$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: PmHFxO024tQh7XgC3q3OItdTN+0E5V9xV3O99GZVe5U= Subject key identifier: EF:C6:FE:A0:00:30:C9:93:42:AE:88:1D:58:0D:33:11:A7:85:4A:6F Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 2BD74429FDFCD8834A6017EE4343649101AE1B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 0491 Signing time: Sun 01 Mar 2026 02:12:11 +0000 Manifest this update: Sun 01 Mar 2026 02:07:11 +0000 Manifest next update: Wed 04 Mar 2026 08:31:11 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: 4px2luCFToCYp5kf/jTNTqFHVJsAkQgkoNHw4b2C/7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d7:44:29:fd:fc:d8:83:4a:60:17:ee:43:43:64:91:01:ae:1b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Mar 1 02:07:11 2026 GMT Not After : Mar 4 08:31:11 2026 GMT Subject: CN=EFC6FEA00030C99342AE881D580D3311A7854A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:5d:6d:86:13:ac:f9:bd:c7:c9:1f:be:3b: c9:b9:f2:e3:66:2b:71:da:0c:da:0f:82:96:e1:25: 82:ee:cd:89:13:53:be:bd:22:8c:69:65:ba:e1:11: 8c:0d:4e:38:1b:5c:38:43:52:61:ef:13:d5:07:0a: 0c:5f:bf:a6:bd:d8:e3:a1:80:f5:f9:32:80:5f:4a: b7:6d:f4:fa:79:3c:d3:76:ca:ea:16:0a:5b:bb:4f: d8:02:18:88:84:ca:20:75:7a:f2:e4:b4:a8:e1:ce: 02:e1:19:56:89:ed:e6:80:8e:81:17:45:10:61:fb: 11:de:d6:57:e5:b0:8c:f8:bf:3c:59:9a:4a:24:4d: 2f:e3:5a:5a:f2:31:bb:2a:98:64:ff:fb:c6:c6:b5: 27:54:73:77:d4:94:99:fe:27:57:18:b1:7e:66:90: e0:a4:35:61:ce:15:2f:1a:87:65:03:08:c7:3f:49: 05:e7:b7:c2:a4:7c:67:37:41:c2:0f:8f:23:7f:70: cc:57:b9:e5:5d:ee:a2:b5:32:62:ce:c9:1e:85:61: 27:2b:f9:09:1c:0b:09:1c:72:9c:ce:a7:a8:2b:5c: 8c:fe:9d:11:91:69:34:48:10:87:54:1e:02:17:dd: 99:82:3d:df:e9:75:4c:31:0b:80:7e:f4:c8:18:e3: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C6:FE:A0:00:30:C9:93:42:AE:88:1D:58:0D:33:11:A7:85:4A:6F X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e2:7d:39:a0:c2:d4:19:2a:e7:6f:54:9e:d1:d9:2d:85:e2: b0:f1:d0:f0:e3:36:f1:6e:33:25:e0:37:9f:59:fa:b4:28:2c: cb:c0:1e:e2:08:60:ad:c1:eb:9c:d9:c3:50:c1:af:b2:7a:c3: cb:e6:29:e2:0a:67:85:65:0d:bb:fa:b8:e9:a2:1b:33:3a:9b: 71:3f:94:18:8a:45:37:f9:e2:ab:77:cb:8f:c4:d2:c5:e6:8e: 2f:15:b4:23:27:92:be:7a:22:db:25:03:98:52:dc:bb:47:93: e0:0a:55:2d:33:1a:d8:2a:b3:6c:c5:0a:3e:e8:bd:7b:68:73: 00:d0:7a:9b:0e:ef:9b:cd:98:80:6e:98:cc:1a:a2:58:8b:ca: 8d:14:78:49:c3:24:24:07:4f:ba:fe:40:80:00:8b:59:e3:a3: ee:73:59:6a:2d:85:a7:86:62:e2:6b:53:98:4e:f8:20:80:d0: 07:35:e3:d5:8e:dc:1f:77:f0:e1:ad:4d:20:03:79:f5:2d:6a: d1:8d:18:13:cd:84:61:00:a8:31:d3:a9:eb:0d:a7:2c:74:e6: 21:91:7b:86:ad:32:04:1c:cd:00:f4:27:8d:05:c4:2c:46:82: 3d:06:e8:35:85:7c:f6:04:b0:ab:de:f5:87:72:cf:cb:ab:23: 9e:62:36:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9dEKf382INKYBfuQ0NkkQGuGx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNjAzMDEwMjA3MTFaFw0yNjAzMDQwODMxMTFaMDMxMTAvBgNV BAMTKEVGQzZGRUEwMDAzMEM5OTM0MkFFODgxRDU4MEQzMzExQTc4NTRBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP911thhOs+b3HyR++O8m58uNm K3HaDNoPgpbhJYLuzYkTU769IoxpZbrhEYwNTjgbXDhDUmHvE9UHCgxfv6a92OOh gPX5MoBfSrdt9Pp5PNN2yuoWClu7T9gCGIiEyiB1evLktKjhzgLhGVaJ7eaAjoEX RRBh+xHe1lflsIz4vzxZmkokTS/jWlryMbsqmGT/+8bGtSdUc3fUlJn+J1cYsX5m kOCkNWHOFS8ah2UDCMc/SQXnt8KkfGc3QcIPjyN/cMxXueVd7qK1MmLOyR6FYScr +QkcCwkccpzOp6grXIz+nRGRaTRIEIdUHgIX3ZmCPd/pdUwxC4B+9MgY46IHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78b+oAAwyZNCrogdWA0zEaeFSm8wHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjifTmgwtQZKudvVJ7R2S2F4rDx0PDjNvFu MyXgN59Z+rQoLMvAHuIIYK3B65zZw1DBr7J6w8vmKeIKZ4VlDbv6uOmiGzM6m3E/ lBiKRTf54qt3y4/E0sXmji8VtCMnkr56ItslA5hS3LtHk+AKVS0zGtgqs2zFCj7o vXtocwDQepsO75vNmIBumMwaoliLyo0UeEnDJCQHT7r+QIAAi1njo+5zWWothaeG YuJrU5hO+CCA0Ac149WO3B938OGtTSADefUtatGNGBPNhGEAqDHTqesNpyx05iGR e4atMgQczQD0J40FxCxGgj0G6DWFfPYEsKve9Ydyz8urI55iNmc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:31 2026 by rpki-client