$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: f3puoGsAZdyGsBGi9tGotJld7DiY7MEZP1A/u/mLxbM= Subject key identifier: 35:E2:EF:C0:27:03:0F:57:97:DF:66:6F:DF:A4:6B:A3:22:3B:66:4E Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 1DE00F53E3F7C29119FF801862DDBD8ED1A8E18F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 03DC Signing time: Tue 24 Mar 2026 20:51:27 +0000 Manifest this update: Tue 24 Mar 2026 20:46:27 +0000 Manifest next update: Fri 27 Mar 2026 22:33:27 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: yKedBvVKMmRks4nQx9kJYNCSAADPfWq4ZgEOS/6Gbas=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: HnPdBvCCg8avKOKqlY6FjH1UWq2tAli++1G3pShzD84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e0:0f:53:e3:f7:c2:91:19:ff:80:18:62:dd:bd:8e:d1:a8:e1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: Mar 24 20:46:27 2026 GMT Not After : Mar 27 22:33:27 2026 GMT Subject: CN=35E2EFC027030F5797DF666FDFA46BA3223B664E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:32:27:37:f2:26:6b:15:76:e3:e4:a8:27: ec:30:d8:7d:02:7a:64:18:05:15:d0:59:9e:01:04: 69:44:22:08:3a:66:59:de:35:64:8d:58:09:db:55: cf:77:fa:33:ea:d3:31:ac:cc:81:4e:51:a6:50:10: 2a:48:68:4f:f3:0c:03:75:30:96:a4:e6:2d:85:3a: bc:d8:7b:0f:e5:a8:19:91:c1:44:af:b0:83:49:bd: e5:a2:af:c0:4a:52:b3:3a:37:a1:9c:42:b6:58:d0: a3:87:41:08:db:f4:ef:19:63:73:9f:f7:16:31:28: f1:96:17:82:89:5e:4b:df:bf:21:f6:7d:1f:a0:05: 38:0e:3b:94:cb:61:99:46:ac:a5:e3:85:66:a4:55: a1:72:ba:a5:6b:22:cb:06:9b:14:fa:2d:dc:8e:16: 10:f6:e8:8d:a2:bd:fa:d5:0b:c3:79:ba:46:af:b6: 5b:0a:6b:a3:5c:5e:53:2e:4b:fe:f7:5c:ac:01:12: c1:3a:27:94:39:a7:5c:6e:3c:91:c5:2c:4f:c4:6e: ed:0d:bf:d2:ce:c2:e1:14:d5:f1:99:bd:7e:2e:f5: 53:42:fb:ce:db:34:95:4a:58:c2:1d:70:7b:77:cd: 26:e1:9a:95:f1:ba:62:c9:7a:6b:d8:09:01:f0:ec: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E2:EF:C0:27:03:0F:57:97:DF:66:6F:DF:A4:6B:A3:22:3B:66:4E X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7f:56:c3:5f:21:eb:e6:0e:f5:a3:18:a4:ea:e8:50:f8:93: d7:af:48:2d:12:20:91:f4:a9:2d:78:14:47:c0:90:0d:78:49: 11:8d:8b:5b:d1:dd:14:38:ef:be:ad:83:fe:2d:80:4c:f5:46: 70:83:52:1d:69:7b:9b:e6:a7:ff:e4:dc:9d:40:f5:cd:fc:88: a4:ce:c6:30:89:10:ad:5c:da:d5:a8:dd:04:9b:36:d5:07:f9: 16:17:01:58:b9:ee:88:d1:6c:1e:e1:c8:52:3e:e7:5d:4f:1f: 0d:27:d8:8f:16:d8:ad:83:56:9f:25:e6:42:e9:e2:61:50:36: 9a:e1:b1:81:e7:09:e4:bd:c6:03:ea:d2:c0:c7:d5:1e:73:90: 1a:b4:20:97:2c:50:48:d3:a5:20:3c:08:0a:dc:98:87:11:3f: 1c:61:39:73:3a:cc:2f:ce:3f:14:c5:6c:78:02:c4:26:be:83: 8f:9b:33:37:ca:b3:71:a4:1c:ca:d6:6c:74:2a:2e:66:01:ce: 34:c1:f1:f7:ef:28:95:56:56:96:e4:64:5a:70:13:63:33:06: d1:76:2f:8a:52:89:4a:57:45:19:59:b7:6a:d8:f8:e6:38:3d: 02:fb:8c:49:9a:0c:98:7d:91:89:5f:0f:81:5a:ea:92:72:88: 28:3c:8a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeAPU+P3wpEZ/4AYYt29jtGo4Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNjAzMjQyMDQ2MjdaFw0yNjAzMjcyMjMzMjdaMDMxMTAvBgNV BAMTKDM1RTJFRkMwMjcwMzBGNTc5N0RGNjY2RkRGQTQ2QkEzMjIzQjY2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zTInN/ImaxV24+SoJ+ww2H0C emQYBRXQWZ4BBGlEIgg6ZlneNWSNWAnbVc93+jPq0zGszIFOUaZQECpIaE/zDAN1 MJak5i2FOrzYew/lqBmRwUSvsINJveWir8BKUrM6N6GcQrZY0KOHQQjb9O8ZY3Of 9xYxKPGWF4KJXkvfvyH2fR+gBTgOO5TLYZlGrKXjhWakVaFyuqVrIssGmxT6LdyO FhD26I2ivfrVC8N5ukavtlsKa6NcXlMuS/73XKwBEsE6J5Q5p1xuPJHFLE/Ebu0N v9LOwuEU1fGZvX4u9VNC+87bNJVKWMIdcHt3zSbhmpXxumLJemvYCQHw7G+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNeLvwCcDD1eX32Zv36RroyI7Zk4wHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp/VsNfIevmDvWjGKTq6FD4k9evSC0SIJH0 qS14FEfAkA14SRGNi1vR3RQ4776tg/4tgEz1RnCDUh1pe5vmp//k3J1A9c38iKTO xjCJEK1c2tWo3QSbNtUH+RYXAVi57ojRbB7hyFI+511PHw0n2I8W2K2DVp8l5kLp 4mFQNprhsYHnCeS9xgPq0sDH1R5zkBq0IJcsUEjTpSA8CArcmIcRPxxhOXM6zC/O PxTFbHgCxCa+g4+bMzfKs3GkHMrWbHQqLmYBzjTB8ffvKJVWVpbkZFpwE2MzBtF2 L4pSiUpXRRlZt2rY+OY4PQL7jEmaDJh9kYlfD4Fa6pJyiCg8iqQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:58 2026 by rpki-client