$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: OEEpfDruYGab4iAfNltPJeX3WctneZoNuGasCuO7udk= Subject key identifier: 3A:15:A8:E9:D9:C1:C1:A3:30:8F:50:C7:0C:A9:CC:AB:FD:E0:51:75 Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 5FB23D2BB10AD9EBBAC35F78D55B97AA466FBCBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: F0 Signing time: Fri 27 Feb 2026 23:50:01 +0000 Manifest this update: Fri 27 Feb 2026 23:45:01 +0000 Manifest next update: Tue 03 Mar 2026 06:55:01 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: xYnumRtZB/cPNrsLIg2PYtbLrY1SjglDipHSNwwOuCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b2:3d:2b:b1:0a:d9:eb:ba:c3:5f:78:d5:5b:97:aa:46:6f:bc:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Feb 27 23:45:01 2026 GMT Not After : Mar 3 06:55:01 2026 GMT Subject: CN=3A15A8E9D9C1C1A3308F50C70CA9CCABFDE05175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:6a:bd:1c:a9:91:73:eb:b6:b8:a3:ce:51: 29:87:09:ac:34:0f:ca:09:c7:1a:22:30:ca:4d:bd: 98:97:4d:c1:76:34:fc:51:79:72:fa:20:70:3e:eb: 42:74:d7:f2:6e:e5:48:f6:06:5f:22:bb:5a:87:09: 73:e1:79:c1:95:16:01:50:ca:62:32:73:e7:78:09: 4d:13:f4:a8:5b:1a:58:79:b3:a3:5e:12:5f:80:b0: 7e:af:b4:af:1c:1b:cd:9b:de:ea:bc:d2:d4:8f:1e: ed:d1:71:c2:64:17:b6:ef:77:3e:64:9b:8c:11:28: 71:b7:8d:88:a8:ae:f7:4c:bb:ed:a5:55:e0:cd:9a: 5a:b1:d9:45:fb:4d:74:81:31:2c:1b:4a:56:c1:b3: 78:9e:76:7e:cd:17:f9:dd:b4:a8:6d:64:fd:b0:d1: c6:44:e2:e2:63:e0:06:47:5c:70:ad:c3:36:79:49: 52:83:05:2f:ca:67:95:fb:40:85:5c:ef:f2:18:95: c5:62:97:14:21:df:34:1e:12:a1:75:81:f9:64:d9: db:ec:99:c5:c5:09:ba:a8:c1:a5:f6:11:49:1f:74: 67:04:a5:d5:b2:c7:1d:84:4e:7a:fc:ff:bd:18:a2: 3c:d7:c7:63:59:2d:86:c0:74:ce:07:34:59:98:3c: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:15:A8:E9:D9:C1:C1:A3:30:8F:50:C7:0C:A9:CC:AB:FD:E0:51:75 X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a5:58:7a:51:4e:e5:86:7c:60:86:f4:50:1c:9d:fc:9e:d5: 9c:a9:46:9a:de:71:84:d5:cd:c3:60:bd:79:35:9d:b8:d4:3b: 17:a0:ca:f9:da:e4:95:12:61:ed:e7:e8:73:1d:42:68:03:88: 3d:24:7d:66:e0:94:88:c7:b6:07:48:19:c3:d5:73:13:d8:e7: 4d:51:ca:3f:f6:5c:7d:16:aa:50:fa:db:2b:f7:b8:8e:38:94: 87:dd:5d:0c:5f:e1:43:ea:fa:92:64:32:5d:e1:db:18:4e:cf: 66:15:2a:e0:4e:04:2c:ef:36:cd:00:63:a4:0a:52:98:80:cb: da:48:00:64:a7:fd:0b:26:09:ea:09:09:9c:b4:42:74:0a:d0: 7e:f7:d0:79:81:1d:4e:9c:98:3b:42:57:46:63:00:b6:3d:93: f4:3b:b1:dd:9c:36:ad:6b:6a:62:99:f5:43:15:5c:0d:9f:15: 29:44:bc:db:bc:6a:79:16:3c:db:1b:ad:99:05:7c:f0:c7:35: b6:9a:dd:95:d2:d0:f4:1a:6c:a5:7d:0a:77:c8:78:93:25:a6: cc:48:14:73:da:3b:82:19:be:d6:8d:8e:cf:b4:90:14:55:a6: df:bc:d8:02:eb:9a:87:07:0f:eb:f3:bb:33:32:01:ff:53:c1: ba:27:22:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7I9K7EK2eu6w1941VuXqkZvvLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNjAyMjcyMzQ1MDFaFw0yNjAzMDMwNjU1MDFaMDMxMTAvBgNV BAMTKDNBMTVBOEU5RDlDMUMxQTMzMDhGNTBDNzBDQTlDQ0FCRkRFMDUxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcWq9HKmRc+u2uKPOUSmHCaw0 D8oJxxoiMMpNvZiXTcF2NPxReXL6IHA+60J01/Ju5Uj2Bl8iu1qHCXPhecGVFgFQ ymIyc+d4CU0T9KhbGlh5s6NeEl+AsH6vtK8cG82b3uq80tSPHu3RccJkF7bvdz5k m4wRKHG3jYiorvdMu+2lVeDNmlqx2UX7TXSBMSwbSlbBs3iedn7NF/ndtKhtZP2w 0cZE4uJj4AZHXHCtwzZ5SVKDBS/KZ5X7QIVc7/IYlcVilxQh3zQeEqF1gflk2dvs mcXFCbqowaX2EUkfdGcEpdWyxx2ETnr8/70YojzXx2NZLYbAdM4HNFmYPJ1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhWo6dnBwaMwj1DHDKnMq/3gUXUwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2lWHpRTuWGfGCG9FAcnfye1ZypRprecYTV zcNgvXk1nbjUOxegyvna5JUSYe3n6HMdQmgDiD0kfWbglIjHtgdIGcPVcxPY501R yj/2XH0WqlD62yv3uI44lIfdXQxf4UPq+pJkMl3h2xhOz2YVKuBOBCzvNs0AY6QK UpiAy9pIAGSn/QsmCeoJCZy0QnQK0H730HmBHU6cmDtCV0ZjALY9k/Q7sd2cNq1r amKZ9UMVXA2fFSlEvNu8ankWPNsbrZkFfPDHNbaa3ZXS0PQabKV9CnfIeJMlpsxI FHPaO4IZvtaNjs+0kBRVpt+82ALrmocHD+vzuzMyAf9TwbonIn0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:21 2026 by rpki-client