$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: JhbIVPSjAdXaD4aKiTYQ3KyXnQwxo3grIz+9dVXHDuc= Subject key identifier: 63:FE:CC:1A:C7:44:F0:75:AB:86:08:F3:1F:D4:13:02:32:87:DF:D8 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 1EF2EC7D57437B396EFA4E653CB0B804EBF72BD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 0144 Signing time: Tue 24 Mar 2026 15:02:43 +0000 Manifest this update: Tue 24 Mar 2026 14:57:43 +0000 Manifest next update: Sat 28 Mar 2026 00:09:43 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: JC668eigVROkKCHNuCknTDVtdCcyXIR0Sjq/89cGHTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f2:ec:7d:57:43:7b:39:6e:fa:4e:65:3c:b0:b8:04:eb:f7:2b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Mar 24 14:57:43 2026 GMT Not After : Mar 28 00:09:43 2026 GMT Subject: CN=63FECC1AC744F075AB8608F31FD413023287DFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:44:dc:23:cd:73:94:f5:9a:47:2b:bc:f4: 2d:0b:be:53:2a:b8:9b:f8:c1:6d:7e:b5:ad:f1:45: cf:31:a3:08:c5:7a:18:3a:9c:16:55:4e:c0:e7:26: 7c:94:c1:70:b6:52:29:8f:e2:a4:97:6e:c2:d1:8d: ba:ef:12:b8:5d:8e:8f:d3:2b:cf:42:31:c3:84:44: 04:8a:f8:3e:ec:9c:06:9e:5b:ee:98:d4:e1:f2:34: 64:4a:98:7a:a3:72:8e:69:82:4d:ac:66:4b:4e:07: 54:89:f7:32:5d:d8:bc:3f:2d:dd:df:3a:93:62:03: 5e:e8:96:63:1f:ef:8f:a2:99:bf:77:b3:0d:dc:cf: da:e9:93:f8:12:ef:f3:0e:a2:68:66:fd:f4:df:4e: e0:b4:2a:21:cf:10:52:9c:f6:87:45:e7:98:d1:e6: 08:46:e8:bc:30:7a:ad:cd:55:c6:2c:0c:e5:79:d2: fa:af:28:2f:be:ab:ba:82:a5:4d:de:66:40:01:99: e8:81:b0:ed:1b:61:b3:1a:23:b3:7d:30:b1:e9:50: ae:a7:90:9c:49:49:9c:81:16:7a:73:03:0e:93:d4: 56:77:ce:bf:6d:35:cb:26:95:ae:13:3c:13:9e:6f: d5:0a:02:b5:a8:d8:f8:a0:20:85:65:84:05:44:f0: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:CC:1A:C7:44:F0:75:AB:86:08:F3:1F:D4:13:02:32:87:DF:D8 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3d:8c:94:60:7b:43:ee:6c:e0:26:18:0e:e8:1d:f5:83:2f: 10:5d:bd:0f:c1:81:44:e6:ff:f3:e1:e7:06:f1:ac:31:23:e1: eb:62:b9:1f:d0:e1:d0:d9:1a:2c:34:22:9c:12:06:05:98:b8: af:ef:c4:20:a1:dd:14:fd:ea:1e:8c:88:50:26:ee:df:29:0b: cf:15:e5:d1:92:7d:2e:6c:a2:f6:ad:5d:13:1c:4e:b4:3c:3e: 28:60:de:9e:8c:80:ee:63:7f:66:59:0f:eb:5b:94:9f:33:b8: 85:05:60:cc:c9:77:77:a6:a6:f4:bc:c5:2b:7f:b6:85:36:50: be:b9:db:bf:e5:6a:22:63:1f:a3:5d:b3:1e:fb:e2:96:d7:16: ea:b6:e6:61:fa:58:0d:a0:44:76:ea:09:97:ff:c1:e4:a7:2d: 64:b1:a3:d2:79:c7:0f:98:c4:f0:a0:d0:4f:f0:81:bd:94:73: 63:74:5c:fd:fe:d6:be:f3:70:b4:c9:b8:9b:62:40:d6:b0:c6: 6b:6a:aa:55:41:a6:92:04:8e:59:e1:4d:00:14:b5:de:13:90: 7f:df:e8:12:4e:32:33:29:ff:7d:46:f5:97:e4:1c:72:22:7c: 52:22:c3:0d:d7:4b:19:ea:b5:91:f2:98:85:67:cd:79:52:a9: 99:a0:2b:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvLsfVdDezlu+k5lPLC4BOv3K9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNjAzMjQxNDU3NDNaFw0yNjAzMjgwMDA5NDNaMDMxMTAvBgNV BAMTKDYzRkVDQzFBQzc0NEYwNzVBQjg2MDhGMzFGRDQxMzAyMzI4N0RGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu90TcI81zlPWaRyu89C0LvlMq uJv4wW1+ta3xRc8xowjFehg6nBZVTsDnJnyUwXC2UimP4qSXbsLRjbrvErhdjo/T K89CMcOERASK+D7snAaeW+6Y1OHyNGRKmHqjco5pgk2sZktOB1SJ9zJd2Lw/Ld3f OpNiA17olmMf74+imb93sw3cz9rpk/gS7/MOomhm/fTfTuC0KiHPEFKc9odF55jR 5ghG6Lwweq3NVcYsDOV50vqvKC++q7qCpU3eZkABmeiBsO0bYbMaI7N9MLHpUK6n kJxJSZyBFnpzAw6T1FZ3zr9tNcsmla4TPBOeb9UKArWo2PigIIVlhAVE8Pd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/7MGsdE8HWrhgjzH9QTAjKH39gwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC09jJRge0PubOAmGA7oHfWDLxBdvQ/BgUTm //Ph5wbxrDEj4etiuR/Q4dDZGiw0IpwSBgWYuK/vxCCh3RT96h6MiFAm7t8pC88V 5dGSfS5sovatXRMcTrQ8Pihg3p6MgO5jf2ZZD+tblJ8zuIUFYMzJd3empvS8xSt/ toU2UL6527/laiJjH6Ndsx774pbXFuq25mH6WA2gRHbqCZf/weSnLWSxo9J5xw+Y xPCg0E/wgb2Uc2N0XP3+1r7zcLTJuJtiQNawxmtqqlVBppIEjlnhTQAUtd4TkH/f 6BJOMjMp/31G9ZfkHHIifFIiww3XSxnqtZHymIVnzXlSqZmgK04= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:29 2026 by rpki-client