$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: C3mLAc3we136DPNeH+/SJCDW2fMmDVDegXYSpfHwsyI= Subject key identifier: 40:AA:4A:43:37:7E:79:EE:90:55:7C:28:62:34:3E:B8:44:2C:F9:32 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 62DD669FB3B2CBE51253833E58B73933A57AC41F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 0177 Signing time: Sat 28 Feb 2026 09:21:02 +0000 Manifest this update: Sat 28 Feb 2026 09:16:02 +0000 Manifest next update: Tue 03 Mar 2026 11:39:02 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: 8uOsOpGqhkceO8OhozP2ljuTAYNfkxW0rX+GIbsUBPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:dd:66:9f:b3:b2:cb:e5:12:53:83:3e:58:b7:39:33:a5:7a:c4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Feb 28 09:16:02 2026 GMT Not After : Mar 3 11:39:02 2026 GMT Subject: CN=40AA4A43377E79EE90557C2862343EB8442CF932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:e6:33:bc:77:2b:8a:f9:fe:c8:f3:28:73: e6:75:18:e2:9f:dd:97:4f:3d:bc:54:ad:6f:88:5e: cc:32:17:69:b5:8f:e9:ab:15:c8:61:c7:75:c6:aa: 14:0e:c9:89:34:d4:33:dc:41:fe:db:2d:6a:23:f3: 95:e1:da:4f:26:79:bc:7b:70:6c:45:76:c8:7a:44: b7:da:12:7a:ae:ae:98:a7:09:f4:04:b6:2d:5f:a0: 77:0b:41:cf:b3:76:34:f3:05:4d:ec:d2:60:bf:cd: 0e:dd:20:42:a8:45:2f:8a:6d:3b:b8:2b:1b:57:62: fb:78:5f:be:fd:91:73:1a:fd:18:d6:0e:92:10:49: 79:e2:b6:cd:29:1c:53:d8:2a:54:5f:71:e4:33:91: 29:17:d5:d3:0f:09:0b:52:bc:f6:a0:93:dd:2a:c5: b8:4a:bf:e3:d8:8a:10:3c:c3:71:22:7d:57:eb:57: 07:f8:3c:22:6d:bb:01:21:af:c7:96:59:50:8a:3e: ee:1b:5e:b4:48:72:45:66:26:78:f0:4c:79:86:3c: 14:4b:45:a1:c6:3b:e6:32:20:50:62:9c:33:8b:46: 3c:dd:0d:5a:8e:6a:4b:29:34:cf:8e:1b:50:56:66: c9:1c:3a:9c:d9:58:67:ec:3c:63:15:88:b8:67:9d: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:4A:43:37:7E:79:EE:90:55:7C:28:62:34:3E:B8:44:2C:F9:32 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d4:74:d5:cb:4d:b1:e6:8e:45:88:d7:78:59:63:2a:a4:78: 41:b7:3f:e7:7d:61:2b:de:06:e5:b5:72:c0:f9:2a:89:ab:ab: a1:ae:0e:d9:19:65:b0:50:03:a5:b3:5d:89:f3:69:01:f9:33: 0e:a7:83:90:a3:e9:24:b6:8b:aa:fd:77:2e:25:28:31:36:fa: 8b:70:15:74:06:5e:a0:6b:cd:f9:9e:83:7d:90:33:9d:cf:c4: 53:42:af:a3:32:a1:a5:8d:aa:4f:60:00:ff:2d:d7:c9:c4:38: cc:7d:bd:ce:e6:ef:71:1d:21:03:97:12:63:87:8b:03:f3:36: 0f:59:3e:f5:6d:a6:c2:46:f6:69:db:21:48:b8:10:fb:ca:39: 8c:db:26:f5:eb:d8:8e:15:4d:c5:92:9f:f1:16:2f:7e:87:9a: 2a:21:cc:44:9d:cc:72:02:75:a8:dd:2c:c9:f1:b4:85:fb:6a: 6b:b4:6c:8b:d2:24:c0:30:e2:76:e3:0a:f5:a7:94:a8:11:dd: 5b:c9:55:c0:98:ec:d7:91:50:9a:3b:47:53:7e:c6:e6:5b:a9: 7f:af:b7:9c:af:a9:93:3f:11:90:18:77:5a:bc:6e:c0:7f:04: 08:a6:74:c7:f5:14:45:2e:b9:03:78:71:5f:6c:0b:d3:d3:9e: 88:58:41:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYt1mn7Oyy+USU4M+WLc5M6V6xB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNjAyMjgwOTE2MDJaFw0yNjAzMDMxMTM5MDJaMDMxMTAvBgNV BAMTKDQwQUE0QTQzMzc3RTc5RUU5MDU1N0MyODYyMzQzRUI4NDQyQ0Y5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7v+YzvHcrivn+yPMoc+Z1GOKf 3ZdPPbxUrW+IXswyF2m1j+mrFchhx3XGqhQOyYk01DPcQf7bLWoj85Xh2k8mebx7 cGxFdsh6RLfaEnqurpinCfQEti1foHcLQc+zdjTzBU3s0mC/zQ7dIEKoRS+KbTu4 KxtXYvt4X779kXMa/RjWDpIQSXnits0pHFPYKlRfceQzkSkX1dMPCQtSvPagk90q xbhKv+PYihA8w3EifVfrVwf4PCJtuwEhr8eWWVCKPu4bXrRIckVmJnjwTHmGPBRL RaHGO+YyIFBinDOLRjzdDVqOakspNM+OG1BWZskcOpzZWGfsPGMViLhnnUErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKpKQzd+ee6QVXwoYjQ+uEQs+TIwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTUdNXLTbHmjkWI13hZYyqkeEG3P+d9YSve BuW1csD5Komrq6GuDtkZZbBQA6WzXYnzaQH5Mw6ng5Cj6SS2i6r9dy4lKDE2+otw FXQGXqBrzfmeg32QM53PxFNCr6MyoaWNqk9gAP8t18nEOMx9vc7m73EdIQOXEmOH iwPzNg9ZPvVtpsJG9mnbIUi4EPvKOYzbJvXr2I4VTcWSn/EWL36HmiohzESdzHIC dajdLMnxtIX7amu0bIvSJMAw4nbjCvWnlKgR3VvJVcCY7NeRUJo7R1N+xuZbqX+v t5yvqZM/EZAYd1q8bsB/BAimdMf1FEUuuQN4cV9sC9PTnohYQRI= -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:14 2026 by rpki-client