$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: LqaOk8KGDbJSG6DA0XV4dluunjXIxVPM1e/FxJXA8jg= Subject key identifier: 48:19:7D:EE:8A:29:90:95:43:E7:A9:0D:D9:D5:A1:5A:18:C4:D0:7E Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 29DAFCBE6D8D2872C584EEDD3EF7D52D9741F003 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 012A Signing time: Thu 26 Mar 2026 10:22:24 +0000 Manifest this update: Thu 26 Mar 2026 10:17:24 +0000 Manifest next update: Sun 29 Mar 2026 17:48:24 +0000 Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) 2: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: ZP7lqbSUAGKYIUlyFrt29lZ3GQ4EvJtkl/BDfqViFmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:da:fc:be:6d:8d:28:72:c5:84:ee:dd:3e:f7:d5:2d:97:41:f0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Mar 26 10:17:24 2026 GMT Not After : Mar 29 17:48:24 2026 GMT Subject: CN=48197DEE8A29909543E7A90DD9D5A15A18C4D07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:19:d0:51:b9:43:fe:c1:cc:cc:a5:03:59: 39:7a:7a:b8:c4:e7:cf:32:08:c6:17:3e:d1:21:7b: 24:83:90:2b:f7:32:63:53:4b:e4:3b:2d:9f:a5:d7: ad:45:0a:fb:7c:b9:11:05:a5:d9:64:58:ce:c4:5b: 09:c9:55:0b:0f:18:a4:ed:af:32:4d:a4:5d:77:c8: 7d:d2:6a:d2:e7:cb:b2:bf:aa:3e:c2:44:86:a6:83: 99:be:95:71:c8:12:1c:c1:d4:c6:18:64:01:29:dd: 23:c5:08:af:6d:43:ec:39:3e:8b:95:18:ac:77:90: f4:29:85:c9:25:a7:2e:ea:65:81:25:61:5c:7a:5e: d9:c8:d3:5b:a3:aa:72:e9:bd:96:64:df:69:73:c9: 32:28:82:3a:28:20:e8:68:ec:ac:c8:c5:9c:0b:6a: a2:e4:3c:28:d2:77:ea:11:2a:b0:8b:24:ec:d5:56: 16:48:f4:54:9a:0f:6a:3c:27:62:78:15:57:c6:90: 3f:70:0d:89:13:4f:70:73:b9:b0:5b:53:db:43:54: 31:11:68:ce:6f:1f:d9:cf:37:80:c8:be:56:9d:6c: 67:7b:e7:ae:1d:3b:a8:42:6b:87:3f:20:3f:83:9b: 88:f4:03:a2:16:53:db:14:34:2d:6c:61:a6:c5:2a: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:19:7D:EE:8A:29:90:95:43:E7:A9:0D:D9:D5:A1:5A:18:C4:D0:7E X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4d:fe:62:49:f7:2e:ac:16:df:ad:e7:90:a2:d8:5a:87:02: e4:b4:87:a4:1a:2e:53:eb:37:ef:5c:89:cb:8a:10:58:0b:a6: 80:1c:79:b7:10:fc:25:c5:49:e6:ad:13:e8:dc:4a:59:93:42: 18:dd:42:2f:8c:17:f4:5e:ed:1a:c1:f7:81:06:ae:3d:56:a1: fe:82:c7:65:0c:73:5c:b9:2d:38:48:2d:5b:be:a3:e1:b6:a1: b8:63:d8:a1:99:47:78:47:78:c7:69:d4:9e:88:f7:ea:e9:f0: f6:3b:d2:6a:ec:ee:7a:97:3f:7a:80:5b:23:c1:c9:32:15:6c: d2:98:36:0a:0c:79:67:d6:c3:f5:f7:d3:f6:3a:65:48:da:fa: e5:99:eb:9e:35:7f:b2:ea:c6:61:7a:cb:b1:33:77:f4:9f:df: a2:9e:85:04:bb:c2:f1:3b:15:be:63:16:cb:24:53:ec:50:b3: 9d:c1:4f:eb:d7:81:42:ef:79:f8:ea:9d:b4:08:af:ce:16:f8: c0:3d:9c:b8:ea:32:ea:cc:4f:b2:43:bf:d4:b7:29:c2:e6:d6: 28:50:17:ab:55:47:4a:75:d7:e9:10:6b:ed:9c:34:ef:42:2a: e7:b9:1f:34:b8:10:ef:85:d5:25:eb:40:2d:83:92:3d:6a:d0: 59:28:4b:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdr8vm2NKHLFhO7dPvfVLZdB8AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNjAzMjYxMDE3MjRaFw0yNjAzMjkxNzQ4MjRaMDMxMTAvBgNV BAMTKDQ4MTk3REVFOEEyOTkwOTU0M0U3QTkwREQ5RDVBMTVBMThDNEQwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvxnQUblD/sHMzKUDWTl6erjE 588yCMYXPtEheySDkCv3MmNTS+Q7LZ+l161FCvt8uREFpdlkWM7EWwnJVQsPGKTt rzJNpF13yH3SatLny7K/qj7CRIamg5m+lXHIEhzB1MYYZAEp3SPFCK9tQ+w5PouV GKx3kPQphcklpy7qZYElYVx6XtnI01ujqnLpvZZk32lzyTIogjooIOho7KzIxZwL aqLkPCjSd+oRKrCLJOzVVhZI9FSaD2o8J2J4FVfGkD9wDYkTT3BzubBbU9tDVDER aM5vH9nPN4DIvladbGd7564dO6hCa4c/ID+Dm4j0A6IWU9sUNC1sYabFKiBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSBl97oopkJVD56kN2dWhWhjE0H4wHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZN/mJJ9y6sFt+t55Ci2FqHAuS0h6QaLlPr N+9cicuKEFgLpoAcebcQ/CXFSeatE+jcSlmTQhjdQi+MF/Re7RrB94EGrj1Wof6C x2UMc1y5LThILVu+o+G2obhj2KGZR3hHeMdp1J6I9+rp8PY70mrs7nqXP3qAWyPB yTIVbNKYNgoMeWfWw/X30/Y6ZUja+uWZ6541f7LqxmF6y7Ezd/Sf36KehQS7wvE7 Fb5jFsskU+xQs53BT+vXgULvefjqnbQIr84W+MA9nLjqMurMT7JDv9S3KcLm1ihQ F6tVR0p11+kQa+2cNO9CKue5HzS4EO+F1SXrQC2Dkj1q0FkoS1E= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:49 2026 by rpki-client