$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: xDfxw/Za11yVKWhGCERDU+k1ksmqyQBXbvTh/cHojjE= Subject key identifier: 22:5D:43:8C:43:D5:27:56:37:CF:B5:88:00:FA:CE:EE:D9:37:0F:E2 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 1702CC230BE963699498D5D42808E390CAEB1A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 021E Signing time: Sun 01 Mar 2026 00:02:11 +0000 Manifest this update: Sat 28 Feb 2026 23:57:11 +0000 Manifest next update: Wed 04 Mar 2026 03:05:11 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: 0KpWDxQJ53LJoPcjJnKuvwyPPh8WxDjEDaNXPRXU4J0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:02:cc:23:0b:e9:63:69:94:98:d5:d4:28:08:e3:90:ca:eb:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Feb 28 23:57:11 2026 GMT Not After : Mar 4 03:05:11 2026 GMT Subject: CN=225D438C43D5275637CFB58800FACEEED9370FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:3d:a1:67:51:bf:91:fe:0f:44:aa:06:49: 60:52:1c:5e:17:87:47:5f:e7:3d:f2:eb:73:dc:e6: 6e:0c:a6:f9:8a:4e:cb:53:b9:61:54:af:c2:61:7f: a5:03:9b:a3:48:46:99:9b:bf:72:49:59:db:1b:20: 06:ed:61:e3:77:29:f8:cd:c7:89:f8:17:05:cc:90: 7f:36:38:87:62:fa:ec:98:79:de:a4:9e:9c:a8:1e: 8e:b6:86:a0:79:0a:90:d4:15:32:20:6d:e8:c7:19: ee:47:87:03:56:e3:5a:5a:b8:d0:25:50:3a:39:eb: c0:7f:59:75:26:72:1d:39:9f:2a:6f:c8:0e:80:74: 1c:b8:72:f9:cf:46:9e:b5:1e:52:fd:50:c4:1a:69: a6:b2:14:79:e0:54:ed:a3:c2:66:7d:f5:65:de:4f: 01:43:b1:c7:04:51:61:34:c8:fd:ea:31:51:75:41: 23:d4:83:3e:01:79:2e:4b:5c:d8:c1:ba:2c:83:4a: 08:5d:36:b9:25:45:33:8b:bd:e2:5b:a6:23:c3:69: 4f:f2:8e:c5:b2:67:d5:a6:25:22:b0:ee:a7:c8:4f: 2d:40:f6:3e:0a:bf:c6:74:0a:28:9a:22:08:1b:23: 6f:de:66:39:14:27:6a:61:f4:f5:6e:24:0a:28:f7: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5D:43:8C:43:D5:27:56:37:CF:B5:88:00:FA:CE:EE:D9:37:0F:E2 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:69:6a:9c:b6:ae:52:4a:80:92:3d:53:e2:e2:26:f5:bf:35: d9:dc:dc:d1:fe:c5:1d:f9:dc:96:8a:6a:20:61:a7:35:c8:de: 2f:3c:d1:57:fe:a4:36:43:d4:0a:68:c2:60:db:6e:5e:76:ae: 52:ce:f4:c2:68:43:59:e6:25:f4:38:a1:8b:9d:bd:95:6b:7e: d9:71:17:96:a3:16:19:3e:25:10:1c:bf:86:0b:2c:5c:28:a8: 13:62:02:14:20:da:b7:62:ef:91:cd:99:29:97:e4:23:19:19: 35:58:10:7f:bd:4d:06:27:13:0a:24:6d:fa:1a:3d:37:28:e8: 30:d8:c3:44:89:45:fc:20:0e:f6:2d:0d:dc:d5:d1:0e:4b:73: 7a:b3:54:48:55:e5:5d:ce:f5:b9:06:59:cc:b7:d6:f7:91:ef: f1:02:da:4f:4b:78:ca:5c:6a:13:85:7c:2c:9b:db:57:75:8b: 59:0f:09:9f:de:99:74:f2:a8:7a:ad:4d:fb:81:f0:e0:7c:7a: ec:47:48:f4:ef:f5:28:50:64:03:db:bb:83:e6:91:78:34:19: 0e:98:e5:fc:6c:df:a1:d0:04:aa:c3:2d:3c:de:27:cb:16:f4: f7:e9:ab:52:bd:aa:88:1a:29:ee:7f:f6:5a:4f:e7:04:30:4e: be:78:4b:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwLMIwvpY2mUmNXUKAjjkMrrGkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNjAyMjgyMzU3MTFaFw0yNjAzMDQwMzA1MTFaMDMxMTAvBgNV BAMTKDIyNUQ0MzhDNDNENTI3NTYzN0NGQjU4ODAwRkFDRUVFRDkzNzBGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkD2hZ1G/kf4PRKoGSWBSHF4X h0df5z3y63Pc5m4MpvmKTstTuWFUr8Jhf6UDm6NIRpmbv3JJWdsbIAbtYeN3KfjN x4n4FwXMkH82OIdi+uyYed6knpyoHo62hqB5CpDUFTIgbejHGe5HhwNW41pauNAl UDo568B/WXUmch05nypvyA6AdBy4cvnPRp61HlL9UMQaaaayFHngVO2jwmZ99WXe TwFDsccEUWE0yP3qMVF1QSPUgz4BeS5LXNjBuiyDSghdNrklRTOLveJbpiPDaU/y jsWyZ9WmJSKw7qfITy1A9j4Kv8Z0CiiaIggbI2/eZjkUJ2ph9PVuJAoo9wHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIl1DjEPVJ1Y3z7WIAPrO7tk3D+IwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZpapy2rlJKgJI9U+LiJvW/Ndnc3NH+xR35 3JaKaiBhpzXI3i880Vf+pDZD1ApowmDbbl52rlLO9MJoQ1nmJfQ4oYudvZVrftlx F5ajFhk+JRAcv4YLLFwoqBNiAhQg2rdi75HNmSmX5CMZGTVYEH+9TQYnEwokbfoa PTco6DDYw0SJRfwgDvYtDdzV0Q5Lc3qzVEhV5V3O9bkGWcy31veR7/EC2k9LeMpc ahOFfCyb21d1i1kPCZ/emXTyqHqtTfuB8OB8euxHSPTv9ShQZAPbu4PmkXg0GQ6Y 5fxs36HQBKrDLTzeJ8sW9Pfpq1K9qogaKe5/9lpP5wQwTr54SyQ= -----END CERTIFICATE-----Generated at Mon Mar 2 05:48:32 2026 by rpki-client