$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: t80n/a7Kphvl3ERSUGv1CESaIKT672Mu4NdRMb9P1FY= Subject key identifier: 43:F5:41:F2:B0:9A:EE:78:E0:88:C4:9D:13:20:8E:A0:EB:C8:EB:34 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 56DB14F5C3F946F18C659F35684D2FF77AF4F106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0272 Signing time: Sat 28 Feb 2026 00:20:57 +0000 Manifest this update: Sat 28 Feb 2026 00:15:57 +0000 Manifest next update: Tue 03 Mar 2026 04:04:57 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: kx7Payt87ETvlV7waT2L7/mGRntp5SD2FzanqC1DXlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:db:14:f5:c3:f9:46:f1:8c:65:9f:35:68:4d:2f:f7:7a:f4:f1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Feb 28 00:15:57 2026 GMT Not After : Mar 3 04:04:57 2026 GMT Subject: CN=43F541F2B09AEE78E088C49D13208EA0EBC8EB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:d2:c0:40:6d:48:32:09:74:97:bc:ee:bf: a7:3f:de:c9:3c:00:70:91:97:18:8d:62:ea:f5:63: 65:36:07:63:2c:ea:79:d8:c8:2d:af:4a:94:1f:04: 30:39:15:12:50:51:a7:82:ac:04:c5:47:3a:34:74: 7c:44:20:b1:42:63:9b:ef:67:7b:1a:9e:9b:cb:17: 18:23:74:92:5c:c4:3e:bb:08:fb:fc:07:ce:ff:5d: 1e:d0:3e:40:77:b7:b0:01:90:cd:1e:cb:08:12:bb: 3e:0c:4e:e3:e6:ac:3d:2c:3b:bf:8e:e3:6d:84:58: 31:9d:ab:37:36:0d:42:f1:71:c9:d1:ee:bc:c7:d3: 48:0c:67:9c:78:76:27:b4:d6:12:bb:0b:42:73:46: 69:90:74:f6:f8:bd:c1:2d:35:13:9f:fd:1c:f9:f5: 70:ab:64:80:95:a8:c8:4e:47:45:d8:49:45:85:3d: a9:fe:74:49:bd:64:50:8c:89:1f:3c:62:d8:bc:3d: 85:fc:de:1e:a6:0c:41:88:c5:c7:19:b4:fb:07:56: 9b:3b:5b:b9:f0:d3:fe:3c:74:8a:df:12:ac:4f:f0: 13:0b:71:b4:31:74:41:c4:ca:e6:17:1b:2f:38:88: e7:2e:da:2e:8b:99:e4:09:25:a8:a7:cb:c6:2b:0b: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F5:41:F2:B0:9A:EE:78:E0:88:C4:9D:13:20:8E:A0:EB:C8:EB:34 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:21:9e:e5:05:d9:7e:8a:cb:1b:38:e5:ac:67:85:38:b1:bc: 6c:b9:8e:21:b1:5e:ca:da:51:b2:ce:0e:2d:49:08:dd:65:50: 58:08:b5:3c:a6:78:82:6b:5e:79:e1:8e:f1:2f:d1:5f:2d:b0: 06:d9:4a:4e:94:ca:9c:8b:76:88:8a:68:97:cb:14:d6:73:da: 49:58:3c:3c:f3:ad:d7:28:a7:c5:b7:ce:12:af:f3:c0:f6:4f: 24:70:67:83:65:07:fa:e7:b7:eb:1a:b2:1d:6e:69:72:72:57: 22:65:6b:80:e3:34:28:49:53:aa:71:d3:8a:50:bf:2c:7c:df: 1e:b6:4e:f5:24:37:89:7f:95:44:d0:df:bb:43:45:a9:a1:b8: 89:0a:42:c3:a6:0f:54:70:f3:30:5d:81:6f:45:49:08:15:b2: b2:14:a2:38:fe:74:93:53:b6:a2:67:40:2e:69:bf:a9:0a:e4: ef:43:03:f7:63:26:1c:1e:cf:f9:7b:38:73:6c:68:a2:00:64: 70:2d:b8:6d:6e:87:09:2e:aa:0b:a5:32:53:e3:f7:86:b2:24: da:19:b8:27:b0:20:cd:26:0a:f7:68:1c:37:93:8d:2f:20:b2: 42:f4:5b:ce:5f:b2:90:99:2b:f7:a7:d3:9a:0b:c6:7a:86:46: 11:98:d0:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtsU9cP5RvGMZZ81aE0v93r08QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNjAyMjgwMDE1NTdaFw0yNjAzMDMwNDA0NTdaMDMxMTAvBgNV BAMTKDQzRjU0MUYyQjA5QUVFNzhFMDg4QzQ5RDEzMjA4RUEwRUJDOEVCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGdLAQG1IMgl0l7zuv6c/3sk8 AHCRlxiNYur1Y2U2B2Ms6nnYyC2vSpQfBDA5FRJQUaeCrATFRzo0dHxEILFCY5vv Z3sanpvLFxgjdJJcxD67CPv8B87/XR7QPkB3t7ABkM0eywgSuz4MTuPmrD0sO7+O 422EWDGdqzc2DULxccnR7rzH00gMZ5x4die01hK7C0JzRmmQdPb4vcEtNROf/Rz5 9XCrZICVqMhOR0XYSUWFPan+dEm9ZFCMiR88Yti8PYX83h6mDEGIxccZtPsHVps7 W7nw0/48dIrfEqxP8BMLcbQxdEHEyuYXGy84iOcu2i6LmeQJJainy8YrC2ihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/VB8rCa7njgiMSdEyCOoOvI6zQwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUhnuUF2X6Kyxs45axnhTixvGy5jiGxXsra UbLODi1JCN1lUFgItTymeIJrXnnhjvEv0V8tsAbZSk6UypyLdoiKaJfLFNZz2klY PDzzrdcop8W3zhKv88D2TyRwZ4NlB/rnt+sash1uaXJyVyJla4DjNChJU6px04pQ vyx83x62TvUkN4l/lUTQ37tDRamhuIkKQsOmD1Rw8zBdgW9FSQgVsrIUojj+dJNT tqJnQC5pv6kK5O9DA/djJhwez/l7OHNsaKIAZHAtuG1uhwkuqgulMlPj94ayJNoZ uCewIM0mCvdoHDeTjS8gskL0W85fspCZK/en05oLxnqGRhGY0JE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:10 2026 by rpki-client