$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft File: 990382439FFA8C086A4458B338B52CCD0D54CFA8.mft (raw, json) Hash identifier: PEwq5Fa0l4BwgRjFDboueuZ4hikT8SQoVYs0P2BygCI= Subject key identifier: B9:6F:4D:39:9E:6F:98:1A:9A:2C:F7:73:8E:99:55:71:50:97:B3:D3 Authority key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 Certificate issuer: /CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Certificate serial: 79C3A179C4396C3C2A5BA2D69A74DBA8ECDE0148 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft Manifest number: 10 Signing time: Wed 25 Mar 2026 01:01:49 +0000 Manifest this update: Wed 25 Mar 2026 00:56:49 +0000 Manifest next update: Sat 28 Mar 2026 02:01:49 +0000 Files and hashes: 1: 990382439FFA8C086A4458B338B52CCD0D54CFA8.crl (hash: mcbspcKqwFVbZu9cJ2qNU21ZdjcVV7pfuLfPo1iVIsY=) 2: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: 6vBqY8AYNH35xXLwcOm0sU3NOzFnX23xmkRxg0L8bmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c3:a1:79:c4:39:6c:3c:2a:5b:a2:d6:9a:74:db:a8:ec:de:01:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Validity Not Before: Mar 25 00:56:49 2026 GMT Not After : Mar 28 02:01:49 2026 GMT Subject: CN=B96F4D399E6F981A9A2CF7738E9955715097B3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:5c:80:bd:b5:38:39:48:a2:08:82:cd:7b: e3:ee:90:ae:01:36:0d:f2:5e:e1:5f:fe:b9:0d:88: 89:bd:a4:09:4b:3f:09:3e:1a:61:d6:b3:c1:3f:3a: 4f:f5:3b:ee:e4:d9:68:a8:82:ac:18:11:94:c0:d2: 03:00:f1:df:e4:59:ed:74:75:90:25:fd:e8:84:6a: 06:6f:9b:8b:ca:f4:68:e1:87:e5:c9:90:b6:d3:ee: f5:d7:d9:c5:4d:cd:bf:68:77:a0:9b:2d:f9:ed:5e: d5:d5:c2:e7:fb:42:c8:d6:dc:82:55:56:b4:3a:89: 79:c9:ed:2d:aa:99:68:8b:1e:cb:fe:36:8d:b3:f7: 08:02:26:73:ef:36:c2:08:58:84:48:02:cd:e3:5e: a3:0d:c9:63:0b:25:98:2b:ad:6d:0b:26:16:66:76: 4e:42:c6:e5:f3:74:af:61:e3:c7:e7:a7:93:68:9d: 3a:03:80:8a:4f:9f:6f:a7:fb:8f:11:51:51:c6:29: fd:b8:86:0a:bf:6b:ac:08:14:42:26:34:78:9a:bb: 48:89:b4:35:5c:9e:5e:8b:ac:f1:d5:e9:56:53:ea: b7:bf:b1:26:48:e7:bf:41:73:b4:ac:0a:8b:09:ad: 5c:54:8d:0f:73:cb:0c:64:5e:1f:e4:cd:94:d2:70: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6F:4D:39:9E:6F:98:1A:9A:2C:F7:73:8E:99:55:71:50:97:B3:D3 X509v3 Authority Key Identifier: keyid:99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:53:54:b9:bc:07:ca:5e:cc:22:9c:07:74:ac:67:c4:a7: 79:da:50:af:17:07:ec:90:ae:17:ce:83:66:a6:6f:63:e7:07: 75:4e:6e:4b:eb:ab:a3:df:ae:15:54:99:72:5f:29:e7:33:af: 90:67:4d:43:c1:f3:8c:77:54:df:b0:6f:df:14:46:84:b8:6d: 1b:07:59:fe:dc:04:dc:88:f1:b0:76:a8:58:e9:5b:d8:d7:76: 4c:a9:89:f8:6c:86:c3:a8:dd:20:c8:dc:9b:38:ad:ea:51:ed: a9:44:81:3f:6b:bc:89:b8:7b:11:7f:5f:50:e8:ed:d0:ef:97: 52:14:c6:d9:b4:16:30:10:ee:76:19:f8:3e:65:98:18:ee:de: 12:9c:81:a6:5e:5d:ee:9a:f8:5d:7d:95:e8:1d:29:7b:00:1d: 1e:4f:10:57:0c:c0:27:11:af:87:a4:97:86:3a:93:a3:c5:69: ef:6d:e8:8f:25:05:a3:89:0c:5c:c9:a4:f3:4b:1f:fe:21:b5: 41:1d:0b:24:e6:39:90:88:3b:4b:1b:31:61:ae:0e:1f:40:c2: 15:71:d1:5d:2d:53:67:66:fe:42:72:2a:44:87:d6:91:ef:d7: 12:c9:10:c9:7f:a0:5f:91:d9:22:c3:07:9c:64:e4:8e:40:1a: e9:a1:6d:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecOhecQ5bDwqW6LWmnTbqOzeAUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJDQ0Qw RDU0Q0ZBODAeFw0yNjAzMjUwMDU2NDlaFw0yNjAzMjgwMjAxNDlaMDMxMTAvBgNV BAMTKEI5NkY0RDM5OUU2Rjk4MUE5QTJDRjc3MzhFOTk1NTcxNTA5N0IzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaF1yAvbU4OUiiCILNe+PukK4B Ng3yXuFf/rkNiIm9pAlLPwk+GmHWs8E/Ok/1O+7k2WiogqwYEZTA0gMA8d/kWe10 dZAl/eiEagZvm4vK9Gjhh+XJkLbT7vXX2cVNzb9od6CbLfntXtXVwuf7QsjW3IJV VrQ6iXnJ7S2qmWiLHsv+No2z9wgCJnPvNsIIWIRIAs3jXqMNyWMLJZgrrW0LJhZm dk5CxuXzdK9h48fnp5NonToDgIpPn2+n+48RUVHGKf24hgq/a6wIFEImNHiau0iJ tDVcnl6LrPHV6VZT6re/sSZI579Bc7SsCosJrVxUjQ9zywxkXh/kzZTScDAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuW9NOZ5vmBqaLPdzjplVcVCXs9MwHwYDVR0j BBgwFoAUmQOCQ5/6jAhqRFizOLUszQ1Uz6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMC85OTAzODI0MzlG RkE4QzA4NkE0NDU4QjMzOEI1MkNDRDBENTRDRkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJDQ0QwRDU0 Q0ZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm Y2YtYWUzMmE4N2ZlNjM2LzAvOTkwMzgyNDM5RkZBOEMwODZBNDQ1OEIzMzhCNTJD Q0QwRDU0Q0ZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTcU1S5vAfKXswinAd0rGfEp3naUK8XB+yQ rhfOg2amb2PnB3VObkvrq6PfrhVUmXJfKeczr5BnTUPB84x3VN+wb98URoS4bRsH Wf7cBNyI8bB2qFjpW9jXdkypifhshsOo3SDI3Js4repR7alEgT9rvIm4exF/X1Do 7dDvl1IUxtm0FjAQ7nYZ+D5lmBju3hKcgaZeXe6a+F19legdKXsAHR5PEFcMwCcR r4ekl4Y6k6PFae9t6I8lBaOJDFzJpPNLH/4htUEdCyTmOZCIO0sbMWGuDh9AwhVx 0V0tU2dm/kJyKkSH1pHv1xLJEMl/oF+R2SLDB5xk5I5AGumhbZE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:46 2026 by rpki-client