$ rpki-client -vvf repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft File: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft (raw, json) Hash identifier: bF4IcqQ1d0Z7HcG7e2FfKeEUuD4t87VYJ2flhBpAkW0= Subject key identifier: 5C:12:8C:65:51:1F:B8:0A:49:5E:06:40:75:97:E8:CD:CF:EA:47:B3 Authority key identifier: A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF Certificate issuer: /CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Certificate serial: 2E84FBFEC3424A5748F104E5F3C0E8C335E17BE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft Manifest number: 0238 Signing time: Sat 28 Feb 2026 02:01:56 +0000 Manifest this update: Sat 28 Feb 2026 01:56:56 +0000 Manifest next update: Tue 03 Mar 2026 03:35:56 +0000 Files and hashes: 1: A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl (hash: kobilI3N/b3/LcUbx6gDZyxPriJ+UdYm17fdCLD+yXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:84:fb:fe:c3:42:4a:57:48:f1:04:e5:f3:c0:e8:c3:35:e1:7b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF Validity Not Before: Feb 28 01:56:56 2026 GMT Not After : Mar 3 03:35:56 2026 GMT Subject: CN=5C128C65511FB80A495E06407597E8CDCFEA47B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:18:b7:39:3f:2f:d3:58:73:62:b7:c2:f9: 0b:9d:6b:c5:7c:a6:63:4f:a5:2f:6f:9e:ca:29:97: 1d:ec:80:68:52:f7:a3:03:41:57:f8:e1:5c:76:26: 0a:1e:08:8d:e5:51:11:a6:9f:c1:de:11:dd:a5:d7: eb:3f:5e:b4:17:84:0f:28:ba:54:aa:99:fe:9f:ca: 10:be:8b:c5:96:28:f1:83:e8:40:82:3b:6c:06:39: 8e:7c:23:37:42:b1:a8:7d:e7:c5:58:e5:47:df:6e: db:27:80:98:8f:4e:eb:39:45:b3:c9:45:4b:70:78: 97:a4:7d:6f:34:af:57:92:91:d9:ab:99:49:81:d2: 51:b4:e2:00:ad:6d:3b:4d:a5:8b:b6:9d:72:5f:98: 50:92:7f:30:69:d3:3e:08:90:d0:da:c3:ad:b8:6f: 3c:b9:0c:4d:db:0c:1f:3d:6a:45:c6:d6:14:69:9b: 72:f3:db:ab:e9:32:e9:86:94:60:5d:cf:0c:c2:bb: 8b:78:cf:80:48:b4:95:94:fc:04:59:da:64:17:89: 2c:e8:09:04:02:67:c3:b1:11:c7:00:d6:9d:39:4b: d8:6a:47:c3:0a:50:ec:ba:35:78:69:5c:7b:d4:99: fe:1d:d5:e5:cf:37:b5:f8:c3:fc:e4:a6:ca:73:b2: bc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:8C:65:51:1F:B8:0A:49:5E:06:40:75:97:E8:CD:CF:EA:47:B3 X509v3 Authority Key Identifier: keyid:A6:01:5E:5E:26:05:D4:FD:F6:8E:B9:6F:96:A9:89:4C:EA:EC:DF:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4d3ef2c-781d-4d0c-a682-91ac011ef6b7/0/A6015E5E2605D4FDF68EB96F96A9894CEAECDFBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:70:9a:6f:f9:d8:2e:7d:c6:99:76:17:ff:1d:9d:dc:49:2e: 44:48:85:77:05:dc:e5:56:02:84:2b:72:d2:c8:f4:e8:a8:af: 1e:95:4f:94:5c:f3:a9:f7:f0:8e:40:15:86:1a:b4:0f:ce:8e: bf:15:ed:55:1d:52:a2:ae:8d:df:7e:f8:59:3e:6f:17:58:b0: a4:b6:50:86:72:e2:00:f5:53:77:83:ad:9d:3b:5c:b2:c9:87: cd:14:fb:e1:f5:68:5c:35:0e:ee:87:04:17:32:59:26:b0:39: db:f4:b0:9b:98:5b:3f:2e:83:d1:e3:91:3b:5c:24:81:bc:c3: b6:23:82:0b:9d:be:9d:c8:fb:15:28:b8:d4:31:73:9c:fb:c8: 90:65:f6:cd:13:75:b5:66:80:a8:1a:00:55:a6:d2:6f:bb:22: 83:e6:7d:90:52:fc:4f:ba:ea:de:f2:f7:7a:45:5a:c2:b8:e2: 21:23:3f:3a:72:62:48:ca:66:e1:57:04:00:a6:89:dc:f7:00: f4:18:ce:25:60:c8:38:74:72:f3:ac:7e:76:30:bc:9e:b6:b6: c5:6a:0b:cd:dc:14:95:db:b7:33:c3:24:07:46:1e:48:2d:41: 3a:0d:24:de:0c:a1:74:ce:28:fa:63:90:5f:43:c5:36:94:06: 0f:67:44:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoT7/sNCSldI8QTl88DowzXhe+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENF QUVDREZCRjAeFw0yNjAyMjgwMTU2NTZaFw0yNjAzMDMwMzM1NTZaMDMxMTAvBgNV BAMTKDVDMTI4QzY1NTExRkI4MEE0OTVFMDY0MDc1OTdFOENEQ0ZFQTQ3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBBi3OT8v01hzYrfC+Quda8V8 pmNPpS9vnsoplx3sgGhS96MDQVf44Vx2JgoeCI3lURGmn8HeEd2l1+s/XrQXhA8o ulSqmf6fyhC+i8WWKPGD6ECCO2wGOY58IzdCsah958VY5UffbtsngJiPTus5RbPJ RUtweJekfW80r1eSkdmrmUmB0lG04gCtbTtNpYu2nXJfmFCSfzBp0z4IkNDaw624 bzy5DE3bDB89akXG1hRpm3Lz26vpMumGlGBdzwzCu4t4z4BItJWU/ARZ2mQXiSzo CQQCZ8OxEccA1p05S9hqR8MKUOy6NXhpXHvUmf4d1eXPN7X4w/zkpspzsry1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBKMZVEfuApJXgZAdZfozc/qR7MwHwYDVR0j BBgwFoAUpgFeXiYF1P32jrlvlqmJTOrs378wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGQzZWYyYy03ODFkLTRkMGMtYTY4Mi05MWFjMDExZWY2YjcvMC9BNjAxNUU1RTI2 MDVENEZERjY4RUI5NkY5NkE5ODk0Q0VBRUNERkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5NENFQUVD REZCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRkM2VmMmMtNzgxZC00ZDBjLWE2 ODItOTFhYzAxMWVmNmI3LzAvQTYwMTVFNUUyNjA1RDRGREY2OEVCOTZGOTZBOTg5 NENFQUVDREZCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9wmm/52C59xpl2F/8dndxJLkRIhXcF3OVW AoQrctLI9Oiorx6VT5Rc86n38I5AFYYatA/Ojr8V7VUdUqKujd9++Fk+bxdYsKS2 UIZy4gD1U3eDrZ07XLLJh80U++H1aFw1Du6HBBcyWSawOdv0sJuYWz8ug9HjkTtc JIG8w7Yjggudvp3I+xUouNQxc5z7yJBl9s0TdbVmgKgaAFWm0m+7IoPmfZBS/E+6 6t7y93pFWsK44iEjPzpyYkjKZuFXBACmidz3APQYziVgyDh0cvOsfnYwvJ62tsVq C83cFJXbtzPDJAdGHkgtQToNJN4MoXTOKPpjkF9DxTaUBg9nRJY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:03:45 2026 by rpki-client