$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: s+4y2LzSvZmPZcK2sBNntYlSv67R4KDIublyUSMJ9z0= Subject key identifier: F5:B4:0A:47:F4:29:5A:0B:14:7F:57:EA:E7:A4:D8:9E:B4:4C:BF:86 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 42B0A01C553DD5AC218586308488670BC06F06A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 03CB Signing time: Tue 24 Mar 2026 07:31:53 +0000 Manifest this update: Tue 24 Mar 2026 07:26:53 +0000 Manifest next update: Fri 27 Mar 2026 13:38:53 +0000 Files and hashes: 1: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: f+twJ0jFkb1aE0nFQbIrtFFC5Tl1RUGt8d0ck17plCg=) 2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: uPrqe+3VY4iMsKPq0O6BgXZ3jDOMsF1P9U++HibeByE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b0:a0:1c:55:3d:d5:ac:21:85:86:30:84:88:67:0b:c0:6f:06:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Mar 24 07:26:53 2026 GMT Not After : Mar 27 13:38:53 2026 GMT Subject: CN=F5B40A47F4295A0B147F57EAE7A4D89EB44CBF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:13:7f:f7:da:62:eb:1f:ea:ff:ed:46:fb: 62:21:0c:58:a1:02:0a:9d:a4:49:bc:3b:67:1f:8b: c6:aa:78:84:e8:3e:53:30:58:51:78:b3:a7:f3:dd: b0:d6:2e:4b:93:34:db:58:ff:0a:a7:90:50:7f:16: c3:9d:0e:3c:e0:d6:d3:36:5a:59:63:2c:c6:18:6c: 52:28:ae:f5:23:5c:85:60:79:8c:06:04:32:5c:28: 1b:6d:a2:d5:8f:fd:3b:69:c0:a2:ef:32:98:a4:75: bf:1b:ef:0d:11:af:35:ba:47:a1:37:c1:8e:6a:c2: 7e:bb:99:b1:ec:72:cb:52:46:8f:0b:af:b6:08:e7: 7d:4e:13:de:c8:4e:cf:9b:5a:af:68:b8:e8:28:db: 30:c4:e3:f6:50:16:58:5b:f0:1a:a5:d2:d5:74:0e: 8d:e1:f8:f4:99:c4:56:9a:0c:2b:15:63:48:a8:61: 0c:a5:69:0a:5d:3b:1d:3d:73:a3:b4:79:18:ec:97: a5:81:14:47:43:88:ad:f7:b4:ea:0e:d1:cd:9b:98: ae:49:08:12:ea:a7:a3:db:95:23:aa:e6:73:a0:e8: b9:3d:7e:c5:93:af:1d:7b:93:9d:f5:3b:03:09:1f: fb:37:03:3b:63:1e:5b:04:b3:8a:20:11:8c:9b:47: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:0A:47:F4:29:5A:0B:14:7F:57:EA:E7:A4:D8:9E:B4:4C:BF:86 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a5:86:5e:8d:cc:35:d2:36:07:b6:2e:34:88:0c:29:9e:06: 55:8e:24:b1:d9:70:25:9b:fc:7e:77:71:f3:8d:ea:d8:6b:21: d6:57:61:45:36:f7:f0:3e:41:68:d4:d1:d9:1d:02:c4:a5:4b: 8e:f6:66:d4:45:88:4d:ac:91:a8:4e:de:39:b1:c6:37:aa:5e: 8a:e0:3f:7a:45:26:13:05:4b:e8:40:73:07:70:64:dc:f7:c5: 2a:46:3e:30:68:af:58:62:12:6d:02:45:a4:bf:4f:96:ba:c2: 70:f1:b9:cb:dc:e4:78:a9:d1:68:90:c8:43:d0:de:21:27:49: f8:af:81:20:db:cc:1d:74:51:a6:1f:b4:b8:5d:72:5a:db:bc: ee:6a:c7:a5:f8:3d:5a:71:bb:df:c7:8f:48:ab:ba:fa:d2:61: eb:e3:fe:1b:40:48:eb:04:3d:76:cd:8a:f0:dc:fc:02:3d:a5: 60:c2:88:29:57:ad:1d:12:4f:fd:90:9c:85:5e:0a:d0:b9:58: 6a:1f:75:64:3e:ca:99:d3:de:5a:29:21:cf:25:e1:b6:a3:29: a7:25:e4:01:de:8e:b0:06:29:31:65:d3:9a:51:ec:d5:9a:85: d2:42:9f:1b:7a:c2:46:76:dc:a5:a8:5d:e4:ba:4b:88:e1:01: 34:5d:62:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrCgHFU91awhhYYwhIhnC8BvBqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNjAzMjQwNzI2NTNaFw0yNjAzMjcxMzM4NTNaMDMxMTAvBgNV BAMTKEY1QjQwQTQ3RjQyOTVBMEIxNDdGNTdFQUU3QTREODlFQjQ0Q0JGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKRN/99pi6x/q/+1G+2IhDFih AgqdpEm8O2cfi8aqeIToPlMwWFF4s6fz3bDWLkuTNNtY/wqnkFB/FsOdDjzg1tM2 WlljLMYYbFIorvUjXIVgeYwGBDJcKBttotWP/TtpwKLvMpikdb8b7w0RrzW6R6E3 wY5qwn67mbHscstSRo8Lr7YI531OE97ITs+bWq9ouOgo2zDE4/ZQFlhb8Bql0tV0 Do3h+PSZxFaaDCsVY0ioYQylaQpdOx09c6O0eRjsl6WBFEdDiK33tOoO0c2bmK5J CBLqp6PblSOq5nOg6Lk9fsWTrx17k531OwMJH/s3AztjHlsEs4ogEYybR6NPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9bQKR/QpWgsUf1fq56TYnrRMv4YwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKlhl6NzDXSNge2LjSIDCmeBlWOJLHZcCWb /H53cfON6thrIdZXYUU29/A+QWjU0dkdAsSlS472ZtRFiE2skahO3jmxxjeqXorg P3pFJhMFS+hAcwdwZNz3xSpGPjBor1hiEm0CRaS/T5a6wnDxucvc5Hip0WiQyEPQ 3iEnSfivgSDbzB10UaYftLhdclrbvO5qx6X4PVpxu9/Hj0iruvrSYevj/htASOsE PXbNivDc/AI9pWDCiClXrR0ST/2QnIVeCtC5WGofdWQ+ypnT3lopIc8l4bajKacl 5AHejrAGKTFl05pR7NWahdJCnxt6wkZ23KWoXeS6S4jhATRdYk4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:10 2026 by rpki-client