$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: rRE9B2IoxLfHXY2uIk49M6ffqv0jNT6DZYQdcBl4ZsI= Subject key identifier: EE:61:D8:C5:29:5F:85:FE:AF:4F:A9:8D:A1:26:1E:A0:52:1C:BC:75 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 7E9C2CB69C4DEA67D240338D264DFDACAC858850 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: 0111 Signing time: Tue 24 Mar 2026 08:03:22 +0000 Manifest this update: Tue 24 Mar 2026 07:58:22 +0000 Manifest next update: Fri 27 Mar 2026 16:40:22 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: lla9vauXe1FWcSSZk4qja99DFxOX8P6uaEkPzAX3r1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9c:2c:b6:9c:4d:ea:67:d2:40:33:8d:26:4d:fd:ac:ac:85:88:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Mar 24 07:58:22 2026 GMT Not After : Mar 27 16:40:22 2026 GMT Subject: CN=EE61D8C5295F85FEAF4FA98DA1261EA0521CBC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:87:f3:51:7f:a9:24:7f:6c:15:d3:62:bd: f1:ed:dd:b5:38:14:2d:46:64:1a:19:81:3c:56:fa: 7f:42:23:6f:00:24:ac:37:1e:44:a2:ed:ee:d3:65: b8:ca:98:0e:8b:b0:cb:1e:41:7e:94:bd:c7:23:ab: 68:4e:d0:d0:17:25:22:a4:10:0e:3c:04:62:c2:b7: ed:1c:96:02:c2:67:78:5b:bc:5e:fb:3d:ee:7c:1a: 9e:61:a7:6c:b7:6f:16:be:11:c6:34:3a:77:78:ce: ee:1f:53:a7:4a:77:87:7e:2b:51:b8:b4:71:17:11: c1:1f:15:c6:9b:cc:b3:95:17:8c:e3:c4:3d:b7:a6: 2e:d7:0b:cf:96:c5:9e:37:1b:dc:8b:33:43:14:64: 83:96:6e:1a:75:cf:88:a7:e9:f1:99:ad:b4:2b:e4: b7:5b:c2:d8:10:6f:3a:c9:6d:31:c8:9b:40:63:e2: ad:61:f3:ab:6a:68:07:b6:5e:e4:49:f2:f0:03:f2: ae:32:ce:3e:aa:14:cc:5a:c0:0c:be:9d:ba:a4:c5: 5a:3a:6f:c8:65:02:30:a5:c4:38:51:97:f4:a4:44: 79:db:a2:8e:f2:7f:d3:7e:67:ad:18:db:9e:ac:66: 3b:be:ce:9d:f0:cd:95:7d:81:51:f8:76:a3:fc:a9: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:61:D8:C5:29:5F:85:FE:AF:4F:A9:8D:A1:26:1E:A0:52:1C:BC:75 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9c:17:91:20:53:3a:8e:43:7a:d0:9c:de:81:95:fb:b9:8b: 72:01:ae:a4:06:79:ce:42:3f:54:5f:7a:00:44:bb:8c:53:da: eb:64:4a:bf:90:93:9f:d6:81:f0:b7:23:fc:3a:94:cd:c8:d6: 67:27:5a:34:c9:a7:77:ac:d9:45:89:e7:5a:3d:f2:d5:a0:6f: db:70:2a:9f:de:f1:9b:b7:dc:a1:8d:fe:e0:3d:b8:47:c9:65: fc:43:de:0a:44:15:f2:10:62:e5:7c:34:81:1d:cb:dc:d7:b2: de:cf:a8:fd:d4:da:5e:35:57:01:af:5e:aa:1b:02:b6:47:e6: db:ad:95:94:95:01:8d:80:3d:36:89:50:02:de:25:5e:6d:1c: c4:51:01:b9:9c:77:e0:72:9e:e3:6e:9d:8b:93:71:82:7a:85: e4:b0:f0:d9:10:47:f5:bb:c7:7a:94:04:4a:d8:c6:93:25:1e: f1:7c:81:57:db:e0:d9:51:0f:e4:93:09:7e:b0:97:34:a5:3c: 2d:26:e1:ae:a2:dd:b6:0e:76:f2:04:22:35:06:4f:b3:59:ae: 9e:08:3c:7a:1f:a2:17:77:ae:eb:aa:a6:fc:4f:4b:d3:6c:c2: bb:fd:4a:31:59:a4:c2:d9:c8:07:e4:e7:15:20:54:e9:46:8b: 71:a0:45:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpwstpxN6mfSQDONJk39rKyFiFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNjAzMjQwNzU4MjJaFw0yNjAzMjcxNjQwMjJaMDMxMTAvBgNV BAMTKEVFNjFEOEM1Mjk1Rjg1RkVBRjRGQTk4REExMjYxRUEwNTIxQ0JDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspYfzUX+pJH9sFdNivfHt3bU4 FC1GZBoZgTxW+n9CI28AJKw3HkSi7e7TZbjKmA6LsMseQX6Uvccjq2hO0NAXJSKk EA48BGLCt+0clgLCZ3hbvF77Pe58Gp5hp2y3bxa+EcY0Ond4zu4fU6dKd4d+K1G4 tHEXEcEfFcabzLOVF4zjxD23pi7XC8+WxZ43G9yLM0MUZIOWbhp1z4in6fGZrbQr 5LdbwtgQbzrJbTHIm0Bj4q1h86tqaAe2XuRJ8vAD8q4yzj6qFMxawAy+nbqkxVo6 b8hlAjClxDhRl/SkRHnboo7yf9N+Z60Y256sZju+zp3wzZV9gVH4dqP8qbrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mHYxSlfhf6vT6mNoSYeoFIcvHUwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAucF5EgUzqOQ3rQnN6Blfu5i3IBrqQGec5C P1RfegBEu4xT2utkSr+Qk5/WgfC3I/w6lM3I1mcnWjTJp3es2UWJ51o98tWgb9tw Kp/e8Zu33KGN/uA9uEfJZfxD3gpEFfIQYuV8NIEdy9zXst7PqP3U2l41VwGvXqob ArZH5tutlZSVAY2APTaJUALeJV5tHMRRAbmcd+BynuNunYuTcYJ6heSw8NkQR/W7 x3qUBErYxpMlHvF8gVfb4NlRD+STCX6wlzSlPC0m4a6i3bYOdvIEIjUGT7NZrp4I PHofohd3ruuqpvxPS9Nswrv9SjFZpMLZyAfk5xUgVOlGi3GgRQU= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:09 2026 by rpki-client