$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: yZbf1+VSozhNSYAn/DemsWhFGp5bPmw/FrQr+Ch1fs8= Subject key identifier: 9B:E6:55:F0:24:EA:FA:58:E4:39:46:59:90:01:F9:7B:25:3D:08:31 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 4A5208B6EB81F4C72177A4F54AD8ECF7F8FEE1C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0271 Signing time: Sat 28 Feb 2026 15:21:42 +0000 Manifest this update: Sat 28 Feb 2026 15:16:42 +0000 Manifest next update: Tue 03 Mar 2026 17:06:42 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: Ume0pacZ42hjKUBLAr97jfcwWhryEzIxRi96SXskfaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:52:08:b6:eb:81:f4:c7:21:77:a4:f5:4a:d8:ec:f7:f8:fe:e1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Feb 28 15:16:42 2026 GMT Not After : Mar 3 17:06:42 2026 GMT Subject: CN=9BE655F024EAFA58E43946599001F97B253D0831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b4:d2:ac:40:33:30:b5:8d:4d:f1:01:df:d2: 51:ee:34:ba:ae:37:8e:9c:6c:60:35:ee:90:42:d8: 37:32:f1:e3:6c:93:5c:08:68:5d:16:ee:b2:17:81: f7:22:4d:3a:9b:ec:b6:80:7b:f6:dc:8d:9c:dc:e8: 3e:13:27:d6:ab:f1:5b:9a:77:27:85:f9:7d:63:f9: 1e:bb:bd:55:08:fd:da:14:38:cc:fc:2e:f6:94:96: 56:6d:db:80:9f:57:46:9f:71:e9:60:32:12:72:d8: 4a:52:c1:52:04:5e:c8:fc:bc:6a:63:c0:24:b8:b7: 59:31:9e:e3:ee:82:20:6e:45:d0:17:62:43:ad:fe: c9:18:5b:31:c1:3a:c9:b9:79:d9:71:85:29:a9:23: df:de:f8:de:a1:2b:71:f7:d7:c3:37:e4:10:ba:02: de:fc:4d:f6:57:84:7d:13:d7:48:1c:0b:42:41:9b: b4:ed:47:3e:26:09:33:f2:b1:bd:71:31:63:dd:6b: e0:6f:1a:3f:b3:72:e2:4f:5e:cf:b3:ab:08:99:d2: 21:48:61:4d:86:1f:f5:e9:82:f7:2f:25:0f:16:86: 61:93:35:8e:72:77:17:90:33:c9:6e:99:87:be:c9: 6a:03:32:54:00:6c:66:9f:1c:91:4b:69:d4:66:7e: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:55:F0:24:EA:FA:58:E4:39:46:59:90:01:F9:7B:25:3D:08:31 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3b:6a:ac:a3:3e:1f:21:85:88:51:98:2e:33:75:ae:79:d8: 76:2e:de:f1:2b:05:bd:10:f4:38:75:34:fd:76:6a:b5:4e:ff: 56:f7:3d:c0:bb:05:51:3c:dc:61:10:d7:c4:1a:e2:f2:68:02: 27:89:27:4c:b3:2a:42:71:ab:dd:73:6c:74:4c:af:06:ce:cb: f0:85:e0:27:d3:d0:63:0a:a5:0f:68:1c:e7:dd:a6:bd:44:cc: 4c:1e:2c:21:04:5e:5f:3d:af:ac:74:b2:00:7d:7d:12:d9:52: cb:02:11:61:54:9f:97:61:0a:dc:0e:b6:44:b2:1d:fa:f9:f1: c8:8f:ac:01:6c:7d:63:3b:5b:4f:a4:7a:7f:dc:59:5e:3b:79: cb:d5:4d:c9:de:d5:7c:e8:8e:ba:56:e9:76:b8:4f:d3:ee:b2: 15:87:7a:0d:b8:aa:1b:41:17:b9:2a:2b:48:bd:d3:ac:19:44: 8f:43:9d:ea:21:79:78:59:57:af:a4:8b:54:ee:a4:2b:85:ef: d6:4e:b2:c7:78:ad:cb:d9:6c:24:c0:cb:d9:dc:84:36:e0:e6: 7c:9a:d7:12:66:82:a4:f3:51:36:ab:01:e9:e4:2b:48:6c:9c: 20:2f:71:c3:69:77:aa:9f:cd:12:79:3e:8f:70:d3:da:5e:9a: df:3f:7a:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlIItuuB9Mchd6T1Stjs9/j+4cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNjAyMjgxNTE2NDJaFw0yNjAzMDMxNzA2NDJaMDMxMTAvBgNV BAMTKDlCRTY1NUYwMjRFQUZBNThFNDM5NDY1OTkwMDFGOTdCMjUzRDA4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1tNKsQDMwtY1N8QHf0lHuNLqu N46cbGA17pBC2Dcy8eNsk1wIaF0W7rIXgfciTTqb7LaAe/bcjZzc6D4TJ9ar8Vua dyeF+X1j+R67vVUI/doUOMz8LvaUllZt24CfV0afcelgMhJy2EpSwVIEXsj8vGpj wCS4t1kxnuPugiBuRdAXYkOt/skYWzHBOsm5edlxhSmpI9/e+N6hK3H318M35BC6 At78TfZXhH0T10gcC0JBm7TtRz4mCTPysb1xMWPda+BvGj+zcuJPXs+zqwiZ0iFI YU2GH/XpgvcvJQ8WhmGTNY5ydxeQM8lumYe+yWoDMlQAbGafHJFLadRmfk8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+ZV8CTq+ljkOUZZkAH5eyU9CDEwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo7aqyjPh8hhYhRmC4zda552HYu3vErBb0Q 9Dh1NP12arVO/1b3PcC7BVE83GEQ18Qa4vJoAieJJ0yzKkJxq91zbHRMrwbOy/CF 4CfT0GMKpQ9oHOfdpr1EzEweLCEEXl89r6x0sgB9fRLZUssCEWFUn5dhCtwOtkSy Hfr58ciPrAFsfWM7W0+ken/cWV47ecvVTcne1XzojrpW6Xa4T9PushWHeg24qhtB F7kqK0i906wZRI9DneoheXhZV6+ki1TupCuF79ZOssd4rcvZbCTAy9nchDbg5nya 1xJmgqTzUTarAenkK0hsnCAvccNpd6qfzRJ5Po9w09pemt8/elM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:57 2026 by rpki-client