$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: gi8VCGeBYTCJtd82D8GnRFbIjZUx/knYxIw9ARrukqU= Subject key identifier: 14:9C:B7:5D:38:D2:E2:63:C9:E9:C9:9F:3A:03:6D:30:58:C7:FB:03 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 313152E69F16C089EEA2CB24AD8600457422EB88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 01F8 Signing time: Sat 28 Feb 2026 05:10:49 +0000 Manifest this update: Sat 28 Feb 2026 05:05:49 +0000 Manifest next update: Tue 03 Mar 2026 11:46:49 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: lo/94lXn9AaGyUrskSDEcCtsvvQC7vgiNAivXaQWfzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:31:52:e6:9f:16:c0:89:ee:a2:cb:24:ad:86:00:45:74:22:eb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Feb 28 05:05:49 2026 GMT Not After : Mar 3 11:46:49 2026 GMT Subject: CN=149CB75D38D2E263C9E9C99F3A036D3058C7FB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1e:f5:b7:f3:59:0c:1a:ee:a2:96:58:48:23: d9:30:ae:97:eb:fd:6b:33:35:cc:35:dd:4e:b8:8e: 6e:e6:3d:df:22:e5:c8:b6:47:de:9d:26:1b:02:ee: 8a:bb:c1:bf:c9:fe:16:41:61:03:6c:cb:72:d1:f9: 15:a0:0c:2f:40:ac:2b:40:a0:0d:5a:2d:ad:f0:00: 93:a0:5b:db:60:32:54:ef:a3:50:5c:fd:49:74:ad: 1e:43:e0:56:2a:e0:30:ed:9d:9d:59:96:f0:24:e3: 17:da:81:a1:33:7b:27:80:91:91:72:d2:60:d7:8f: 4e:23:90:1c:7f:36:9c:5e:6e:40:4c:98:6d:97:cc: bc:9e:1a:4b:cf:f1:4e:cb:50:2d:02:61:62:76:32: 33:4d:b3:0a:54:36:a5:53:07:5d:2d:04:60:47:b0: 19:e4:b6:92:3d:dd:29:5a:5f:63:df:bf:db:5f:44: 0e:63:d4:62:8f:db:06:13:4e:d2:43:c9:f6:dc:f4: 41:22:71:21:b4:20:74:57:3f:f6:42:35:88:e4:7e: a2:82:7f:c6:e0:ce:09:7b:09:8c:52:09:f4:dc:3d: 51:35:6a:33:a2:e8:7f:2e:92:53:be:c2:7a:ae:fd: 31:07:bd:f4:bc:c1:7b:3c:f8:fb:83:5e:33:93:d3: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9C:B7:5D:38:D2:E2:63:C9:E9:C9:9F:3A:03:6D:30:58:C7:FB:03 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:2b:d5:21:91:7f:b3:22:7a:68:34:44:23:cd:eb:29:f1: 5f:66:32:50:22:64:e4:af:d8:fd:77:fd:c8:74:28:31:c3:c1: 1f:bf:fc:65:28:d4:a7:c1:e9:56:de:46:29:4b:d3:2a:52:fc: 4a:1d:bb:b5:08:60:aa:6b:a2:99:db:8a:47:11:fd:39:b5:bd: 8f:f5:65:52:f8:8e:00:bf:56:96:b3:2d:8d:bc:12:6d:a2:29: 2d:ee:c4:c8:e1:05:f1:43:9c:a4:38:f9:b3:92:57:d6:ca:2d: 6d:e6:cb:bd:e4:f2:04:f3:40:ac:e9:c7:1f:ba:1e:9e:21:9b: 43:9c:a1:18:ef:88:92:b4:75:bf:79:85:2c:72:29:e1:47:7b: 0b:92:0a:21:e6:86:60:0b:10:6d:e8:6f:64:1e:5e:51:72:95: a8:f0:57:6b:c3:1a:4c:93:81:dc:e4:b5:77:b4:17:f6:47:59: 54:ba:10:c1:9a:01:a7:6b:4e:6c:54:b2:9f:4c:59:4a:d8:ed: 35:b5:41:55:f8:37:cd:8a:19:76:a3:98:b9:6d:ef:5e:59:c1: 93:3f:cf:f6:de:6e:0f:0b:e7:a4:87:b3:cf:9e:97:76:cf:8d: 95:c1:40:f9:47:2f:8e:1e:1d:9f:8f:33:d3:f5:b5:b8:e5:d0: c0:bf:8f:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTFS5p8WwInuosskrYYARXQi64gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNjAyMjgwNTA1NDlaFw0yNjAzMDMxMTQ2NDlaMDMxMTAvBgNV BAMTKDE0OUNCNzVEMzhEMkUyNjNDOUU5Qzk5RjNBMDM2RDMwNThDN0ZCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHvW381kMGu6illhII9kwrpfr /WszNcw13U64jm7mPd8i5ci2R96dJhsC7oq7wb/J/hZBYQNsy3LR+RWgDC9ArCtA oA1aLa3wAJOgW9tgMlTvo1Bc/Ul0rR5D4FYq4DDtnZ1ZlvAk4xfagaEzeyeAkZFy 0mDXj04jkBx/NpxebkBMmG2XzLyeGkvP8U7LUC0CYWJ2MjNNswpUNqVTB10tBGBH sBnktpI93SlaX2Pfv9tfRA5j1GKP2wYTTtJDyfbc9EEicSG0IHRXP/ZCNYjkfqKC f8bgzgl7CYxSCfTcPVE1ajOi6H8uklO+wnqu/TEHvfS8wXs8+PuDXjOT04njAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFJy3XTjS4mPJ6cmfOgNtMFjH+wMwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNOK9UhkX+zInpoNEQjzesp8V9mMlAiZOSv 2P13/ch0KDHDwR+//GUo1KfB6VbeRilL0ypS/Eodu7UIYKpropnbikcR/Tm1vY/1 ZVL4jgC/VpazLY28Em2iKS3uxMjhBfFDnKQ4+bOSV9bKLW3my73k8gTzQKzpxx+6 Hp4hm0OcoRjviJK0db95hSxyKeFHewuSCiHmhmALEG3ob2QeXlFylajwV2vDGkyT gdzktXe0F/ZHWVS6EMGaAadrTmxUsp9MWUrY7TW1QVX4N82KGXajmLlt715ZwZM/ z/bebg8L56SHs8+el3bPjZXBQPlHL44eHZ+PM9P1tbjl0MC/j8g= -----END CERTIFICATE-----Generated at Mon Mar 2 05:00:34 2026 by rpki-client