$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: nmOdqslsGw/Gkt65Z8Rdr13/OlLB/Ka8+LGV4sbyE2o= Subject key identifier: D3:3D:4E:4B:04:4C:7F:CE:31:D8:34:2D:D7:1B:A9:DA:FA:8E:F6:FD Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 7E6B751E1B0D9C9E732B6D4675E220AA0C9784CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 0126 Signing time: Sat 28 Feb 2026 18:01:08 +0000 Manifest this update: Sat 28 Feb 2026 17:56:08 +0000 Manifest next update: Wed 04 Mar 2026 02:51:08 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: HuESpmfi9tCtMPUw5vyniWTC707owOBWmkPnse6ljZo=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6b:75:1e:1b:0d:9c:9e:73:2b:6d:46:75:e2:20:aa:0c:97:84:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Feb 28 17:56:08 2026 GMT Not After : Mar 4 02:51:08 2026 GMT Subject: CN=D33D4E4B044C7FCE31D8342DD71BA9DAFA8EF6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:24:21:dd:79:d3:26:f9:23:ca:2e:a0:6e: b5:b6:80:cb:e8:d0:bd:ce:3e:ba:39:23:f7:e0:f9: 23:cf:66:29:85:29:48:8a:a9:c0:0d:25:ed:a8:04: a7:a5:e2:e8:e6:0a:b2:ec:40:f8:e6:59:ec:1a:56: 3d:a9:54:e7:41:fa:3c:06:af:e2:56:49:92:5d:90: 81:90:a0:20:3d:f1:29:e8:7b:01:b5:f6:79:3c:31: a5:6a:99:7c:82:fd:9d:fa:45:8e:33:8e:8f:ed:5f: 7a:cb:2d:d8:b0:f5:5b:e9:5d:19:ec:c7:ec:ae:a6: 17:1a:dc:bd:05:ee:21:7d:4b:2a:fa:98:5a:90:d4: 97:cf:e1:a8:95:a7:b5:3b:9f:12:f9:64:fc:2e:c9: 4f:b6:05:22:55:f8:06:4f:a0:f8:7f:44:78:22:43: d2:ad:99:27:3a:82:ff:2c:3b:fe:8c:81:d7:25:e9: 4c:84:bd:7e:e4:35:dc:ea:39:ba:00:8b:ef:ed:a8: 94:63:51:83:55:d4:48:5a:0e:ee:ef:76:75:94:df: 10:26:c4:c9:7a:83:39:85:50:b8:25:59:ee:a1:47: e8:24:1a:ef:b9:11:cb:ba:54:55:25:0a:01:7d:8a: 58:4f:4d:2f:31:54:5f:28:eb:ac:ac:02:40:ec:4a: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3D:4E:4B:04:4C:7F:CE:31:D8:34:2D:D7:1B:A9:DA:FA:8E:F6:FD X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:12:82:20:a5:86:20:12:d6:25:8a:4e:82:2f:95:cc:09:21: 57:d3:a0:a1:d6:3f:93:52:c9:b7:31:e1:1a:d8:e0:09:99:a5: 9f:02:d9:a0:4c:c0:7d:db:51:fc:a7:47:4a:6a:40:36:83:92: 57:d6:b1:f3:c3:34:cd:c2:d0:8e:59:3f:ee:fc:fc:ba:46:44: 0b:c1:6e:e3:a0:d2:bf:e6:75:7c:c3:9b:d4:2e:c3:47:d1:a2: cd:8b:5d:24:ba:5f:f7:c2:dd:c0:c5:4e:a9:da:bb:5e:a2:fc: 9f:34:e4:ff:33:be:3d:b0:ce:df:93:9d:6d:00:d5:0b:8d:10: a5:82:71:30:c3:e0:a4:e8:2f:c5:ee:52:5e:74:40:61:cc:c3: 8e:53:94:8f:2a:16:a6:02:86:c6:52:19:70:b1:4b:02:52:98: 6f:17:d9:50:d3:15:ad:18:d5:bf:5e:71:37:68:e1:cf:ef:59: 8a:f9:6d:d4:60:cd:2a:4a:27:12:27:c6:8b:98:bd:b8:4d:07: 9d:9b:2a:8c:36:36:26:76:31:af:42:eb:2f:5e:32:49:f4:78: e0:88:c7:b8:eb:06:09:17:0b:83:22:71:6a:42:01:b8:fa:be: 16:e1:fd:dd:e2:0a:8b:c2:a2:b6:df:98:0c:75:8a:ca:e8:7b: a4:b1:42:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmt1HhsNnJ5zK21GdeIgqgyXhMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNjAyMjgxNzU2MDhaFw0yNjAzMDQwMjUxMDhaMDMxMTAvBgNV BAMTKEQzM0Q0RTRCMDQ0QzdGQ0UzMUQ4MzQyREQ3MUJBOURBRkE4RUY2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4SQh3XnTJvkjyi6gbrW2gMvo 0L3OPro5I/fg+SPPZimFKUiKqcANJe2oBKel4ujmCrLsQPjmWewaVj2pVOdB+jwG r+JWSZJdkIGQoCA98SnoewG19nk8MaVqmXyC/Z36RY4zjo/tX3rLLdiw9VvpXRns x+yuphca3L0F7iF9Syr6mFqQ1JfP4aiVp7U7nxL5ZPwuyU+2BSJV+AZPoPh/RHgi Q9KtmSc6gv8sO/6Mgdcl6UyEvX7kNdzqOboAi+/tqJRjUYNV1EhaDu7vdnWU3xAm xMl6gzmFULglWe6hR+gkGu+5Ecu6VFUlCgF9ilhPTS8xVF8o66ysAkDsSo5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0z1OSwRMf84x2DQt1xup2vqO9v0wHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgSgiClhiAS1iWKToIvlcwJIVfToKHWP5NS ybcx4RrY4AmZpZ8C2aBMwH3bUfynR0pqQDaDklfWsfPDNM3C0I5ZP+78/LpGRAvB buOg0r/mdXzDm9Quw0fRos2LXSS6X/fC3cDFTqnau16i/J805P8zvj2wzt+TnW0A 1QuNEKWCcTDD4KToL8XuUl50QGHMw45TlI8qFqYChsZSGXCxSwJSmG8X2VDTFa0Y 1b9ecTdo4c/vWYr5bdRgzSpKJxInxouYvbhNB52bKow2NiZ2Ma9C6y9eMkn0eOCI x7jrBgkXC4MicWpCAbj6vhbh/d3iCovCorbfmAx1isroe6SxQrI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:04 2026 by rpki-client