$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: hQ5tXJ1PGM+mDRtBH8W51aJjQgvvwoj1IRiPzc3YRbI= Subject key identifier: C9:00:BC:92:6A:FC:63:5D:F5:E2:C3:E3:4C:DF:34:22:59:2B:CA:A5 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 121D82E58E8783E6C54F6E497BFA5D734C64614F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: BA Signing time: Sun 01 Mar 2026 06:33:20 +0000 Manifest this update: Sun 01 Mar 2026 06:28:20 +0000 Manifest next update: Wed 04 Mar 2026 10:55:20 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: sWYa2TquVh32mT8H7RF8U64JDev8euchXApgFC++Lco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1d:82:e5:8e:87:83:e6:c5:4f:6e:49:7b:fa:5d:73:4c:64:61:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Mar 1 06:28:20 2026 GMT Not After : Mar 4 10:55:20 2026 GMT Subject: CN=C900BC926AFC635DF5E2C3E34CDF3422592BCAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:2c:01:a6:b2:20:f9:ce:4e:79:5a:f4:8f: c0:07:d3:7d:c4:be:a8:00:c1:c7:6a:75:6d:d9:57: 60:da:6c:8e:d9:9a:b3:ba:cc:13:ae:68:5c:80:3e: c2:3e:cc:14:56:75:72:00:79:35:9b:4d:ab:b0:67: d9:09:64:ed:11:c2:f0:38:3f:78:2a:db:41:52:47: 42:dd:f6:9f:97:f5:98:a9:37:11:f1:62:ca:e3:55: 7f:67:9b:6d:85:e3:70:84:ca:bf:d1:d3:98:ce:28: ec:d3:68:a1:88:e8:5d:53:9a:bf:1d:7b:36:5a:70: 47:05:98:fc:f8:7b:52:44:2e:5b:03:37:85:87:4d: e7:08:ca:e2:52:47:e7:00:00:60:8e:e5:5d:40:85: 5d:50:98:a2:7d:6a:ed:83:50:da:15:e1:16:85:9b: 77:b0:5a:19:9a:8b:e2:6c:9d:0d:f9:9e:85:5b:19: c4:7f:53:34:cc:03:ab:d6:65:6e:c8:a3:ba:fb:3f: 54:32:60:48:9b:ad:50:95:34:17:f6:21:aa:df:52: ba:7c:95:c6:96:24:fa:a3:f0:bb:e8:3d:67:63:eb: b0:54:d7:d6:f0:f2:47:10:bc:4c:a4:bf:07:e9:01: e7:ab:e9:ff:af:75:7e:71:b5:ba:01:03:06:de:82: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:BC:92:6A:FC:63:5D:F5:E2:C3:E3:4C:DF:34:22:59:2B:CA:A5 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c6:09:94:c5:51:b9:75:84:e3:cd:1e:3f:bc:9e:16:97:c2: 60:25:48:4d:e6:2e:e1:49:b1:8b:79:13:20:f7:b2:01:ab:eb: 43:a3:60:d1:ba:5f:8d:35:62:d6:f4:3b:96:7e:85:e9:71:7d: 43:cf:e7:38:99:66:c4:62:67:24:cc:62:64:10:b4:11:e3:09: fc:be:c6:fa:bf:fa:cc:9f:a2:bb:1a:4b:84:0c:38:3e:4e:8d: c6:e1:ed:01:58:59:e1:ad:1d:b4:20:43:78:02:cd:36:14:42: b1:7e:97:7e:fb:c9:1a:4b:f9:6c:2b:27:71:ec:b8:3a:bf:31: 16:be:fb:58:bd:ed:11:4f:04:19:f1:9b:c3:70:77:d8:57:68: 87:b4:e6:36:db:0b:1e:12:c3:b3:3d:13:ca:02:af:1f:a1:71: 3a:03:39:8a:03:f8:f2:d3:e5:b8:98:7d:81:cc:20:d5:3b:90: 59:32:a3:45:3d:5e:fc:0b:8a:61:27:f1:15:54:9c:e7:8e:47: 85:11:04:92:bb:b4:27:30:0b:6b:0c:a6:bd:59:f7:7f:f9:b8: 5f:f8:bf:c9:5c:ce:2c:da:09:b7:5b:67:72:68:03:91:15:4b: b3:59:cc:1d:b5:e0:b2:bc:92:66:13:82:3c:f4:33:0f:61:be: 31:09:04:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEh2C5Y6Hg+bFT25Je/pdc0xkYU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNjAzMDEwNjI4MjBaFw0yNjAzMDQxMDU1MjBaMDMxMTAvBgNV BAMTKEM5MDBCQzkyNkFGQzYzNURGNUUyQzNFMzRDREYzNDIyNTkyQkNBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ICwBprIg+c5OeVr0j8AH033E vqgAwcdqdW3ZV2DabI7ZmrO6zBOuaFyAPsI+zBRWdXIAeTWbTauwZ9kJZO0RwvA4 P3gq20FSR0Ld9p+X9ZipNxHxYsrjVX9nm22F43CEyr/R05jOKOzTaKGI6F1Tmr8d ezZacEcFmPz4e1JELlsDN4WHTecIyuJSR+cAAGCO5V1AhV1QmKJ9au2DUNoV4RaF m3ewWhmai+JsnQ35noVbGcR/UzTMA6vWZW7Io7r7P1QyYEibrVCVNBf2IarfUrp8 lcaWJPqj8LvoPWdj67BU19bw8kcQvEykvwfpAeer6f+vdX5xtboBAwbegtT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQC8kmr8Y1314sPjTN80IlkryqUwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATGCZTFUbl1hOPNHj+8nhaXwmAlSE3mLuFJ sYt5EyD3sgGr60OjYNG6X401Ytb0O5Z+helxfUPP5ziZZsRiZyTMYmQQtBHjCfy+ xvq/+syforsaS4QMOD5Ojcbh7QFYWeGtHbQgQ3gCzTYUQrF+l377yRpL+WwrJ3Hs uDq/MRa++1i97RFPBBnxm8Nwd9hXaIe05jbbCx4Sw7M9E8oCrx+hcToDOYoD+PLT 5biYfYHMINU7kFkyo0U9XvwLimEn8RVUnOeOR4URBJK7tCcwC2sMpr1Z93/5uF/4 v8lczizaCbdbZ3JoA5EVS7NZzB214LK8kmYTgjz0Mw9hvjEJBFo= -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:58 2026 by rpki-client