$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft File: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft (raw, json) Hash identifier: sF3x8vpO7uPypd27EdEf8pex17Y3298g8gGoynT12To= Subject key identifier: C3:08:2A:21:FD:DF:CB:7C:B2:E9:4C:F3:1C:01:04:51:11:FA:34:92 Authority key identifier: 9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 Certificate issuer: /CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Certificate serial: 4ADE5BD7B28B63666E7EB3B32E31F5A45A8F3954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft Manifest number: 08 Signing time: Fri 06 Mar 2026 03:22:05 +0000 Manifest this update: Fri 06 Mar 2026 03:17:05 +0000 Manifest next update: Mon 09 Mar 2026 09:24:05 +0000 Files and hashes: 1: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl (hash: Q4Y+nXjr2vb9js9X3RSh5Zj6ZxWWeTA45jc+9+xbJA8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:de:5b:d7:b2:8b:63:66:6e:7e:b3:b3:2e:31:f5:a4:5a:8f:39:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Validity Not Before: Mar 6 03:17:05 2026 GMT Not After : Mar 9 09:24:05 2026 GMT Subject: CN=C3082A21FDDFCB7CB2E94CF31C01045111FA3492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:fa:19:94:1b:41:b6:ce:15:53:db:53:ca: 38:6e:25:f7:67:88:85:df:b1:72:11:e0:81:32:ec: 88:37:e3:52:ff:46:41:85:69:12:cc:82:57:4d:e2: 72:21:bb:40:1c:34:03:ac:bc:2d:92:5d:75:da:46: 89:3b:81:6a:74:2e:24:e7:5b:81:c7:02:07:f5:ce: 4b:27:2e:52:ba:a8:11:e0:96:7d:a1:67:14:50:38: 67:ed:f5:48:42:e9:93:a0:bf:df:b1:0a:a3:d0:8c: 2f:f4:92:ed:3c:1d:9b:23:9b:1e:bc:83:45:06:f0: 48:d8:02:22:9a:4f:1c:9f:e2:6d:a1:28:6b:33:80: 25:f5:80:13:1e:30:d9:6e:4d:cd:76:98:9a:25:3b: 7d:ae:72:b1:c7:40:89:7b:bb:dd:e7:73:12:29:1c: f3:cc:c5:fe:3a:e2:3b:1a:77:c3:a5:4f:d4:07:3d: 31:97:0d:b1:40:e9:b9:01:bc:91:cb:fe:f6:30:d1: 91:2c:56:e6:9c:5c:39:f0:d0:a7:35:8d:27:a8:f1: c5:76:85:fd:e9:0c:4c:9c:f9:93:ff:73:9d:82:83: dd:51:7f:81:18:e4:1e:43:67:d9:d5:5d:fb:80:c3: 2a:c4:b9:f9:d2:e4:92:7b:f7:fa:f3:2c:03:b4:cd: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:08:2A:21:FD:DF:CB:7C:B2:E9:4C:F3:1C:01:04:51:11:FA:34:92 X509v3 Authority Key Identifier: keyid:9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:05:9c:f6:c7:8d:a9:01:8e:ef:18:92:65:93:49:9a:85:12: 97:00:15:94:67:9e:b8:5a:8b:c8:e0:a5:d0:74:71:ad:94:7f: 38:07:ff:de:e4:ae:76:3f:4d:a6:db:cd:b9:73:91:a5:f0:f6: ff:6e:06:ef:d4:75:40:ab:19:b8:af:86:ff:2e:99:23:87:38: f5:e1:b3:f1:f4:da:bd:ee:82:41:05:30:93:55:96:23:75:be: 0a:58:dd:c6:29:82:3a:ca:f2:8f:48:66:a5:82:31:4a:f2:ce: b9:d2:af:19:c0:29:97:27:05:25:46:25:66:c9:d5:41:f7:27: d2:10:dc:9b:92:39:c5:54:d0:98:2f:1b:95:3a:95:f9:b3:83: 93:49:cc:f7:ee:d5:72:09:9b:77:e4:9c:32:ea:6d:a1:40:26: c7:46:3f:c6:83:c8:47:ea:92:68:0e:1c:e1:af:fc:e2:28:8c: 2a:96:17:2c:e4:08:86:86:85:d8:46:12:ae:b0:22:13:32:52: 45:d7:f4:16:71:fe:ae:78:ad:6e:b6:0b:b2:d2:68:df:bc:8d: da:dd:21:b0:d7:18:1e:3d:bc:01:70:a9:12:dc:53:80:8e:6b: e9:57:cb:16:55:6e:05:d0:e0:68:c0:27:f0:8f:59:97:71:96: 2c:da:8b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSt5b17KLY2ZufrOzLjH1pFqPOVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4MUQz MTNCODgzNjAeFw0yNjAzMDYwMzE3MDVaFw0yNjAzMDkwOTI0MDVaMDMxMTAvBgNV BAMTKEMzMDgyQTIxRkRERkNCN0NCMkU5NENGMzFDMDEwNDUxMTFGQTM0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZl/oZlBtBts4VU9tTyjhuJfdn iIXfsXIR4IEy7Ig341L/RkGFaRLMgldN4nIhu0AcNAOsvC2SXXXaRok7gWp0LiTn W4HHAgf1zksnLlK6qBHgln2hZxRQOGft9UhC6ZOgv9+xCqPQjC/0ku08HZsjmx68 g0UG8EjYAiKaTxyf4m2hKGszgCX1gBMeMNluTc12mJolO32ucrHHQIl7u93ncxIp HPPMxf464jsad8OlT9QHPTGXDbFA6bkBvJHL/vYw0ZEsVuacXDnw0Kc1jSeo8cV2 hf3pDEyc+ZP/c52Cg91Rf4EY5B5DZ9nVXfuAwyrEufnS5JJ79/rzLAO0zfBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwwgqIf3fy3yy6UzzHAEEURH6NJIwHwYDVR0j BBgwFoAUn7HFDRNSasPbRzKC5b7IHTE7iDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMS85RkIxQzUwRDEz NTI2QUMzREI0NzMyODJFNUJFQzgxRDMxM0I4ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4MUQzMTNC ODgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4 MUQzMTNCODgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwFnPbHjakBju8YkmWTSZqFEpcAFZRnnrha i8jgpdB0ca2UfzgH/97krnY/TabbzblzkaXw9v9uBu/UdUCrGbivhv8umSOHOPXh s/H02r3ugkEFMJNVliN1vgpY3cYpgjrK8o9IZqWCMUryzrnSrxnAKZcnBSVGJWbJ 1UH3J9IQ3JuSOcVU0JgvG5U6lfmzg5NJzPfu1XIJm3fknDLqbaFAJsdGP8aDyEfq kmgOHOGv/OIojCqWFyzkCIaGhdhGEq6wIhMyUkXX9BZx/q54rW62C7LSaN+8jdrd IbDXGB49vAFwqRLcU4COa+lXyxZVbgXQ4GjAJ/CPWZdxlizai3o= -----END CERTIFICATE-----Generated at Sat Mar 7 17:43:57 2026 by rpki-client