$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: jgOQMmz2/akc39hWvindyktOjW2InDsHv+gsu+iEkI4= Subject key identifier: F1:E9:81:E0:79:3D:33:4F:50:B7:44:7E:A0:90:FB:65:F3:D0:96:43 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 43D0CFCB4850CCB5841EE43D654309A2182288FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 0247 Signing time: Tue 24 Mar 2026 07:12:22 +0000 Manifest this update: Tue 24 Mar 2026 07:07:22 +0000 Manifest next update: Fri 27 Mar 2026 17:58:22 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: zhsocCL79r6p60jJdVHyozMfLNPrkV41jNTaWyVTVeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d0:cf:cb:48:50:cc:b5:84:1e:e4:3d:65:43:09:a2:18:22:88:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Mar 24 07:07:22 2026 GMT Not After : Mar 27 17:58:22 2026 GMT Subject: CN=F1E981E0793D334F50B7447EA090FB65F3D09643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:52:9b:8f:18:b0:eb:de:f7:48:62:14:88: 14:65:28:8e:b1:bf:a1:e1:3e:ba:dd:1d:24:60:77: ea:53:5a:0f:7b:6b:a3:e4:56:06:29:12:0e:ef:cb: 86:fd:97:42:23:8d:bf:02:a0:f9:56:06:cd:6d:53: dc:eb:60:26:13:22:fb:05:c5:fc:51:24:ff:a2:d0: d8:f9:78:84:1f:17:74:a4:b5:7a:84:fc:3b:11:c2: ff:ff:4c:3d:2e:2e:44:31:98:a4:84:72:b8:e5:e2: 55:6b:87:23:70:d3:3c:e6:02:b5:2b:08:50:bd:e2: 4c:ff:f2:1b:74:ef:d5:e4:c8:71:48:95:09:1e:c0: ed:c5:86:e1:1c:d7:99:5e:cd:ab:ad:fa:e3:29:9e: ed:37:fa:18:9b:08:69:22:66:b5:b4:f8:11:c9:0a: ea:33:e1:1c:bc:da:59:ba:fb:38:57:7a:e5:1e:7d: bd:4b:51:8c:c4:ac:fb:4f:ca:da:5d:18:6f:44:f3: 0f:53:eb:8c:1c:79:ec:1f:5f:3a:81:00:75:8c:39: 14:93:af:5b:22:1f:ff:ef:5e:8c:2e:45:16:15:bf: b7:89:c5:81:bf:0b:30:e2:0c:65:da:d5:d1:0b:c6: e1:43:2a:75:fe:02:a0:a0:52:ea:17:67:c1:61:5c: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E9:81:E0:79:3D:33:4F:50:B7:44:7E:A0:90:FB:65:F3:D0:96:43 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9a:10:26:0c:aa:fd:6b:5b:92:b9:45:0b:6a:ff:8b:1b:7e: c8:6e:d9:c4:66:37:54:7d:5d:50:23:ff:27:28:f6:da:70:3a: b0:bb:55:f6:96:88:f9:25:25:f3:14:f6:fe:ec:3c:df:0b:86: bf:b7:24:50:ce:e0:06:8a:c7:f8:69:3a:5b:a6:3b:20:5b:97: 91:fd:6e:eb:24:1f:78:12:23:6d:ec:04:84:cb:d1:1b:b3:57: 12:5f:58:cc:35:df:be:4f:af:bb:0b:67:83:7d:aa:12:71:1d: 7d:d7:1e:89:f4:00:0f:77:16:46:af:a5:94:e9:6c:de:93:08: 05:4e:59:45:c1:05:c7:b1:c6:85:82:cf:ae:19:03:e0:1a:2c: f7:45:72:92:66:27:b3:fe:14:f6:18:33:8b:a5:10:de:f8:4c: ce:8c:f0:83:02:2a:36:5a:75:42:a9:aa:b2:e0:42:c2:d2:4a: e8:6c:ac:d5:65:1b:6f:aa:ae:ca:76:f5:7d:0d:c7:41:ac:f9: 19:2e:6e:2b:ae:3b:48:4f:78:60:ad:90:f1:ed:bd:b4:ed:e8: 0f:8d:d5:06:ab:a1:e4:a2:a4:55:7e:13:5a:a9:03:4d:59:d7: 06:81:37:6f:21:83:7d:30:3b:33:46:04:51:02:03:95:04:43: 35:f8:01:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9DPy0hQzLWEHuQ9ZUMJohgiiP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNjAzMjQwNzA3MjJaFw0yNjAzMjcxNzU4MjJaMDMxMTAvBgNV BAMTKEYxRTk4MUUwNzkzRDMzNEY1MEI3NDQ3RUEwOTBGQjY1RjNEMDk2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZlKbjxiw6973SGIUiBRlKI6x v6HhPrrdHSRgd+pTWg97a6PkVgYpEg7vy4b9l0Ijjb8CoPlWBs1tU9zrYCYTIvsF xfxRJP+i0Nj5eIQfF3SktXqE/DsRwv//TD0uLkQxmKSEcrjl4lVrhyNw0zzmArUr CFC94kz/8ht079XkyHFIlQkewO3FhuEc15lezaut+uMpnu03+hibCGkiZrW0+BHJ Cuoz4Ry82lm6+zhXeuUefb1LUYzErPtPytpdGG9E8w9T64wceewfXzqBAHWMORST r1siH//vXowuRRYVv7eJxYG/CzDiDGXa1dELxuFDKnX+AqCgUuoXZ8FhXLzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8emB4Hk9M09Qt0R+oJD7ZfPQlkMwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmaECYMqv1rW5K5RQtq/4sbfshu2cRmN1R9 XVAj/yco9tpwOrC7VfaWiPklJfMU9v7sPN8Lhr+3JFDO4AaKx/hpOlumOyBbl5H9 buskH3gSI23sBITL0RuzVxJfWMw1375Pr7sLZ4N9qhJxHX3XHon0AA93FkavpZTp bN6TCAVOWUXBBcexxoWCz64ZA+AaLPdFcpJmJ7P+FPYYM4ulEN74TM6M8IMCKjZa dUKpqrLgQsLSSuhsrNVlG2+qrsp29X0Nx0Gs+RkubiuuO0hPeGCtkPHtvbTt6A+N 1QaroeSipFV+E1qpA01Z1waBN28hg30wOzNGBFECA5UEQzX4AWA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:25 2026 by rpki-client