$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: zxYJOTqgHvnwO2ik4ksuuJJPxhMGgGQAFVq9WT7+1u8= Subject key identifier: C9:3D:44:10:DE:E5:F1:68:53:03:E4:28:C4:55:58:92:44:4F:ED:53 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 6EA85719BA5C187B37EDE3AD7A14A88AD73B0D77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 01D7 Signing time: Sat 28 Feb 2026 22:11:23 +0000 Manifest this update: Sat 28 Feb 2026 22:06:23 +0000 Manifest next update: Wed 04 Mar 2026 05:23:23 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: a521MUszSa9YFbyyaXpWQ9J57L5ihTei3pAjgPW+gcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a8:57:19:ba:5c:18:7b:37:ed:e3:ad:7a:14:a8:8a:d7:3b:0d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: Feb 28 22:06:23 2026 GMT Not After : Mar 4 05:23:23 2026 GMT Subject: CN=C93D4410DEE5F1685303E428C4555892444FED53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:62:29:d4:15:b9:f4:b9:4e:1e:97:d7:e1: 75:12:e2:e3:8d:a5:a4:f4:e3:e1:32:42:63:05:8a: d4:2e:0b:95:81:8a:b7:9c:45:5a:19:64:de:89:6e: 7f:d2:73:4a:be:5f:c3:47:4c:a0:86:89:67:94:83: c5:12:b8:81:94:85:71:6c:28:54:3d:af:ff:63:bf: c9:a2:06:92:bd:85:7c:31:57:33:eb:9c:ca:f6:00: ba:04:b3:49:81:21:ca:24:5d:87:75:2d:5f:17:bb: b7:3c:4f:45:6e:0c:ac:96:09:b8:cc:4e:fd:35:86: a9:ee:c1:ae:9c:ff:62:62:d4:4f:c1:66:17:94:e3: a0:27:24:31:07:e2:ed:90:b9:49:51:e9:48:16:a3: ac:c3:90:9a:64:ac:39:78:d8:1e:4b:61:f8:fa:49: 96:6f:6c:6f:29:30:27:a5:e1:eb:d2:d0:9c:29:c0: c8:76:41:08:2e:33:46:d7:30:58:76:6f:2e:1b:e0: 6f:31:5f:94:57:d4:c6:d3:c0:60:78:5d:17:24:7b: c1:63:f2:51:c3:e2:99:e3:ad:d8:91:cc:45:48:81: 81:3f:44:96:64:90:8e:99:fc:36:49:a3:60:c4:85: 90:ba:e2:56:06:22:87:1d:c7:58:e2:90:64:b6:b8: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3D:44:10:DE:E5:F1:68:53:03:E4:28:C4:55:58:92:44:4F:ED:53 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8a:92:9f:0d:b6:c8:4f:e8:93:d3:1a:4f:5c:8a:5f:25:92: 33:fa:e5:df:75:de:30:d9:d3:08:96:8b:53:b0:64:c1:b4:09: 5f:1c:89:31:38:94:d8:49:25:ff:7c:8f:c9:71:3f:64:2d:28: 46:76:d3:47:29:52:f9:56:0a:b9:fa:c9:0d:e6:ab:8b:a6:de: 1f:75:5e:83:e1:67:80:ba:56:b6:c1:ca:0e:5d:f4:78:3d:f5: 98:bb:f1:4c:57:8f:4f:70:c1:37:bb:d7:a7:a0:75:7c:be:4a: 2a:d6:da:6a:ae:bc:0e:24:a5:51:e8:fd:89:31:de:ba:a7:24: ef:a7:ea:05:90:de:df:20:10:8e:81:f5:6a:6f:f2:9d:6b:c0: bb:a3:5d:c6:ec:d1:a0:99:e4:43:40:ee:c6:14:df:3a:93:42: 2b:0e:a9:d4:e0:6b:da:e6:b8:b7:66:74:e2:6d:0d:1d:03:87: f8:4e:75:ac:c6:f8:35:df:de:78:3a:93:0d:b5:13:cb:2e:1b: f3:2d:cb:7e:b0:5c:0c:88:03:c0:ad:e2:5b:dc:13:93:17:9c: 0c:a9:2d:d4:75:dd:29:5d:25:b7:56:48:3c:6a:39:fc:b6:a3: 86:df:34:a8:63:8e:0b:7a:3c:55:26:91:13:9e:5e:64:d6:ff: 09:48:7c:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqhXGbpcGHs37eOtehSoitc7DXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNjAyMjgyMjA2MjNaFw0yNjAzMDQwNTIzMjNaMDMxMTAvBgNV BAMTKEM5M0Q0NDEwREVFNUYxNjg1MzAzRTQyOEM0NTU1ODkyNDQ0RkVENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CWIp1BW59LlOHpfX4XUS4uON paT04+EyQmMFitQuC5WBirecRVoZZN6Jbn/Sc0q+X8NHTKCGiWeUg8USuIGUhXFs KFQ9r/9jv8miBpK9hXwxVzPrnMr2ALoEs0mBIcokXYd1LV8Xu7c8T0VuDKyWCbjM Tv01hqnuwa6c/2Ji1E/BZheU46AnJDEH4u2QuUlR6UgWo6zDkJpkrDl42B5LYfj6 SZZvbG8pMCel4evS0JwpwMh2QQguM0bXMFh2by4b4G8xX5RX1MbTwGB4XRcke8Fj 8lHD4pnjrdiRzEVIgYE/RJZkkI6Z/DZJo2DEhZC64lYGIocdx1jikGS2uARzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyT1EEN7l8WhTA+QoxFVYkkRP7VMwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKKkp8NtshP6JPTGk9cil8lkjP65d913jDZ 0wiWi1OwZMG0CV8ciTE4lNhJJf98j8lxP2QtKEZ200cpUvlWCrn6yQ3mq4um3h91 XoPhZ4C6VrbByg5d9Hg99Zi78UxXj09wwTe716egdXy+SirW2mquvA4kpVHo/Ykx 3rqnJO+n6gWQ3t8gEI6B9Wpv8p1rwLujXcbs0aCZ5ENA7sYU3zqTQisOqdTga9rm uLdmdOJtDR0Dh/hOdazG+DXf3ng6kw21E8suG/Mty36wXAyIA8Ct4lvcE5MXnAyp LdR13SldJbdWSDxqOfy2o4bfNKhjjgt6PFUmkROeXmTW/wlIfCg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:41:34 2026 by rpki-client