$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: RrMtdphBKmpOzF7SD9FQ0A4gOaaG/jvqTMB5tJ3po1c= Subject key identifier: 64:B0:E9:B9:F0:C7:03:5E:41:37:C9:C0:04:BC:85:1A:1F:D8:83:51 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 261C801AAF1A4511A60F436815B5E7794CE55C72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 0415 Signing time: Tue 24 Mar 2026 21:01:18 +0000 Manifest this update: Tue 24 Mar 2026 20:56:18 +0000 Manifest next update: Sat 28 Mar 2026 03:39:18 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: F2iV7RVJBo6oAMYRXDk0aWEoc9UNVHXO0/5CsVBZe7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1c:80:1a:af:1a:45:11:a6:0f:43:68:15:b5:e7:79:4c:e5:5c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Mar 24 20:56:18 2026 GMT Not After : Mar 28 03:39:18 2026 GMT Subject: CN=64B0E9B9F0C7035E4137C9C004BC851A1FD88351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:9f:43:44:94:7c:06:e8:ba:0a:d0:55:a0: 04:4a:59:a3:14:f6:f7:3a:09:59:c9:2e:87:a1:bc: fc:11:73:8b:c9:83:5c:96:90:cf:a0:d6:8a:93:40: cf:ec:2b:e7:af:25:26:fe:32:a3:08:ef:7d:16:50: d2:76:ce:46:c3:9a:c8:f8:a0:84:30:ad:5d:b3:6c: de:28:91:fc:be:ad:e5:84:e4:db:47:f8:33:2e:90: 59:d1:3d:e8:ee:14:a3:8d:35:11:4e:d9:62:71:e1: a7:f2:5c:85:1f:41:2a:2c:f9:da:60:8c:3b:46:24: 16:cd:13:64:a1:44:7a:13:48:f0:0c:4c:c6:24:28: fe:1b:00:b0:d5:28:cd:41:13:fc:8f:6f:14:e1:f9: 43:9d:e4:48:ec:e7:10:cb:dc:39:49:59:9e:e7:f0: 16:14:04:29:00:dd:39:99:db:6f:9d:cc:db:36:2a: a6:b7:e0:6d:86:77:60:09:c8:39:1d:a4:9a:b5:ff: 2a:33:0a:96:4b:79:15:8a:68:96:eb:60:98:32:fc: 62:aa:ea:81:c4:20:72:b1:e6:84:cf:8e:39:51:d6: c4:46:49:32:9b:81:da:bb:d9:08:3a:4e:32:de:9e: c9:be:ca:05:a0:7b:9e:2c:11:02:77:4d:bd:6d:00: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B0:E9:B9:F0:C7:03:5E:41:37:C9:C0:04:BC:85:1A:1F:D8:83:51 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:80:9e:09:37:47:df:f1:92:6e:b9:79:8d:dd:92:23:04:0a: 74:ee:b5:36:72:28:92:6c:09:90:ef:79:c2:c3:a3:90:7d:78: ca:c1:fb:86:df:4d:26:6b:d5:92:b0:a3:da:58:1d:59:bf:17: 33:3b:c7:96:e9:58:1a:b9:2b:5c:62:c0:d2:36:04:a0:ee:96: 55:ba:5e:f7:21:87:3a:ca:67:4f:7d:45:e6:0a:95:31:55:64: 65:57:16:6c:ae:6c:e8:43:d1:a6:e2:85:fe:c5:e8:26:a5:14: 22:6b:b5:09:34:e4:0a:6d:f9:28:21:39:10:ec:af:7a:3a:69: ad:60:85:c6:b8:1e:73:e0:e4:09:3e:4e:6a:d4:bf:a8:9d:e2: 3b:5e:b0:45:a3:34:4e:8b:0f:30:ed:9d:9d:43:a1:f2:b9:27: 25:7c:b7:b8:b3:19:66:13:7c:5a:d1:52:9a:73:71:bf:a0:d6: 4a:fd:f5:62:20:0f:79:bc:6a:a0:92:9d:0c:b9:cf:67:c2:09: d5:7d:a1:c4:8c:15:a0:6d:91:4d:d7:94:33:02:28:d0:43:a3: e1:20:d7:7d:5a:f4:12:93:2e:7d:d2:4f:1e:0b:9f:16:68:e6: 6f:7b:78:b4:78:92:52:94:0e:8b:e7:ee:8b:42:62:26:04:9e: 30:69:6f:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhyAGq8aRRGmD0NoFbXneUzlXHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNjAzMjQyMDU2MThaFw0yNjAzMjgwMzM5MThaMDMxMTAvBgNV BAMTKDY0QjBFOUI5RjBDNzAzNUU0MTM3QzlDMDA0QkM4NTFBMUZEODgzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mJ9DRJR8Bui6CtBVoARKWaMU 9vc6CVnJLoehvPwRc4vJg1yWkM+g1oqTQM/sK+evJSb+MqMI730WUNJ2zkbDmsj4 oIQwrV2zbN4okfy+reWE5NtH+DMukFnRPejuFKONNRFO2WJx4afyXIUfQSos+dpg jDtGJBbNE2ShRHoTSPAMTMYkKP4bALDVKM1BE/yPbxTh+UOd5Ejs5xDL3DlJWZ7n 8BYUBCkA3TmZ22+dzNs2Kqa34G2Gd2AJyDkdpJq1/yozCpZLeRWKaJbrYJgy/GKq 6oHEIHKx5oTPjjlR1sRGSTKbgdq72Qg6TjLensm+ygWge54sEQJ3Tb1tAPXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLDpufDHA15BN8nABLyFGh/Yg1EwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCAngk3R9/xkm65eY3dkiMECnTutTZyKJJs CZDvecLDo5B9eMrB+4bfTSZr1ZKwo9pYHVm/FzM7x5bpWBq5K1xiwNI2BKDullW6 XvchhzrKZ099ReYKlTFVZGVXFmyubOhD0abihf7F6CalFCJrtQk05Apt+SghORDs r3o6aa1ghca4HnPg5Ak+TmrUv6id4jtesEWjNE6LDzDtnZ1DofK5JyV8t7izGWYT fFrRUppzcb+g1kr99WIgD3m8aqCSnQy5z2fCCdV9ocSMFaBtkU3XlDMCKNBDo+Eg 131a9BKTLn3STx4LnxZo5m97eLR4klKUDovn7otCYiYEnjBpb3Q= -----END CERTIFICATE-----Generated at Thu Mar 26 05:33:18 2026 by rpki-client