$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: z79zpQjFm3S5JjGjUnZ9B2jfS1U05CDiBtfuycVHccg= Subject key identifier: BA:98:CD:50:53:3F:98:CC:15:FE:BC:44:9E:3F:1E:24:8D:AD:09:F8 Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 01F9A33595F2EDCE6420E913F6D8AFBFA4A277AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 050A Signing time: Sun 01 Mar 2026 01:11:48 +0000 Manifest this update: Sun 01 Mar 2026 01:06:48 +0000 Manifest next update: Wed 04 Mar 2026 03:34:48 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: 19eE0up/hBOXXRRDSyqRSyE7RzGZ0QuzCiXcbjFr4SI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:a3:35:95:f2:ed:ce:64:20:e9:13:f6:d8:af:bf:a4:a2:77:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Mar 1 01:06:48 2026 GMT Not After : Mar 4 03:34:48 2026 GMT Subject: CN=BA98CD50533F98CC15FEBC449E3F1E248DAD09F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:7b:f0:c9:a3:39:25:8d:17:09:14:6e:d9: 4d:71:05:86:1c:88:e1:37:d1:64:18:6f:09:03:28: 5b:3f:7f:99:fa:96:ae:ee:0d:e6:0d:15:b8:ab:f6: 3b:fe:30:a0:5f:91:6c:a4:70:1f:e1:99:4a:34:2e: 9e:67:7a:76:18:e9:f1:02:97:f0:40:37:51:34:b4: db:2f:eb:93:49:0d:0d:0d:e0:0a:cd:a5:22:5a:b8: 09:0f:5e:52:d9:a6:d7:65:f6:51:72:50:17:cc:0d: 69:b2:ed:0f:84:7e:ef:97:7c:bc:5f:ac:09:36:2e: 23:2f:8d:b0:eb:95:62:af:be:17:cf:87:05:3a:bd: b3:48:39:0a:47:2c:fe:0e:c7:2a:6c:29:35:e1:74: c7:13:d5:09:85:0c:73:ac:d4:e9:55:3e:c0:69:9e: 91:08:d2:53:16:62:19:d9:65:f6:b5:7c:c5:30:6c: c5:41:f7:c8:85:4b:db:1d:de:1c:65:21:d5:56:06: 3c:39:cb:fe:ba:c5:5e:74:b6:4d:9a:50:ab:0f:32: a9:2f:d3:8b:7e:38:df:a5:34:ce:09:1d:41:28:51: 79:5f:b1:68:dd:6a:26:42:5b:b9:02:7d:f9:5f:fc: 49:9b:d2:0f:58:8e:2d:23:e1:5d:3d:ca:0f:ba:a0: a0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:98:CD:50:53:3F:98:CC:15:FE:BC:44:9E:3F:1E:24:8D:AD:09:F8 X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1f:2d:bc:31:51:c1:83:56:4d:ff:34:b8:24:3a:b6:d1:71: 8e:7f:fd:df:79:39:36:cf:db:9a:e8:ee:64:b2:d2:07:db:26: 41:09:fa:60:e4:c2:21:d0:d4:35:12:91:fa:b1:26:09:e3:0c: 7f:5c:18:57:49:58:31:62:52:ff:3b:a1:54:39:b9:80:ad:48: 06:fa:ea:a4:da:49:ea:94:8d:dd:a5:83:ea:9e:31:ea:8a:fb: 05:64:58:a2:9f:b7:a5:ec:81:df:ae:64:5c:74:01:7b:4c:5a: c6:6a:33:45:c3:3c:93:2e:5c:b8:bc:03:a2:f1:ed:04:50:69: 31:69:7d:59:22:35:31:f4:1e:dc:02:53:59:b6:ef:b9:ec:5b: d5:79:0d:ba:99:19:46:86:2e:3b:6f:bd:ec:c0:78:17:12:a7: 46:bb:f1:51:cd:2d:09:58:58:71:db:e6:48:23:26:ca:d7:60: 3e:40:b5:94:5e:2c:80:bd:3a:29:8f:d2:73:7f:36:b2:35:b1: 26:90:a5:b3:7b:5f:b4:18:cf:0e:da:bb:a5:c1:be:ed:97:ae: 40:fd:03:48:5e:8b:37:55:09:a7:52:77:c1:44:71:25:b2:ea: 08:6a:2e:cf:a0:e4:34:30:cd:63:35:06:a2:59:f4:13:06:c2: c7:46:a7:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfmjNZXy7c5kIOkT9tivv6Sid6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNjAzMDEwMTA2NDhaFw0yNjAzMDQwMzM0NDhaMDMxMTAvBgNV BAMTKEJBOThDRDUwNTMzRjk4Q0MxNUZFQkM0NDlFM0YxRTI0OERBRDA5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdnvwyaM5JY0XCRRu2U1xBYYc iOE30WQYbwkDKFs/f5n6lq7uDeYNFbir9jv+MKBfkWykcB/hmUo0Lp5nenYY6fEC l/BAN1E0tNsv65NJDQ0N4ArNpSJauAkPXlLZptdl9lFyUBfMDWmy7Q+Efu+XfLxf rAk2LiMvjbDrlWKvvhfPhwU6vbNIOQpHLP4OxypsKTXhdMcT1QmFDHOs1OlVPsBp npEI0lMWYhnZZfa1fMUwbMVB98iFS9sd3hxlIdVWBjw5y/66xV50tk2aUKsPMqkv 04t+ON+lNM4JHUEoUXlfsWjdaiZCW7kCfflf/Emb0g9Yji0j4V09yg+6oKBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupjNUFM/mMwV/rxEnj8eJI2tCfgwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8fLbwxUcGDVk3/NLgkOrbRcY5//d95OTbP 25ro7mSy0gfbJkEJ+mDkwiHQ1DUSkfqxJgnjDH9cGFdJWDFiUv87oVQ5uYCtSAb6 6qTaSeqUjd2lg+qeMeqK+wVkWKKft6Xsgd+uZFx0AXtMWsZqM0XDPJMuXLi8A6Lx 7QRQaTFpfVkiNTH0HtwCU1m277nsW9V5DbqZGUaGLjtvvezAeBcSp0a78VHNLQlY WHHb5kgjJsrXYD5AtZReLIC9OimP0nN/NrI1sSaQpbN7X7QYzw7au6XBvu2XrkD9 A0heizdVCadSd8FEcSWy6ghqLs+g5DQwzWM1BqJZ9BMGwsdGp28= -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:45 2026 by rpki-client