$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: B8RxQNbZULY2EfBsozwA0abxhpXpRvZzzx8y27QqBts= Subject key identifier: 64:67:F4:EC:B4:CB:C6:89:E1:D0:4B:36:34:6A:6A:71:13:FF:B6:82 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 24FD9F4D1559F049DF269F30AACD3F03AABADB7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 055C Signing time: Tue 24 Mar 2026 03:21:17 +0000 Manifest this update: Tue 24 Mar 2026 03:16:17 +0000 Manifest next update: Fri 27 Mar 2026 08:39:17 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: /luPqRWa7rmModkmPq2AOhn1AxfZ3BxWQ7kt8Fx95y4=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: 8xqx8KbE9MKoIaEMA5icLKn50Wrr2P7VgkYOH2C/PBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fd:9f:4d:15:59:f0:49:df:26:9f:30:aa:cd:3f:03:aa:ba:db:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Mar 24 03:16:17 2026 GMT Not After : Mar 27 08:39:17 2026 GMT Subject: CN=6467F4ECB4CBC689E1D04B36346A6A7113FFB682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:ce:74:f7:26:81:ff:6c:0f:50:06:f1:66: 52:17:fd:dd:02:fa:66:11:f8:5e:06:b8:9d:0b:92: 5d:05:27:c4:0f:0f:6c:68:59:ed:71:42:de:05:01: ca:8a:8b:29:3e:99:5a:12:20:63:33:3c:44:29:d4: 0e:53:94:92:6e:7c:c3:0c:c5:f5:bd:be:b8:53:e8: 24:ba:d2:b6:a9:24:99:fd:47:51:40:40:17:c8:4b: cb:53:d5:3f:10:1a:ab:0c:03:04:58:53:65:01:d3: ad:53:ee:b3:4b:23:af:24:03:48:b2:cb:d7:a6:18: bf:58:05:e9:55:67:2b:07:0b:ef:36:0e:74:0a:bb: 35:01:40:2e:97:19:a9:3f:43:be:c8:59:ac:a8:40: 9c:9f:59:12:05:7a:76:2f:77:61:65:8d:22:f1:d6: fb:9a:09:4a:0d:10:0b:5c:7b:43:be:e8:18:f2:7f: f1:f7:76:28:cd:67:fe:36:25:71:eb:b0:04:26:dc: 88:51:d8:33:ec:40:ee:4c:51:2c:22:5e:97:7f:b3: f6:bb:c7:4a:3e:42:21:66:41:1b:0b:07:bf:2f:85: ca:fb:2e:ac:f9:2f:af:dc:c8:71:6e:4e:9b:00:af: 30:de:92:8e:fd:cd:fd:fe:28:92:23:8f:a7:17:95: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:F4:EC:B4:CB:C6:89:E1:D0:4B:36:34:6A:6A:71:13:FF:B6:82 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4c:66:d1:87:1b:34:3e:0b:58:3a:cd:c0:03:57:d1:88:8a: 1e:88:47:fd:d9:12:58:7a:df:a3:b6:bb:65:e0:0a:c2:ad:41: 1a:ae:41:a3:58:6d:e3:31:c4:5c:6d:5b:ac:d1:9a:ad:6a:57: d2:d0:87:3e:19:f8:ab:b7:15:7f:35:7e:20:42:65:de:99:c0: c0:46:67:b9:14:95:3c:8b:33:32:73:cc:65:79:ef:f3:4d:f7: df:b0:25:1a:8f:8a:e2:83:14:e5:f2:a1:39:b7:a2:9b:1a:60: 5f:66:ed:7a:80:ca:2a:c5:da:f0:70:ac:b4:26:89:94:aa:bb: af:b3:1d:3f:f4:7e:6d:7c:26:45:09:7f:07:07:5e:10:7b:a8: 69:b0:eb:14:3c:79:87:56:71:c5:26:27:ae:5c:b2:4e:60:ee: cc:e4:10:55:2f:3e:d0:87:ae:c2:92:8e:d3:34:dd:a8:17:74: 72:2b:e4:9a:33:8d:7f:a4:71:22:32:50:c9:0b:65:ac:4f:8e: 01:ca:13:fe:92:46:c9:4a:f5:92:d2:f7:cd:cf:8b:c4:a5:92: 7b:6d:a3:41:36:8d:b5:19:55:c6:e9:f2:44:dd:cb:e2:a3:6f: 75:4f:6f:b4:ae:77:a9:9b:fa:1c:0e:70:92:4a:84:f0:ae:3b: 3d:6e:27:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJP2fTRVZ8EnfJp8wqs0/A6q6238wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNjAzMjQwMzE2MTdaFw0yNjAzMjcwODM5MTdaMDMxMTAvBgNV BAMTKDY0NjdGNEVDQjRDQkM2ODlFMUQwNEIzNjM0NkE2QTcxMTNGRkI2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrn8509yaB/2wPUAbxZlIX/d0C +mYR+F4GuJ0Lkl0FJ8QPD2xoWe1xQt4FAcqKiyk+mVoSIGMzPEQp1A5TlJJufMMM xfW9vrhT6CS60rapJJn9R1FAQBfIS8tT1T8QGqsMAwRYU2UB061T7rNLI68kA0iy y9emGL9YBelVZysHC+82DnQKuzUBQC6XGak/Q77IWayoQJyfWRIFenYvd2FljSLx 1vuaCUoNEAtce0O+6Bjyf/H3dijNZ/42JXHrsAQm3IhR2DPsQO5MUSwiXpd/s/a7 x0o+QiFmQRsLB78vhcr7Lqz5L6/cyHFuTpsArzDeko79zf3+KJIjj6cXlZodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGf07LTLxonh0Es2NGpqcRP/toIwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpMZtGHGzQ+C1g6zcADV9GIih6IR/3ZElh6 36O2u2XgCsKtQRquQaNYbeMxxFxtW6zRmq1qV9LQhz4Z+Ku3FX81fiBCZd6ZwMBG Z7kUlTyLMzJzzGV57/NN99+wJRqPiuKDFOXyoTm3opsaYF9m7XqAyirF2vBwrLQm iZSqu6+zHT/0fm18JkUJfwcHXhB7qGmw6xQ8eYdWccUmJ65csk5g7szkEFUvPtCH rsKSjtM03agXdHIr5JozjX+kcSIyUMkLZaxPjgHKE/6SRslK9ZLS983Pi8Slkntt o0E2jbUZVcbp8kTdy+Kjb3VPb7Sud6mb+hwOcJJKhPCuOz1uJ9I= -----END CERTIFICATE-----Generated at Thu Mar 26 05:43:28 2026 by rpki-client