$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: Aa1aePXWepV1br74i3JBsL6EFTC4iqYrYQA7sc66zjs= Subject key identifier: E9:09:F4:17:3B:ED:63:93:18:AD:D9:78:75:1A:57:F9:82:07:33:63 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 70B25BC54D3926CFC2E36A23FF41DCA05CE4C387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 0297 Signing time: Tue 24 Mar 2026 02:00:04 +0000 Manifest this update: Tue 24 Mar 2026 01:55:04 +0000 Manifest next update: Fri 27 Mar 2026 13:20:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: 4xLLGnxgRGbO4NuXNGbV+IaOvXsYKTiEgKm4jne9s/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b2:5b:c5:4d:39:26:cf:c2:e3:6a:23:ff:41:dc:a0:5c:e4:c3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Mar 24 01:55:04 2026 GMT Not After : Mar 27 13:20:04 2026 GMT Subject: CN=E909F4173BED639318ADD978751A57F982073363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:d5:97:2c:17:22:72:6f:7e:b2:ac:0e:9e: 43:c7:ab:2e:4f:95:ee:c5:ee:8f:c1:45:b4:e9:09: 6f:e2:85:af:49:34:79:b8:df:61:83:2a:93:95:ba: 01:f9:bd:6e:60:d5:fb:2c:9d:55:5f:18:c2:17:8c: 9d:02:bf:4b:62:6b:75:25:7e:55:c9:d6:80:59:f4: f1:7b:ee:e4:79:30:75:06:cb:bc:43:f3:b8:bf:13: c7:ec:87:d4:ae:e0:63:02:a8:66:38:84:f2:22:a7: 86:1f:9e:64:74:85:0c:17:c1:e7:4c:3b:dd:89:20: 18:5d:24:55:47:b1:ba:e7:af:5b:91:8d:ba:b4:f7: 97:8b:45:2f:1a:27:92:88:67:07:16:ed:be:c5:c8: 4e:74:82:36:27:80:bc:09:89:d7:c3:76:fa:e8:12: ee:83:f3:ba:72:60:97:02:a3:77:c2:6b:ac:3d:13: c7:6c:58:af:d9:63:57:f6:bb:40:97:c2:b1:ad:d5: e4:b1:30:b9:ba:0e:88:6c:09:b0:84:8c:49:bd:0c: 6a:25:2a:b2:55:68:19:df:62:94:31:48:fa:b7:68: 1c:4f:d6:25:02:41:4d:cc:51:b8:c8:00:6f:dd:09: 10:dc:d1:08:34:59:0f:cd:86:64:cb:7f:cb:4f:4e: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:09:F4:17:3B:ED:63:93:18:AD:D9:78:75:1A:57:F9:82:07:33:63 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ca:c9:2d:3e:46:28:ed:e9:d9:80:ec:93:70:2c:cb:d4:8d: 43:1f:fa:f6:13:e8:ea:2f:2c:b6:b3:13:82:47:ad:86:c7:30: dc:1f:2e:0b:ba:1c:d3:7e:8f:2b:c9:cf:07:f2:0e:79:81:b4: 8e:56:4a:e5:bc:c9:e5:1d:a4:94:ab:37:9c:fc:9f:7f:10:f7: b1:b4:55:12:e2:ee:28:6e:6a:db:19:e0:c1:d5:9c:7b:84:91: 53:ed:ce:40:af:44:75:8a:03:d9:ca:13:fa:a6:50:4e:ec:23: 9c:1b:6a:ad:f1:21:a1:45:9f:db:cf:95:6e:78:02:17:0b:b8: d2:36:10:9e:37:41:ab:90:42:90:eb:50:83:6b:8e:ad:5f:7c: e7:e3:b8:6f:d2:db:b8:a8:18:bc:00:3a:2c:c5:a4:8e:ba:6b: 24:86:bd:37:31:d7:3c:f6:2a:3d:c8:d5:4c:7c:f9:99:cd:02: 6d:13:cc:47:30:62:82:c6:f7:02:34:f8:9f:3d:3a:19:b5:09: 93:1b:5d:20:ae:4e:5d:a9:26:e7:f6:d5:87:e1:b7:d5:ad:5e: f0:32:14:9d:98:ea:3e:43:90:17:22:bb:b9:6e:16:6b:7b:bb: f0:6d:89:d4:86:cf:00:6d:38:73:48:73:f9:a2:ef:2c:94:4a: 02:2e:e0:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLJbxU05Js/C42oj/0HcoFzkw4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNjAzMjQwMTU1MDRaFw0yNjAzMjcxMzIwMDRaMDMxMTAvBgNV BAMTKEU5MDlGNDE3M0JFRDYzOTMxOEFERDk3ODc1MUE1N0Y5ODIwNzMzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68dWXLBcicm9+sqwOnkPHqy5P le7F7o/BRbTpCW/iha9JNHm432GDKpOVugH5vW5g1fssnVVfGMIXjJ0Cv0tia3Ul flXJ1oBZ9PF77uR5MHUGy7xD87i/E8fsh9Su4GMCqGY4hPIip4YfnmR0hQwXwedM O92JIBhdJFVHsbrnr1uRjbq095eLRS8aJ5KIZwcW7b7FyE50gjYngLwJidfDdvro Eu6D87pyYJcCo3fCa6w9E8dsWK/ZY1f2u0CXwrGt1eSxMLm6DohsCbCEjEm9DGol KrJVaBnfYpQxSPq3aBxP1iUCQU3MUbjIAG/dCRDc0Qg0WQ/NhmTLf8tPTu5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Qn0FzvtY5MYrdl4dRpX+YIHM2MwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3KyS0+Rijt6dmA7JNwLMvUjUMf+vYT6Oov LLazE4JHrYbHMNwfLgu6HNN+jyvJzwfyDnmBtI5WSuW8yeUdpJSrN5z8n38Q97G0 VRLi7ihuatsZ4MHVnHuEkVPtzkCvRHWKA9nKE/qmUE7sI5wbaq3xIaFFn9vPlW54 AhcLuNI2EJ43QauQQpDrUINrjq1ffOfjuG/S27ioGLwAOizFpI66aySGvTcx1zz2 Kj3I1Ux8+ZnNAm0TzEcwYoLG9wI0+J89Ohm1CZMbXSCuTl2pJuf21Yfht9WtXvAy FJ2Y6j5DkBciu7luFmt7u/BtidSGzwBtOHNIc/mi7yyUSgIu4Pw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:29 2026 by rpki-client