$ rpki-client -vvf repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft File: DFF6098A4921B357E69571FC3EB289143D85ADBD.mft (raw, json) Hash identifier: 4AChyzsIM7BktQSva4nk229Ti9Qvui89cH8MpGi5sXY= Subject key identifier: EE:7E:7B:13:85:88:D4:69:5C:D8:94:0E:EB:C8:EA:1C:24:56:BB:61 Authority key identifier: DF:F6:09:8A:49:21:B3:57:E6:95:71:FC:3E:B2:89:14:3D:85:AD:BD Certificate issuer: /CN=DFF6098A4921B357E69571FC3EB289143D85ADBD Certificate serial: 63EFE26C9E4A1F5CAA6694E710B608CFAB22E203 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft Manifest number: 09 Signing time: Thu 26 Mar 2026 09:01:27 +0000 Manifest this update: Thu 26 Mar 2026 08:56:27 +0000 Manifest next update: Sun 29 Mar 2026 14:08:27 +0000 Files and hashes: 1: DFF6098A4921B357E69571FC3EB289143D85ADBD.crl (hash: 9V//JVavQ0xdxpvmGcFKiUSHeUTBb0EaKvl3/5NYQvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.crl rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ef:e2:6c:9e:4a:1f:5c:aa:66:94:e7:10:b6:08:cf:ab:22:e2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFF6098A4921B357E69571FC3EB289143D85ADBD Validity Not Before: Mar 26 08:56:27 2026 GMT Not After : Mar 29 14:08:27 2026 GMT Subject: CN=EE7E7B138588D4695CD8940EEBC8EA1C2456BB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:dc:f8:fa:a3:4b:82:cb:48:10:de:dd:9a: f6:cd:f2:bb:a8:27:c8:b3:3d:b6:11:d4:b8:f5:08: 0c:62:27:a7:7b:23:fb:8f:08:4c:df:03:fb:5f:5f: 35:e6:6a:b8:84:c0:20:01:ed:f7:0d:be:fd:a1:ec: f5:d2:94:fc:fc:30:7d:1f:66:a7:e7:c3:33:ab:30: 8a:8e:79:5b:09:8a:d9:7e:35:d8:61:9e:32:4c:32: 31:31:4d:50:b4:38:89:db:64:d1:a2:c9:f3:e3:01: 50:2f:e7:67:9e:89:9b:af:eb:9c:4d:67:a7:71:c1: cb:15:13:9f:26:0b:7d:1a:9a:d4:f5:cb:90:b2:e0: df:92:6d:73:fd:ab:e5:c3:59:67:5c:31:0e:b9:93: 49:c1:88:be:0a:82:14:7f:9b:92:6b:b8:b8:1e:80: e9:b3:16:f2:d7:98:86:7e:3a:d2:08:98:3c:18:28: 37:43:09:f4:c6:43:f0:57:c9:ba:b2:f4:fd:4f:8b: 11:99:df:e8:de:95:f8:d0:7f:1b:15:e2:3b:61:20: 57:0f:3c:38:f0:89:08:19:e8:ca:68:f3:f5:3e:d5: 9d:8a:7a:b2:ac:de:7b:1f:c1:97:43:bd:16:bd:6f: 42:57:f2:6b:3b:41:9e:a7:1a:c2:d8:a4:b0:be:fe: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:7B:13:85:88:D4:69:5C:D8:94:0E:EB:C8:EA:1C:24:56:BB:61 X509v3 Authority Key Identifier: keyid:DF:F6:09:8A:49:21:B3:57:E6:95:71:FC:3E:B2:89:14:3D:85:AD:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:84:cb:ed:60:08:84:d7:f0:45:c1:83:8b:fd:52:55:dd:e6: 0d:b4:35:26:d7:5c:9d:3d:e0:6a:ab:f8:67:c7:4b:93:e3:01: 33:eb:55:1d:03:03:72:9a:61:63:65:c7:df:fc:72:a6:91:b5: 14:5b:37:ae:2e:5c:33:1c:86:8f:7c:31:50:ac:62:aa:0e:89: 63:f3:b2:9c:7c:5a:3a:06:0e:04:c7:a7:79:ee:16:bc:2a:36: 03:a0:65:bf:05:6c:ab:ae:5c:de:f7:1b:50:eb:b5:f9:4f:fa: e1:41:18:6a:d2:34:11:94:3f:02:c1:01:f1:d5:c1:34:52:be: 8c:5c:ed:be:0c:b2:46:c8:f1:87:aa:48:2c:95:af:ee:59:78: e7:17:62:05:fd:ec:e7:ea:78:f9:7d:4f:62:f1:1c:e4:76:be: 38:f8:a0:2d:c5:f4:9d:8a:53:c5:94:1c:0c:a0:dc:da:6b:73: 70:81:46:53:a1:5d:a9:af:10:d9:22:d2:d5:b2:0d:c0:1b:11: 18:19:ec:78:82:e0:33:2f:ed:1e:84:06:11:f3:6e:6e:85:71: 05:a5:da:e0:79:3a:1d:3c:a8:b6:82:86:c6:6c:04:e8:2c:0e: 0f:dc:de:07:93:ed:ed:9d:14:c8:e2:e9:d2:1d:c0:ec:00:c4: c4:1f:00:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+/ibJ5KH1yqZpTnELYIz6si4gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGNjA5OEE0OTIxQjM1N0U2OTU3MUZDM0VCMjg5MTQz RDg1QURCRDAeFw0yNjAzMjYwODU2MjdaFw0yNjAzMjkxNDA4MjdaMDMxMTAvBgNV BAMTKEVFN0U3QjEzODU4OEQ0Njk1Q0Q4OTQwRUVCQzhFQTFDMjQ1NkJCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2tz4+qNLgstIEN7dmvbN8ruo J8izPbYR1Lj1CAxiJ6d7I/uPCEzfA/tfXzXmariEwCAB7fcNvv2h7PXSlPz8MH0f ZqfnwzOrMIqOeVsJitl+NdhhnjJMMjExTVC0OInbZNGiyfPjAVAv52eeiZuv65xN Z6dxwcsVE58mC30amtT1y5Cy4N+SbXP9q+XDWWdcMQ65k0nBiL4KghR/m5JruLge gOmzFvLXmIZ+OtIImDwYKDdDCfTGQ/BXybqy9P1PixGZ3+jelfjQfxsV4jthIFcP PDjwiQgZ6Mpo8/U+1Z2KerKs3nsfwZdDvRa9b0JX8ms7QZ6nGsLYpLC+/qmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7n57E4WI1Glc2JQO68jqHCRWu2EwHwYDVR0j BBgwFoAU3/YJikkhs1fmlXH8PrKJFD2Frb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmUyOTkwMi1lMGY0LTQyOWEtOWEyNi00MzliOWJmZWU0ODkvMS9ERkY2MDk4QTQ5 MjFCMzU3RTY5NTcxRkMzRUIyODkxNDNEODVBREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREZGNjA5OEE0OTIxQjM1N0U2OTU3MUZDM0VCMjg5MTQzRDg1 QURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvREZGNjA5OEE0OTIxQjM1N0U2OTU3MUZDM0VCMjg5 MTQzRDg1QURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeEy+1gCITX8EXBg4v9UlXd5g20NSbXXJ09 4Gqr+GfHS5PjATPrVR0DA3KaYWNlx9/8cqaRtRRbN64uXDMcho98MVCsYqoOiWPz spx8WjoGDgTHp3nuFrwqNgOgZb8FbKuuXN73G1DrtflP+uFBGGrSNBGUPwLBAfHV wTRSvoxc7b4MskbI8YeqSCyVr+5ZeOcXYgX97OfqePl9T2LxHOR2vjj4oC3F9J2K U8WUHAyg3Nprc3CBRlOhXamvENki0tWyDcAbERgZ7HiC4DMv7R6EBhHzbm6FcQWl 2uB5Oh08qLaChsZsBOgsDg/c3geT7e2dFMji6dIdwOwAxMQfAG0= -----END CERTIFICATE-----Generated at Fri Mar 27 01:52:43 2026 by rpki-client