$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: G9N1eZJkxNqpUb6zQwGnfCIPeW7ASOaBizdgG9asHUo= Subject key identifier: E4:C5:ED:F0:76:28:66:F7:5D:8F:17:DE:B5:43:3C:29:40:0E:09:D4 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 1A2235BEDB9003262E6F1E4296623E83EFC7C5A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: 01CF Signing time: Sat 28 Feb 2026 13:52:05 +0000 Manifest this update: Sat 28 Feb 2026 13:47:05 +0000 Manifest next update: Tue 03 Mar 2026 14:16:05 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: h32xUE9KaTwlGr8uHx9ZydU/BbzN7fPH1g2cFyND6qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:22:35:be:db:90:03:26:2e:6f:1e:42:96:62:3e:83:ef:c7:c5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: Feb 28 13:47:05 2026 GMT Not After : Mar 3 14:16:05 2026 GMT Subject: CN=E4C5EDF0762866F75D8F17DEB5433C29400E09D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:6d:3e:6f:01:1d:84:64:fb:25:0b:44:f1: d4:00:d1:67:43:43:c7:3a:8c:dc:4e:6b:f7:8a:6b: 27:2a:05:36:b4:31:36:e5:db:c3:7d:a6:66:b1:01: 4c:f7:53:e8:d4:a5:1f:d7:4c:29:11:89:39:4e:8f: 88:73:8b:92:f2:cc:59:dd:ec:17:5e:5a:6c:74:2a: 44:ec:36:dc:ea:b4:72:40:13:b8:09:b7:98:a6:38: 25:e8:10:97:79:35:17:15:15:45:f4:c8:3f:58:ef: 60:b0:cf:7e:0a:f2:b7:13:92:ee:74:1d:b4:54:f8: 2e:f6:42:a2:0b:eb:8f:5d:bf:17:51:06:1b:f0:d8: 3b:f4:e0:6f:ee:43:13:e6:cb:58:9f:78:e5:87:0b: b4:8a:2e:01:e6:43:50:7c:66:82:91:eb:90:b9:78: 26:3d:aa:cc:2b:0e:49:ce:4f:12:75:c2:cf:d4:23: fe:71:42:23:58:95:db:a5:02:c4:6f:94:d2:84:dd: 31:ee:a3:ee:df:c2:aa:f5:18:f6:f0:e1:be:70:dd: af:77:01:92:81:ca:11:10:a4:53:a6:02:d4:1a:14: fb:3c:48:8e:f5:50:4c:43:dd:32:d2:a2:4a:ea:f2: 2c:f2:74:b1:38:48:b7:ec:6d:36:50:2f:3c:08:30: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C5:ED:F0:76:28:66:F7:5D:8F:17:DE:B5:43:3C:29:40:0E:09:D4 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:65:0a:d7:e2:83:91:6f:5d:8f:b8:18:03:08:db:ad:cd:f4: 7e:5e:1a:ea:85:f0:ee:65:00:88:a2:9f:3c:54:6a:e9:c7:b8: ac:b9:9d:0b:fe:f6:22:09:8d:37:9e:af:f4:e8:da:27:e6:ac: f7:55:69:76:c0:49:90:32:6c:96:dd:a3:bf:fe:43:be:c4:b8: 3f:8c:87:95:da:dc:52:d7:0a:3b:b6:07:31:8a:74:de:d6:1c: 06:89:cf:cc:94:bf:4e:a0:db:3a:c8:47:97:d6:1a:36:f7:58: d6:0c:bb:24:bf:44:5a:e6:c0:7a:84:5f:33:9c:a6:53:1c:50: 5a:d7:ea:8c:35:43:a1:2e:ff:25:0c:fa:7e:dc:95:59:6f:a6: e2:1b:9b:ef:4e:04:4a:25:ea:ab:07:24:04:c5:f3:40:b7:c1: 92:da:33:c5:90:65:38:0c:47:8e:09:81:62:85:a1:ac:a7:14: 74:74:83:53:1c:f4:18:92:7b:61:24:d2:6e:7b:60:6a:b1:94: 0e:df:32:76:72:eb:ee:1c:d1:a0:88:e3:39:60:bb:8c:fd:8d: f6:8a:ea:3f:44:d7:ed:f4:a6:8a:e1:36:8a:d3:4f:95:c0:37: 34:85:44:7b:9c:7d:61:5a:d9:59:a6:66:f0:e3:23:db:ac:d8: da:dd:e7:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiI1vtuQAyYubx5ClmI+g+/HxacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNjAyMjgxMzQ3MDVaFw0yNjAzMDMxNDE2MDVaMDMxMTAvBgNV BAMTKEU0QzVFREYwNzYyODY2Rjc1RDhGMTdERUI1NDMzQzI5NDAwRTA5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSW0+bwEdhGT7JQtE8dQA0WdD Q8c6jNxOa/eKaycqBTa0MTbl28N9pmaxAUz3U+jUpR/XTCkRiTlOj4hzi5LyzFnd 7BdeWmx0KkTsNtzqtHJAE7gJt5imOCXoEJd5NRcVFUX0yD9Y72Cwz34K8rcTku50 HbRU+C72QqIL649dvxdRBhvw2Dv04G/uQxPmy1ifeOWHC7SKLgHmQ1B8ZoKR65C5 eCY9qswrDknOTxJ1ws/UI/5xQiNYldulAsRvlNKE3THuo+7fwqr1GPbw4b5w3a93 AZKByhEQpFOmAtQaFPs8SI71UExD3TLSokrq8izydLE4SLfsbTZQLzwIMKx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5MXt8HYoZvddjxfetUM8KUAOCdQwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxlCtfig5FvXY+4GAMI263N9H5eGuqF8O5l AIiinzxUaunHuKy5nQv+9iIJjTeer/To2ifmrPdVaXbASZAybJbdo7/+Q77EuD+M h5Xa3FLXCju2BzGKdN7WHAaJz8yUv06g2zrIR5fWGjb3WNYMuyS/RFrmwHqEXzOc plMcUFrX6ow1Q6Eu/yUM+n7clVlvpuIbm+9OBEol6qsHJATF80C3wZLaM8WQZTgM R44JgWKFoaynFHR0g1Mc9BiSe2Ek0m57YGqxlA7fMnZy6+4c0aCI4zlgu4z9jfaK 6j9E1+30porhNorTT5XANzSFRHucfWFa2VmmZvDjI9us2Nrd57Q= -----END CERTIFICATE-----Generated at Mon Mar 2 09:43:58 2026 by rpki-client