$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: mlTErmwBdGX8KK48DsP719OkHc/4E59Cgl8X0qRELOg= Subject key identifier: 08:B5:78:25:CD:24:AB:BE:4B:C2:5F:08:74:D0:7B:CE:C8:F1:71:E8 Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 60B50D5F27741ECCE937DADFD2C515C75E12D9C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: BF Signing time: Sat 28 Feb 2026 07:50:03 +0000 Manifest this update: Sat 28 Feb 2026 07:45:03 +0000 Manifest next update: Tue 03 Mar 2026 15:43:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: weJL74K4XLERYRcgzR1n5PKUK3RM/PuUKtyjsjcRSbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b5:0d:5f:27:74:1e:cc:e9:37:da:df:d2:c5:15:c7:5e:12:d9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Feb 28 07:45:03 2026 GMT Not After : Mar 3 15:43:03 2026 GMT Subject: CN=08B57825CD24ABBE4BC25F0874D07BCEC8F171E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:99:1e:ad:e5:68:67:83:f5:7c:f4:94:44: be:c9:5e:a9:b7:15:9c:12:33:c8:7c:18:82:5d:ee: bf:4a:b8:17:89:05:51:c0:c6:cb:b6:ea:29:2a:25: 95:cd:d3:49:a9:a3:18:c0:48:42:3a:93:32:19:50: 83:a9:3a:ca:ae:6a:9d:fe:62:03:2c:2c:ef:2f:0d: 38:66:e2:95:e8:ba:78:58:3d:33:3c:21:56:38:1d: fc:d1:66:7c:1b:64:fb:88:4b:08:87:89:b1:1f:6e: 38:ab:f9:dc:64:1c:2b:77:a9:29:0c:f5:c1:5b:11: 5d:e8:71:68:30:08:65:a8:55:c9:66:12:2f:92:12: 5a:78:36:d7:55:b4:17:3c:07:9b:96:0f:17:cc:63: 26:24:bd:f2:b3:56:0c:f7:bd:d9:c0:de:c3:b5:d7: 3d:0d:02:e7:4a:d8:84:12:9b:d2:ed:f3:27:2a:d9: 07:26:02:e7:a7:c5:68:2c:be:cc:8a:27:06:dc:59: 9e:20:00:af:40:e7:8e:2a:a9:c6:c4:69:f9:4f:48: 55:e3:28:ed:5d:35:98:19:81:b7:dd:da:64:ec:e5: 55:b3:cb:4c:1d:21:81:f9:a8:0a:c1:d3:51:48:ce: 35:eb:d3:e7:c8:a9:c5:5e:fc:c0:e4:d7:51:93:f2: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B5:78:25:CD:24:AB:BE:4B:C2:5F:08:74:D0:7B:CE:C8:F1:71:E8 X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b7:cc:35:c6:52:94:11:fc:f4:1d:e8:d8:34:4d:06:a2:e2: e4:a0:43:fb:db:4d:e0:02:aa:5a:c7:63:51:40:d3:49:d5:fc: 20:3e:e6:50:3f:2a:8e:af:25:26:3a:26:50:12:d9:00:16:f1: 31:b1:53:be:b2:06:be:51:c4:c0:90:23:88:40:0a:b1:86:3f: 04:1f:b5:0f:8f:3f:d9:c9:30:b6:d8:be:89:88:3b:ef:d8:2e: 2d:d9:e8:98:5a:b2:71:a4:a9:fb:0a:04:58:8e:8f:df:3d:2b: f1:ee:f1:12:a2:16:96:f7:a3:27:44:23:12:c6:3d:01:9a:7f: 7f:12:42:a9:b6:bf:23:26:b0:51:fa:52:a0:3a:8b:42:fc:93: 4f:6a:e2:db:a5:44:80:07:55:50:99:46:5a:cf:46:63:1e:3a: 56:d8:f0:32:22:93:29:45:fd:28:1b:ef:fb:1f:45:93:9b:f3: c4:06:64:73:26:02:ee:fb:1e:24:26:a0:7d:bb:77:1c:96:ad: ee:7e:59:bf:6a:c7:e7:7f:76:d9:3b:68:f1:f3:54:56:7c:70: ef:b5:53:83:2d:a6:31:c2:f0:48:4f:b0:db:b9:a0:46:57:f7: bd:8b:96:16:41:8b:81:43:b3:76:31:09:1a:17:87:58:b1:5c: f8:08:bd:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLUNXyd0HszpN9rf0sUVx14S2cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNjAyMjgwNzQ1MDNaFw0yNjAzMDMxNTQzMDNaMDMxMTAvBgNV BAMTKDA4QjU3ODI1Q0QyNEFCQkU0QkMyNUYwODc0RDA3QkNFQzhGMTcxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbJkereVoZ4P1fPSURL7JXqm3 FZwSM8h8GIJd7r9KuBeJBVHAxsu26ikqJZXN00mpoxjASEI6kzIZUIOpOsquap3+ YgMsLO8vDThm4pXounhYPTM8IVY4HfzRZnwbZPuISwiHibEfbjir+dxkHCt3qSkM 9cFbEV3ocWgwCGWoVclmEi+SElp4NtdVtBc8B5uWDxfMYyYkvfKzVgz3vdnA3sO1 1z0NAudK2IQSm9Lt8ycq2QcmAuenxWgsvsyKJwbcWZ4gAK9A544qqcbEaflPSFXj KO1dNZgZgbfd2mTs5VWzy0wdIYH5qArB01FIzjXr0+fIqcVe/MDk11GT8gIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCLV4Jc0kq75Lwl8IdNB7zsjxcegwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG3zDXGUpQR/PQd6Ng0TQai4uSgQ/vbTeAC qlrHY1FA00nV/CA+5lA/Ko6vJSY6JlAS2QAW8TGxU76yBr5RxMCQI4hACrGGPwQf tQ+PP9nJMLbYvomIO+/YLi3Z6JhasnGkqfsKBFiOj989K/Hu8RKiFpb3oydEIxLG PQGaf38SQqm2vyMmsFH6UqA6i0L8k09q4tulRIAHVVCZRlrPRmMeOlbY8DIikylF /Sgb7/sfRZOb88QGZHMmAu77HiQmoH27dxyWre5+Wb9qx+d/dtk7aPHzVFZ8cO+1 U4MtpjHC8EhPsNu5oEZX972LlhZBi4FDs3YxCRoXh1ixXPgIvVw= -----END CERTIFICATE-----Generated at Mon Mar 2 07:21:57 2026 by rpki-client