$ rpki-client -vvf repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft File: F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft (raw, json) Hash identifier: JnBrAHJ/tw6VHjiZ+0D1etEclCH8VFaNhO1kOm1SzP8= Subject key identifier: D9:97:D4:27:47:72:B9:BE:41:CD:00:38:6E:84:8E:FE:7B:12:FE:5A Authority key identifier: F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 Certificate issuer: /CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Certificate serial: 697C6DAD30FC99FBD71D39E896FD33442A40B02F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft Manifest number: E1 Signing time: Thu 26 Mar 2026 17:20:02 +0000 Manifest this update: Thu 26 Mar 2026 17:15:02 +0000 Manifest next update: Sun 29 Mar 2026 22:36:02 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: eLoJQcRR7UviwY1rgXoVkCmTBMM5/WsPMnoDlvo+6Xo=) 2: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: cPfXuq0p2jW4xPUhE/apIJeWsmib6FpPpP3zgdnQtuQ=) 3: F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl (hash: cATCg8z3k+6yijcmv+2aEjt6JpYeaYJSGiu4Ul0Wj2c=) 4: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: DxrvBG2EwoDi5CWPRxZjQftZXgHK8QtqiBt20+LN2E8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7c:6d:ad:30:fc:99:fb:d7:1d:39:e8:96:fd:33:44:2a:40:b0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F91B50B9BD34481B7AED3341ECBE67B1731B3908 Validity Not Before: Mar 26 17:15:02 2026 GMT Not After : Mar 29 22:36:02 2026 GMT Subject: CN=D997D4274772B9BE41CD00386E848EFE7B12FE5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:d7:ee:d3:ac:7a:4d:16:7c:ee:14:48:96: 7b:b1:ff:9d:9d:21:b6:09:33:f4:46:a2:89:a2:8d: 43:8f:1e:da:66:bf:2a:e5:55:26:30:ca:5f:59:9d: 7f:42:ab:23:79:d3:a1:39:93:d6:92:d8:30:8b:a1: db:2b:6e:1e:66:1e:45:06:67:e5:d2:d4:5a:be:bf: ce:f6:ae:a8:b1:86:93:8e:c8:bd:19:c2:5a:8d:68: f4:a8:1d:25:72:3c:37:37:3c:ca:28:c6:a0:c8:18: be:a4:58:90:67:fa:82:75:bc:75:f4:41:f4:38:a4: 8d:f9:f4:c9:dd:c7:b6:79:9c:20:d3:52:96:1a:7f: 1d:bd:59:a9:26:af:53:21:e5:81:e7:70:e1:4b:ff: 2b:af:d9:05:0f:66:ba:3c:b6:3b:04:70:52:ec:46: b9:a2:ef:7d:24:96:08:73:1b:f4:6f:71:81:9f:40: 27:5d:a5:de:fd:b9:80:6b:39:94:bc:41:55:ec:fb: 93:7e:ba:f5:88:54:6d:c2:0d:2d:bd:13:45:17:d6: 52:a5:aa:73:45:f6:28:31:ef:63:69:70:cf:7f:8c: e8:9e:63:c7:59:6d:c5:dd:77:be:91:52:92:5e:c5: 9c:a1:f6:07:c2:cd:31:93:a5:f3:f7:c3:bd:be:68: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:97:D4:27:47:72:B9:BE:41:CD:00:38:6E:84:8E:FE:7B:12:FE:5A X509v3 Authority Key Identifier: keyid:F9:1B:50:B9:BD:34:48:1B:7A:ED:33:41:EC:BE:67:B1:73:1B:39:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F91B50B9BD34481B7AED3341ECBE67B1731B3908.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/F91B50B9BD34481B7AED3341ECBE67B1731B3908.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:58:cd:83:82:8c:7c:0a:67:57:9e:8a:e0:ac:a6:67:e5:0e: 61:b5:ed:f7:ed:44:76:64:77:70:cd:f7:45:b7:7b:59:68:c9: 0d:4d:ac:b2:ec:0e:de:02:2c:1a:c8:4e:52:74:8d:19:8c:1b: 3a:7f:01:a5:54:35:bc:bc:74:d0:02:70:d5:a2:ac:69:e0:a2: 90:83:ec:a4:f8:58:7e:1f:f3:fc:2f:0c:de:19:88:8e:9b:30: fd:0f:32:a1:6c:e3:cf:f3:1f:c0:89:60:97:c6:89:3d:2d:7d: 1f:20:5f:b2:e8:02:24:7b:bc:aa:e4:12:38:1c:0e:01:dd:9b: 09:58:0e:73:15:60:ad:aa:5c:71:15:bf:ee:96:73:8c:ed:85: 4e:c9:ac:f7:ef:89:76:60:82:9b:65:3b:b9:ee:cc:d6:1d:7b: b9:75:62:fd:e8:4a:92:79:82:0e:92:2b:fe:63:c0:f0:30:e9: 67:71:e9:7f:47:d3:36:c3:88:50:61:1e:99:e1:07:0f:13:a6: 02:47:ad:30:14:03:ac:1f:85:63:6a:e6:00:b5:6c:09:43:82: 38:14:7c:18:44:b8:c1:13:a5:e4:24:7f:f6:b3:2d:c2:34:d2: f7:78:39:9d:31:01:6e:cb:cf:c1:b9:07:66:55:31:41:ff:e7: 97:ad:69:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXxtrTD8mfvXHTnolv0zRCpAsC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3 MzFCMzkwODAeFw0yNjAzMjYxNzE1MDJaFw0yNjAzMjkyMjM2MDJaMDMxMTAvBgNV BAMTKEQ5OTdENDI3NDc3MkI5QkU0MUNEMDAzODZFODQ4RUZFN0IxMkZFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1Nfu06x6TRZ87hRIlnux/52d IbYJM/RGoomijUOPHtpmvyrlVSYwyl9ZnX9CqyN506E5k9aS2DCLodsrbh5mHkUG Z+XS1Fq+v872rqixhpOOyL0ZwlqNaPSoHSVyPDc3PMooxqDIGL6kWJBn+oJ1vHX0 QfQ4pI359Mndx7Z5nCDTUpYafx29Wakmr1Mh5YHncOFL/yuv2QUPZro8tjsEcFLs Rrmi730klghzG/RvcYGfQCddpd79uYBrOZS8QVXs+5N+uvWIVG3CDS29E0UX1lKl qnNF9igx72NpcM9/jOieY8dZbcXdd76RUpJexZyh9gfCzTGTpfP3w72+aPLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZfUJ0dyub5BzQA4boSO/nsS/lowHwYDVR0j BBgwFoAU+RtQub00SBt67TNB7L5nsXMbOQgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Njc4NjBlMy02YWQ4LTQ3YTUtOTRjMC05M2ZmZDI0NzI4NjUvMC9GOTFCNTBCOUJE MzQ0ODFCN0FFRDMzNDFFQ0JFNjdCMTczMUIzOTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3QjE3MzFC MzkwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvRjkxQjUwQjlCRDM0NDgxQjdBRUQzMzQxRUNCRTY3 QjE3MzFCMzkwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1YzYOCjHwKZ1eeiuCspmflDmG17fftRHZk d3DN90W3e1loyQ1NrLLsDt4CLBrITlJ0jRmMGzp/AaVUNby8dNACcNWirGngopCD 7KT4WH4f8/wvDN4ZiI6bMP0PMqFs48/zH8CJYJfGiT0tfR8gX7LoAiR7vKrkEjgc DgHdmwlYDnMVYK2qXHEVv+6Wc4zthU7JrPfviXZggptlO7nuzNYde7l1Yv3oSpJ5 gg6SK/5jwPAw6Wdx6X9H0zbDiFBhHpnhBw8TpgJHrTAUA6wfhWNq5gC1bAlDgjgU fBhEuMETpeQkf/azLcI00vd4OZ0xAW7Lz8G5B2ZVMUH/55etaWg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:20 2026 by rpki-client