$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft File: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft (raw, json) Hash identifier: Nk2TotTem6AW+JTGp+5fHup9NT/jbJY+yce41LHNelY= Subject key identifier: AC:8A:4F:59:11:09:5A:55:64:39:14:69:47:F7:90:8B:44:17:1E:D0 Authority key identifier: 9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 Certificate issuer: /CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Certificate serial: 3E45F31BA59F6080FD4C71D004926CB1BCD99BEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft Manifest number: 1D Signing time: Tue 21 Apr 2026 20:32:13 +0000 Manifest this update: Tue 21 Apr 2026 20:27:13 +0000 Manifest next update: Sat 25 Apr 2026 03:48:13 +0000 Files and hashes: 1: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl (hash: tmWEQXzUBWHYoZis2N52v2an5MAQVf8inpYMdUmPKkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:45:f3:1b:a5:9f:60:80:fd:4c:71:d0:04:92:6c:b1:bc:d9:9b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Validity Not Before: Apr 21 20:27:13 2026 GMT Not After : Apr 25 03:48:13 2026 GMT Subject: CN=AC8A4F5911095A556439146947F7908B44171ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:48:e8:64:af:50:f5:96:6a:44:8f:e9:a2: 7a:d0:16:75:9d:bc:70:ee:b7:ee:46:62:35:0f:0d: ce:36:d4:75:52:e6:8f:0d:88:72:94:d6:97:dd:21: 99:e5:d9:47:de:9e:3e:a5:3d:b3:95:19:b1:f2:ce: b0:56:95:95:7f:c9:c9:a4:ea:d6:c5:58:45:d4:5e: 7c:95:b3:e4:1f:15:19:f8:f3:58:75:1b:97:bc:d8: d1:ea:55:df:4f:99:e3:b8:fd:cb:d1:31:21:0c:8e: 8f:ac:79:a7:7f:d4:de:f0:31:8c:27:c7:1f:0d:07: cd:20:d8:0a:63:17:24:3b:1f:5c:08:18:cf:b0:2e: 61:6e:03:cf:04:86:42:88:4f:1e:19:c8:34:74:97: 34:57:d7:2c:4f:f6:c4:bd:36:5b:83:b6:01:27:c9: 2d:be:b0:6b:22:26:67:3e:11:2c:89:d4:1e:f1:eb: 07:03:6d:2f:07:75:33:4e:57:46:38:36:f8:10:5a: 26:1f:19:72:bf:73:71:bd:de:5f:c5:56:49:14:a4: 3e:0e:98:f0:02:ec:73:04:a9:18:fc:ee:e0:1c:28: 08:3a:ff:51:ac:44:a4:83:c7:74:14:7f:4d:19:86: 35:5f:60:4d:df:2b:5b:40:16:c8:6f:54:54:41:f4: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8A:4F:59:11:09:5A:55:64:39:14:69:47:F7:90:8B:44:17:1E:D0 X509v3 Authority Key Identifier: keyid:9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f0:80:8b:b7:9f:1d:f4:64:34:90:7f:94:cd:71:9e:c3:ab: 1c:2d:f4:18:4d:34:cf:59:68:1f:c7:a7:69:a1:a5:39:ff:d6: a2:03:76:20:6b:40:ae:3d:fe:57:ab:06:a7:96:24:13:1c:d0: f7:c8:bd:87:6a:2b:a6:d3:fa:98:eb:8f:88:83:ac:f4:b9:d0: 30:8d:ba:29:49:05:00:20:dc:24:04:87:17:d4:6f:6d:f5:de: c8:a2:11:a3:96:e6:bc:1d:2d:58:a3:4a:e5:de:65:c6:db:e9: e2:2e:60:59:a2:df:fb:04:ba:e9:d5:55:94:4f:3b:9b:25:07: 62:a3:43:dd:7d:33:7d:c1:a0:b3:8b:25:f6:b0:c2:b7:24:e1: 57:21:3c:49:30:72:1c:5d:43:74:66:aa:70:83:c1:e4:5b:6d: b6:9f:c3:e6:8f:29:6e:40:5b:92:7f:40:11:30:6c:06:dc:ed: 7c:37:ba:58:fa:c2:7f:e4:b1:a1:96:61:1f:cb:94:51:eb:5b: fa:77:59:14:0b:b4:40:8d:6e:ad:ea:c4:81:98:f8:b2:84:d4: bd:ef:36:b4:cd:91:b7:4c:7f:17:3e:99:f5:65:2b:6c:80:69: 8b:24:5b:a2:a8:05:c3:33:8c:b1:c2:58:4f:19:34:b6:cd:57: 6e:25:94:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkXzG6WfYID9THHQBJJssbzZm+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4MUQz MTNCODgzNjAeFw0yNjA0MjEyMDI3MTNaFw0yNjA0MjUwMzQ4MTNaMDMxMTAvBgNV BAMTKEFDOEE0RjU5MTEwOTVBNTU2NDM5MTQ2OTQ3Rjc5MDhCNDQxNzFFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYREjoZK9Q9ZZqRI/ponrQFnWd vHDut+5GYjUPDc421HVS5o8NiHKU1pfdIZnl2Ufenj6lPbOVGbHyzrBWlZV/ycmk 6tbFWEXUXnyVs+QfFRn481h1G5e82NHqVd9PmeO4/cvRMSEMjo+sead/1N7wMYwn xx8NB80g2ApjFyQ7H1wIGM+wLmFuA88EhkKITx4ZyDR0lzRX1yxP9sS9NluDtgEn yS2+sGsiJmc+ESyJ1B7x6wcDbS8HdTNOV0Y4NvgQWiYfGXK/c3G93l/FVkkUpD4O mPAC7HMEqRj87uAcKAg6/1GsRKSDx3QUf00ZhjVfYE3fK1tAFshvVFRB9AsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIpPWREJWlVkORRpR/eQi0QXHtAwHwYDVR0j BBgwFoAUn7HFDRNSasPbRzKC5b7IHTE7iDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMS85RkIxQzUwRDEz NTI2QUMzREI0NzMyODJFNUJFQzgxRDMxM0I4ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4MUQzMTNC ODgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4 MUQzMTNCODgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPwgIu3nx30ZDSQf5TNcZ7Dqxwt9BhNNM9Z aB/Hp2mhpTn/1qIDdiBrQK49/lerBqeWJBMc0PfIvYdqK6bT+pjrj4iDrPS50DCN uilJBQAg3CQEhxfUb2313siiEaOW5rwdLVijSuXeZcbb6eIuYFmi3/sEuunVVZRP O5slB2KjQ919M33BoLOLJfawwrck4VchPEkwchxdQ3RmqnCDweRbbbafw+aPKW5A W5J/QBEwbAbc7Xw3ulj6wn/ksaGWYR/LlFHrW/p3WRQLtECNbq3qxIGY+LKE1L3v NrTNkbdMfxc+mfVlK2yAaYskW6KoBcMzjLHCWE8ZNLbNV24llFU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:32 2026 by rpki-client