$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: uCmxFtKKnZrs3Ga1NpreBsVY8XcJqmDMS4BYCh9r2tA= Subject key identifier: DB:B0:00:82:85:2F:E7:4E:98:0A:DC:75:53:08:C0:35:3D:3E:0A:91 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 22E01DD2C473BEAAC84EB17BAFC58B11E3419380 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 040B Signing time: Mon 02 Mar 2026 00:21:15 +0000 Manifest this update: Mon 02 Mar 2026 00:16:15 +0000 Manifest next update: Thu 05 Mar 2026 03:56:15 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: 0M4j13Esk3ryrZP0vCh7XAXFiCKVLONBF62M0BUXsvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e0:1d:d2:c4:73:be:aa:c8:4e:b1:7b:af:c5:8b:11:e3:41:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Mar 2 00:16:15 2026 GMT Not After : Mar 5 03:56:15 2026 GMT Subject: CN=DBB00082852FE74E980ADC755308C0353D3E0A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:05:1b:c1:1f:8c:64:f6:81:a4:71:5c:5a: e2:e8:b7:a0:86:55:9c:0a:14:85:31:91:01:b5:ff: 9c:9d:ff:c6:7f:e3:96:02:3c:e8:1a:f6:c1:55:e6: 11:68:02:ae:be:39:e9:9c:e2:85:60:cb:07:30:4c: 6f:32:eb:ad:c1:90:53:a1:40:7c:da:b0:87:9b:a2: 10:10:d9:ea:20:8d:25:12:9c:1d:0a:ad:1b:20:62: 7e:ab:25:56:41:e8:3b:34:71:87:0a:92:db:f9:3c: eb:6a:ca:46:9d:f7:05:8b:29:6f:94:ab:af:e2:88: de:34:ba:d5:c5:5b:fc:df:2c:a7:86:f9:76:23:0d: 5e:41:d1:ad:61:58:32:4a:78:88:0f:ca:7f:e0:d6: 9c:85:dc:e6:9f:55:7f:50:65:7d:73:ce:46:3e:95: ca:b4:7a:8c:05:b8:0f:62:a7:57:8c:f9:32:9a:19: 81:8a:8b:9a:ec:32:94:0d:40:e6:e0:1a:2a:12:23: 39:f4:a3:99:0e:1f:10:56:a3:ae:10:c1:36:1d:94: 43:78:25:bd:2d:c4:b4:4f:60:84:5a:a6:c9:17:96: 55:a3:f4:26:69:d4:75:70:06:4c:e6:68:3c:41:70: 41:3f:ce:97:4c:7d:c6:bd:d9:7a:09:7c:6f:bc:f1: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:00:82:85:2F:E7:4E:98:0A:DC:75:53:08:C0:35:3D:3E:0A:91 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3d:6b:61:8b:c2:3b:55:aa:33:7c:a4:04:64:b3:69:96:10: 14:54:89:45:c0:20:e7:ca:04:26:c0:ac:23:e7:fc:8f:0c:8f: a8:f8:84:2b:77:a2:4f:7f:39:d7:9a:9a:68:bf:82:84:62:ff: 37:bf:63:1d:9b:44:3a:34:3a:00:27:f3:79:ec:7f:5a:27:b7: 8c:b7:de:24:53:e3:6c:2f:95:ac:ad:e8:0a:43:b8:76:13:4a: 39:33:28:bd:95:dc:9c:7e:6e:62:eb:a4:e6:b0:c8:20:a6:ec: 26:a8:48:cd:4f:26:b9:52:31:bc:24:9c:05:d6:5e:0d:2e:40: 1f:d6:68:23:3a:13:4d:c4:3c:de:be:2f:37:5e:bf:15:e2:57: ad:ec:02:45:7e:e8:ac:15:29:37:76:39:ca:ae:33:1c:c8:c9: 7b:55:73:45:b6:1e:a3:0d:85:da:bd:74:a1:e0:60:9e:dc:3b: 1d:7a:60:21:a3:40:57:e2:96:00:1d:7b:9e:ce:61:82:a0:64: 18:40:7a:ab:3b:d4:af:ec:f7:4f:df:93:e9:1e:89:f2:e1:49: cd:c5:35:20:c6:94:e6:d0:33:f0:fd:fc:e9:6a:dd:87:2b:8d: 34:22:95:7c:69:d5:b0:dd:91:13:93:14:71:c3:78:e0:eb:a7: 3b:b1:d7:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuAd0sRzvqrITrF7r8WLEeNBk4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNjAzMDIwMDE2MTVaFw0yNjAzMDUwMzU2MTVaMDMxMTAvBgNV BAMTKERCQjAwMDgyODUyRkU3NEU5ODBBREM3NTUzMDhDMDM1M0QzRTBBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvQUbwR+MZPaBpHFcWuLot6CG VZwKFIUxkQG1/5yd/8Z/45YCPOga9sFV5hFoAq6+Oemc4oVgywcwTG8y663BkFOh QHzasIebohAQ2eogjSUSnB0KrRsgYn6rJVZB6Ds0cYcKktv5POtqykad9wWLKW+U q6/iiN40utXFW/zfLKeG+XYjDV5B0a1hWDJKeIgPyn/g1pyF3OafVX9QZX1zzkY+ lcq0eowFuA9ip1eM+TKaGYGKi5rsMpQNQObgGioSIzn0o5kOHxBWo64QwTYdlEN4 Jb0txLRPYIRapskXllWj9CZp1HVwBkzmaDxBcEE/zpdMfca92XoJfG+88cwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27AAgoUv506YCtx1UwjANT0+CpEwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw9a2GLwjtVqjN8pARks2mWEBRUiUXAIOfK BCbArCPn/I8Mj6j4hCt3ok9/Odeammi/goRi/ze/Yx2bRDo0OgAn83nsf1ont4y3 3iRT42wvlayt6ApDuHYTSjkzKL2V3Jx+bmLrpOawyCCm7CaoSM1PJrlSMbwknAXW Xg0uQB/WaCM6E03EPN6+LzdevxXiV63sAkV+6KwVKTd2OcquMxzIyXtVc0W2HqMN hdq9dKHgYJ7cOx16YCGjQFfilgAde57OYYKgZBhAeqs71K/s90/fk+keifLhSc3F NSDGlObQM/D9/Olq3YcrjTQilXxp1bDdkROTFHHDeODrpzux17w= -----END CERTIFICATE-----Generated at Mon Mar 2 17:54:27 2026 by rpki-client