$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: M+nRcUEQb4GQSTRSUwTYK2oPROqFnGCFPNpVGw8XY2U= Subject key identifier: 9B:90:0B:F6:2A:6B:20:36:28:FA:8D:FE:38:10:F7:FD:44:95:75:C5 Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 1A6B0A5F703AEA339920A62BE3946AFFAF4F4D26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 59 Signing time: Sat 28 Feb 2026 11:41:34 +0000 Manifest this update: Sat 28 Feb 2026 11:36:34 +0000 Manifest next update: Tue 03 Mar 2026 12:07:34 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: fPaxbZtsDerYx/8tpFsGw4J4IhbDbEiJ711L4Od6av8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6b:0a:5f:70:3a:ea:33:99:20:a6:2b:e3:94:6a:ff:af:4f:4d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Feb 28 11:36:34 2026 GMT Not After : Mar 3 12:07:34 2026 GMT Subject: CN=9B900BF62A6B203628FA8DFE3810F7FD449575C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:73:df:51:d9:1c:97:c3:e1:6d:68:2f:58: f4:62:2f:f3:24:ff:2e:c6:5b:8f:bd:43:89:ed:72: 0b:a3:28:23:ca:94:67:bc:97:1b:fa:1a:80:82:4a: a0:75:e3:92:5a:cc:7c:5f:d0:c0:bd:34:98:24:13: 5a:9a:5c:59:74:5a:f1:1f:9e:de:23:16:87:04:8f: dc:b3:78:eb:93:4a:5f:66:7b:0b:c2:0e:08:5b:eb: 18:d2:93:de:bd:be:d3:36:66:83:8b:a7:24:45:c1: 37:2e:8b:7a:25:17:0a:a7:63:dc:9e:11:a8:df:80: 3a:d2:c2:aa:6a:37:4c:7e:d1:ad:6d:ca:40:49:56: 04:ff:a9:63:08:be:99:40:75:b8:2d:45:e3:ec:06: 0a:7b:20:49:d8:28:f0:25:61:94:ff:d9:33:0c:e1: 12:58:00:e5:12:c9:c1:06:9c:57:f2:0c:7f:b3:20: e4:af:c8:f6:e7:29:35:28:bd:cc:8f:69:d1:4a:d0: 62:de:04:8e:2a:27:1b:92:03:ff:c8:f2:8d:0f:de: 41:de:94:dd:d8:41:c2:82:df:a4:04:8c:62:32:74: a6:65:d0:64:73:70:76:5f:e9:72:f2:e5:51:84:71: 35:f3:b4:b7:32:7f:28:e2:6b:3b:64:3f:6f:69:5a: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:90:0B:F6:2A:6B:20:36:28:FA:8D:FE:38:10:F7:FD:44:95:75:C5 X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:98:25:13:13:0e:35:ee:f7:b3:3f:0a:53:57:09:45:49: 0a:51:16:dc:f8:dc:c8:b7:4a:7b:ec:5d:61:3f:55:7e:65:b9: 55:5e:97:40:7d:f6:93:9d:0a:e5:d5:48:11:48:4d:db:0e:6a: 9c:55:21:a7:5f:dc:27:2a:cb:e0:cb:fb:41:fd:dd:d7:44:9e: fe:2a:00:c8:df:c6:58:e7:f0:90:73:88:c3:b0:f1:1f:e5:4b: b8:51:27:0a:1e:c0:40:62:bd:89:64:32:0f:0e:11:c2:e7:3d: 58:c3:1c:c4:6e:9e:1b:ee:e2:75:88:1e:5b:8b:ca:3b:38:17: 73:4e:7d:cb:be:ab:2c:54:0b:27:88:13:d8:39:9b:3a:74:5a: 43:46:ac:d5:2a:45:1f:b2:6a:c7:bb:cb:da:ba:d6:f3:c3:f6: 1b:94:08:30:cc:ff:43:68:f0:64:a5:0f:a7:22:13:4a:5d:b4: 2f:42:6c:1e:b2:00:c1:49:bc:4d:1a:36:b4:0a:a2:36:7d:ef: 85:07:2c:07:6c:b2:1e:ca:6f:05:0f:37:76:b4:91:86:b2:ba: 3f:78:9a:ff:da:d9:ad:b9:bc:88:00:d3:80:d0:3d:09:4e:bc: ae:5e:ab:8a:b5:c9:2b:c8:aa:55:fb:b9:4b:33:29:d1:3d:4a: 70:80:e5:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmsKX3A66jOZIKYr45Rq/69PTSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNjAyMjgxMTM2MzRaFw0yNjAzMDMxMjA3MzRaMDMxMTAvBgNV BAMTKDlCOTAwQkY2MkE2QjIwMzYyOEZBOERGRTM4MTBGN0ZENDQ5NTc1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtXPfUdkcl8PhbWgvWPRiL/Mk /y7GW4+9Q4ntcgujKCPKlGe8lxv6GoCCSqB145JazHxf0MC9NJgkE1qaXFl0WvEf nt4jFocEj9yzeOuTSl9mewvCDghb6xjSk969vtM2ZoOLpyRFwTcui3olFwqnY9ye EajfgDrSwqpqN0x+0a1tykBJVgT/qWMIvplAdbgtRePsBgp7IEnYKPAlYZT/2TMM 4RJYAOUSycEGnFfyDH+zIOSvyPbnKTUovcyPadFK0GLeBI4qJxuSA//I8o0P3kHe lN3YQcKC36QEjGIydKZl0GRzcHZf6XLy5VGEcTXztLcyfyjiaztkP29pWsejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm5AL9iprIDYo+o3+OBD3/USVdcUwHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4TmCUTEw417vezPwpTVwlFSQpRFtz43Mi3 SnvsXWE/VX5luVVel0B99pOdCuXVSBFITdsOapxVIadf3Ccqy+DL+0H93ddEnv4q AMjfxljn8JBziMOw8R/lS7hRJwoewEBivYlkMg8OEcLnPVjDHMRunhvu4nWIHluL yjs4F3NOfcu+qyxUCyeIE9g5mzp0WkNGrNUqRR+yase7y9q61vPD9huUCDDM/0No 8GSlD6ciE0pdtC9CbB6yAMFJvE0aNrQKojZ974UHLAdssh7KbwUPN3a0kYayuj94 mv/a2a25vIgA04DQPQlOvK5eq4q1ySvIqlX7uUszKdE9SnCA5Zo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:36 2026 by rpki-client