$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: tTz1gEZfPoLZp0fsPI8H9CqwJhrmjluJTq/YLFv5fuM= Subject key identifier: 1B:0C:4F:F0:2E:F4:3D:E5:7E:27:7B:2E:65:91:93:34:60:CA:D2:84 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 53243958F90520E593815C9554847FC61A365752 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 0540 Signing time: Sat 28 Feb 2026 22:22:22 +0000 Manifest this update: Sat 28 Feb 2026 22:17:22 +0000 Manifest next update: Wed 04 Mar 2026 09:59:22 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: MfuOeUD2xV9kt/gHGpaSTMkF8B3pW1Gkyy62MEB5nos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:24:39:58:f9:05:20:e5:93:81:5c:95:54:84:7f:c6:1a:36:57:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Feb 28 22:17:22 2026 GMT Not After : Mar 4 09:59:22 2026 GMT Subject: CN=1B0C4FF02EF43DE57E277B2E6591933460CAD284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:aa:73:c5:17:51:fa:39:d4:10:dc:d2:9d: 73:3e:5f:fc:80:13:1f:4c:fe:89:ed:bb:c9:e2:f7: df:b3:1d:0e:4f:9c:0a:7d:5c:cd:80:38:7a:34:40: 69:5b:e4:46:d3:35:ff:b7:82:d2:b8:59:5c:b6:dd: f5:b7:c1:3a:61:fe:26:5b:ce:38:4c:92:b4:c1:e6: df:d1:23:7a:ed:cf:86:08:96:98:46:8b:3b:3f:bb: 1a:b9:5c:ce:fe:7f:04:a9:f5:08:bb:73:03:10:2d: d2:a8:05:f5:97:02:03:16:9d:1d:70:99:f2:8f:5e: c6:01:5f:89:ef:b4:b4:9b:e9:34:43:96:28:29:0a: 03:7a:fa:03:fb:61:82:25:16:3b:6e:52:b2:6a:82: de:b6:dd:2c:40:55:9d:8b:81:02:2b:55:c7:43:03: 79:f9:f2:bc:dc:72:7b:22:8f:c8:3a:81:9f:37:38: df:f8:5b:76:3f:e9:2c:d0:73:0f:d1:3c:5a:d2:ed: b8:dd:04:2a:22:08:1d:78:89:b9:32:7a:81:8c:54: ee:b8:9e:6c:e4:13:33:f5:64:a4:3f:2b:a0:89:e4: a1:36:db:b9:d3:68:e0:9b:de:a6:74:b1:c5:1b:21: 75:4b:76:e9:d1:c6:24:d1:e8:af:a0:08:17:5d:fb: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0C:4F:F0:2E:F4:3D:E5:7E:27:7B:2E:65:91:93:34:60:CA:D2:84 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:11:94:86:3f:dc:46:3c:af:0d:34:1b:fa:15:18:ec:74:ba: 1f:f4:c5:17:4b:8d:67:85:9e:a3:c4:12:b4:22:83:2a:12:14: e4:59:02:fa:68:c2:63:76:cb:f6:56:e4:42:f9:39:48:43:8c: b9:8d:89:dd:6d:1a:29:45:35:d8:99:40:b6:6a:ef:fd:2f:af: 1c:b1:78:fd:51:7b:ee:6b:64:4a:d8:90:a0:fc:7b:c3:cc:bb: 9b:1c:f3:3b:2f:62:8a:02:0d:d5:e3:52:92:e3:2d:4d:aa:48: fd:46:62:89:fa:9c:0c:d2:d4:9f:6c:d8:37:aa:b4:73:d8:7b: f3:bf:42:5f:41:4a:64:17:35:05:77:c0:33:03:b3:1a:4f:d5: 7c:03:46:7d:18:f1:8c:0c:0d:7c:dd:cd:89:d8:b2:5a:4d:5f: 02:4a:b9:c2:31:3f:71:31:0d:08:25:cf:c2:74:64:fb:b9:0e: 53:24:c1:ef:db:de:5b:c8:84:f6:33:67:9f:5e:79:06:36:29: 1b:02:00:bd:3b:15:7a:51:95:bf:2e:1c:74:66:67:72:3b:c6: 81:b0:68:cf:e0:12:b0:e9:8b:63:7e:2a:ef:ed:29:f5:3e:e7: f5:fa:06:16:c8:8e:ec:39:d4:50:c2:ea:26:91:63:95:e2:d8: 08:62:47:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyQ5WPkFIOWTgVyVVIR/xho2V1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNjAyMjgyMjE3MjJaFw0yNjAzMDQwOTU5MjJaMDMxMTAvBgNV BAMTKDFCMEM0RkYwMkVGNDNERTU3RTI3N0IyRTY1OTE5MzM0NjBDQUQyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK6pzxRdR+jnUENzSnXM+X/yA Ex9M/ontu8ni99+zHQ5PnAp9XM2AOHo0QGlb5EbTNf+3gtK4WVy23fW3wTph/iZb zjhMkrTB5t/RI3rtz4YIlphGizs/uxq5XM7+fwSp9Qi7cwMQLdKoBfWXAgMWnR1w mfKPXsYBX4nvtLSb6TRDligpCgN6+gP7YYIlFjtuUrJqgt623SxAVZ2LgQIrVcdD A3n58rzccnsij8g6gZ83ON/4W3Y/6SzQcw/RPFrS7bjdBCoiCB14ibkyeoGMVO64 nmzkEzP1ZKQ/K6CJ5KE227nTaOCb3qZ0scUbIXVLdunRxiTR6K+gCBdd+33DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGwxP8C70PeV+J3suZZGTNGDK0oQwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsRlIY/3EY8rw00G/oVGOx0uh/0xRdLjWeF nqPEErQigyoSFORZAvpowmN2y/ZW5EL5OUhDjLmNid1tGilFNdiZQLZq7/0vrxyx eP1Re+5rZErYkKD8e8PMu5sc8zsvYooCDdXjUpLjLU2qSP1GYon6nAzS1J9s2Deq tHPYe/O/Ql9BSmQXNQV3wDMDsxpP1XwDRn0Y8YwMDXzdzYnYslpNXwJKucIxP3Ex DQglz8J0ZPu5DlMkwe/b3lvIhPYzZ59eeQY2KRsCAL07FXpRlb8uHHRmZ3I7xoGw aM/gErDpi2N+Ku/tKfU+5/X6BhbIjuw51FDC6iaRY5Xi2AhiRwg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:55 2026 by rpki-client