$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: +9UlfbZKjUu2jCIoqHpRQfAZq7TxTS0K/pF2w6K42Xs= Subject key identifier: CF:B8:25:1C:B0:6E:0A:58:54:7D:E5:61:A4:08:66:F8:31:19:76:F9 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 1A1365415F3120DC10BAACC2FF0B930DBE7D1E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 011C Signing time: Mon 02 Mar 2026 09:11:32 +0000 Manifest this update: Mon 02 Mar 2026 09:06:32 +0000 Manifest next update: Thu 05 Mar 2026 20:01:32 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: oNmy9Ifg3Gnmf0naXLIB+k0cxJmtP79sXo5+mX5XN3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:13:65:41:5f:31:20:dc:10:ba:ac:c2:ff:0b:93:0d:be:7d:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Mar 2 09:06:32 2026 GMT Not After : Mar 5 20:01:32 2026 GMT Subject: CN=CFB8251CB06E0A58547DE561A40866F8311976F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:50:c2:8b:7b:ff:bc:0f:b5:15:92:2e:56: b4:ad:04:62:1c:39:a9:97:4b:ad:e1:0f:46:c5:8b: a1:2d:5a:b5:60:0a:8b:64:65:87:77:6c:2d:7b:ee: 7b:8f:93:f6:b2:2e:97:ce:d2:be:63:73:41:2f:20: be:f2:03:77:c0:ac:ca:02:fc:2e:1c:38:ee:c5:a6: a1:40:1e:8b:ab:08:fa:61:48:aa:32:25:68:c5:cf: a0:92:36:11:b8:38:b2:fc:32:a0:6f:36:94:cb:5a: 95:5a:ab:b2:fc:2d:16:bd:15:1d:06:35:ae:5f:a3: 38:e9:1c:3c:a0:c8:eb:2a:4b:ad:6b:0b:a9:e5:5a: bb:df:4a:87:d6:66:ae:66:b0:fb:8f:c0:6b:00:4d: 60:be:39:77:f0:8f:7a:ca:7d:81:44:cf:ed:7e:8c: fc:0b:c1:2e:ed:1b:23:72:7d:7b:f4:17:78:cf:0f: e8:81:e7:05:18:78:63:ef:db:7a:ae:26:7e:b2:3e: 0f:7f:33:0f:26:4f:f0:0e:36:c1:88:50:d4:95:f3: 36:3a:b7:13:2d:b3:5e:c4:ca:56:b9:37:96:03:1c: 45:33:e9:4f:cf:5e:de:05:7b:00:1b:ca:9c:87:0c: a1:82:1b:09:db:db:f4:48:e4:b0:b1:c1:b4:11:f3: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B8:25:1C:B0:6E:0A:58:54:7D:E5:61:A4:08:66:F8:31:19:76:F9 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:03:b2:e0:c8:3b:df:cf:6f:1b:9f:3f:e8:28:6e:ab:77: 9f:87:81:8f:c4:c9:9d:6c:39:06:b6:5f:86:08:6f:b7:d2:44: 11:d1:0a:f3:4d:26:ed:2f:c3:81:42:58:65:f6:bb:87:a2:ce: 54:8e:ee:2e:68:34:6c:b7:1e:41:ab:57:8f:e4:75:6c:0a:79: 73:aa:02:43:f1:e8:3a:c6:6f:6f:76:d5:38:7d:74:66:63:58: 32:4e:55:40:92:5b:7d:48:78:20:61:fa:74:98:ea:6b:58:c8: 7d:0e:d2:e6:97:48:06:f5:a6:b1:b0:5f:ff:3d:83:08:4d:17: 62:74:2a:15:7b:19:60:d0:fd:59:41:4c:8f:26:c3:8b:fc:0e: 18:a1:9c:d5:b9:fb:2b:d7:53:46:a8:f7:26:e4:8c:06:4d:5f: 52:00:4c:bc:67:b6:af:6b:4a:fe:0d:a5:28:ee:a4:69:a1:7c: 50:0e:18:87:87:87:c0:ce:26:e1:91:61:88:4e:4b:fb:2c:a1: a3:e5:06:7a:c2:00:66:75:73:aa:ce:47:f5:5f:76:28:26:f0: f1:59:2c:76:01:13:95:74:6b:3b:b0:f3:5c:be:41:1d:01:e6: fb:fa:cc:00:ed:d1:00:33:39:55:2c:f9:2c:0b:69:44:b1:1f: ab:b1:b2:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhNlQV8xINwQuqzC/wuTDb59Hi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNjAzMDIwOTA2MzJaFw0yNjAzMDUyMDAxMzJaMDMxMTAvBgNV BAMTKENGQjgyNTFDQjA2RTBBNTg1NDdERTU2MUE0MDg2NkY4MzExOTc2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5FDCi3v/vA+1FZIuVrStBGIc OamXS63hD0bFi6EtWrVgCotkZYd3bC177nuPk/ayLpfO0r5jc0EvIL7yA3fArMoC /C4cOO7FpqFAHourCPphSKoyJWjFz6CSNhG4OLL8MqBvNpTLWpVaq7L8LRa9FR0G Na5fozjpHDygyOsqS61rC6nlWrvfSofWZq5msPuPwGsATWC+OXfwj3rKfYFEz+1+ jPwLwS7tGyNyfXv0F3jPD+iB5wUYeGPv23quJn6yPg9/Mw8mT/AONsGIUNSV8zY6 txMts17Eyla5N5YDHEUz6U/PXt4FewAbypyHDKGCGwnb2/RI5LCxwbQR8xlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7glHLBuClhUfeVhpAhm+DEZdvkwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTBA7LgyDvfz28bnz/oKG6rd5+HgY/EyZ1s OQa2X4YIb7fSRBHRCvNNJu0vw4FCWGX2u4eizlSO7i5oNGy3HkGrV4/kdWwKeXOq AkPx6DrGb2921Th9dGZjWDJOVUCSW31IeCBh+nSY6mtYyH0O0uaXSAb1prGwX/89 gwhNF2J0KhV7GWDQ/VlBTI8mw4v8DhihnNW5+yvXU0ao9ybkjAZNX1IATLxntq9r Sv4NpSjupGmhfFAOGIeHh8DOJuGRYYhOS/ssoaPlBnrCAGZ1c6rOR/Vfdigm8PFZ LHYBE5V0azuw81y+QR0B5vv6zADt0QAzOVUs+SwLaUSxH6uxsq0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:00 2026 by rpki-client