$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft File: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft (raw, json) Hash identifier: SNuUIH8si3eVlk3ICxLT4lCPdj7IDZ7+xr0JANDDKII= Subject key identifier: E9:E0:6F:D8:EE:73:BB:E5:7D:63:FE:80:FD:0F:27:08:A4:74:94:E4 Authority key identifier: F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E Certificate issuer: /CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Certificate serial: 5DCF0272A96AAC26D4DD39F004E7617D4A333A00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft Manifest number: 0D Signing time: Wed 18 Mar 2026 08:41:57 +0000 Manifest this update: Wed 18 Mar 2026 08:36:57 +0000 Manifest next update: Sat 21 Mar 2026 11:30:57 +0000 Files and hashes: 1: F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl (hash: wEDLo5M9wwV2zgVOCspZWhtSyaPKxWZmc+vNiSJrx7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 11:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cf:02:72:a9:6a:ac:26:d4:dd:39:f0:04:e7:61:7d:4a:33:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E Validity Not Before: Mar 18 08:36:57 2026 GMT Not After : Mar 21 11:30:57 2026 GMT Subject: CN=E9E06FD8EE73BBE57D63FE80FD0F2708A47494E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:6e:12:64:9d:57:6d:49:2d:5e:1b:e2:07: 63:52:03:c1:af:01:75:ee:9e:46:15:bb:44:45:49: ec:72:07:5a:d5:c3:f3:ee:8d:e0:a6:4b:9a:b4:e8: 17:9b:ac:0e:3b:fb:a7:14:7e:81:90:88:31:e2:08: 9d:a8:8a:ff:3b:4b:4b:6f:46:75:3a:25:04:e4:02: ed:73:38:89:12:5a:22:f9:b8:69:cc:84:67:74:f3: 8c:3d:fd:d7:92:de:ba:5c:ff:c7:fe:44:1a:93:82: 40:41:a2:e4:9a:09:3e:1b:2e:6d:82:fc:f7:f7:25: c0:d3:6d:3d:a8:bc:09:f3:bf:da:c8:66:86:16:2f: fa:d1:7a:50:b7:2d:84:52:99:6c:49:6c:4e:d6:54: 61:a3:5c:75:71:bc:89:ea:40:f7:81:35:5b:4c:f5: aa:a3:8d:5c:c4:b4:aa:ed:e2:c2:aa:b0:47:94:f3: 67:e7:95:54:d0:55:f3:fd:d6:7d:3b:16:30:c0:63: 3c:55:71:16:5a:7a:33:cd:a8:bf:30:98:ce:5c:59: 59:6a:a2:d7:96:3a:de:dc:ac:74:60:ca:cc:e2:11: e9:f4:8a:2c:b5:04:e0:65:47:73:ec:62:32:e7:aa: e1:ae:b6:d5:31:66:58:b4:05:16:de:33:fc:ed:1f: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:6F:D8:EE:73:BB:E5:7D:63:FE:80:FD:0F:27:08:A4:74:94:E4 X509v3 Authority Key Identifier: keyid:F0:ED:32:5A:69:D8:FF:DB:B8:FA:45:F4:12:BB:23:4D:AB:3E:4D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/1/F0ED325A69D8FFDBB8FA45F412BB234DAB3E4D4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4f:d3:1e:58:7e:f0:dc:66:c9:28:73:38:a7:38:1d:5b:31: b1:d8:d2:86:c8:9e:0f:ee:ec:bb:0a:7e:83:a1:13:6d:77:35: 2c:66:7e:35:d4:43:8f:28:c5:54:cd:f4:14:02:a5:c8:ac:ec: 6b:55:b8:77:fc:db:32:0f:60:45:a8:76:3c:03:b0:d4:b6:26: b4:4e:11:21:c0:c3:5d:03:f3:42:62:26:84:6d:2d:36:92:c8: 7f:fe:cb:61:aa:dc:6a:75:6a:a9:3e:26:c8:23:3e:f7:73:8c: 55:be:6d:04:55:eb:5e:b2:a0:82:0a:b7:07:73:3a:cd:9d:4f: 03:cc:4d:5d:3c:50:ca:91:0d:f4:9b:e3:ba:d7:b3:68:ba:8a: ab:59:e3:71:85:28:00:00:d8:92:7a:e9:71:4c:f9:c5:d5:58: b5:91:62:af:67:b2:16:87:12:29:ad:47:3f:b4:90:fc:d9:f6: 8c:38:e4:f6:12:ee:43:fb:13:54:27:52:ba:c8:df:f2:1d:ca: 8b:c0:29:6e:1c:ae:cb:b6:46:4e:fb:91:27:b0:c5:b5:58:7a: 0e:13:4d:a3:96:c0:a3:3e:13:90:f8:65:e6:34:4d:94:d8:d5: b1:c9:9e:1e:2f:f1:7a:0f:b8:12:03:65:53:c6:a6:bc:ef:9e: c4:16:ee:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc8CcqlqrCbU3TnwBOdhfUozOgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERB QjNFNEQ0RTAeFw0yNjAzMTgwODM2NTdaFw0yNjAzMjExMTMwNTdaMDMxMTAvBgNV BAMTKEU5RTA2RkQ4RUU3M0JCRTU3RDYzRkU4MEZEMEYyNzA4QTQ3NDk0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdG4SZJ1XbUktXhviB2NSA8Gv AXXunkYVu0RFSexyB1rVw/PujeCmS5q06BebrA47+6cUfoGQiDHiCJ2oiv87S0tv RnU6JQTkAu1zOIkSWiL5uGnMhGd084w9/deS3rpc/8f+RBqTgkBBouSaCT4bLm2C /Pf3JcDTbT2ovAnzv9rIZoYWL/rRelC3LYRSmWxJbE7WVGGjXHVxvInqQPeBNVtM 9aqjjVzEtKrt4sKqsEeU82fnlVTQVfP91n07FjDAYzxVcRZaejPNqL8wmM5cWVlq oteWOt7crHRgysziEen0iiy1BOBlR3PsYjLnquGuttUxZli0BRbeM/ztHz7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eBv2O5zu+V9Y/6A/Q8nCKR0lOQwHwYDVR0j BBgwFoAU8O0yWmnY/9u4+kX0ErsjTas+TU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMS9GMEVEMzI1QTY5 RDhGRkRCQjhGQTQ1RjQxMkJCMjM0REFCM0U0RDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIzNERBQjNF NEQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzEvRjBFRDMyNUE2OUQ4RkZEQkI4RkE0NUY0MTJCQjIz NERBQjNFNEQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhP0x5YfvDcZskoczinOB1bMbHY0obIng/u 7LsKfoOhE213NSxmfjXUQ48oxVTN9BQCpcis7GtVuHf82zIPYEWodjwDsNS2JrRO ESHAw10D80JiJoRtLTaSyH/+y2Gq3Gp1aqk+JsgjPvdzjFW+bQRV616yoIIKtwdz Os2dTwPMTV08UMqRDfSb47rXs2i6iqtZ43GFKAAA2JJ66XFM+cXVWLWRYq9nshaH EimtRz+0kPzZ9ow45PYS7kP7E1QnUrrI3/IdyovAKW4crsu2Rk77kSewxbVYeg4T TaOWwKM+E5D4ZeY0TZTY1bHJnh4v8XoPuBIDZVPGprzvnsQW7i0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:54 2026 by rpki-client