$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: YZAMjgEoryrPf2EBOemQMdt19cEMNkMv8nMnp5ks0yA= Subject key identifier: 26:ED:EA:41:77:53:E4:32:E3:D7:77:E7:F9:C9:7E:A4:97:F5:77:E4 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 3F9DA865A0A2C9E5492E131CF358E846EB33D043 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: CB Signing time: Sat 28 Feb 2026 13:01:22 +0000 Manifest this update: Sat 28 Feb 2026 12:56:22 +0000 Manifest next update: Wed 04 Mar 2026 00:18:22 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: Xw0rcbrbB/lLqQgyjWLTwAf2EpabBczngUqGkaXBKkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9d:a8:65:a0:a2:c9:e5:49:2e:13:1c:f3:58:e8:46:eb:33:d0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Feb 28 12:56:22 2026 GMT Not After : Mar 4 00:18:22 2026 GMT Subject: CN=26EDEA417753E432E3D777E7F9C97EA497F577E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:36:fc:e1:3d:a2:6c:30:fb:27:7c:39:e9: 35:3a:62:99:44:cf:0c:cd:52:ac:17:f4:45:68:7a: 43:5b:ff:7e:34:17:64:73:f8:b0:82:3e:d9:b2:c0: 2e:cc:20:ef:93:a1:69:12:5b:e1:aa:28:5f:4f:0f: d6:32:f3:0a:27:11:22:7e:06:f3:52:bd:5e:68:93: 19:61:5f:88:05:0a:ef:04:3d:39:c7:8b:fe:9f:b7: 12:c5:b1:7c:e0:9c:06:1f:b6:b3:87:4a:fa:c4:b7: 83:0b:0a:b2:f2:01:34:ac:d8:51:75:1a:b5:81:e6: f8:90:2e:42:f4:0f:a3:63:6a:08:87:d5:13:27:c8: e2:2b:6d:2d:74:60:af:73:41:21:1f:4a:8f:4f:1b: 2f:10:33:c2:68:f7:9f:6d:4b:6e:8f:12:37:53:6b: 1c:6a:c4:fc:b0:63:65:ca:74:44:57:ff:cb:1b:ce: 7f:cd:04:eb:5e:26:db:c0:d6:c0:32:49:92:e4:e8: df:fa:22:41:ac:b8:89:4c:ab:da:00:f9:c7:c2:0a: ef:0d:c2:fe:3f:ea:3b:16:06:bc:cc:62:49:5b:9a: b4:50:ce:63:87:7e:66:1c:c1:a7:ef:9b:a5:c4:ac: c7:09:1d:6d:1c:02:6e:2f:4d:c3:04:76:5e:be:a8: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:EA:41:77:53:E4:32:E3:D7:77:E7:F9:C9:7E:A4:97:F5:77:E4 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1b:f4:4a:41:4c:f9:8c:3f:76:80:ef:61:95:67:b9:81:a3: 20:9d:f7:33:16:01:59:8c:71:6b:88:f4:15:9b:c8:a5:01:ee: 20:e0:87:ed:9a:f9:89:74:10:35:9b:3e:35:9a:c0:85:9b:24: 3d:fb:43:9d:0b:a4:23:a4:10:6e:7c:9b:09:55:b0:ce:ff:7a: b9:66:43:76:d3:2d:3f:a2:58:85:41:4e:cd:b6:9d:8b:d2:d8: 88:46:bc:ec:54:fe:9d:3f:5c:cd:2c:71:6b:1d:c8:ae:d5:dd: ec:79:20:a9:37:dc:de:7a:a7:92:3d:ce:c8:90:ef:b4:ea:6b: 1d:7b:2c:3b:5c:9a:57:1d:ca:3a:94:13:d7:dc:2b:41:ec:75: 53:37:39:80:6a:62:f0:43:ce:7c:5c:4e:14:5b:6f:73:ec:1d: ab:d2:69:ad:a3:15:14:a1:ec:26:fc:52:e3:1b:de:b3:b0:e4: a7:59:76:c8:ae:b1:a9:33:06:d9:73:cc:d2:3c:4b:76:a0:b5: fc:eb:8e:42:b8:b1:1f:59:c1:0f:fa:da:c9:83:ab:84:6b:39: d9:64:6d:d2:a6:7b:05:65:e0:98:39:9e:64:92:87:8c:d5:43: 85:6c:ba:20:a0:c8:c3:3d:34:08:f3:82:b5:2e:fa:f5:ec:a1: 7a:22:c1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP52oZaCiyeVJLhMc81joRusz0EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNjAyMjgxMjU2MjJaFw0yNjAzMDQwMDE4MjJaMDMxMTAvBgNV BAMTKDI2RURFQTQxNzc1M0U0MzJFM0Q3NzdFN0Y5Qzk3RUE0OTdGNTc3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqODb84T2ibDD7J3w56TU6YplE zwzNUqwX9EVoekNb/340F2Rz+LCCPtmywC7MIO+ToWkSW+GqKF9PD9Yy8wonESJ+ BvNSvV5okxlhX4gFCu8EPTnHi/6ftxLFsXzgnAYftrOHSvrEt4MLCrLyATSs2FF1 GrWB5viQLkL0D6NjagiH1RMnyOIrbS10YK9zQSEfSo9PGy8QM8Jo959tS26PEjdT axxqxPywY2XKdERX/8sbzn/NBOteJtvA1sAySZLk6N/6IkGsuIlMq9oA+cfCCu8N wv4/6jsWBrzMYklbmrRQzmOHfmYcwafvm6XErMcJHW0cAm4vTcMEdl6+qNprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJu3qQXdT5DLj13fn+cl+pJf1d+QwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMb9EpBTPmMP3aA72GVZ7mBoyCd9zMWAVmM cWuI9BWbyKUB7iDgh+2a+Yl0EDWbPjWawIWbJD37Q50LpCOkEG58mwlVsM7/erlm Q3bTLT+iWIVBTs22nYvS2IhGvOxU/p0/XM0scWsdyK7V3ex5IKk33N56p5I9zsiQ 77Tqax17LDtcmlcdyjqUE9fcK0HsdVM3OYBqYvBDznxcThRbb3PsHavSaa2jFRSh 7Cb8UuMb3rOw5KdZdsiusakzBtlzzNI8S3agtfzrjkK4sR9ZwQ/62smDq4RrOdlk bdKmewVl4Jg5nmSSh4zVQ4VsuiCgyMM9NAjzgrUu+vXsoXoiwTI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:25 2026 by rpki-client