$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: AtFKroiMbErbd1KwUc+hPuOlHWRjjL4O/w1AfQkpdsI= Subject key identifier: 1B:4F:C7:E2:1F:5F:77:6C:D9:49:23:A7:8D:A2:8D:F8:1C:97:08:86 Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 285538C0A8E6D8BF45ED9C5AC43D4A7564E4408E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: 0158 Signing time: Sat 28 Feb 2026 05:02:10 +0000 Manifest this update: Sat 28 Feb 2026 04:57:10 +0000 Manifest next update: Tue 03 Mar 2026 15:23:10 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: cVONOzDA/59hvul22gIPots+aCYyvPivORhMCun6Mwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:55:38:c0:a8:e6:d8:bf:45:ed:9c:5a:c4:3d:4a:75:64:e4:40:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Feb 28 04:57:10 2026 GMT Not After : Mar 3 15:23:10 2026 GMT Subject: CN=1B4FC7E21F5F776CD94923A78DA28DF81C970886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:87:d5:05:12:0e:a4:1f:a0:a3:3c:89:25: 3f:d6:f8:e8:48:d4:43:04:f1:dd:5e:43:da:0f:68: 70:72:8b:93:a2:6f:3c:57:95:c6:61:df:2e:dc:1c: 3b:b0:da:ba:16:63:2d:71:52:2f:89:61:c8:9d:a9: 9f:9e:cc:51:af:8a:f3:16:3e:3d:3a:97:fd:25:13: f6:3b:f4:3c:bd:c4:f3:23:aa:d2:c9:44:bd:36:9d: 60:6b:54:01:50:a3:ef:7c:d8:a7:ec:e4:27:47:0c: ed:b8:1a:7c:c7:48:c9:72:72:9a:13:ae:49:85:27: 14:da:a1:92:d5:1f:fc:f0:b8:a9:ab:be:df:e7:08: 63:25:71:1b:8d:43:06:19:6d:24:25:79:34:47:45: b9:dd:51:e4:89:ff:e3:c4:5a:81:37:24:69:55:9b: d3:39:92:03:e1:82:9a:61:35:47:ae:2e:e6:e7:05: 0a:79:9c:ff:42:ef:37:39:4a:21:ec:fb:07:60:12: 43:96:80:f3:47:66:ed:03:d0:99:f9:34:15:21:a3: 1e:6e:20:4f:79:02:f8:74:54:aa:70:ff:dd:94:a5: 5d:21:66:54:c3:24:76:17:95:4f:7a:24:36:2e:b7: 8e:8a:8c:cb:6d:a5:be:2d:c0:f4:2c:44:ce:73:fb: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:C7:E2:1F:5F:77:6C:D9:49:23:A7:8D:A2:8D:F8:1C:97:08:86 X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:97:92:ab:f8:d3:10:e6:15:85:b3:49:ce:da:bc:49:07:ea: 40:df:13:69:4d:b1:69:25:97:33:d5:c9:eb:84:13:a9:66:1d: 97:10:c5:55:79:c3:a5:aa:54:0d:67:57:68:54:9f:de:59:b6: 14:3d:a7:e3:f8:ad:9c:2b:3f:83:34:92:99:76:bd:55:5e:23: 15:87:3c:e2:9f:52:80:88:d8:f2:b0:a9:0e:41:9a:19:83:6f: ee:4a:15:06:38:77:c8:43:f3:fd:b8:3b:4b:22:74:f2:29:39: 8e:5c:90:6e:e3:3e:28:f4:f6:3e:4d:85:00:f6:54:f3:ee:db: 68:34:53:45:15:80:91:e4:3c:cc:e3:50:89:34:f8:91:13:91: 69:ae:7c:c7:fa:4b:17:c7:89:b5:2d:d4:77:23:95:f7:9e:59: 91:9a:a9:39:71:08:3c:8b:fc:b9:94:87:5b:db:6c:d7:68:61: 0f:af:c1:df:33:96:50:d0:08:4c:49:2f:51:1b:1c:7e:d7:4f: a4:b7:c8:b9:38:8a:d7:80:70:00:74:45:e3:06:69:30:63:b7: cd:95:3b:61:58:6e:aa:15:0c:c7:2a:3f:c5:f3:f9:87:d8:88: 26:7c:9f:9b:ff:cf:80:35:0f:44:c5:8d:73:8f:46:10:3c:cb: d1:60:34:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFU4wKjm2L9F7ZxaxD1KdWTkQI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNjAyMjgwNDU3MTBaFw0yNjAzMDMxNTIzMTBaMDMxMTAvBgNV BAMTKDFCNEZDN0UyMUY1Rjc3NkNEOTQ5MjNBNzhEQTI4REY4MUM5NzA4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcIfVBRIOpB+gozyJJT/W+OhI 1EME8d1eQ9oPaHByi5OibzxXlcZh3y7cHDuw2roWYy1xUi+JYcidqZ+ezFGvivMW Pj06l/0lE/Y79Dy9xPMjqtLJRL02nWBrVAFQo+982Kfs5CdHDO24GnzHSMlycpoT rkmFJxTaoZLVH/zwuKmrvt/nCGMlcRuNQwYZbSQleTRHRbndUeSJ/+PEWoE3JGlV m9M5kgPhgpphNUeuLubnBQp5nP9C7zc5SiHs+wdgEkOWgPNHZu0D0Jn5NBUhox5u IE95Avh0VKpw/92UpV0hZlTDJHYXlU96JDYut46KjMttpb4twPQsRM5z++4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0/H4h9fd2zZSSOnjaKN+ByXCIYwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaXkqv40xDmFYWzSc7avEkH6kDfE2lNsWkl lzPVyeuEE6lmHZcQxVV5w6WqVA1nV2hUn95ZthQ9p+P4rZwrP4M0kpl2vVVeIxWH POKfUoCI2PKwqQ5BmhmDb+5KFQY4d8hD8/24O0sidPIpOY5ckG7jPij09j5NhQD2 VPPu22g0U0UVgJHkPMzjUIk0+JETkWmufMf6SxfHibUt1HcjlfeeWZGaqTlxCDyL /LmUh1vbbNdoYQ+vwd8zllDQCExJL1EbHH7XT6S3yLk4iteAcAB0ReMGaTBjt82V O2FYbqoVDMcqP8Xz+YfYiCZ8n5v/z4A1D0TFjXOPRhA8y9FgNJM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:24:37 2026 by rpki-client