$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: SG8cmKPPR/D8RB+KC57XowHeupAXAAuDVCcrMOZTac4= Subject key identifier: 12:C3:00:8F:2C:18:81:71:49:1C:2A:2D:5E:55:1E:19:9E:19:DF:1C Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 4FEFD27E0CEC38967969F88DB5E590F8A147A7CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: 011C Signing time: Thu 26 Mar 2026 02:11:29 +0000 Manifest this update: Thu 26 Mar 2026 02:06:29 +0000 Manifest next update: Sun 29 Mar 2026 02:35:29 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: XXIFvvq7roHUEnGEPoBSPgMyzW17vTkLGR3vPEdPc2k=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ef:d2:7e:0c:ec:38:96:79:69:f8:8d:b5:e5:90:f8:a1:47:a7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Mar 26 02:06:29 2026 GMT Not After : Mar 29 02:35:29 2026 GMT Subject: CN=12C3008F2C188171491C2A2D5E551E199E19DF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:ff:14:9d:32:aa:f6:2e:d2:e6:f2:cb:12: 29:88:64:99:f0:57:7f:40:1a:e0:55:7d:38:c8:d6: a6:13:fa:f6:e0:ef:02:aa:33:ef:ef:84:61:c9:ff: 44:46:20:d0:c9:dc:7d:40:58:9c:1f:4e:92:7f:2c: 89:14:f1:e2:20:99:17:25:89:20:be:14:6f:6f:50: fd:42:d6:01:d9:bc:20:84:6a:67:36:97:1e:dd:48: d4:a4:71:57:26:bd:c0:b5:32:52:26:b5:64:70:d9: 75:e2:12:90:72:a2:1e:f6:8d:14:0f:2c:55:57:53: 17:4e:ce:5d:8d:84:09:a8:ed:c1:a2:94:e9:b5:47: b9:78:51:d1:c1:b6:97:51:46:67:97:a2:57:df:4e: d1:b8:7c:49:72:f8:b1:8e:5d:75:22:0d:cb:6c:b4: 41:6d:b0:a4:5f:c6:0e:73:f5:fd:9c:79:2b:53:d9: 18:25:b7:71:25:45:e0:48:08:44:b6:2d:e7:ed:4b: 83:c2:e7:4d:e7:29:2a:25:3e:e9:3f:f1:a4:d1:b4: 8d:b6:ba:a9:4f:c3:06:a0:82:b0:c1:ac:23:41:0a: 9d:3f:a7:13:85:8a:f8:ee:5f:56:2c:76:b8:86:ef: fc:83:fc:e2:fe:34:49:80:e0:cb:b4:1a:7f:41:4d: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:00:8F:2C:18:81:71:49:1C:2A:2D:5E:55:1E:19:9E:19:DF:1C X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e5:11:c2:80:e3:f9:bf:1c:29:ad:a0:f3:1d:e0:b2:f5:80: 62:69:9b:5c:71:fd:50:06:4e:29:c0:19:93:d1:fa:6b:69:45: c3:85:bc:d1:4b:82:5d:e5:0d:b6:22:25:40:63:b0:0c:b7:ec: c6:b9:54:88:af:3c:05:83:0d:5b:25:be:55:b4:4b:a1:df:f5: 19:d2:ac:d2:34:36:c6:22:9c:83:ca:7e:d9:13:b8:52:75:46: 15:1d:4e:5f:11:a2:c5:2e:2b:c5:35:52:3e:59:9e:23:5b:9b: f7:2c:d9:b7:7d:36:ba:81:c5:da:a9:28:91:a8:6e:68:b2:f8: 3d:4c:1e:39:bc:d1:1c:a4:2e:ec:38:fd:dc:68:b0:6e:73:97: ba:e3:ef:c9:71:25:8c:2d:e4:55:12:20:4e:93:46:e5:91:3e: 84:bb:84:12:59:d9:1b:4e:54:08:a1:a3:41:65:c6:0b:d8:44: c2:7a:e2:2f:7c:fa:3b:66:52:6f:40:8c:9f:06:7a:49:6f:bd: 15:9c:a6:3c:11:ca:d5:c5:21:d8:25:da:62:70:7a:53:a4:7a: 08:e4:2f:16:df:6c:83:f2:09:03:07:49:6c:d3:eb:4f:12:b8: 8b:f5:8e:d5:9b:4b:ce:76:d7:5f:a8:d9:f9:41:95:b5:46:52: 0c:72:ea:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+/SfgzsOJZ5afiNteWQ+KFHp88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNjAzMjYwMjA2MjlaFw0yNjAzMjkwMjM1MjlaMDMxMTAvBgNV BAMTKDEyQzMwMDhGMkMxODgxNzE0OTFDMkEyRDVFNTUxRTE5OUUxOURGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgP8UnTKq9i7S5vLLEimIZJnw V39AGuBVfTjI1qYT+vbg7wKqM+/vhGHJ/0RGINDJ3H1AWJwfTpJ/LIkU8eIgmRcl iSC+FG9vUP1C1gHZvCCEamc2lx7dSNSkcVcmvcC1MlImtWRw2XXiEpByoh72jRQP LFVXUxdOzl2NhAmo7cGilOm1R7l4UdHBtpdRRmeXolffTtG4fEly+LGOXXUiDcts tEFtsKRfxg5z9f2ceStT2Rglt3ElReBICES2LeftS4PC503nKSolPuk/8aTRtI22 uqlPwwaggrDBrCNBCp0/pxOFivjuX1YsdriG7/yD/OL+NEmA4Mu0Gn9BTfw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsMAjywYgXFJHCotXlUeGZ4Z3xwwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEflEcKA4/m/HCmtoPMd4LL1gGJpm1xx/VAG TinAGZPR+mtpRcOFvNFLgl3lDbYiJUBjsAy37Ma5VIivPAWDDVslvlW0S6Hf9RnS rNI0NsYinIPKftkTuFJ1RhUdTl8RosUuK8U1Uj5ZniNbm/cs2bd9NrqBxdqpKJGo bmiy+D1MHjm80RykLuw4/dxosG5zl7rj78lxJYwt5FUSIE6TRuWRPoS7hBJZ2RtO VAiho0FlxgvYRMJ64i98+jtmUm9AjJ8GeklvvRWcpjwRytXFIdgl2mJwelOkegjk LxbfbIPyCQMHSWzT608SuIv1jtWbS85211+o2flBlbVGUgxy6t8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:49:53 2026 by rpki-client