$ rpki-client -vvf repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft (raw, json) Hash identifier: iJoP3fAFQMa6t5xd3uhzua2P5q59/xfmq1jd+WyOxfU= Subject key identifier: B9:8B:82:67:D7:2C:B6:FD:C6:BD:80:D4:E5:6A:3F:40:DB:0F:3E:49 Authority key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Certificate issuer: /CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Certificate serial: 29FC9EC7CA197CE9E04FDB825DB6BCAB5489AA84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft Manifest number: 010C Signing time: Thu 26 Mar 2026 07:01:19 +0000 Manifest this update: Thu 26 Mar 2026 06:56:19 +0000 Manifest next update: Sun 29 Mar 2026 11:28:19 +0000 Files and hashes: 1: F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl (hash: 49ghYtDvNjz6c+mvBHR1H1XJXuZPnDHslHFeUF3bIsc=) 2: 3130332e3135342e3137302e302f32332d3234203d3e20313333383331.roa (hash: 4wsZtWGdUSLxalGSdvbsdwhGmX/CaV7PyQsT2ixJWxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fc:9e:c7:ca:19:7c:e9:e0:4f:db:82:5d:b6:bc:ab:54:89:aa:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Validity Not Before: Mar 26 06:56:19 2026 GMT Not After : Mar 29 11:28:19 2026 GMT Subject: CN=B98B8267D72CB6FDC6BD80D4E56A3F40DB0F3E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:31:f8:26:16:fc:b3:e9:85:c7:4e:23:f4: 3b:87:ff:81:ac:16:7c:07:dd:f3:2a:78:b8:d2:e6: fc:db:ee:34:d5:e3:b4:05:9b:95:a5:a9:50:06:08: 0b:aa:0f:34:5f:00:fb:6f:0a:7c:8c:3e:01:c5:3b: 3d:a0:b1:d2:5a:65:f6:1c:f1:74:09:9a:15:cf:96: 57:28:d1:e0:b4:6a:fe:9a:87:fb:d4:c8:f8:b6:b5: cb:19:fa:4c:54:c6:45:7b:b4:b2:54:71:5f:6b:c5: 20:2a:16:c7:6f:cb:f7:08:cd:2d:f5:ea:d1:ea:58: 40:6c:4c:be:7e:9d:c6:f7:9f:76:3e:52:15:4b:e7: e8:0a:6b:30:96:02:06:6b:41:1a:09:32:c5:24:97: 95:d6:fe:42:9b:27:4f:3b:c5:31:94:be:73:87:0b: 4a:64:1a:e9:72:ae:73:5f:fa:0d:63:c1:2a:fd:f1: ca:98:60:2a:79:de:6e:b0:1e:5d:88:43:17:77:e5: 81:91:26:7f:46:1a:5c:a3:af:91:39:c7:d0:8c:de: 68:5e:1a:f1:fd:39:b9:a5:5a:fb:07:fa:a6:d3:8d: 05:00:7a:12:8d:2b:72:75:32:66:58:d6:4a:fa:10: 58:2a:a1:22:a6:b0:6c:5f:a7:19:e0:b8:57:3f:e3: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:82:67:D7:2C:B6:FD:C6:BD:80:D4:E5:6A:3F:40:DB:0F:3E:49 X509v3 Authority Key Identifier: keyid:F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:61:71:8a:fb:e3:0d:bb:90:5f:96:9d:37:66:3a:a5:d7:cf: 27:2e:aa:dd:b8:14:50:4d:4a:e0:e2:2a:b7:36:fe:00:75:52: b4:2f:8c:0b:96:90:03:4e:b7:61:d5:66:b7:be:49:1c:be:aa: 38:a6:bc:0e:c6:ff:c4:34:b5:d6:b0:3b:44:e1:c6:81:b5:05: 9d:2e:b6:26:28:33:e0:c0:8a:35:df:8d:75:5f:be:97:8c:64: 67:6f:81:3f:1d:74:28:9c:87:ac:d6:55:6a:b7:1c:46:f2:14: ac:53:56:66:c7:65:cc:9c:5d:b0:68:53:10:e6:52:01:6d:37: 17:5e:75:68:d2:2b:e4:df:63:ac:30:72:7b:61:f5:0b:b0:f5: 54:f3:88:83:35:01:d7:3a:e8:e4:bd:bc:67:85:c8:06:9d:1b: 53:d0:5b:2c:b4:b1:06:4a:b2:61:99:e7:87:2a:4c:a4:a5:b0: 5f:18:f3:d3:f7:aa:d6:2d:94:05:70:6e:73:12:27:0d:70:a9: 36:c3:73:71:bc:82:f1:a4:93:c4:8a:b7:c7:89:c0:55:90:0e: 2c:85:c4:32:6a:2e:9e:db:41:25:33:28:ea:d9:e7:07:11:56: db:94:e0:c4:52:b3:fc:7a:45:58:32:80:9a:ca:17:e6:1c:94: 99:68:57:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfyex8oZfOngT9uCXba8q1SJqoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJG MDlGOEY4ODAeFw0yNjAzMjYwNjU2MTlaFw0yNjAzMjkxMTI4MTlaMDMxMTAvBgNV BAMTKEI5OEI4MjY3RDcyQ0I2RkRDNkJEODBENEU1NkEzRjQwREIwRjNFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2TH4Jhb8s+mFx04j9DuH/4Gs FnwH3fMqeLjS5vzb7jTV47QFm5WlqVAGCAuqDzRfAPtvCnyMPgHFOz2gsdJaZfYc 8XQJmhXPllco0eC0av6ah/vUyPi2tcsZ+kxUxkV7tLJUcV9rxSAqFsdvy/cIzS31 6tHqWEBsTL5+ncb3n3Y+UhVL5+gKazCWAgZrQRoJMsUkl5XW/kKbJ087xTGUvnOH C0pkGulyrnNf+g1jwSr98cqYYCp53m6wHl2IQxd35YGRJn9GGlyjr5E5x9CM3mhe GvH9ObmlWvsH+qbTjQUAehKNK3J1MmZY1kr6EFgqoSKmsGxfpxnguFc/46xJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYuCZ9cstv3GvYDU5Wo/QNsPPkkwHwYDVR0j BBgwFoAU+cSCB0PbAB6PadRMGTIOG/Cfj4gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMC9GOUM0ODIwNzQz REIwMDFFOEY2OUQ0NEMxOTMyMEUxQkYwOUY4Rjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBFMUJGMDlG OEY4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI1MWQ2Y2YtYzdiMS00Njg3LTky MDMtZDE2MWNjNDBiNmEyLzAvRjlDNDgyMDc0M0RCMDAxRThGNjlENDRDMTkzMjBF MUJGMDlGOEY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxhcYr74w27kF+WnTdmOqXXzycuqt24FFBN SuDiKrc2/gB1UrQvjAuWkANOt2HVZre+SRy+qjimvA7G/8Q0tdawO0ThxoG1BZ0u tiYoM+DAijXfjXVfvpeMZGdvgT8ddCich6zWVWq3HEbyFKxTVmbHZcycXbBoUxDm UgFtNxdedWjSK+TfY6wwcnth9Quw9VTziIM1Adc66OS9vGeFyAadG1PQWyy0sQZK smGZ54cqTKSlsF8Y89P3qtYtlAVwbnMSJw1wqTbDc3G8gvGkk8SKt8eJwFWQDiyF xDJqLp7bQSUzKOrZ5wcRVtuU4MRSs/x6RVgygJrKF+YclJloV40= -----END CERTIFICATE-----Generated at Thu Mar 26 23:14:46 2026 by rpki-client