$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: GfNAVYtNOP90p7x1YOEG6zlEC9uDvhujECrfuc4v6GM= Subject key identifier: B6:6A:FA:B5:90:C1:70:11:C8:B9:1B:A2:E4:54:6C:16:47:23:D4:6D Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 323319BEF6E64AE4C3DD75845CFBC87A26BCC228 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: 0114 Signing time: Sat 28 Feb 2026 05:22:28 +0000 Manifest this update: Sat 28 Feb 2026 05:17:28 +0000 Manifest next update: Tue 03 Mar 2026 06:23:28 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: am8Lv8DdxtHKBRYjrVtlL4s4O6ytRGHEiGQ27UymJtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:33:19:be:f6:e6:4a:e4:c3:dd:75:84:5c:fb:c8:7a:26:bc:c2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Feb 28 05:17:28 2026 GMT Not After : Mar 3 06:23:28 2026 GMT Subject: CN=B66AFAB590C17011C8B91BA2E4546C164723D46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:3e:16:f2:fc:17:2b:9e:ee:96:e0:8f:c7: a2:af:0d:04:17:05:65:5f:96:0b:09:24:98:dc:ee: 68:a3:47:82:f7:28:37:da:89:d5:38:37:ff:b5:1e: c1:33:d4:6a:71:1a:6e:98:0e:36:7f:ae:68:db:51: 29:69:fc:47:15:35:81:7b:e8:c5:cd:81:87:19:21: 4b:1d:9e:c0:ed:1a:0b:a1:a9:96:2d:bd:4e:56:55: 1b:fb:90:21:31:31:1c:53:97:1b:e0:d4:e1:45:c6: 7e:85:13:d4:aa:66:1b:50:e7:a0:89:5a:ae:1e:57: 4a:46:22:00:ec:3c:30:3f:f4:85:dc:d1:76:14:99: 08:03:ad:b0:7a:24:dc:8c:98:4f:9f:29:b5:9c:91: 20:24:e9:3d:ab:c5:73:ee:52:01:c3:b4:51:1c:08: 2f:b0:95:fb:27:47:2b:cc:82:67:82:04:17:1b:9c: 0a:40:f4:f7:02:d7:b9:18:18:a5:fd:51:e2:f9:26: be:9e:dc:bc:8f:9b:65:48:25:0c:e1:14:c5:e9:6d: 6a:fb:2f:1f:75:f7:26:9e:90:e6:40:a6:50:e9:10: b2:38:4a:35:b6:95:7e:4e:6b:5c:4b:00:58:0a:c4: db:d8:45:c3:44:85:f4:12:6e:8b:e5:81:97:c8:6a: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6A:FA:B5:90:C1:70:11:C8:B9:1B:A2:E4:54:6C:16:47:23:D4:6D X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:94:6d:e8:65:3a:d5:38:84:6e:98:29:97:0d:5b:bd:07: e2:01:13:22:7f:b7:0e:e9:dd:61:ed:82:88:d1:f0:38:eb:28: 5f:e8:0e:16:62:56:58:f3:82:1d:08:26:af:97:36:32:43:b9: 0a:07:ff:8c:81:61:3d:22:da:5d:a3:36:0c:54:b7:90:3e:18: 0f:e9:78:82:05:99:9f:94:c1:ae:40:42:5e:6f:73:73:06:58: ec:48:e1:37:f7:b8:da:7a:6a:32:93:cd:fb:53:48:64:a4:d0: 01:07:dc:ca:13:27:46:1f:e4:05:8a:ae:89:b7:c2:44:95:5b: c6:cf:ff:fd:ac:e5:da:dc:4f:df:64:3d:6f:7a:05:f4:93:6a: cc:da:cb:d7:a4:ae:1b:0d:f1:83:cc:96:dd:76:4e:97:7d:df: 32:42:59:96:86:c7:c1:82:06:06:c2:43:ed:7d:30:6b:2f:ff: a0:ba:7b:43:29:c1:60:55:c5:89:0a:00:4c:ac:29:6e:0e:db: fa:c9:d7:fd:f4:f6:62:f8:20:e2:04:9e:7c:98:dc:82:16:45: ff:06:c4:50:51:cb:a0:ad:fb:3c:b6:32:a9:2a:18:78:b8:54: 1b:24:cf:97:07:00:ee:98:93:f1:23:34:0d:a2:54:69:6d:c1: e7:c1:01:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjMZvvbmSuTD3XWEXPvIeia8wigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNjAyMjgwNTE3MjhaFw0yNjAzMDMwNjIzMjhaMDMxMTAvBgNV BAMTKEI2NkFGQUI1OTBDMTcwMTFDOEI5MUJBMkU0NTQ2QzE2NDcyM0Q0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7j4W8vwXK57uluCPx6KvDQQX BWVflgsJJJjc7mijR4L3KDfaidU4N/+1HsEz1GpxGm6YDjZ/rmjbUSlp/EcVNYF7 6MXNgYcZIUsdnsDtGguhqZYtvU5WVRv7kCExMRxTlxvg1OFFxn6FE9SqZhtQ56CJ Wq4eV0pGIgDsPDA/9IXc0XYUmQgDrbB6JNyMmE+fKbWckSAk6T2rxXPuUgHDtFEc CC+wlfsnRyvMgmeCBBcbnApA9PcC17kYGKX9UeL5Jr6e3LyPm2VIJQzhFMXpbWr7 Lx919yaekOZAplDpELI4SjW2lX5Oa1xLAFgKxNvYRcNEhfQSbovlgZfIajubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmr6tZDBcBHIuRui5FRsFkcj1G0wHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk5lG3oZTrVOIRumCmXDVu9B+IBEyJ/tw7p 3WHtgojR8DjrKF/oDhZiVljzgh0IJq+XNjJDuQoH/4yBYT0i2l2jNgxUt5A+GA/p eIIFmZ+Uwa5AQl5vc3MGWOxI4Tf3uNp6ajKTzftTSGSk0AEH3MoTJ0Yf5AWKrom3 wkSVW8bP//2s5drcT99kPW96BfSTaszay9ekrhsN8YPMlt12Tpd93zJCWZaGx8GC BgbCQ+19MGsv/6C6e0MpwWBVxYkKAEysKW4O2/rJ1/309mL4IOIEnnyY3IIWRf8G xFBRy6Ct+zy2MqkqGHi4VBskz5cHAO6Yk/EjNA2iVGltwefBAaE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:33 2026 by rpki-client