$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: WAFThS7RzyMaTnUTf4mskkq4SUyZ8/NEOnDYFHhA3cU= Subject key identifier: B9:62:CE:8A:5D:5A:1D:50:D1:6F:F9:81:72:FC:37:3A:FC:AB:C6:4B Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 058502C82633DC75CB8A53E586DC19FB32B07694 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 0257 Signing time: Sun 01 Mar 2026 15:21:40 +0000 Manifest this update: Sun 01 Mar 2026 15:16:40 +0000 Manifest next update: Wed 04 Mar 2026 18:48:40 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: RalEea0ci+OmqdmDFHhzLBD/iC0zogjWwJKy2CiQ6jU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:85:02:c8:26:33:dc:75:cb:8a:53:e5:86:dc:19:fb:32:b0:76:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Mar 1 15:16:40 2026 GMT Not After : Mar 4 18:48:40 2026 GMT Subject: CN=B962CE8A5D5A1D50D16FF98172FC373AFCABC64B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:6a:ce:30:86:11:d5:1b:26:27:a7:e2:7d: 98:9d:77:d3:85:9f:e1:90:bd:b0:c7:6e:54:70:fe: f7:dd:3d:2b:94:34:e2:bc:ec:c0:3e:48:cd:79:8e: 0a:7c:8f:e4:45:3f:44:92:33:51:69:fb:d2:c8:21: d9:cb:72:b2:09:ca:e1:a2:ad:4e:f6:f5:d4:a8:7a: 65:30:b2:3b:cf:4a:ed:c3:ad:56:72:e4:96:7a:b4: ab:af:bc:c7:2e:f0:12:28:c0:d5:c6:fa:4f:ff:9c: dc:c0:3f:d3:de:b0:8b:b4:49:4e:ec:e7:67:22:e7: 6e:7a:7e:bb:8a:40:36:15:d3:f6:b2:df:be:95:02: f4:1c:5d:e6:2d:37:36:6a:3c:2a:c0:75:29:6b:1a: bd:ee:71:e3:eb:50:9b:00:a3:7f:2a:89:ec:5d:a7: 57:39:0f:d4:51:61:be:f0:78:fd:d8:8a:ee:26:5c: 9e:89:ed:43:5a:43:c7:cd:0b:a2:3f:b6:53:7e:9b: 6c:3b:b1:09:5a:9b:5d:ed:4e:05:ff:be:51:2f:90: 03:19:98:36:00:b2:cd:3a:d3:d2:ab:82:29:be:9d: 99:b9:83:64:a9:95:f7:42:5a:e7:3b:51:35:41:ee: ff:04:b9:68:d4:2e:77:d5:01:de:3b:02:f1:e0:57: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:CE:8A:5D:5A:1D:50:D1:6F:F9:81:72:FC:37:3A:FC:AB:C6:4B X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2a:27:4f:e0:cc:c1:98:c6:f5:91:1a:3a:a3:a3:e3:2b:4d: 75:af:2e:2d:d4:fb:dd:7d:f9:51:26:c5:a0:82:dc:07:8d:45: c3:aa:ef:55:de:1d:56:cc:1b:7d:c7:c6:82:13:33:ec:19:47: 1a:1d:e7:13:54:2a:6a:ee:28:4a:3e:fc:23:72:1e:d4:88:a0: f1:fc:95:87:74:8b:55:06:12:f4:a8:d8:31:b5:40:cb:1a:a7: 80:93:06:f6:8a:5b:15:f9:68:6d:98:9e:5a:e3:6d:46:3a:19: 16:7a:5b:5a:58:43:14:49:ee:be:62:bc:ca:1a:05:b2:10:b9: 7d:4e:36:f5:4f:52:88:84:c8:9b:fe:1e:d5:0a:8c:6e:d2:b2: c7:5e:dd:4b:da:70:55:30:e8:ba:84:89:7c:7a:9c:91:61:84: 0c:d7:b3:b8:dd:50:95:0f:bd:c4:31:48:d4:de:03:f8:cd:af: 44:01:69:e3:9d:10:ac:5b:87:6d:83:87:97:a7:9b:78:d2:6d: 08:c7:3b:5c:01:92:a4:4c:5d:09:db:88:a4:25:ba:ee:09:fc: 8d:75:3a:ac:73:27:07:15:d6:7c:ba:71:2a:cf:10:c4:a2:60: c0:b7:b2:ff:77:f2:e1:d5:f8:b1:0e:43:45:b9:21:29:f5:8e: 1b:b3:21:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYUCyCYz3HXLilPlhtwZ+zKwdpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNjAzMDExNTE2NDBaFw0yNjAzMDQxODQ4NDBaMDMxMTAvBgNV BAMTKEI5NjJDRThBNUQ1QTFENTBEMTZGRjk4MTcyRkMzNzNBRkNBQkM2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLGrOMIYR1RsmJ6fifZidd9OF n+GQvbDHblRw/vfdPSuUNOK87MA+SM15jgp8j+RFP0SSM1Fp+9LIIdnLcrIJyuGi rU729dSoemUwsjvPSu3DrVZy5JZ6tKuvvMcu8BIowNXG+k//nNzAP9PesIu0SU7s 52ci5256fruKQDYV0/ay376VAvQcXeYtNzZqPCrAdSlrGr3ucePrUJsAo38qiexd p1c5D9RRYb7weP3Yiu4mXJ6J7UNaQ8fNC6I/tlN+m2w7sQlam13tTgX/vlEvkAMZ mDYAss0609Krgim+nZm5g2SplfdCWuc7UTVB7v8EuWjULnfVAd47AvHgV3B/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWLOil1aHVDRb/mBcvw3OvyrxkswHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8qJ0/gzMGYxvWRGjqjo+MrTXWvLi3U+919 +VEmxaCC3AeNRcOq71XeHVbMG33HxoITM+wZRxod5xNUKmruKEo+/CNyHtSIoPH8 lYd0i1UGEvSo2DG1QMsap4CTBvaKWxX5aG2YnlrjbUY6GRZ6W1pYQxRJ7r5ivMoa BbIQuX1ONvVPUoiEyJv+HtUKjG7Sssde3UvacFUw6LqEiXx6nJFhhAzXs7jdUJUP vcQxSNTeA/jNr0QBaeOdEKxbh22Dh5enm3jSbQjHO1wBkqRMXQnbiKQluu4J/I11 OqxzJwcV1ny6cSrPEMSiYMC3sv938uHV+LEOQ0W5ISn1jhuzISA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:27 2026 by rpki-client