$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: ACohrjZISQCM7h7HihB+UYvsaMC/cYs66FmTHPMuLQg= Subject key identifier: D3:A9:98:5C:BE:BA:9C:FD:71:0B:9C:76:DC:94:B8:98:E9:8B:47:EC Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 3FA9C8F9E9252EDF53C1B8ECF08DA4E93146CE94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 01B1 Signing time: Thu 26 Mar 2026 10:52:38 +0000 Manifest this update: Thu 26 Mar 2026 10:47:38 +0000 Manifest next update: Sun 29 Mar 2026 11:43:38 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: yBO4rkAVKaokEEEfa6V7KssBVozc/Cj9SY0roUx9nQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a9:c8:f9:e9:25:2e:df:53:c1:b8:ec:f0:8d:a4:e9:31:46:ce:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Mar 26 10:47:38 2026 GMT Not After : Mar 29 11:43:38 2026 GMT Subject: CN=D3A9985CBEBA9CFD710B9C76DC94B898E98B47EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:97:2d:1d:8a:af:60:9e:4c:a3:da:3a:4b: e5:57:32:7e:29:41:52:93:61:85:88:b9:a4:43:41: 48:aa:f6:f4:96:8a:70:57:cd:5b:1c:ad:0e:53:32: 27:5b:5f:d2:05:bf:43:e4:fc:52:c8:4b:74:fd:9c: c3:87:46:83:6f:3f:cc:56:c6:24:39:fe:21:ba:82: 91:e5:e3:2c:0d:0f:bf:96:59:52:92:d2:a9:fb:24: 00:3d:56:75:2f:cc:51:6c:33:4e:59:e1:20:aa:86: e0:a4:9b:a6:22:29:fc:ca:9e:7b:a3:d4:5c:c4:d9: 48:0d:c0:4d:90:fe:15:c9:8e:14:e3:5d:87:66:ab: cb:0e:52:59:71:79:87:6c:22:48:90:87:45:c8:5f: 2e:0b:42:ec:03:9e:df:2f:71:b3:e1:2b:b4:8c:bb: 86:15:15:98:18:0a:40:31:d1:b9:9b:5f:43:d0:eb: a1:e7:d9:b7:76:01:75:65:28:f5:db:cb:34:68:38: e4:aa:3b:b7:ae:b6:68:7b:45:db:cf:47:5f:26:7e: 5e:ff:53:c0:f4:6d:8f:79:ed:2e:69:c1:ca:62:6a: b2:4b:64:49:95:b8:63:7e:d9:5e:b3:97:38:42:81: b3:54:31:f1:8e:c1:fb:99:3e:98:1f:c3:4e:fd:f9: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A9:98:5C:BE:BA:9C:FD:71:0B:9C:76:DC:94:B8:98:E9:8B:47:EC X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:51:94:18:c7:04:6b:bf:89:c4:e3:97:72:ab:d5:fa:25:bf: 8d:55:66:c7:5c:2b:bf:56:ae:e4:ab:7a:ab:d1:10:4a:16:3e: b4:2c:f2:b4:ed:dc:b0:9a:1d:ac:d2:4a:8e:85:83:a2:d8:44: d9:2a:79:d3:9a:45:1b:60:46:f7:d7:60:57:87:36:59:1a:4a: 6d:ee:b4:44:9a:3b:75:43:70:43:96:83:3b:a2:c1:55:d5:2b: 94:eb:bb:ab:5a:d6:2e:64:b5:01:0c:26:dd:f7:e5:41:4d:f5: 9e:56:f4:22:fd:5e:36:fe:47:74:08:35:98:d8:94:b2:54:02: d4:21:b7:f9:16:79:86:31:ac:b0:26:87:c5:11:78:e3:03:f5: 49:b3:5c:8e:de:97:fa:85:ee:fa:c7:41:c2:f1:b0:fa:8a:51: f5:73:c2:f8:c4:1a:d0:26:2e:d1:76:7a:db:53:96:d5:bc:ef: 15:90:05:c2:4c:9e:22:ae:43:74:1c:ff:e9:60:22:e2:f8:84: 8e:26:75:e5:c0:b7:d1:2a:51:c7:43:a8:96:66:87:04:7f:a4: a0:47:3d:30:81:e5:22:5b:cf:bb:5e:3c:87:6d:ed:74:bf:11: c5:45:f2:db:f3:34:70:c3:a7:28:82:d5:02:17:fb:9b:e8:46: bd:51:21:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6nI+eklLt9Twbjs8I2k6TFGzpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNjAzMjYxMDQ3MzhaFw0yNjAzMjkxMTQzMzhaMDMxMTAvBgNV BAMTKEQzQTk5ODVDQkVCQTlDRkQ3MTBCOUM3NkRDOTRCODk4RTk4QjQ3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRJctHYqvYJ5Mo9o6S+VXMn4p QVKTYYWIuaRDQUiq9vSWinBXzVscrQ5TMidbX9IFv0Pk/FLIS3T9nMOHRoNvP8xW xiQ5/iG6gpHl4ywND7+WWVKS0qn7JAA9VnUvzFFsM05Z4SCqhuCkm6YiKfzKnnuj 1FzE2UgNwE2Q/hXJjhTjXYdmq8sOUllxeYdsIkiQh0XIXy4LQuwDnt8vcbPhK7SM u4YVFZgYCkAx0bmbX0PQ66Hn2bd2AXVlKPXbyzRoOOSqO7eutmh7RdvPR18mfl7/ U8D0bY957S5pwcpiarJLZEmVuGN+2V6zlzhCgbNUMfGOwfuZPpgfw079+dlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU06mYXL66nP1xC5x23JS4mOmLR+wwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVRlBjHBGu/icTjl3Kr1folv41VZsdcK79W ruSreqvREEoWPrQs8rTt3LCaHazSSo6Fg6LYRNkqedOaRRtgRvfXYFeHNlkaSm3u tESaO3VDcEOWgzuiwVXVK5Tru6ta1i5ktQEMJt335UFN9Z5W9CL9Xjb+R3QINZjY lLJUAtQht/kWeYYxrLAmh8UReOMD9UmzXI7el/qF7vrHQcLxsPqKUfVzwvjEGtAm LtF2ettTltW87xWQBcJMniKuQ3Qc/+lgIuL4hI4mdeXAt9EqUcdDqJZmhwR/pKBH PTCB5SJbz7tePIdt7XS/EcVF8tvzNHDDpyiC1QIX+5voRr1RIVE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:00:51 2026 by rpki-client