$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json) Hash identifier: uocFomnGgyY+iAVegJz/dxKEO5hKhDN07PZ/Q/nvDwQ= Subject key identifier: 8E:B8:5A:44:84:81:39:83:3E:59:DE:B6:10:E4:04:57:69:CD:5D:69 Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902 Certificate serial: 55E0897B9FAAD6DDE61B8438D961334DFC590A36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft Manifest number: 0108 Signing time: Thu 26 Mar 2026 16:31:26 +0000 Manifest this update: Thu 26 Mar 2026 16:26:26 +0000 Manifest next update: Sun 29 Mar 2026 19:46:26 +0000 Files and hashes: 1: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: VwZlAJTlx/zq94YBK/N5nKLEscMvEDWkfHAJdxC4AUY=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e0:89:7b:9f:aa:d6:dd:e6:1b:84:38:d9:61:33:4d:fc:59:0a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902 Validity Not Before: Mar 26 16:26:26 2026 GMT Not After : Mar 29 19:46:26 2026 GMT Subject: CN=8EB85A44848139833E59DEB610E4045769CD5D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:23:31:09:f0:81:c1:44:36:f6:09:b4:4d: c3:9a:e4:47:11:80:65:85:4d:ea:84:8e:3c:c0:87: 2f:bb:a9:0c:b2:0e:77:bf:79:d0:6c:f5:62:93:6d: b0:a6:67:a2:fd:1c:40:7c:1c:68:75:cf:64:4e:65: 64:09:87:a3:ed:d6:d9:82:32:8b:a0:36:6b:1a:66: e5:d0:ac:26:db:c9:93:4b:dc:b4:91:49:1b:8c:58: a7:c2:4d:5c:4f:a1:fa:f9:53:e2:3b:89:a8:e3:06: 31:5c:92:4d:d1:96:96:79:56:68:57:39:e2:35:86: 12:6d:73:fc:5f:69:f7:72:9a:7b:10:83:b2:6c:fe: 9e:7b:d3:ca:7a:90:06:7a:72:5e:33:fd:2b:ea:b0: 34:3b:ba:7d:44:06:e8:bc:67:2c:bd:72:66:6f:37: 8d:40:45:bc:8f:59:82:d9:2f:2a:45:b3:a0:22:8d: 93:c1:7f:ea:26:6f:8a:54:4c:e6:d2:c7:24:a5:a7: 80:a0:cc:84:6f:cb:73:62:bb:c4:f6:14:7c:89:1a: e0:12:54:ef:88:1b:4f:74:80:7e:4b:f4:6b:4a:b2: 8e:4f:ef:1f:83:60:62:79:a0:84:33:c6:45:e9:1a: 6f:8d:a0:73:42:ca:1f:c7:8e:84:b9:9c:99:04:54: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B8:5A:44:84:81:39:83:3E:59:DE:B6:10:E4:04:57:69:CD:5D:69 X509v3 Authority Key Identifier: keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c9:2b:a4:42:3f:0d:ff:63:e6:aa:5d:6b:f5:c5:18:ad:5b: 0b:d2:1f:69:75:fb:ff:9b:7f:fa:d2:d2:ae:4c:84:b6:6a:54: d1:a0:60:23:10:ed:91:f2:64:cf:d4:fa:ee:06:80:94:ef:7e: 8d:e3:8f:7d:cc:56:d3:dd:7e:53:35:6f:70:a8:cf:c3:0b:29: 85:cb:42:a0:c1:ac:2e:71:ff:3f:99:52:da:5b:13:1a:d0:26: 40:4a:5e:78:17:48:10:7b:91:15:fa:41:fe:be:f4:58:31:de: ee:66:18:78:a7:b3:a0:fc:18:fc:42:74:37:f3:33:52:e0:9c: 79:87:c1:ac:91:8f:55:c6:97:31:0f:c4:0c:cb:ef:7d:b6:64: f2:4e:01:1e:1e:ec:7f:c0:d1:84:99:e5:55:a7:e7:98:aa:57: b7:45:bb:e8:44:51:42:a5:d6:e3:92:1a:e0:e3:a6:10:f5:ef: 5e:5b:85:f8:a3:c1:11:9e:24:69:9b:10:f6:61:2f:6b:24:eb: 29:7e:8b:2e:59:27:41:ba:1e:8d:c6:90:3d:b2:5f:3c:e9:bb: 05:fa:43:b1:86:0e:28:e0:88:ee:89:fc:ac:93:37:4e:b0:90: 6e:73:b1:e7:01:32:64:cb:72:46:1a:98:af:68:d6:16:0c:e7: 7e:c6:bd:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeCJe5+q1t3mG4Q42WEzTfxZCjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw MDQ0MzkwMjAeFw0yNjAzMjYxNjI2MjZaFw0yNjAzMjkxOTQ2MjZaMDMxMTAvBgNV BAMTKDhFQjg1QTQ0ODQ4MTM5ODMzRTU5REVCNjEwRTQwNDU3NjlDRDVENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonSMxCfCBwUQ29gm0TcOa5EcR gGWFTeqEjjzAhy+7qQyyDne/edBs9WKTbbCmZ6L9HEB8HGh1z2ROZWQJh6Pt1tmC MougNmsaZuXQrCbbyZNL3LSRSRuMWKfCTVxPofr5U+I7iajjBjFckk3RlpZ5VmhX OeI1hhJtc/xfafdymnsQg7Js/p5708p6kAZ6cl4z/SvqsDQ7un1EBui8Zyy9cmZv N41ARbyPWYLZLypFs6AijZPBf+omb4pUTObSxySlp4CgzIRvy3Niu8T2FHyJGuAS VO+IG090gH5L9GtKso5P7x+DYGJ5oIQzxkXpGm+NoHNCyh/HjoS5nJkEVL0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjrhaRISBOYM+Wd62EOQEV2nNXWkwHwYDVR0j BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0 MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfJK6RCPw3/Y+aqXWv1xRitWwvSH2l1+/+b f/rS0q5MhLZqVNGgYCMQ7ZHyZM/U+u4GgJTvfo3jj33MVtPdflM1b3Coz8MLKYXL QqDBrC5x/z+ZUtpbExrQJkBKXngXSBB7kRX6Qf6+9Fgx3u5mGHins6D8GPxCdDfz M1LgnHmHwayRj1XGlzEPxAzL7322ZPJOAR4e7H/A0YSZ5VWn55iqV7dFu+hEUUKl 1uOSGuDjphD1715bhfijwRGeJGmbEPZhL2sk6yl+iy5ZJ0G6Ho3GkD2yXzzpuwX6 Q7GGDijgiO6J/KyTN06wkG5zsecBMmTLckYamK9o1hYM537Gvdc= -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:50 2026 by rpki-client