$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: xddHOaP/H40ZugBeuTAMCZv2Zeam/Ao5Ub3j5D9Q9zg= Subject key identifier: EF:33:10:34:05:E1:55:D4:9F:91:DE:F8:63:25:DF:BB:CF:F2:CF:A3 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 66598940C2ACA5CE74C3024886D653275A41F574 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 017F Signing time: Thu 26 Mar 2026 01:32:29 +0000 Manifest this update: Thu 26 Mar 2026 01:27:29 +0000 Manifest next update: Sun 29 Mar 2026 10:35:29 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: iL7UHewWpzX9uOYrEO7U+EWRd4mi+oR2yNQJv8jwOBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:59:89:40:c2:ac:a5:ce:74:c3:02:48:86:d6:53:27:5a:41:f5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Mar 26 01:27:29 2026 GMT Not After : Mar 29 10:35:29 2026 GMT Subject: CN=EF33103405E155D49F91DEF86325DFBBCFF2CFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:f0:32:2d:66:10:f7:b1:ec:f3:da:e4:0a: 18:7f:05:bc:64:2e:c9:5b:04:2b:87:58:c1:4b:bb: bd:f1:e6:e2:5e:b6:9f:71:46:f0:a1:18:86:d8:e1: 27:77:c8:5f:f5:5a:5d:a2:a0:b6:ed:a5:67:82:08: 9c:fd:4a:9b:d9:a1:b3:0b:d3:25:19:0e:36:fb:12: 2a:83:84:c2:af:6b:3c:21:c1:2d:35:a8:d0:2f:a3: 4a:7f:18:0d:30:62:f5:21:af:bc:32:ad:5b:33:97: a1:41:ac:8b:46:9a:4c:ed:a2:67:c2:13:48:1d:51: d6:09:8e:8f:5e:7c:0b:e2:ae:51:78:7f:82:6b:9f: 9f:36:15:5f:e9:66:93:24:11:5e:e2:53:ff:7f:44: b0:36:08:05:04:24:4e:e2:27:d8:0d:84:f5:ea:a4: d4:6e:18:0d:84:e0:7c:59:6d:9d:dc:99:cb:45:45: fe:7f:81:11:3f:9f:18:80:cf:ab:e4:55:5a:61:7e: 11:75:d2:a5:2e:ec:fa:8c:5a:68:39:99:da:b2:ee: 31:b6:fc:dc:69:da:74:6c:9f:86:3f:57:40:40:1f: f2:2f:db:f3:83:f5:96:17:c0:02:11:9e:81:41:38: 74:33:f5:ca:b2:b3:90:aa:47:4f:7f:eb:60:65:71: 19:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:33:10:34:05:E1:55:D4:9F:91:DE:F8:63:25:DF:BB:CF:F2:CF:A3 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6b:9b:15:f3:6e:f8:3c:a4:86:79:4c:09:27:bb:f7:c0:19: c7:dc:44:42:5c:28:25:41:bb:98:a3:89:ec:9a:f4:2d:42:bd: 72:01:28:25:79:8b:05:5d:31:75:f5:d2:f8:ac:b5:16:e5:67: 0d:7c:e6:b9:89:7d:51:1a:79:d1:a8:0a:3e:f8:b0:35:5f:9e: 90:79:e4:63:10:70:57:86:dd:11:5b:f4:1f:b7:7a:ae:44:0a: f9:91:44:10:08:90:bf:34:87:6d:4d:8a:9b:aa:0b:98:ab:d8: 8a:8f:b6:42:6d:4f:ba:92:ea:97:f8:fc:17:52:cd:48:b5:fb: 84:03:58:06:78:28:86:5a:97:ea:26:6f:c5:37:3c:69:b7:21: d5:29:3d:e7:d9:01:0e:a2:a4:f3:40:e5:3f:be:c1:f2:2b:eb: 1d:17:83:63:c9:10:f8:fd:fa:7d:7c:41:05:8b:bc:03:3b:2f: 81:25:d3:5b:c1:fe:89:f3:5b:8f:8e:ae:41:34:e4:f4:e7:a4: cb:2d:d9:01:ba:dc:3c:15:fa:4e:a8:4d:95:4a:51:23:16:96: ff:3b:41:92:a2:fe:be:83:df:88:15:36:6d:46:1e:e7:ef:1b: 2c:3b:1a:6a:48:84:2c:e7:0e:a0:dc:d6:c0:30:52:c4:95:6c: bb:86:c9:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZlmJQMKspc50wwJIhtZTJ1pB9XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNjAzMjYwMTI3MjlaFw0yNjAzMjkxMDM1MjlaMDMxMTAvBgNV BAMTKEVGMzMxMDM0MDVFMTU1RDQ5RjkxREVGODYzMjVERkJCQ0ZGMkNGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWn/AyLWYQ97Hs89rkChh/Bbxk LslbBCuHWMFLu73x5uJetp9xRvChGIbY4Sd3yF/1Wl2ioLbtpWeCCJz9SpvZobML 0yUZDjb7EiqDhMKvazwhwS01qNAvo0p/GA0wYvUhr7wyrVszl6FBrItGmkztomfC E0gdUdYJjo9efAvirlF4f4Jrn582FV/pZpMkEV7iU/9/RLA2CAUEJE7iJ9gNhPXq pNRuGA2E4HxZbZ3cmctFRf5/gRE/nxiAz6vkVVphfhF10qUu7PqMWmg5mdqy7jG2 /Nxp2nRsn4Y/V0BAH/Iv2/OD9ZYXwAIRnoFBOHQz9cqys5CqR09/62BlcRl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7zMQNAXhVdSfkd74YyXfu8/yz6MwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVrmxXzbvg8pIZ5TAknu/fAGcfcREJcKCVB u5ijieya9C1CvXIBKCV5iwVdMXX10vistRblZw185rmJfVEaedGoCj74sDVfnpB5 5GMQcFeG3RFb9B+3eq5ECvmRRBAIkL80h21NipuqC5ir2IqPtkJtT7qS6pf4/BdS zUi1+4QDWAZ4KIZal+omb8U3PGm3IdUpPefZAQ6ipPNA5T++wfIr6x0Xg2PJEPj9 +n18QQWLvAM7L4El01vB/onzW4+OrkE05PTnpMst2QG63DwV+k6oTZVKUSMWlv87 QZKi/r6D34gVNm1GHufvGyw7GmpIhCznDqDc1sAwUsSVbLuGye0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:50 2026 by rpki-client