$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: Mn9Imkol+o04QTu9/aAPDqez783+YTKPXSm56ou0nNw= Subject key identifier: BB:23:C9:77:14:B0:6B:42:0C:CC:CB:A6:80:0D:6C:E7:64:43:77:E7 Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 6FCFBBAC588B9C720FF21C868577079C96175B78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 9B Signing time: Sat 28 Feb 2026 12:11:44 +0000 Manifest this update: Sat 28 Feb 2026 12:06:44 +0000 Manifest next update: Tue 03 Mar 2026 19:20:44 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: 4x9MA/IfB2E65QHfEAxuJXEsmPrZ2grxyaq0nrkg1p4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cf:bb:ac:58:8b:9c:72:0f:f2:1c:86:85:77:07:9c:96:17:5b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Feb 28 12:06:44 2026 GMT Not After : Mar 3 19:20:44 2026 GMT Subject: CN=BB23C97714B06B420CCCCBA6800D6CE7644377E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:57:66:fc:97:8a:b3:da:19:21:9c:db:08: 59:3f:7a:f4:30:b0:24:a6:f0:3d:ae:f5:b8:61:7c: c4:ec:25:3c:a9:fe:0a:98:79:33:d7:ef:b6:70:00: 84:21:59:c1:55:2f:96:54:50:42:35:54:4d:12:88: fa:52:46:c4:23:b1:26:a6:2c:f2:f5:6b:a3:f7:4e: b6:22:32:bf:d6:f7:a9:b1:36:91:a4:43:46:77:48: 31:d3:eb:08:37:fa:10:7d:8e:f3:b4:39:c7:67:9e: 89:8e:76:52:9d:68:f7:ea:ef:dc:6e:e0:6b:03:65: 9c:89:f3:4e:ac:fe:31:94:4d:31:bd:da:bb:4c:de: c4:b9:c4:09:19:6a:fd:c8:e4:4e:a4:be:0b:91:90: 59:2d:5a:ee:d1:2b:a4:a0:6c:73:57:35:e3:9e:00: ad:c7:f5:d1:26:26:7c:53:93:66:66:24:16:07:18: b1:9e:56:d3:ff:53:0a:58:3a:88:2b:53:88:3c:40: 02:fd:03:16:27:26:3f:79:09:c8:e0:bb:f1:3f:79: 33:27:3f:cb:97:b4:48:52:2f:35:7e:a8:c0:ff:03: 71:e0:d1:4b:71:52:20:0e:75:e4:3f:c3:21:f8:c2: 74:5f:c5:fc:56:15:ae:82:9e:c2:e2:51:16:5d:31: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:23:C9:77:14:B0:6B:42:0C:CC:CB:A6:80:0D:6C:E7:64:43:77:E7 X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cc:fc:b1:6e:38:7b:74:ba:59:d3:12:6d:11:76:e7:09:57: 61:c0:24:91:db:ce:bf:d6:20:e4:4f:5b:85:d7:e3:05:d0:81: b7:1b:c7:bc:97:42:1f:cd:be:5f:9e:3f:2e:ae:7e:a6:cb:61: c5:f3:83:22:d6:8c:28:bb:5a:91:82:44:f8:4f:f0:cc:8d:fe: f4:46:df:b1:fd:d6:12:c5:da:7e:fe:63:c6:31:30:0d:0d:71: 7c:2b:00:bd:d2:5a:d0:ca:9f:3e:4e:62:0e:8f:d8:26:8f:87: 8f:24:9d:b4:6a:f4:e9:49:87:cb:25:ac:a6:18:66:7d:0b:75: 06:10:9c:d1:92:4c:08:c0:6a:29:52:86:45:62:55:1f:df:5e: e2:75:68:15:3a:7f:6b:aa:c5:40:2b:83:57:e5:db:cc:e3:7b: 3a:db:80:51:ca:d1:51:89:5b:16:48:ca:ab:75:e6:d5:ba:70: cf:66:6e:e1:8b:79:05:06:46:8d:07:51:69:9b:c6:e3:35:db: eb:c1:e7:c4:35:d0:56:2a:d1:d1:9c:54:aa:10:c2:e1:ce:5c: ed:13:12:6f:f0:62:80:33:4e:2e:da:c2:2b:f4:15:82:86:ed: 55:a2:74:7c:b7:4f:4e:cc:41:1b:46:c1:e9:4c:81:92:6f:2e: b6:b4:d8:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8+7rFiLnHIP8hyGhXcHnJYXW3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNjAyMjgxMjA2NDRaFw0yNjAzMDMxOTIwNDRaMDMxMTAvBgNV BAMTKEJCMjNDOTc3MTRCMDZCNDIwQ0NDQ0JBNjgwMEQ2Q0U3NjQ0Mzc3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDC1dm/JeKs9oZIZzbCFk/evQw sCSm8D2u9bhhfMTsJTyp/gqYeTPX77ZwAIQhWcFVL5ZUUEI1VE0SiPpSRsQjsSam LPL1a6P3TrYiMr/W96mxNpGkQ0Z3SDHT6wg3+hB9jvO0OcdnnomOdlKdaPfq79xu 4GsDZZyJ806s/jGUTTG92rtM3sS5xAkZav3I5E6kvguRkFktWu7RK6SgbHNXNeOe AK3H9dEmJnxTk2ZmJBYHGLGeVtP/UwpYOogrU4g8QAL9AxYnJj95Ccjgu/E/eTMn P8uXtEhSLzV+qMD/A3Hg0UtxUiAOdeQ/wyH4wnRfxfxWFa6CnsLiURZdMaLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyPJdxSwa0IMzMumgA1s52RDd+cwHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvM/LFuOHt0ulnTEm0RducJV2HAJJHbzr/W IORPW4XX4wXQgbcbx7yXQh/Nvl+ePy6ufqbLYcXzgyLWjCi7WpGCRPhP8MyN/vRG 37H91hLF2n7+Y8YxMA0NcXwrAL3SWtDKnz5OYg6P2CaPh48knbRq9OlJh8slrKYY Zn0LdQYQnNGSTAjAailShkViVR/fXuJ1aBU6f2uqxUArg1fl28zjezrbgFHK0VGJ WxZIyqt15tW6cM9mbuGLeQUGRo0HUWmbxuM12+vB58Q10FYq0dGcVKoQwuHOXO0T Em/wYoAzTi7awiv0FYKG7VWidHy3T07MQRtGwelMgZJvLra02K4= -----END CERTIFICATE-----Generated at Mon Mar 2 19:29:47 2026 by rpki-client