$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft File: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft (raw, json) Hash identifier: rqKO2uN6ZCp9pk7yUh6BsSw0J4Z/xEihfMqQlGrFyH8= Subject key identifier: D8:5B:07:DD:6F:C4:35:C0:E3:B0:10:A9:B0:82:59:69:A8:C2:DC:59 Authority key identifier: F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E Certificate issuer: /CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Certificate serial: 3C2641B56554F4B915A0040774F86430A4FBF9C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft Manifest number: 10 Signing time: Wed 25 Mar 2026 01:51:52 +0000 Manifest this update: Wed 25 Mar 2026 01:46:52 +0000 Manifest next update: Sat 28 Mar 2026 10:45:52 +0000 Files and hashes: 1: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl (hash: sY+3qrevtM2OvOSJeGUeYmITyd50T0l401ClVnjzmRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:26:41:b5:65:54:f4:b9:15:a0:04:07:74:f8:64:30:a4:fb:f9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Validity Not Before: Mar 25 01:46:52 2026 GMT Not After : Mar 28 10:45:52 2026 GMT Subject: CN=D85B07DD6FC435C0E3B010A9B0825969A8C2DC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f4:4a:55:a1:1d:bd:63:1a:78:c7:ef:c3:46: 60:9c:8a:f4:cb:25:b3:cd:0e:5a:c7:ed:e4:9e:c7: 80:22:fe:a7:b8:4c:8d:68:ca:24:91:5a:a1:42:06: 94:a4:d0:50:c0:6e:cd:05:d4:a0:c2:ee:90:89:5e: a3:88:61:01:9a:10:7f:bb:e6:a3:61:79:a4:df:6d: 70:89:23:8b:02:67:d8:48:93:82:ed:a6:d3:7a:e9: 45:de:dd:95:b7:c1:72:91:f8:09:09:84:dc:47:fd: 74:04:83:5a:d5:f8:f3:08:03:a3:7d:f3:83:b4:80: a2:40:3a:66:2d:84:1f:8e:2d:21:68:41:e5:b3:c7: 6d:e2:65:17:3f:ad:5f:f3:2b:46:fd:79:5e:c2:3e: c6:48:ab:fa:65:25:41:63:91:b7:61:a6:b4:16:d4: 13:ef:bc:d2:29:f9:fe:e9:94:23:c1:bf:30:97:ae: 17:7e:3e:b2:e2:32:0e:0f:3e:3a:f7:ed:14:cb:c2: bb:aa:0c:55:0d:05:f1:4a:99:21:07:1e:c1:28:1e: 2e:a5:4c:66:44:e8:ff:8d:f1:e4:f8:6e:95:cf:f9: d2:c9:d7:b5:54:10:df:53:94:58:97:f8:33:dc:d1: 5e:ad:22:91:2b:da:6e:34:b3:5d:bb:0b:83:e9:be: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:07:DD:6F:C4:35:C0:E3:B0:10:A9:B0:82:59:69:A8:C2:DC:59 X509v3 Authority Key Identifier: keyid:F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ca:1f:af:b8:06:2a:9b:ec:a2:38:21:2e:b7:21:cd:49:6e: 51:c3:4f:17:a2:33:7f:44:79:7f:59:0e:48:1f:b9:2d:51:1a: 90:7e:e0:1d:47:be:a9:a3:a1:64:16:b9:ca:8c:5c:2f:bf:8c: 5b:2a:81:94:e5:de:6c:53:37:5d:d0:e5:9a:f3:7c:f1:1b:99: 4e:ba:b6:73:80:13:78:bc:0f:89:c0:f9:4a:49:1f:7a:5e:6c: 4a:97:17:07:58:f0:71:5d:76:4b:d5:f3:0f:06:a3:ea:ee:57: 56:3e:86:d6:56:70:11:1b:e5:ca:9a:02:d3:f9:ee:37:cc:47: 50:14:c7:98:9c:56:2f:47:79:1e:c0:41:19:54:41:1e:48:6d: a2:8a:85:01:9a:0c:af:a3:54:70:ca:e7:d7:bd:66:7a:31:b8: 21:bd:97:6f:c0:0c:6f:ec:93:8e:18:fb:52:e5:7b:b1:4b:71: e0:f7:f3:d4:cc:f5:6d:01:d0:6c:58:45:df:20:8c:39:e5:b8: 27:9b:3b:15:bf:a2:78:34:6b:ce:70:dc:29:6a:c6:0a:ca:06: 25:5d:22:7e:21:11:1a:ef:d8:ef:31:1c:29:5e:cc:ee:4c:2b: 5b:88:30:35:93:9a:e6:9a:e1:0e:3c:6e:53:46:5f:57:74:f5: 2c:50:be:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCZBtWVU9LkVoAQHdPhkMKT7+cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERB QjNFNEQ0RTAeFw0yNjAzMjUwMTQ2NTJaFw0yNjAzMjgxMDQ1NTJaMDMxMTAvBgNV BAMTKEQ4NUIwN0RENkZDNDM1QzBFM0IwMTBBOUIwODI1OTY5QThDMkRDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD19EpVoR29Yxp4x+/DRmCcivTL JbPNDlrH7eSex4Ai/qe4TI1oyiSRWqFCBpSk0FDAbs0F1KDC7pCJXqOIYQGaEH+7 5qNheaTfbXCJI4sCZ9hIk4LtptN66UXe3ZW3wXKR+AkJhNxH/XQEg1rV+PMIA6N9 84O0gKJAOmYthB+OLSFoQeWzx23iZRc/rV/zK0b9eV7CPsZIq/plJUFjkbdhprQW 1BPvvNIp+f7plCPBvzCXrhd+PrLiMg4PPjr37RTLwruqDFUNBfFKmSEHHsEoHi6l TGZE6P+N8eT4bpXP+dLJ17VUEN9TlFiX+DPc0V6tIpEr2m40s127C4PpvnEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2FsH3W/ENcDjsBCpsIJZaajC3FkwHwYDVR0j BBgwFoAU8O0yWmnY/9u4+kX0ErsjTas+TU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMS9GMEVEMzI1QTY5 RDhGRkRCQjhGQTQ1RjQxMkJCMjM0REFCM0U0RDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERBQjNF NEQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIz NERBQjNFNEQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfKH6+4Biqb7KI4IS63Ic1JblHDTxeiM39E eX9ZDkgfuS1RGpB+4B1HvqmjoWQWucqMXC+/jFsqgZTl3mxTN13Q5ZrzfPEbmU66 tnOAE3i8D4nA+UpJH3pebEqXFwdY8HFddkvV8w8Go+ruV1Y+htZWcBEb5cqaAtP5 7jfMR1AUx5icVi9HeR7AQRlUQR5IbaKKhQGaDK+jVHDK59e9ZnoxuCG9l2/ADG/s k44Y+1Lle7FLceD389TM9W0B0GxYRd8gjDnluCebOxW/ong0a85w3ClqxgrKBiVd In4hERrv2O8xHClezO5MK1uIMDWTmuaa4Q48blNGX1d09SxQvmQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:33:05 2026 by rpki-client