$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: yFUebL2+61V4E8P1+AC0Ukog5ENT439mN0+TKi2ZFag= Subject key identifier: 03:8D:79:9A:56:A8:FC:16:52:37:8B:DC:D3:6C:7D:86:1D:69:26:04 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 48167AE8543916C9A9795764DD0CD0341870301D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 02EF Signing time: Thu 26 Mar 2026 01:01:14 +0000 Manifest this update: Thu 26 Mar 2026 00:56:14 +0000 Manifest next update: Sun 29 Mar 2026 02:01:14 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: 3NNjbi2kQMEkq1uZ5QR81m3ZruObALJx5iDW2sScfBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:16:7a:e8:54:39:16:c9:a9:79:57:64:dd:0c:d0:34:18:70:30:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Mar 26 00:56:14 2026 GMT Not After : Mar 29 02:01:14 2026 GMT Subject: CN=038D799A56A8FC1652378BDCD36C7D861D692604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:68:07:df:33:bf:41:c7:1b:6b:35:c9:9d: 89:c8:0d:56:8f:11:15:9b:cc:0f:6d:3b:f6:18:4b: cc:87:30:be:fe:55:c2:de:a4:95:85:d9:33:9a:a3: 12:15:06:7d:81:72:f6:6e:29:8e:7c:cf:63:a3:9d: a2:1a:26:ab:76:96:86:73:39:bd:c3:d2:0c:55:11: cf:55:ca:14:17:22:97:9f:b5:f5:bb:57:42:b3:3c: c9:65:74:62:52:51:9f:b9:00:b0:46:8f:51:4b:dd: 3c:fe:91:3e:e9:72:77:cd:07:a7:6e:42:92:ff:86: f1:e3:92:98:d5:09:74:9a:0a:c7:61:1f:39:5d:d9: 45:88:23:fe:19:f1:ce:32:df:e8:e1:b5:02:5b:19: 1f:c0:78:01:5a:8e:19:52:fd:15:3b:f4:af:86:7c: c3:4b:c4:6d:51:be:87:8f:07:a8:9e:62:cc:32:49: 5e:ca:be:4e:79:cf:91:a8:93:d8:ca:cb:0d:34:3f: 4f:42:ab:95:cd:bb:74:92:da:16:02:f0:dd:b0:f6: 27:0a:87:d8:aa:c1:02:d2:68:11:15:43:4f:94:c9: 47:d2:a1:c5:9f:d7:a0:7c:56:4a:9a:a2:d5:aa:9e: ec:ee:ea:e9:34:da:ff:f0:65:9a:25:00:b0:65:70: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8D:79:9A:56:A8:FC:16:52:37:8B:DC:D3:6C:7D:86:1D:69:26:04 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3b:aa:3a:84:67:16:42:a8:60:3f:30:58:a7:b9:1b:6b:55: 89:bb:30:32:da:58:91:e7:54:af:33:fa:3c:c4:a6:29:3e:40: 3f:da:c9:22:8d:f3:fa:0e:be:1a:8b:a2:d7:3b:73:00:b3:cc: 3c:04:29:4e:55:52:00:78:bd:6d:15:10:0a:19:15:45:0e:53: e1:66:cc:6c:5f:6d:5c:8b:0a:f3:7c:ed:92:8b:75:3c:d1:dc: d4:81:f4:9b:f1:e1:f7:86:43:cd:72:87:8a:00:5d:f0:42:25: 85:23:d3:a4:db:00:76:d7:68:07:e8:13:82:62:6b:fd:e4:23: b5:88:4d:08:24:e2:1f:f7:aa:e5:60:d3:e8:5a:4d:e6:4b:08: 76:ff:eb:7b:96:fd:c3:31:70:0e:d9:06:ea:dd:d8:19:84:34: 1a:31:6f:bb:89:61:9d:01:2f:e8:78:c7:70:e4:e7:20:b0:bb: 3b:93:ea:55:e9:66:cc:52:fc:61:a2:e8:2a:a2:3c:49:5a:0d: a7:0f:7c:98:1f:1d:7c:e7:1e:e5:da:96:97:d9:f8:9b:ec:55: 90:51:d4:bc:a8:05:f8:54:f3:55:13:84:6f:50:cb:af:31:f7: 87:67:b8:71:79:bc:20:ec:21:32:02:fb:13:ed:36:1d:31:ad: b9:53:ee:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBZ66FQ5FsmpeVdk3QzQNBhwMB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNjAzMjYwMDU2MTRaFw0yNjAzMjkwMjAxMTRaMDMxMTAvBgNV BAMTKDAzOEQ3OTlBNTZBOEZDMTY1MjM3OEJEQ0QzNkM3RDg2MUQ2OTI2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1M2gH3zO/QccbazXJnYnIDVaP ERWbzA9tO/YYS8yHML7+VcLepJWF2TOaoxIVBn2BcvZuKY58z2OjnaIaJqt2loZz Ob3D0gxVEc9VyhQXIpeftfW7V0KzPMlldGJSUZ+5ALBGj1FL3Tz+kT7pcnfNB6du QpL/hvHjkpjVCXSaCsdhHzld2UWII/4Z8c4y3+jhtQJbGR/AeAFajhlS/RU79K+G fMNLxG1RvoePB6ieYswySV7Kvk55z5Gok9jKyw00P09Cq5XNu3SS2hYC8N2w9icK h9iqwQLSaBEVQ0+UyUfSocWf16B8VkqaotWqnuzu6uk02v/wZZolALBlcOKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA415mlao/BZSN4vc02x9hh1pJgQwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALM7qjqEZxZCqGA/MFinuRtrVYm7MDLaWJHn VK8z+jzEpik+QD/aySKN8/oOvhqLotc7cwCzzDwEKU5VUgB4vW0VEAoZFUUOU+Fm zGxfbVyLCvN87ZKLdTzR3NSB9Jvx4feGQ81yh4oAXfBCJYUj06TbAHbXaAfoE4Ji a/3kI7WITQgk4h/3quVg0+haTeZLCHb/63uW/cMxcA7ZBurd2BmENBoxb7uJYZ0B L+h4x3Dk5yCwuzuT6lXpZsxS/GGi6CqiPElaDacPfJgfHXznHuXalpfZ+JvsVZBR 1LyoBfhU81UThG9Qy68x94dnuHF5vCDsITIC+xPtNh0xrblT7t8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:16 2026 by rpki-client