$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: xDK0PwKyrT0s0D4tLOCBbcK44iH7qxQKMUre/xechHA= Subject key identifier: 87:34:10:B7:30:4E:E8:4A:70:70:0A:9E:88:41:D1:29:23:73:56:E2 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 6F9E19C33F93800F54B961040EEFBEF2A838687A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 0511 Signing time: Tue 24 Mar 2026 21:01:13 +0000 Manifest this update: Tue 24 Mar 2026 20:56:13 +0000 Manifest next update: Sat 28 Mar 2026 04:27:13 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: JImeJWlrE3mi/mCGQ76QYWvGg2q6ixwNKILZLl8koYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9e:19:c3:3f:93:80:0f:54:b9:61:04:0e:ef:be:f2:a8:38:68:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Mar 24 20:56:13 2026 GMT Not After : Mar 28 04:27:13 2026 GMT Subject: CN=873410B7304EE84A70700A9E8841D129237356E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:24:bc:6a:07:64:19:52:00:ef:7a:87:7e: c1:fd:a4:69:b5:c6:44:bc:e7:b8:f9:39:13:9a:d7: b1:46:6b:36:8f:20:b5:c0:a4:30:56:e7:08:aa:d5: fb:03:f9:a2:e5:03:ab:fc:c5:aa:b1:74:86:b8:7c: 08:a2:77:47:cf:5b:ea:96:1d:16:b3:69:69:35:28: 2f:af:51:3a:29:2e:a3:1b:85:12:70:1f:a2:ac:3a: e6:52:ae:40:a2:a8:f7:2f:7c:82:7c:1f:2f:56:ea: 19:a2:56:93:15:6f:6e:bd:31:51:4c:ab:75:fe:28: e8:7b:42:53:df:44:a6:b7:75:c0:79:76:ef:9f:57: e7:62:63:1d:03:3b:b3:d6:81:33:79:b4:7c:65:b6: 9c:dc:f7:57:b5:a0:6a:fc:89:de:43:87:cf:61:5c: e4:d8:fa:8d:4b:a4:79:12:8e:4c:f5:fe:12:cf:f9: 23:4b:c1:83:18:87:45:c0:25:11:2f:24:10:6d:27: ef:80:9b:15:9d:f2:98:5a:84:54:be:a9:2d:47:f5: 52:eb:ae:26:41:a8:dc:15:e2:06:ce:e9:8e:55:82: 23:ea:ed:0f:ba:04:82:87:d2:6c:22:8c:1a:ef:b4: 5d:36:65:1d:76:56:8f:3b:b3:53:58:2e:72:99:38: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:34:10:B7:30:4E:E8:4A:70:70:0A:9E:88:41:D1:29:23:73:56:E2 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fa:8c:75:d2:19:87:77:2c:35:e0:74:c0:5e:77:a5:63:f7: c6:63:de:11:99:1d:2d:fd:4b:ef:ed:3e:c2:2d:61:36:6e:ce: 59:cb:61:b9:40:e4:38:45:b8:49:61:c7:a1:74:2c:26:11:9c: 90:93:e2:4b:0d:a4:b4:40:c8:15:4c:13:13:40:e7:be:f8:32: 4b:cb:df:29:fb:d1:71:53:4d:5d:ed:69:b1:e1:3d:e3:fe:b6: 1a:18:77:ef:cf:ca:8c:82:3a:2f:63:bb:dc:27:1a:0c:98:e0: 58:a8:bf:0a:16:cd:f1:8e:d2:c2:73:4e:00:85:ef:dd:d5:a6: b7:e6:fd:a5:ed:b4:56:7e:93:40:b2:de:41:1f:7d:14:27:3a: 8d:40:0f:29:5e:03:b7:3d:85:e6:a2:8f:f2:ff:02:88:e9:11: a1:c7:c7:cc:80:6f:6f:94:dc:80:b0:e9:64:c4:c8:0a:20:e4: 06:3f:ab:af:04:07:5c:96:f9:c6:a0:6f:cc:5e:42:58:1b:c2: 95:1a:20:20:9f:21:fe:65:04:3e:54:2e:2d:07:df:43:15:09: 02:fb:d3:99:2b:d5:db:ef:ee:81:4c:0f:cd:ec:95:3d:b1:4b: 42:bb:35:93:20:8b:62:c9:82:8f:fe:9d:e5:75:d2:88:92:77: e8:d2:c2:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb54Zwz+TgA9UuWEEDu++8qg4aHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNjAzMjQyMDU2MTNaFw0yNjAzMjgwNDI3MTNaMDMxMTAvBgNV BAMTKDg3MzQxMEI3MzA0RUU4NEE3MDcwMEE5RTg4NDFEMTI5MjM3MzU2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58CS8agdkGVIA73qHfsH9pGm1 xkS857j5OROa17FGazaPILXApDBW5wiq1fsD+aLlA6v8xaqxdIa4fAiid0fPW+qW HRazaWk1KC+vUTopLqMbhRJwH6KsOuZSrkCiqPcvfIJ8Hy9W6hmiVpMVb269MVFM q3X+KOh7QlPfRKa3dcB5du+fV+diYx0DO7PWgTN5tHxltpzc91e1oGr8id5Dh89h XOTY+o1LpHkSjkz1/hLP+SNLwYMYh0XAJREvJBBtJ++AmxWd8phahFS+qS1H9VLr riZBqNwV4gbO6Y5VgiPq7Q+6BIKH0mwijBrvtF02ZR12Vo87s1NYLnKZOCDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhzQQtzBO6EpwcAqeiEHRKSNzVuIwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ76jHXSGYd3LDXgdMBed6Vj98Zj3hGZHS39 S+/tPsItYTZuzlnLYblA5DhFuElhx6F0LCYRnJCT4ksNpLRAyBVMExNA5774MkvL 3yn70XFTTV3tabHhPeP+thoYd+/PyoyCOi9ju9wnGgyY4FiovwoWzfGO0sJzTgCF 793Vprfm/aXttFZ+k0Cy3kEffRQnOo1ADyleA7c9heaij/L/AojpEaHHx8yAb2+U 3ICw6WTEyAog5AY/q68EB1yW+cagb8xeQlgbwpUaICCfIf5lBD5ULi0H30MVCQL7 05kr1dvv7oFMD83slT2xS0K7NZMgi2LJgo/+neV10oiSd+jSwnU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:13 2026 by rpki-client