$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: WCoW95ewJJpTrITffWn/+bVX8TWso1bep7tw9u64N/Y= Subject key identifier: 86:31:E3:13:B0:85:63:86:E4:56:19:E1:32:0B:FD:F8:09:F3:FB:0F Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 38D540B57B76EC2BAE7F212B9CE136AB8BE19F6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 14:11:49 +0000 Manifest this update: Wed 25 Mar 2026 14:06:49 +0000 Manifest next update: Sun 29 Mar 2026 01:24:49 +0000 Files and hashes: 1: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: pK4R8Z2YduZjMK/lTLJNNifblEVQGg8Eyo+e0SIzA8Y=) 2: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=) 3: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=) 4: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=) 5: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d5:40:b5:7b:76:ec:2b:ae:7f:21:2b:9c:e1:36:ab:8b:e1:9f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: Mar 25 14:06:49 2026 GMT Not After : Mar 29 01:24:49 2026 GMT Subject: CN=8631E313B0856386E45619E1320BFDF809F3FB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d8:f2:de:8c:7c:28:d7:93:56:28:eb:ea:4d: c4:af:7b:d9:93:ef:0e:cf:ed:cf:93:65:10:48:7d: 92:19:ab:2a:33:ee:d4:d5:d0:26:2e:d3:7a:50:47: 0a:00:94:4c:b1:24:14:99:bb:d9:7c:2a:a8:bc:0e: 1f:ff:2f:04:17:2f:c5:8b:55:66:ed:e2:a8:d3:57: b0:b6:4a:d1:8c:fd:c1:49:c9:ab:a9:15:b5:c4:71: 51:bb:26:99:30:94:a1:a6:fb:28:1a:7d:c0:f1:8e: bc:f2:52:46:4b:25:c0:ac:05:9e:ef:97:63:64:68: 58:f7:98:19:51:4f:4f:8b:a7:36:7f:26:7a:9a:30: 94:d2:c4:ec:8c:db:23:92:bc:61:ab:b4:4c:81:d3: 09:32:e7:03:bf:72:fb:52:23:b8:b2:bd:3d:29:91: 99:92:f1:40:73:45:75:e6:1f:5f:0e:30:9e:83:b7: 97:fe:80:3d:72:10:c0:22:23:7b:46:40:3c:f7:90: 34:3f:49:0f:7d:06:64:ea:f5:2f:9e:4b:af:9f:a3: 80:24:58:06:e2:66:f5:88:c3:60:f3:d8:c0:c9:f2: 56:bb:08:27:ff:7a:e9:10:3f:69:73:9e:a7:7a:f0: 58:2b:bc:7e:61:75:20:54:cb:07:5a:79:a6:f8:66: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:E3:13:B0:85:63:86:E4:56:19:E1:32:0B:FD:F8:09:F3:FB:0F X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8c:1a:79:6b:e5:60:dd:7c:b9:5f:88:fe:e1:a9:b0:f9:39: 41:4d:da:5e:6d:8f:8f:36:e0:bf:cc:88:7c:4f:9a:2e:5d:e4: 56:9d:70:72:59:d4:d6:40:0b:26:da:85:4f:18:5d:ae:a6:fe: 33:b9:43:11:2f:81:02:eb:23:05:4b:04:c3:5f:83:b7:00:47: 1f:f5:5c:a5:9c:12:94:42:5e:ce:a9:39:83:d4:85:cc:ae:5f: 98:5d:32:fe:20:b5:d8:90:2b:3e:9f:8b:58:15:ae:0f:df:4f: 1d:bf:69:0f:6e:df:c3:3d:bf:28:d0:09:1d:32:2b:4a:ad:e6: 77:b2:a2:76:60:02:d3:ca:22:13:fc:c8:22:6e:c1:04:84:b7: 14:c6:57:7f:8f:fe:f3:40:40:3c:bd:e5:d6:86:90:06:18:39: 98:ef:b9:f0:c1:44:fc:9d:75:df:bc:8a:c4:68:80:6e:39:a4: 0d:1e:c3:23:43:9b:b7:58:35:77:e0:76:a8:ea:4e:b3:0a:90: 16:98:70:4d:4a:f0:f1:21:a6:b2:7b:5e:c2:9a:19:fb:b6:98: 93:20:60:aa:c7:0f:7b:7e:46:4f:23:36:3d:2b:b6:a2:38:9a: cb:4a:30:0f:34:2f:82:e2:9f:2f:cd:41:95:9b:a4:7a:28:54: d7:f3:14:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONVAtXt27CuufyErnOE2q4vhn24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNjAzMjUxNDA2NDlaFw0yNjAzMjkwMTI0NDlaMDMxMTAvBgNV BAMTKDg2MzFFMzEzQjA4NTYzODZFNDU2MTlFMTMyMEJGREY4MDlGM0ZCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc2PLejHwo15NWKOvqTcSve9mT 7w7P7c+TZRBIfZIZqyoz7tTV0CYu03pQRwoAlEyxJBSZu9l8Kqi8Dh//LwQXL8WL VWbt4qjTV7C2StGM/cFJyaupFbXEcVG7JpkwlKGm+ygafcDxjrzyUkZLJcCsBZ7v l2NkaFj3mBlRT0+LpzZ/JnqaMJTSxOyM2yOSvGGrtEyB0wky5wO/cvtSI7iyvT0p kZmS8UBzRXXmH18OMJ6Dt5f+gD1yEMAiI3tGQDz3kDQ/SQ99BmTq9S+eS6+fo4Ak WAbiZvWIw2Dz2MDJ8la7CCf/eukQP2lznqd68FgrvH5hdSBUywdaeab4ZpYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjHjE7CFY4bkVhnhMgv9+Anz+w8wHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuMGnlr5WDdfLlfiP7hqbD5OUFN2l5tj482 4L/MiHxPmi5d5FadcHJZ1NZACybahU8YXa6m/jO5QxEvgQLrIwVLBMNfg7cARx/1 XKWcEpRCXs6pOYPUhcyuX5hdMv4gtdiQKz6fi1gVrg/fTx2/aQ9u38M9vyjQCR0y K0qt5neyonZgAtPKIhP8yCJuwQSEtxTGV3+P/vNAQDy95daGkAYYOZjvufDBRPyd dd+8isRogG45pA0ewyNDm7dYNXfgdqjqTrMKkBaYcE1K8PEhprJ7XsKaGfu2mJMg YKrHD3t+Rk8jNj0rtqI4mstKMA80L4Liny/NQZWbpHooVNfzFFE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:14 2026 by rpki-client