$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: 5HC8WPnLjLpIbOWBPpH2e55XF6BQ/KM254jDiPWGTpI= Subject key identifier: C5:06:61:7E:48:B8:B0:F1:8F:95:2C:C2:70:75:87:11:5D:B0:0E:F0 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 42E3E7DE79214C8B1839ACCA4C6E1D2772FCE7A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 02E4 Signing time: Sat 28 Feb 2026 21:51:06 +0000 Manifest this update: Sat 28 Feb 2026 21:46:06 +0000 Manifest next update: Wed 04 Mar 2026 04:13:06 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: fRjhu3ISPd8ZBAWzMbfJtXTo5zK5iy1JfSpguPXpfJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e3:e7:de:79:21:4c:8b:18:39:ac:ca:4c:6e:1d:27:72:fc:e7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Feb 28 21:46:06 2026 GMT Not After : Mar 4 04:13:06 2026 GMT Subject: CN=C506617E48B8B0F18F952CC2707587115DB00EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:a5:62:70:de:c4:f5:48:c6:be:03:db:f9: 28:b2:0a:cb:c9:a8:ff:0d:d7:67:da:86:b6:08:72: d6:a5:24:8e:9f:ac:9a:8f:d3:36:93:fd:17:22:cb: 4e:5f:b5:58:5c:ce:f0:ac:d0:2a:d6:6b:93:b0:48: 71:88:df:8c:5f:db:bb:11:05:8c:e0:83:36:13:0a: f7:0a:8b:27:c0:76:5b:2b:b8:8b:cc:1f:95:74:0a: 63:2b:f3:3f:d9:d4:08:ed:18:7f:c3:9f:02:76:31: a4:82:bf:16:e1:b8:d6:cb:22:33:3f:a4:f7:01:78: 19:49:82:17:4c:42:c7:b5:2c:38:2e:83:bc:b9:4b: 6e:bd:62:46:d9:53:83:86:5f:f8:bc:70:c9:79:13: 23:ef:30:b1:95:a5:ce:a2:b1:41:6b:a9:1d:09:ec: c7:05:d2:e5:ac:f3:fd:31:a7:34:24:f9:a2:c7:47: 36:06:f4:19:db:ca:03:de:10:e8:be:70:81:d8:69: a4:de:f5:00:62:01:3c:f7:07:12:02:7f:b1:5d:2b: 5e:f8:c4:b7:c7:d4:23:b6:41:8c:ce:0a:cf:f4:34: 37:0f:21:23:20:d6:b2:2d:e5:8c:56:b1:bb:b3:9f: 63:4f:c4:2b:72:00:39:89:a1:b1:7e:c0:d7:d8:b7: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:61:7E:48:B8:B0:F1:8F:95:2C:C2:70:75:87:11:5D:B0:0E:F0 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2f:21:87:bc:c0:28:66:a9:6a:42:3d:78:64:39:15:86:04: 28:03:f4:53:d9:0d:2c:e7:05:4f:f5:e4:9b:90:22:29:91:bd: d0:90:a8:bd:e3:35:4f:01:3f:68:7f:fe:b3:00:72:4b:48:95: 09:13:98:7c:cb:b9:7f:33:de:19:a6:9b:a3:c8:38:99:4c:f8: e9:8c:f1:39:e0:8f:84:9a:c5:08:76:3f:3c:f9:f5:fd:64:ca: 0b:d9:63:49:04:31:df:1d:73:f7:96:04:79:45:53:0b:d1:0c: 01:25:0d:16:55:9b:2c:78:0c:d3:00:4e:12:c9:2b:cf:fa:89: 85:0a:0a:f4:ab:59:65:89:34:97:95:1e:ba:c0:62:25:33:82: d1:c7:5d:45:35:fc:2d:39:6b:35:5e:27:07:13:c5:78:cc:05: bf:be:a2:c5:9a:34:aa:99:a2:27:10:03:29:c5:c1:60:83:90: cf:a8:51:28:97:c6:3d:d7:d1:b6:ef:68:65:3c:20:f1:94:8a: 9f:90:56:73:21:db:5a:0b:f1:fe:c0:d8:bf:46:94:93:19:48: aa:25:d3:6b:83:d4:4a:2e:96:75:71:e6:a1:7c:07:84:1e:25: 37:7a:d5:66:c1:8a:6c:bf:35:b7:2a:3e:af:73:a2:61:c1:1a: b8:37:0a:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuPn3nkhTIsYOazKTG4dJ3L856cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNjAyMjgyMTQ2MDZaFw0yNjAzMDQwNDEzMDZaMDMxMTAvBgNV BAMTKEM1MDY2MTdFNDhCOEIwRjE4Rjk1MkNDMjcwNzU4NzExNURCMDBFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcKVicN7E9UjGvgPb+SiyCsvJ qP8N12fahrYIctalJI6frJqP0zaT/Rciy05ftVhczvCs0CrWa5OwSHGI34xf27sR BYzggzYTCvcKiyfAdlsruIvMH5V0CmMr8z/Z1AjtGH/DnwJ2MaSCvxbhuNbLIjM/ pPcBeBlJghdMQse1LDgug7y5S269YkbZU4OGX/i8cMl5EyPvMLGVpc6isUFrqR0J 7McF0uWs8/0xpzQk+aLHRzYG9BnbygPeEOi+cIHYaaTe9QBiATz3BxICf7FdK174 xLfH1CO2QYzOCs/0NDcPISMg1rIt5YxWsbuzn2NPxCtyADmJobF+wNfYtwnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQZhfki4sPGPlSzCcHWHEV2wDvAwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcvIYe8wChmqWpCPXhkORWGBCgD9FPZDSzn BU/15JuQIimRvdCQqL3jNU8BP2h//rMAcktIlQkTmHzLuX8z3hmmm6PIOJlM+OmM 8Tngj4SaxQh2Pzz59f1kygvZY0kEMd8dc/eWBHlFUwvRDAElDRZVmyx4DNMAThLJ K8/6iYUKCvSrWWWJNJeVHrrAYiUzgtHHXUU1/C05azVeJwcTxXjMBb++osWaNKqZ oicQAynFwWCDkM+oUSiXxj3X0bbvaGU8IPGUip+QVnMh21oL8f7A2L9GlJMZSKol 02uD1EoulnVx5qF8B4QeJTd61WbBimy/NbcqPq9zomHBGrg3Cpg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:47 2026 by rpki-client