$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: laaRp3XrSD4ptI61r+8h7EOr+/NUWrYKPE0QhaNAMSY= Subject key identifier: C7:19:6B:86:1F:64:42:4A:C5:17:71:B9:2D:84:B4:8F:18:02:FD:FF Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 2BAEFCD65C1A7B371D246188BD2A9F4042F701DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02DC Signing time: Sat 28 Feb 2026 09:40:03 +0000 Manifest this update: Sat 28 Feb 2026 09:35:03 +0000 Manifest next update: Tue 03 Mar 2026 16:21:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: lzLhIyMfFiaJIq5IzS0TMUS8vys/irEGdD9bpvRLP6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ae:fc:d6:5c:1a:7b:37:1d:24:61:88:bd:2a:9f:40:42:f7:01:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Feb 28 09:35:03 2026 GMT Not After : Mar 3 16:21:03 2026 GMT Subject: CN=C7196B861F64424AC51771B92D84B48F1802FDFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:d7:14:85:a1:d5:a5:a7:c5:16:37:78:5d: 58:94:18:6f:2d:e3:db:d1:6c:16:d8:61:6e:48:0f: 62:e3:5a:54:2b:59:71:7c:09:10:3e:2c:48:65:4e: b2:07:dc:15:7d:93:7b:4c:e1:ac:6b:93:68:2b:94: 3b:3a:c3:8e:aa:fb:52:dd:40:ac:bd:29:fa:35:ad: f7:11:f7:bc:16:ac:4f:92:39:41:b1:4b:b1:f7:92: 1e:ca:b5:3f:50:bd:67:33:99:34:b9:14:c9:6d:f9: 66:19:04:59:4b:20:5d:fe:6a:b9:25:9f:fd:90:d6: d3:91:57:1e:5a:f6:9b:7a:dd:40:ab:44:da:a2:57: 2e:03:7c:2b:3e:84:ed:60:0d:a9:d4:89:8d:95:f0: 2d:d4:5c:bd:75:f4:a9:10:07:e8:75:00:2a:c1:ac: 39:70:ed:2c:da:d8:72:5a:13:be:1f:12:ad:ae:e1: 62:9b:cc:15:da:28:21:c5:42:e2:85:a0:cb:28:b1: 58:cb:be:22:8e:41:0e:64:4b:2a:f4:05:0d:2d:59: e2:e7:f1:4d:6c:0f:fd:20:a1:b9:04:ad:63:2e:83: 8a:d4:12:cd:11:05:45:64:88:68:af:a0:70:36:72: ac:cb:c9:d5:3e:2e:5a:28:b7:e7:53:db:a1:e7:7d: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:6B:86:1F:64:42:4A:C5:17:71:B9:2D:84:B4:8F:18:02:FD:FF X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:28:4f:55:61:62:17:6d:cd:8e:60:b9:63:17:27:0b:51:f4: ce:5a:7d:66:69:4c:a5:d6:7e:77:0e:41:80:5a:f0:c2:bb:1b: 30:80:7c:cf:a1:90:bb:01:1d:75:be:31:fe:2c:8d:f6:28:27: 9c:b0:cf:24:5d:9c:ce:f6:84:19:a1:b6:44:44:8b:53:9e:9b: 6b:fa:2f:63:ca:00:89:a1:29:87:46:43:63:c2:d5:a4:60:42: f9:2d:8a:ac:68:2a:09:ce:44:b9:c7:6a:93:f2:1f:04:e1:87: 8d:f1:2f:f5:fa:9f:44:87:4f:96:b5:ad:13:07:a9:0f:e2:a0: 9b:14:3b:26:1a:63:d8:60:2b:82:2e:d8:20:3c:fa:03:16:d5: 4b:0d:e5:9d:bb:fd:25:8e:18:27:5d:05:e4:81:21:3e:ea:83: 55:36:c0:3a:80:ef:46:c1:93:f1:e2:60:22:f6:f2:d7:96:36: 59:7a:36:de:b8:41:13:0f:bf:8c:20:97:03:02:98:fa:1f:0a: ef:4c:6d:39:d6:f9:3d:eb:56:8a:38:70:28:ef:7f:68:4e:5d: 9e:62:3f:09:6a:81:cd:04:49:c0:07:4e:4e:49:42:84:04:0b: 5d:7b:20:9d:73:77:7e:05:8c:a8:cf:a5:d5:29:48:c6:ce:e8: 68:f4:8e:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6781lwaezcdJGGIvSqfQEL3AdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNjAyMjgwOTM1MDNaFw0yNjAzMDMxNjIxMDNaMDMxMTAvBgNV BAMTKEM3MTk2Qjg2MUY2NDQyNEFDNTE3NzFCOTJEODRCNDhGMTgwMkZERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFNcUhaHVpafFFjd4XViUGG8t 49vRbBbYYW5ID2LjWlQrWXF8CRA+LEhlTrIH3BV9k3tM4axrk2grlDs6w46q+1Ld QKy9Kfo1rfcR97wWrE+SOUGxS7H3kh7KtT9QvWczmTS5FMlt+WYZBFlLIF3+arkl n/2Q1tORVx5a9pt63UCrRNqiVy4DfCs+hO1gDanUiY2V8C3UXL119KkQB+h1ACrB rDlw7Sza2HJaE74fEq2u4WKbzBXaKCHFQuKFoMsosVjLviKOQQ5kSyr0BQ0tWeLn 8U1sD/0gobkErWMug4rUEs0RBUVkiGivoHA2cqzLydU+Lloot+dT26HnfQpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxxlrhh9kQkrFF3G5LYS0jxgC/f8wHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsoT1VhYhdtzY5guWMXJwtR9M5afWZpTKXW fncOQYBa8MK7GzCAfM+hkLsBHXW+Mf4sjfYoJ5ywzyRdnM72hBmhtkREi1Oem2v6 L2PKAImhKYdGQ2PC1aRgQvktiqxoKgnORLnHapPyHwThh43xL/X6n0SHT5a1rRMH qQ/ioJsUOyYaY9hgK4Iu2CA8+gMW1UsN5Z27/SWOGCddBeSBIT7qg1U2wDqA70bB k/HiYCL28teWNll6Nt64QRMPv4wglwMCmPofCu9MbTnW+T3rVoo4cCjvf2hOXZ5i Pwlqgc0EScAHTk5JQoQEC117IJ1zd34FjKjPpdUpSMbO6Gj0jvE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:43 2026 by rpki-client