$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: tUW6suXrFFf+K2pRAHDkUI75i+e7EAoFQ35aXv4vGIA= Subject key identifier: 01:7B:8A:3F:94:49:FB:37:CA:E3:2B:22:F9:13:38:70:36:9D:F5:14 Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 22F080F86BA43FD2CF434C7E155935EDCBAE06FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 01A6 Signing time: Sun 01 Mar 2026 03:52:41 +0000 Manifest this update: Sun 01 Mar 2026 03:47:41 +0000 Manifest next update: Wed 04 Mar 2026 11:09:41 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: FexeYmw4qMnjqQYuwiC0IZ5XRD7WMvO0WxiKJ+zYRL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f0:80:f8:6b:a4:3f:d2:cf:43:4c:7e:15:59:35:ed:cb:ae:06:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Mar 1 03:47:41 2026 GMT Not After : Mar 4 11:09:41 2026 GMT Subject: CN=017B8A3F9449FB37CAE32B22F9133870369DF514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:b3:3a:9a:8f:67:60:ed:05:01:3a:92:ee: 1f:c8:15:7f:11:77:59:85:59:da:19:69:93:d6:5e: 25:9f:92:53:11:82:8a:59:75:ba:7c:1a:0e:1c:2f: 43:f8:43:30:71:78:39:da:3a:e7:01:d9:3a:4a:49: 98:c4:1b:73:0c:6d:68:bb:00:b1:4b:e4:a6:03:e9: 95:a5:26:f2:40:a1:27:b0:18:8a:c4:cb:62:4f:bc: 83:00:80:dd:c5:97:2a:86:f5:23:7a:9e:9f:b9:f9: 8c:db:6c:25:1c:d4:b3:f7:d2:3e:56:e3:03:b2:9a: e0:4d:3c:22:78:31:e2:fc:0f:7b:fd:3f:93:fa:ba: 2d:0c:2b:c2:27:61:e1:e5:80:56:9e:7f:1b:6f:8b: 70:78:89:94:7a:13:4c:f9:e0:fa:d5:2c:68:1d:83: 4b:c8:d9:17:a8:69:97:60:3a:6e:9f:79:d0:b7:c2: b8:c3:83:ad:b4:6f:62:c7:0d:df:80:b2:e2:5d:db: 6a:04:e4:31:8f:45:7e:93:55:a7:24:6b:59:17:6a: d5:52:be:c6:9b:94:cd:7b:bb:e4:c4:a5:56:1c:fc: 28:0e:b4:b7:f5:86:9e:22:6d:21:43:0c:f1:54:26: 33:c8:4d:b8:b4:24:60:6e:fa:a5:4f:7d:d9:e3:34: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7B:8A:3F:94:49:FB:37:CA:E3:2B:22:F9:13:38:70:36:9D:F5:14 X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:fe:8e:b4:24:d6:a1:3e:6a:3f:4d:ed:e6:10:35:9a:47: 15:14:31:b4:8e:8c:3d:95:14:a8:0c:74:df:03:72:99:dd:96: 86:0b:68:d1:b9:4b:eb:9c:7e:c0:44:b7:52:f6:67:07:4e:40: 8f:6c:f0:78:f8:2e:2a:71:f2:1d:a9:80:f1:93:8e:0d:0e:e8: 51:63:03:c3:eb:e4:dd:72:0c:cc:37:9a:e4:f6:de:83:98:e8: 29:49:f9:2b:84:60:bc:7c:78:7f:5a:92:0b:b1:d5:d9:13:17: 1b:bb:76:14:4c:81:02:d1:2a:6c:35:e9:8f:4e:08:13:e9:12: 9f:69:ca:82:ec:5e:53:92:41:9a:42:57:86:9a:78:24:90:d5: 93:af:08:82:90:22:4d:4c:80:a0:57:7f:19:c6:74:27:46:5f: b7:25:37:c9:dd:cc:44:1f:8a:29:68:20:32:3b:00:04:6a:af: 05:0a:11:83:62:16:0d:84:05:70:1f:04:50:8f:bf:ef:da:47: 22:ef:4b:e9:48:52:11:38:cc:4e:47:6c:bf:00:c0:6e:6f:d1: 46:85:fb:f2:b0:77:7f:6e:a0:fe:b0:08:59:dd:30:43:7e:aa: 82:00:8c:04:00:53:fc:4d:a2:fd:a1:20:5c:35:d4:c7:69:57: 07:c6:de:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvCA+GukP9LPQ0x+FVk17cuuBv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNjAzMDEwMzQ3NDFaFw0yNjAzMDQxMTA5NDFaMDMxMTAvBgNV BAMTKDAxN0I4QTNGOTQ0OUZCMzdDQUUzMkIyMkY5MTMzODcwMzY5REY1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+7M6mo9nYO0FATqS7h/IFX8R d1mFWdoZaZPWXiWfklMRgopZdbp8Gg4cL0P4QzBxeDnaOucB2TpKSZjEG3MMbWi7 ALFL5KYD6ZWlJvJAoSewGIrEy2JPvIMAgN3FlyqG9SN6np+5+YzbbCUc1LP30j5W 4wOymuBNPCJ4MeL8D3v9P5P6ui0MK8InYeHlgFaefxtvi3B4iZR6E0z54PrVLGgd g0vI2ReoaZdgOm6fedC3wrjDg620b2LHDd+AsuJd22oE5DGPRX6TVacka1kXatVS vsablM17u+TEpVYc/CgOtLf1hp4ibSFDDPFUJjPITbi0JGBu+qVPfdnjNKWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAXuKP5RJ+zfK4ysi+RM4cDad9RQwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7G/o60JNahPmo/Te3mEDWaRxUUMbSOjD2V FKgMdN8DcpndloYLaNG5S+ucfsBEt1L2ZwdOQI9s8Hj4Lipx8h2pgPGTjg0O6FFj A8Pr5N1yDMw3muT23oOY6ClJ+SuEYLx8eH9akgux1dkTFxu7dhRMgQLRKmw16Y9O CBPpEp9pyoLsXlOSQZpCV4aaeCSQ1ZOvCIKQIk1MgKBXfxnGdCdGX7clN8ndzEQf iiloIDI7AARqrwUKEYNiFg2EBXAfBFCPv+/aRyLvS+lIUhE4zE5HbL8AwG5v0UaF +/Kwd39uoP6wCFndMEN+qoIAjAQAU/xNov2hIFw11MdpVwfG3gQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:47 2026 by rpki-client