$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: 2iVhPXPw5H19RbpuY1Q3RcEfFHuu6za4tolonko5NtE= Subject key identifier: AD:3A:30:3F:28:26:DA:B1:16:DF:3E:29:DE:34:48:0D:C1:CA:60:F8 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 6D40EE469E044481CED022C476DA08B871E7F3B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 0403 Signing time: Sat 28 Feb 2026 04:42:25 +0000 Manifest this update: Sat 28 Feb 2026 04:37:25 +0000 Manifest next update: Tue 03 Mar 2026 13:50:25 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: MeBnyDKifJfMn69hdYmlleIXoPJuDGHPBLsTyvc6lJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:40:ee:46:9e:04:44:81:ce:d0:22:c4:76:da:08:b8:71:e7:f3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Feb 28 04:37:25 2026 GMT Not After : Mar 3 13:50:25 2026 GMT Subject: CN=AD3A303F2826DAB116DF3E29DE34480DC1CA60F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:c1:41:58:c9:61:df:c8:5b:e9:94:0a:4a: ea:51:79:bb:ac:00:76:ec:fa:b8:92:5c:a7:92:2c: 35:ba:41:ec:77:49:38:66:95:77:99:ec:86:d3:bb: 3e:1c:ac:4c:24:eb:d4:be:62:df:1e:f4:21:cd:b1: da:51:33:9a:66:9a:47:de:c7:9d:b0:91:6e:eb:7e: 66:2b:f4:38:9d:8b:f5:83:82:8e:65:c9:0b:6c:9d: 1e:01:d0:52:0e:a7:8e:d4:f8:43:27:90:25:d3:be: b4:93:05:7f:18:62:13:57:8f:c0:68:da:6f:00:dc: 6a:f3:7f:82:23:b9:96:a4:2d:e1:e8:3e:e7:35:fd: 11:c3:df:35:c4:67:4e:f1:9f:7d:e8:6e:b8:1f:c5: a6:02:63:03:ae:38:fa:ac:6e:b5:f8:06:48:3f:7e: 05:0e:ff:c0:d0:05:80:d3:c0:9b:da:06:25:83:bd: 54:18:69:2c:7f:ae:72:22:ea:f4:77:81:f4:b6:b0: 04:29:ed:69:ec:7d:2a:64:96:20:02:75:82:d9:48: 03:c3:ae:ec:93:8c:9c:8e:22:ea:ce:a4:4e:fd:d4: f8:5e:11:0e:d6:07:41:cf:0b:a7:e8:d9:ed:3e:24: c3:01:47:6d:2d:87:b6:43:5a:11:3b:50:24:88:e1: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3A:30:3F:28:26:DA:B1:16:DF:3E:29:DE:34:48:0D:C1:CA:60:F8 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f2:ab:47:95:fe:8e:9d:f2:7a:10:b9:fd:74:3b:75:44:d3: 2e:24:cd:dc:04:3f:b7:6e:e7:ed:ec:82:f7:28:48:52:1d:cd: 8c:e4:e0:24:c7:56:e5:79:8f:0a:49:44:db:ff:c1:87:10:c3: 87:f0:a4:92:74:4d:02:d7:c6:8e:08:d1:8c:15:a5:20:53:f1: 78:96:14:cc:10:25:11:55:c9:db:ae:73:c9:71:77:9f:78:2c: 7c:e4:43:4b:d6:af:e0:9b:ab:47:c6:05:ba:30:f3:22:83:ce: da:9b:26:39:63:cb:d9:f0:76:a0:9b:bc:32:dc:56:5c:df:9f: 27:dd:00:02:09:7b:63:5e:31:9e:bf:3b:56:72:8e:83:49:40: 57:01:95:c3:7a:61:2e:8c:be:d9:39:2b:d2:c6:ee:83:58:f4: f2:cf:ab:de:70:ec:42:68:fc:1b:b1:3e:01:6a:a6:b6:5f:45: 5d:a3:71:7a:0a:bd:10:8a:30:92:bf:a9:95:ab:4f:0a:9f:31: 88:c6:38:b5:d9:27:fe:0e:82:54:a6:53:5e:84:cf:a7:d5:9a: 54:e6:a7:f2:27:a5:d5:b1:83:0a:7d:27:c8:44:c3:25:d7:36: 73:a8:b1:58:45:94:5c:63:14:80:53:9f:c8:bd:80:e3:cb:bf: c1:67:ca:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUDuRp4ERIHO0CLEdtoIuHHn87cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNjAyMjgwNDM3MjVaFw0yNjAzMDMxMzUwMjVaMDMxMTAvBgNV BAMTKEFEM0EzMDNGMjgyNkRBQjExNkRGM0UyOURFMzQ0ODBEQzFDQTYwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepMFBWMlh38hb6ZQKSupRebus AHbs+riSXKeSLDW6Qex3SThmlXeZ7IbTuz4crEwk69S+Yt8e9CHNsdpRM5pmmkfe x52wkW7rfmYr9Didi/WDgo5lyQtsnR4B0FIOp47U+EMnkCXTvrSTBX8YYhNXj8Bo 2m8A3Grzf4IjuZakLeHoPuc1/RHD3zXEZ07xn33obrgfxaYCYwOuOPqsbrX4Bkg/ fgUO/8DQBYDTwJvaBiWDvVQYaSx/rnIi6vR3gfS2sAQp7WnsfSpkliACdYLZSAPD ruyTjJyOIurOpE791PheEQ7WB0HPC6fo2e0+JMMBR20th7ZDWhE7UCSI4U51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTowPygm2rEW3z4p3jRIDcHKYPgwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvyq0eV/o6d8noQuf10O3VE0y4kzdwEP7du 5+3sgvcoSFIdzYzk4CTHVuV5jwpJRNv/wYcQw4fwpJJ0TQLXxo4I0YwVpSBT8XiW FMwQJRFVyduuc8lxd594LHzkQ0vWr+Cbq0fGBbow8yKDztqbJjljy9nwdqCbvDLc VlzfnyfdAAIJe2NeMZ6/O1ZyjoNJQFcBlcN6YS6Mvtk5K9LG7oNY9PLPq95w7EJo /BuxPgFqprZfRV2jcXoKvRCKMJK/qZWrTwqfMYjGOLXZJ/4OglSmU16Ez6fVmlTm p/InpdWxgwp9J8hEwyXXNnOosVhFlFxjFIBTn8i9gOPLv8FnynE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:55 2026 by rpki-client