$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: F2E/BjgVJLIXPCwX4WLEAFiEReIBzrkns9aIgxLjCNU= Subject key identifier: 8D:37:7E:7D:6E:13:E7:69:50:E5:6C:94:1C:9A:20:25:45:76:65:C2 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 34910D47169553C8CC6FD1DBEEB38917F51BCFEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 0550 Signing time: Sat 28 Feb 2026 12:02:15 +0000 Manifest this update: Sat 28 Feb 2026 11:57:15 +0000 Manifest next update: Tue 03 Mar 2026 17:39:15 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: b4BPioOgcbDS3nOZkZ7JxURBvUJflPankRDMb7cCIdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:91:0d:47:16:95:53:c8:cc:6f:d1:db:ee:b3:89:17:f5:1b:cf:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Feb 28 11:57:15 2026 GMT Not After : Mar 3 17:39:15 2026 GMT Subject: CN=8D377E7D6E13E76950E56C941C9A2025457665C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:06:f7:19:a3:f6:d8:89:cb:3d:55:34:fb:d7: b4:7d:31:73:f6:6b:d7:48:38:49:f3:4d:f9:70:cc: 68:1e:64:ef:71:ed:a0:1a:39:e6:ed:83:b4:bf:95: 91:1e:7e:99:42:bc:a1:29:87:4a:bb:31:45:17:93: 5c:56:09:d9:59:2d:87:1f:40:dd:02:c2:15:3a:e8: ce:97:a6:65:78:f8:d4:3e:35:e0:d9:83:0c:0a:09: d6:3e:b1:14:ec:8a:3a:9c:3f:7e:42:f4:b3:8b:ee: 29:2f:10:ae:4d:4d:e2:09:dc:4d:d6:e6:2c:fd:cd: 6e:b3:99:e7:b5:21:9f:54:9a:f1:b2:1f:a4:c6:89: 94:f7:77:6c:b9:57:46:9b:ea:23:b1:ef:24:e7:7b: 03:5b:7d:72:72:26:c7:6a:36:9d:67:cf:c9:90:b9: 9b:32:d9:3f:ac:45:4a:34:8a:fc:ab:ef:e5:ec:7a: ed:62:7e:3b:9d:7f:e5:18:db:e4:a6:40:97:0a:69: ae:e2:15:20:02:07:4f:3a:54:17:d7:36:57:5a:19: f8:db:b7:f9:7a:ef:84:e5:17:e2:d9:ca:a4:34:ef: 72:19:31:41:e3:49:96:1b:ec:15:db:92:dc:e1:19: b6:6c:6c:a1:66:b2:9a:c8:8a:5a:ca:cb:64:7e:4c: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:7E:7D:6E:13:E7:69:50:E5:6C:94:1C:9A:20:25:45:76:65:C2 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6d:c1:8c:b3:8d:d0:dd:60:28:eb:94:0c:31:40:f2:5b:ee: 47:72:23:54:af:3c:47:96:1c:27:75:4f:ab:6d:de:7b:3c:d4: ad:c5:94:68:31:41:d1:f6:b2:a8:ac:0c:cc:8f:e8:3c:58:01: 67:fb:73:91:34:91:27:d2:af:ce:28:84:0f:35:7b:12:0f:82: 11:c7:f2:80:ef:78:f8:82:e5:78:57:60:93:6b:84:ff:1a:d7: d1:d1:70:60:4f:27:ca:e5:5c:73:64:2a:ff:da:8b:a9:31:79: 66:b6:c4:1a:2a:14:93:99:bc:b6:a3:5c:86:d5:27:fb:0b:58: d3:7e:99:2f:79:b1:26:ce:5c:bc:f0:d3:bb:36:3f:76:0e:c0: ac:3e:56:63:35:a9:8e:9c:18:5a:c7:33:f5:c8:8c:20:ec:93: a0:aa:4f:51:6f:df:21:ff:10:89:5f:f0:9a:41:2f:6e:43:43: e7:bb:81:8c:8f:73:78:c3:5c:88:39:78:43:97:4a:1d:93:a2: ae:73:43:e1:f0:1f:44:4d:21:fd:bf:93:33:cb:17:e7:70:ac: 5b:18:2a:9e:63:28:db:52:21:b2:66:d0:0f:58:20:33:5f:f8: fc:74:bb:77:3e:2e:94:a9:c3:0e:9e:fc:09:14:e6:7e:49:9a: 96:0c:4e:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJENRxaVU8jMb9Hb7rOJF/Ubz+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNjAyMjgxMTU3MTVaFw0yNjAzMDMxNzM5MTVaMDMxMTAvBgNV BAMTKDhEMzc3RTdENkUxM0U3Njk1MEU1NkM5NDFDOUEyMDI1NDU3NjY1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWBvcZo/bYics9VTT717R9MXP2 a9dIOEnzTflwzGgeZO9x7aAaOebtg7S/lZEefplCvKEph0q7MUUXk1xWCdlZLYcf QN0CwhU66M6XpmV4+NQ+NeDZgwwKCdY+sRTsijqcP35C9LOL7ikvEK5NTeIJ3E3W 5iz9zW6zmee1IZ9UmvGyH6TGiZT3d2y5V0ab6iOx7yTnewNbfXJyJsdqNp1nz8mQ uZsy2T+sRUo0ivyr7+Xseu1ifjudf+UY2+SmQJcKaa7iFSACB086VBfXNldaGfjb t/l674TlF+LZyqQ073IZMUHjSZYb7BXbktzhGbZsbKFmsprIilrKy2R+TDwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjTd+fW4T52lQ5WyUHJogJUV2ZcIwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBtwYyzjdDdYCjrlAwxQPJb7kdyI1SvPEeW HCd1T6tt3ns81K3FlGgxQdH2sqisDMyP6DxYAWf7c5E0kSfSr84ohA81exIPghHH 8oDvePiC5XhXYJNrhP8a19HRcGBPJ8rlXHNkKv/ai6kxeWa2xBoqFJOZvLajXIbV J/sLWNN+mS95sSbOXLzw07s2P3YOwKw+VmM1qY6cGFrHM/XIjCDsk6CqT1Fv3yH/ EIlf8JpBL25DQ+e7gYyPc3jDXIg5eEOXSh2Toq5zQ+HwH0RNIf2/kzPLF+dwrFsY Kp5jKNtSIbJm0A9YIDNf+Px0u3c+LpSpww6e/AkU5n5JmpYMThs= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:32 2026 by rpki-client