18:1C:22:25:E0:8F:AA X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:92:d9:bf:3d:58:d3:f7:40:d7:0c:0a:35:80:53:98:5c:bb: fa:32:8d:40:50:f2:ff:48:4b:91:ee:00:4f:2e:3a:08:88:18: 47:5a:d4:9d:27:bd:2a:60:e1:e4:92:e0:0e:2f:cc:09:53:40: 89:2c:d8:01:3d:09:22:b8:e8:23:c4:b1:b1:aa:50:51:be:81: 21:60:35:8d:64:6c:3a:26:6e:99:49:c5:3e:2e:4d:99:20:b7: 92:76:c5:93:ef:a1:56:44:46:91:28:6c:0a:04:0a:6c:3e:c7: df:6c:0a:f9:ed:fd:f2:75:98:5c:61:b4:fa:67:09:82:0e:26: 31:a2:1b:6f:7c:78:de:91:1d:64:c7:57:5a:a2:5f:95:c8:f1: 22:0a:8a:14:7e:f7:69:f4:57:c0:7c:62:b3:1f:26:d3:43:b0: 47:44:e5:f0:1b:fb:57:eb:61:a9:2a:d9:c5:31:14:8c:e4:a9: 5b:45:09:c7:8f:68:27:71:f5:d9:4d:8b:53:f2:70:7e:7c:5f: 57:73:00:c5:37:2b:fe:71:7d:41:ff:e1:da:09:26:f2:d1:a4: 59:da:1b:d4:11:3c:af:f5:f3:25:56:c4:65:6f:7e:20:38:ad: b9:22:74:1c:c5:7e:a5:e5:0e:52:5e:19:dd:66:e5:28:b1:2e: 65:67:87:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrNLVfWdVOhTnl0vD6zxbJFfqckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNjAyMjcxNDA2NTVaFw0yNjAzMDMwMTU0NTVaMDMxMTAvBgNV BAMTKEE2MEI4MkZCRDg2MjRGOTI4NTk4Q0Y5NzZBMTgxQzIyMjVFMDhGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC391JXrn5CDNqbVdNtdzvB9CHD OJcuqO4A2nqymk0Q6GlzrP60NuXZQCXgjV0StnEKyAZnSxb+zR3ljFXsA4PkKA1r PeL0RHA42LsMajGNl9sqXODYQ0gPNzBB53N1q67YaEk+ly3HViRGJ66jc21hoEL9 HqNBq2DzoyHtfQU6+uoyMkUTFzmU8eKK+E8LvQC7QHAE1DT4jlVzUrW010n1X53G FOlp2KvxOoYD95XO+nAuBoaXGdFt8pdIGHzEVoFSmrxKSPNNNApX6dhYpmiQByjj EvSKXD/AOlfeJMVJ3tuw55EK7R5H2qfCbJp+55HyAJkLqB5ZJ4HzfGw8zBi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpguC+9hiT5KFmM+XahgcIiXgj6owHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuS2b89WNP3QNcMCjWAU5hcu/oyjUBQ8v9I S5HuAE8uOgiIGEda1J0nvSpg4eSS4A4vzAlTQIks2AE9CSK46CPEsbGqUFG+gSFg NY1kbDombplJxT4uTZkgt5J2xZPvoVZERpEobAoECmw+x99sCvnt/fJ1mFxhtPpn CYIOJjGiG298eN6RHWTHV1qiX5XI8SIKihR+92n0V8B8YrMfJtNDsEdE5fAb+1fr Yakq2cUxFIzkqVtFCcePaCdx9dlNi1PycH58X1dzAMU3K/5xfUH/4doJJvLRpFna G9QRPK/18yVWxGVvfiA4rbkidBzFfqXlDlJeGd1m5SixLmVnh/0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:19 2026 by rpki-client