$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: dfayL1LnI+HNW9bPow+FBltlzayK3FIoIp3PI1NsXCU= Subject key identifier: 99:D5:F1:36:B0:B1:3F:2A:CD:CA:31:89:90:8B:CA:C1:D4:E7:36:DF Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 659EB58A662F77B9608463EB200534310FD0D36E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 0229 Signing time: Thu 26 Mar 2026 01:02:16 +0000 Manifest this update: Thu 26 Mar 2026 00:57:16 +0000 Manifest next update: Sun 29 Mar 2026 08:44:16 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: NS36n0g0LZ1r+9NzWrKbaw6YVtE28aH8KRasqmHsH/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9e:b5:8a:66:2f:77:b9:60:84:63:eb:20:05:34:31:0f:d0:d3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Mar 26 00:57:16 2026 GMT Not After : Mar 29 08:44:16 2026 GMT Subject: CN=99D5F136B0B13F2ACDCA3189908BCAC1D4E736DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:52:f2:06:fb:54:9c:d9:5d:a5:90:c6:24: 1f:97:c1:9a:e9:09:92:0c:c1:1c:4c:6f:4c:ba:40: 9c:64:a0:af:cd:1a:33:e7:03:b3:5f:f8:64:10:5f: f5:d6:28:15:ae:60:ea:60:f9:c5:1e:06:fb:1b:c7: 2c:90:93:50:1b:e6:de:c6:35:5a:72:4d:a5:02:12: 06:ba:65:21:d1:f9:21:71:c8:88:ab:1e:7b:ec:e9: c5:6d:25:e2:cb:30:3f:f6:3a:50:66:06:4f:88:7f: 97:3e:c8:8d:4a:be:43:30:fc:a4:80:04:a6:13:f6: 41:37:da:4a:df:a9:dd:e6:84:50:d5:35:97:c6:b0: eb:51:00:17:5c:d3:f4:db:a7:a5:12:c7:ae:e5:9c: d8:cb:10:11:4c:6c:19:6c:f1:49:27:fe:93:0a:5e: 1f:55:82:86:df:18:45:f0:b0:af:11:01:f8:14:c9: bb:23:cf:7f:7a:4c:0e:2a:89:b6:d4:47:f9:9f:cd: 33:09:3e:3d:50:be:a4:8d:00:0f:31:a3:16:60:6c: dd:8b:99:17:69:dd:a1:3e:b4:da:3e:db:84:43:6d: 87:7f:ff:8b:9e:63:53:97:0a:6a:ca:d4:b0:87:01: 1d:77:95:27:38:b7:32:ce:d9:32:af:91:80:63:33: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:F1:36:B0:B1:3F:2A:CD:CA:31:89:90:8B:CA:C1:D4:E7:36:DF X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ca:58:b7:ab:90:c2:d0:78:2c:b1:c3:9a:f3:99:6b:4c:eb: 6f:d4:c6:29:a6:57:c4:22:d4:30:f1:d5:54:41:32:54:90:56: 9d:b2:64:74:00:c6:ac:a5:7a:16:28:1e:ce:3c:63:1f:c1:64: 56:ab:7d:b0:b4:09:51:02:d4:e9:3d:62:2c:6e:97:27:ce:c8: 9b:d7:c8:b6:9a:cd:4e:99:0d:0a:54:4f:15:79:19:20:9e:83: 69:e9:6e:52:88:49:97:ea:27:cd:8d:a0:44:21:46:68:3e:2f: 10:95:2d:e8:e8:9a:d7:ef:6a:b2:88:ba:10:d5:0c:43:21:4e: 9d:17:90:59:42:d8:8c:fd:1e:f3:5a:ef:f0:9d:27:cc:2a:8b: 7d:ca:58:69:b0:c0:33:02:7f:23:ad:df:a3:08:1c:a1:f3:7d: 93:ef:92:91:cf:96:86:d8:63:b0:38:5f:04:d3:06:c6:8b:78: 09:cd:12:a0:29:bc:85:94:27:b0:74:dc:0c:43:26:28:fe:e3: d8:93:1e:79:28:68:e7:72:cd:f4:85:4a:94:a9:07:36:3c:3d: 08:af:0f:14:ee:98:8f:33:d3:31:3e:21:67:d2:4f:80:ae:85: e0:46:b6:89:48:7d:41:e9:e6:47:97:10:07:16:9f:40:ba:1b: e3:ea:e8:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZ61imYvd7lghGPrIAU0MQ/Q024wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNjAzMjYwMDU3MTZaFw0yNjAzMjkwODQ0MTZaMDMxMTAvBgNV BAMTKDk5RDVGMTM2QjBCMTNGMkFDRENBMzE4OTkwOEJDQUMxRDRFNzM2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H1LyBvtUnNldpZDGJB+XwZrp CZIMwRxMb0y6QJxkoK/NGjPnA7Nf+GQQX/XWKBWuYOpg+cUeBvsbxyyQk1Ab5t7G NVpyTaUCEga6ZSHR+SFxyIirHnvs6cVtJeLLMD/2OlBmBk+If5c+yI1KvkMw/KSA BKYT9kE32krfqd3mhFDVNZfGsOtRABdc0/Tbp6USx67lnNjLEBFMbBls8Ukn/pMK Xh9VgobfGEXwsK8RAfgUybsjz396TA4qibbUR/mfzTMJPj1QvqSNAA8xoxZgbN2L mRdp3aE+tNo+24RDbYd//4ueY1OXCmrK1LCHAR13lSc4tzLO2TKvkYBjMyeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdXxNrCxPyrNyjGJkIvKwdTnNt8wHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7KWLerkMLQeCyxw5rzmWtM62/UximmV8Qi 1DDx1VRBMlSQVp2yZHQAxqylehYoHs48Yx/BZFarfbC0CVEC1Ok9YixulyfOyJvX yLaazU6ZDQpUTxV5GSCeg2npblKISZfqJ82NoEQhRmg+LxCVLejomtfvarKIuhDV DEMhTp0XkFlC2Iz9HvNa7/CdJ8wqi33KWGmwwDMCfyOt36MIHKHzfZPvkpHPlobY Y7A4XwTTBsaLeAnNEqApvIWUJ7B03AxDJij+49iTHnkoaOdyzfSFSpSpBzY8PQiv DxTumI8z0zE+IWfST4CuheBGtolIfUHp5keXEAcWn0C6G+Pq6MM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:18 2026 by rpki-client