$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: QfMByxrEp/2CuBUA5PAekLrRMOQ6Nam1EgooDmsRRos= Subject key identifier: 8E:2F:EC:08:83:F8:DB:0A:97:BB:5A:5F:47:F6:B6:5E:BE:D6:72:F4 Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 49C523DA9418130FFBE99BBE16193C6F9284E66A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: 016B Signing time: Wed 25 Mar 2026 13:51:12 +0000 Manifest this update: Wed 25 Mar 2026 13:46:12 +0000 Manifest next update: Sat 28 Mar 2026 20:51:12 +0000 Files and hashes: 1: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: FcRp5b3ORnbcjrI7cMe9qPV+DJ0WOWKqhlHaTmz74iQ=) 2: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: FVR7OXRQ9lsqccYbbruNBCZHbMSoocj8hgbL/LfCNK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c5:23:da:94:18:13:0f:fb:e9:9b:be:16:19:3c:6f:92:84:e6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Mar 25 13:46:12 2026 GMT Not After : Mar 28 20:51:12 2026 GMT Subject: CN=8E2FEC0883F8DB0A97BB5A5F47F6B65EBED672F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:fd:84:0b:d8:18:c2:9c:a8:7d:fc:d8:0c: f6:cb:d8:8d:50:1b:7a:cc:b2:78:df:96:c6:33:1f: 0a:28:6f:e3:be:60:2b:c8:de:8d:a4:36:8c:71:fc: 8c:80:75:e4:5a:9d:7c:6f:0c:57:72:fb:5f:30:ff: 66:37:8d:2f:4c:9d:05:5c:67:60:b2:2a:4f:81:2f: 43:08:c6:eb:4f:0f:33:7b:9e:d4:95:6f:fd:a5:87: 64:4b:fe:d4:03:14:92:77:ba:c0:e7:b7:7a:9c:60: c2:e4:51:83:b7:f0:69:56:56:76:49:f1:37:8c:d7: 78:1c:63:91:ca:71:e1:ed:a6:66:07:ac:e2:23:40: d5:aa:90:48:56:dd:4c:41:af:50:6c:40:1e:ef:8c: 2a:b6:96:2a:55:4e:87:69:f4:7d:07:9e:93:d6:9e: 2e:2e:6e:2f:77:d4:e1:96:a5:48:3b:d0:f4:12:e6: c7:23:6d:8b:47:6b:f4:a0:22:05:ae:6d:bb:c4:d6: 40:8c:da:bb:5d:d0:59:3e:d8:37:3c:c0:54:f4:00: 03:be:e3:84:7f:48:fa:44:79:d6:d4:c2:2d:31:c4: 59:1d:47:ca:1a:03:5e:af:c0:7b:96:03:71:ed:e9: b0:4a:1f:ef:56:a6:79:a4:33:6e:bc:11:43:9d:18: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:EC:08:83:F8:DB:0A:97:BB:5A:5F:47:F6:B6:5E:BE:D6:72:F4 X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:34:fc:98:11:cb:05:54:58:a8:b0:ae:08:65:95:c6:39:95: f4:83:75:ab:87:2b:3a:74:3a:9a:71:11:ee:c0:1a:02:42:28: a2:b5:ca:32:34:04:41:ee:65:68:0f:4c:c9:5e:5d:23:9b:3a: 12:d4:ce:97:1e:b0:67:9e:2d:c1:33:b5:38:29:b2:19:de:6c: f3:3c:3b:99:fc:1b:c1:62:51:33:8f:07:01:1b:95:03:cf:92: d3:34:25:50:6c:52:de:df:35:9e:d6:41:28:1b:65:5d:ec:6f: 34:9f:fe:e9:eb:b0:dd:c4:bf:e3:2a:eb:32:07:84:09:7b:28: 83:aa:f4:36:b4:d8:dd:08:29:92:a5:20:b7:39:f7:36:2f:b5: 69:79:d1:70:ec:74:31:4d:48:6a:12:83:2a:15:a9:c0:e0:9c: 89:b1:ce:d8:7d:2b:30:48:87:61:06:fa:1a:d1:a9:0a:3b:f5: ea:33:75:37:a3:84:b0:26:e4:e8:44:d4:b9:c7:17:c3:b6:7e: 06:0f:0a:96:19:70:4d:2e:53:b7:2e:37:dc:b7:d5:1b:a9:53: e3:d7:b5:57:17:6e:d9:d1:eb:a6:e9:14:47:f7:2b:69:bc:e2: a7:97:38:60:eb:62:68:d0:aa:94:59:0b:59:da:ce:0a:0b:b6: 8a:32:b6:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScUj2pQYEw/76Zu+Fhk8b5KE5mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNjAzMjUxMzQ2MTJaFw0yNjAzMjgyMDUxMTJaMDMxMTAvBgNV BAMTKDhFMkZFQzA4ODNGOERCMEE5N0JCNUE1RjQ3RjZCNjVFQkVENjcyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37/2EC9gYwpyoffzYDPbL2I1Q G3rMsnjflsYzHwoob+O+YCvI3o2kNoxx/IyAdeRanXxvDFdy+18w/2Y3jS9MnQVc Z2CyKk+BL0MIxutPDzN7ntSVb/2lh2RL/tQDFJJ3usDnt3qcYMLkUYO38GlWVnZJ 8TeM13gcY5HKceHtpmYHrOIjQNWqkEhW3UxBr1BsQB7vjCq2lipVTodp9H0HnpPW ni4ubi931OGWpUg70PQS5scjbYtHa/SgIgWubbvE1kCM2rtd0Fk+2Dc8wFT0AAO+ 44R/SPpEedbUwi0xxFkdR8oaA16vwHuWA3Ht6bBKH+9WpnmkM268EUOdGM4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUji/sCIP42wqXu1pfR/a2Xr7WcvQwHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA0/JgRywVUWKiwrghllcY5lfSDdauHKzp0 OppxEe7AGgJCKKK1yjI0BEHuZWgPTMleXSObOhLUzpcesGeeLcEztTgpshnebPM8 O5n8G8FiUTOPBwEblQPPktM0JVBsUt7fNZ7WQSgbZV3sbzSf/unrsN3Ev+Mq6zIH hAl7KIOq9Da02N0IKZKlILc59zYvtWl50XDsdDFNSGoSgyoVqcDgnImxzth9KzBI h2EG+hrRqQo79eozdTejhLAm5OhE1LnHF8O2fgYPCpYZcE0uU7cuN9y31RupU+PX tVcXbtnR66bpFEf3K2m84qeXOGDrYmjQqpRZC1nazgoLtooytiU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:52 2026 by rpki-client