$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft File: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft (raw, json) Hash identifier: 9bj8RUmoxl6eUQ06/SZFLQaWc/1XiORl1HhfuD4yvsM= Subject key identifier: BB:CB:5B:67:7F:47:A4:F0:6B:5D:53:CD:76:92:D9:EA:20:04:5C:AA Authority key identifier: F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E Certificate issuer: /CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Certificate serial: 2DBAFC948795033344A3CD387A4F245EE738388E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft Manifest number: 05 Signing time: Sat 28 Feb 2026 10:51:44 +0000 Manifest this update: Sat 28 Feb 2026 10:46:44 +0000 Manifest next update: Tue 03 Mar 2026 15:09:44 +0000 Files and hashes: 1: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl (hash: 2JIv9dTUUNGbe8HeE82JENxKogo7vSvSTLwyEbMITGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ba:fc:94:87:95:03:33:44:a3:cd:38:7a:4f:24:5e:e7:38:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Validity Not Before: Feb 28 10:46:44 2026 GMT Not After : Mar 3 15:09:44 2026 GMT Subject: CN=BBCB5B677F47A4F06B5D53CD7692D9EA20045CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:68:7d:c2:f9:0a:c4:4b:4d:af:30:2c:dd: 46:0b:33:5c:bb:f9:ae:a7:3a:b2:01:13:5b:67:e6: cf:13:ef:7b:78:f8:f6:0e:7c:e2:2d:ee:23:6b:3b: d1:25:be:d7:72:c1:71:d4:ab:00:b9:de:0f:af:7a: 0e:3d:e6:0e:e8:f1:4e:4e:e0:e8:d7:7f:22:d5:e1: 4c:30:f6:4a:a6:7a:eb:7e:61:1e:42:c4:8e:aa:1f: 15:ce:79:22:76:25:d3:be:ca:ed:fa:ee:fc:78:37: e5:36:7f:c9:d4:9a:4b:68:9b:80:b1:3b:53:55:c7: 45:3f:4a:85:0b:fa:93:71:3f:cb:29:96:50:0b:a5: 72:5b:d1:02:59:d5:60:0a:9d:cd:fd:1a:2e:93:00: 57:61:e2:5b:07:15:c4:f1:60:28:70:66:1f:00:a4: c7:75:46:b2:fa:2c:3a:1b:7a:e5:83:b2:50:07:3f: fd:32:bf:7b:e8:15:0d:53:50:ba:ec:85:d4:fc:96: 13:79:86:4b:cd:e8:4a:dc:32:63:ff:e0:22:83:c4: c8:d9:6b:ab:5b:9f:fe:6e:ca:9d:7a:3d:21:d0:0e: ff:3d:3a:74:c6:5d:f4:44:09:5d:21:24:5c:5d:5e: 25:4a:81:c0:e5:a0:cf:2c:79:1c:38:fb:94:0e:9e: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:5B:67:7F:47:A4:F0:6B:5D:53:CD:76:92:D9:EA:20:04:5C:AA X509v3 Authority Key Identifier: keyid:F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:11:8e:97:43:1d:6e:2d:ac:0f:14:fa:66:d2:ba:73:2a:56: d2:c7:ba:6e:23:0e:56:ba:73:f3:18:10:42:31:72:23:84:d8: 70:5d:7b:14:f7:3e:92:b7:82:ec:10:f4:57:47:5c:94:b2:f8: 7a:6d:f5:1f:fa:34:44:a0:98:a2:8a:f8:66:b6:29:2c:3d:51: d7:de:49:11:d3:94:7b:92:41:61:2c:c8:45:0c:08:84:4a:51: 0e:da:39:b3:3b:18:f4:37:88:ac:8e:23:e7:be:db:1e:38:ea: 60:96:4b:03:1a:02:84:1e:48:8f:48:e4:da:98:94:1a:cc:36: 88:1f:be:9d:fe:5e:30:7e:6f:a8:ea:ec:f7:f3:9d:5b:51:cc: 15:e5:e2:2d:fa:ae:e4:d6:c5:8f:1d:be:eb:aa:8f:2f:af:39: 78:dd:65:a2:b7:0e:b7:cf:68:64:7f:9b:c0:78:58:bf:5e:ac: 2d:8c:09:57:58:ad:a4:24:4f:d9:e6:1c:c9:3d:8d:7f:16:5b: 68:cf:55:f5:01:27:29:5a:fd:a4:1f:f1:dc:69:bc:61:ae:4d: 4e:e8:15:fa:d0:99:81:98:a0:0d:7b:43:8f:f7:11:ad:93:aa: 80:13:c8:55:4d:36:0f:63:37:07:61:f3:7f:54:30:81:d4:b0: 29:77:bf:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbr8lIeVAzNEo804ek8kXuc4OI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERB QjNFNEQ0RTAeFw0yNjAyMjgxMDQ2NDRaFw0yNjAzMDMxNTA5NDRaMDMxMTAvBgNV BAMTKEJCQ0I1QjY3N0Y0N0E0RjA2QjVENTNDRDc2OTJEOUVBMjAwNDVDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkWh9wvkKxEtNrzAs3UYLM1y7 +a6nOrIBE1tn5s8T73t4+PYOfOIt7iNrO9ElvtdywXHUqwC53g+veg495g7o8U5O 4OjXfyLV4Uww9kqmeut+YR5CxI6qHxXOeSJ2JdO+yu367vx4N+U2f8nUmktom4Cx O1NVx0U/SoUL+pNxP8spllALpXJb0QJZ1WAKnc39Gi6TAFdh4lsHFcTxYChwZh8A pMd1RrL6LDobeuWDslAHP/0yv3voFQ1TULrshdT8lhN5hkvN6ErcMmP/4CKDxMjZ a6tbn/5uyp16PSHQDv89OnTGXfRECV0hJFxdXiVKgcDloM8seRw4+5QOngmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8tbZ39HpPBrXVPNdpLZ6iAEXKowHwYDVR0j BBgwFoAU8O0yWmnY/9u4+kX0ErsjTas+TU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMS9GMEVEMzI1QTY5 RDhGRkRCQjhGQTQ1RjQxMkJCMjM0REFCM0U0RDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERBQjNF NEQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIz NERBQjNFNEQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHARjpdDHW4trA8U+mbSunMqVtLHum4jDla6 c/MYEEIxciOE2HBdexT3PpK3guwQ9FdHXJSy+Hpt9R/6NESgmKKK+Ga2KSw9Udfe SRHTlHuSQWEsyEUMCIRKUQ7aObM7GPQ3iKyOI+e+2x446mCWSwMaAoQeSI9I5NqY lBrMNogfvp3+XjB+b6jq7PfznVtRzBXl4i36ruTWxY8dvuuqjy+vOXjdZaK3DrfP aGR/m8B4WL9erC2MCVdYraQkT9nmHMk9jX8WW2jPVfUBJyla/aQf8dxpvGGuTU7o FfrQmYGYoA17Q4/3Ea2TqoATyFVNNg9jNwdh839UMIHUsCl3vwU= -----END CERTIFICATE-----Generated at Mon Mar 2 01:28:52 2026 by rpki-client