$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft File: E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft (raw, json) Hash identifier: tmSMNLzssBb6l1LFhp7c4xmpqDkg0pWHeWQr2TVNNFI= Subject key identifier: CC:F7:DD:1E:68:11:F1:64:BE:E3:C2:7B:60:D4:B0:CF:C5:C8:01:F3 Authority key identifier: E9:DF:36:C3:9D:2A:9C:B3:B5:EE:9B:37:23:4A:45:A0:D2:E0:D5:9E Certificate issuer: /CN=E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E Certificate serial: 6119CB20C0AB12FAD27965B2E10C757D3B4FEAA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft Manifest number: 0A Signing time: Tue 17 Mar 2026 09:43:50 +0000 Manifest this update: Tue 17 Mar 2026 09:38:50 +0000 Manifest next update: Fri 20 Mar 2026 21:29:50 +0000 Files and hashes: 1: E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl (hash: OqPQ8ZGofcUUkQa3zZ23iQb/KQwWUQNkW84Hdetc3kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 21:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:19:cb:20:c0:ab:12:fa:d2:79:65:b2:e1:0c:75:7d:3b:4f:ea:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E Validity Not Before: Mar 17 09:38:50 2026 GMT Not After : Mar 20 21:29:50 2026 GMT Subject: CN=CCF7DD1E6811F164BEE3C27B60D4B0CFC5C801F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:b4:e9:52:13:18:bd:8c:8f:c5:c2:99:2b: fb:0e:b5:c8:ee:df:38:ca:48:aa:2e:80:a7:d1:ac: 57:2c:c8:78:6d:b6:29:9f:51:49:c2:a6:40:e3:8b: 63:92:b2:cd:df:41:3c:e4:47:06:95:7c:32:d4:60: 72:31:6f:46:d3:cf:53:e5:c0:a8:c4:ca:82:84:38: 9f:1c:e7:b6:19:19:70:d3:c0:e4:65:6d:85:55:2e: a2:83:23:f5:9f:86:b3:43:e6:1d:a8:64:e9:f4:0f: 35:0f:7b:8c:d0:34:4c:e4:ba:cb:72:3c:c2:97:a2: 86:f5:67:10:92:4d:77:74:57:ef:91:4d:c7:12:7b: 72:e4:42:41:90:80:13:3e:d3:79:e1:3b:a3:36:e8: f5:5d:23:8c:b0:c8:19:03:29:34:3f:63:fe:76:f6: a9:5d:b2:bf:20:a6:1e:e2:b5:bb:f9:cf:cc:5f:f2: cc:b0:11:79:d3:c4:d2:c1:c9:6e:08:5b:a9:b7:0e: 9e:68:c0:66:6b:c7:f6:65:5e:16:f2:39:c5:72:10: 4d:6c:9a:e9:d1:60:9a:6c:33:90:64:c2:8c:f9:ad: a2:e0:2e:1a:ac:0f:a2:82:a6:f3:e5:55:a3:e4:f5: f7:a1:46:55:2b:89:25:54:4a:1b:00:32:8d:ee:86: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F7:DD:1E:68:11:F1:64:BE:E3:C2:7B:60:D4:B0:CF:C5:C8:01:F3 X509v3 Authority Key Identifier: keyid:E9:DF:36:C3:9D:2A:9C:B3:B5:EE:9B:37:23:4A:45:A0:D2:E0:D5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:90:74:dd:85:b4:5e:9f:5f:e3:16:31:27:d9:e4:d8:54:50: 86:da:56:4f:2c:7f:0d:01:0e:46:d7:83:4e:13:26:86:30:c2: f7:73:10:43:0f:f1:08:69:12:16:a4:ea:21:4f:5b:f5:2d:8a: 9d:92:3b:44:87:3f:49:fc:bd:e0:83:0b:a5:31:5b:2b:6e:8c: 94:d4:c2:29:95:3d:70:f1:30:d5:db:12:78:9d:a3:96:6a:75: 9f:6e:11:f6:09:da:83:7e:42:1a:37:ed:7c:a5:14:f3:1b:3c: 14:37:a7:fb:0f:d7:6b:91:be:16:38:89:c1:1c:1c:da:59:00: 96:dc:1f:39:a8:62:9a:45:f2:5b:52:ab:c7:88:0f:99:55:a3: 59:10:f5:ca:6e:b0:14:7e:b2:66:f6:85:f5:7e:60:ed:92:8c: 05:0d:79:97:79:e9:45:dd:f1:36:fc:a8:a8:43:0d:fe:82:f9: 2c:b5:4c:8f:a7:81:a5:66:ac:30:e8:e9:3f:a9:55:1d:a6:27: c3:7f:d0:f6:dc:67:15:36:d9:7b:47:9b:bc:af:96:52:4c:c0: 19:cf:7e:37:9c:31:61:80:c3:6c:d0:d6:59:09:3f:80:24:65: 4e:71:9c:52:68:0d:ae:8e:b9:0b:a8:88:b8:3e:6b:3e:e8:f2: 26:dc:27:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRnLIMCrEvrSeWWy4Qx1fTtP6qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1QTBE MkUwRDU5RTAeFw0yNjAzMTcwOTM4NTBaFw0yNjAzMjAyMTI5NTBaMDMxMTAvBgNV BAMTKENDRjdERDFFNjgxMUYxNjRCRUUzQzI3QjYwRDRCMENGQzVDODAxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5LTpUhMYvYyPxcKZK/sOtcju 3zjKSKougKfRrFcsyHhttimfUUnCpkDji2OSss3fQTzkRwaVfDLUYHIxb0bTz1Pl wKjEyoKEOJ8c57YZGXDTwORlbYVVLqKDI/WfhrND5h2oZOn0DzUPe4zQNEzkusty PMKXoob1ZxCSTXd0V++RTccSe3LkQkGQgBM+03nhO6M26PVdI4ywyBkDKTQ/Y/52 9qldsr8gph7itbv5z8xf8sywEXnTxNLByW4IW6m3Dp5owGZrx/ZlXhbyOcVyEE1s munRYJpsM5Bkwoz5raLgLhqsD6KCpvPlVaPk9fehRlUriSVUShsAMo3uht/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPfdHmgR8WS+48J7YNSwz8XIAfMwHwYDVR0j BBgwFoAU6d82w50qnLO17ps3I0pFoNLg1Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMC9FOURGMzZDMzlE MkE5Q0IzQjVFRTlCMzcyMzRBNDVBMEQyRTBENTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1QTBEMkUw RDU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzAvRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1 QTBEMkUwRDU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqQdN2FtF6fX+MWMSfZ5NhUUIbaVk8sfw0B DkbXg04TJoYwwvdzEEMP8QhpEhak6iFPW/Utip2SO0SHP0n8veCDC6UxWytujJTU wimVPXDxMNXbEnido5ZqdZ9uEfYJ2oN+Qho37XylFPMbPBQ3p/sP12uRvhY4icEc HNpZAJbcHzmoYppF8ltSq8eID5lVo1kQ9cpusBR+smb2hfV+YO2SjAUNeZd56UXd 8Tb8qKhDDf6C+Sy1TI+ngaVmrDDo6T+pVR2mJ8N/0PbcZxU22XtHm7yvllJMwBnP fjecMWGAw2zQ1lkJP4AkZU5xnFJoDa6OuQuoiLg+az7o8ibcJ/g= -----END CERTIFICATE-----Generated at Thu Mar 19 09:36:12 2026 by rpki-client