$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: SeEosf3ad3tTvcU+c3Ay8/oSWA5j1nUgNlS/6ORqZZo= Subject key identifier: 06:BC:C5:AE:BB:C1:AB:37:C9:18:D3:D5:23:7B:AA:83:D3:F0:A7:B8 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 1BA8258E9ED9257B7A7F815EDD6FA990670E7A5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 014D Signing time: Sat 28 Feb 2026 10:31:27 +0000 Manifest this update: Sat 28 Feb 2026 10:26:27 +0000 Manifest next update: Tue 03 Mar 2026 19:08:27 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: o+Qz2q/ImyF+udiJe6fY3UJFTweJfjoSmpCN8tlxqJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a8:25:8e:9e:d9:25:7b:7a:7f:81:5e:dd:6f:a9:90:67:0e:7a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Feb 28 10:26:27 2026 GMT Not After : Mar 3 19:08:27 2026 GMT Subject: CN=06BCC5AEBBC1AB37C918D3D5237BAA83D3F0A7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:76:cc:f8:85:7a:10:db:69:12:d5:53:17: 54:ad:d4:c0:5b:c4:ea:db:36:d5:2a:e0:8d:ac:69: 2a:15:1b:72:b7:2e:61:4f:8d:5e:7b:5e:42:36:5b: 2d:11:74:fd:77:91:79:32:6e:11:83:e3:e0:96:d9: a4:87:29:29:c8:7b:18:84:a2:fa:98:4a:0f:35:81: a2:a7:c3:84:12:27:55:23:5c:76:ca:4c:f3:71:67: c4:26:08:cb:90:1d:e2:23:d9:4c:7c:7c:36:83:6e: 55:d2:38:0e:5e:c7:3e:84:b3:3b:58:42:4d:6e:cb: 5c:97:77:9d:06:dd:c7:f9:ea:36:b0:83:59:d0:45: 29:3e:16:d3:86:57:35:2c:dd:f5:7c:46:d3:0f:ae: fa:b2:ff:f3:94:b9:6d:92:53:70:1f:51:61:71:9e: 47:5b:f8:dd:7e:c6:8f:14:5c:7a:be:fa:4d:bb:f9: f0:f2:f5:78:92:63:89:7d:f8:45:13:40:57:dc:68: a2:c8:02:15:9d:0c:04:c0:bf:99:99:89:8b:fa:3b: 80:d2:08:07:62:9c:98:27:ca:7b:29:40:c9:24:73: de:27:ea:88:8b:15:b7:a1:51:00:82:b5:70:75:64: 7a:6c:f3:06:fd:0f:66:43:01:f2:94:e5:01:65:98: da:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BC:C5:AE:BB:C1:AB:37:C9:18:D3:D5:23:7B:AA:83:D3:F0:A7:B8 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:43:09:41:d3:ed:82:11:f7:df:e7:54:70:f2:b1:17:14:2a: 93:9e:f6:f6:c2:b5:37:a3:68:76:62:ce:ae:e8:67:8a:8e:fa: 23:ab:7e:30:32:2b:b6:0e:67:e1:86:2b:d5:e7:89:23:0d:aa: da:43:63:14:b3:34:22:9a:be:8f:89:60:95:2b:02:52:8c:ce: ed:dc:bc:16:60:8f:bd:0b:f4:d7:03:9e:ec:03:00:1c:4a:ef: da:d3:7d:7a:db:30:6e:98:83:4e:e1:d9:94:83:18:f4:2a:aa: 9a:c4:1e:26:fc:70:77:31:fe:18:f9:ad:42:c6:c1:89:b4:5f: c6:3b:f6:10:b9:da:a5:82:60:a6:70:46:89:76:ee:8f:e6:f6: 0d:ba:a5:44:81:d6:d2:47:a7:52:78:56:6a:0f:57:77:01:f2: 30:ca:42:a4:62:9e:92:be:db:6a:b2:31:0c:bf:cc:90:1a:12: 75:2a:f7:ad:92:ec:97:1b:83:50:06:e5:04:30:78:e1:21:9d: a8:53:e5:f3:38:89:21:65:1b:20:c3:68:48:b0:a1:e6:29:ec: 52:b5:42:66:cc:a3:2e:11:80:34:3e:8b:89:6c:39:e8:94:85: ab:69:1e:ae:39:e5:a5:6a:7e:4c:6a:9b:e7:09:fd:b7:bf:c4: 09:0c:5a:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6gljp7ZJXt6f4Fe3W+pkGcOelowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNjAyMjgxMDI2MjdaFw0yNjAzMDMxOTA4MjdaMDMxMTAvBgNV BAMTKDA2QkNDNUFFQkJDMUFCMzdDOTE4RDNENTIzN0JBQTgzRDNGMEE3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJnbM+IV6ENtpEtVTF1St1MBb xOrbNtUq4I2saSoVG3K3LmFPjV57XkI2Wy0RdP13kXkybhGD4+CW2aSHKSnIexiE ovqYSg81gaKnw4QSJ1UjXHbKTPNxZ8QmCMuQHeIj2Ux8fDaDblXSOA5exz6EsztY Qk1uy1yXd50G3cf56jawg1nQRSk+FtOGVzUs3fV8RtMPrvqy//OUuW2SU3AfUWFx nkdb+N1+xo8UXHq++k27+fDy9XiSY4l9+EUTQFfcaKLIAhWdDATAv5mZiYv6O4DS CAdinJgnynspQMkkc94n6oiLFbehUQCCtXB1ZHps8wb9D2ZDAfKU5QFlmNohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBrzFrrvBqzfJGNPVI3uqg9Pwp7gwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANpDCUHT7YIR99/nVHDysRcUKpOe9vbCtTej aHZizq7oZ4qO+iOrfjAyK7YOZ+GGK9XniSMNqtpDYxSzNCKavo+JYJUrAlKMzu3c vBZgj70L9NcDnuwDABxK79rTfXrbMG6Yg07h2ZSDGPQqqprEHib8cHcx/hj5rULG wYm0X8Y79hC52qWCYKZwRol27o/m9g26pUSB1tJHp1J4VmoPV3cB8jDKQqRinpK+ 22qyMQy/zJAaEnUq962S7Jcbg1AG5QQweOEhnahT5fM4iSFlGyDDaEiwoeYp7FK1 QmbMoy4RgDQ+i4lsOeiUhatpHq455aVqfkxqm+cJ/be/xAkMWps= -----END CERTIFICATE-----Generated at Mon Mar 2 02:26:07 2026 by rpki-client