$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: /ycq+g4gvB7q9Wf9u+pIDiAjbNGYUaagct5t0lwETnQ= Subject key identifier: 66:40:67:AC:65:CB:BC:18:5D:2E:A3:EA:3E:92:F7:47:93:A8:0E:C5 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 50E71037D0771CF439965AA8BB375C9A2C3088CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 013C Signing time: Fri 06 Mar 2026 17:52:32 +0000 Manifest this update: Fri 06 Mar 2026 17:47:32 +0000 Manifest next update: Mon 09 Mar 2026 23:02:32 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: l+CYsg3OhtqLs4fxwkB98WckZ9hQpaQvwWoyfiT+1Fc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e7:10:37:d0:77:1c:f4:39:96:5a:a8:bb:37:5c:9a:2c:30:88:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Mar 6 17:47:32 2026 GMT Not After : Mar 9 23:02:32 2026 GMT Subject: CN=664067AC65CBBC185D2EA3EA3E92F74793A80EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:a7:cb:cd:24:df:69:c4:43:93:a3:76:bd: 82:06:4a:d1:ad:1d:27:d9:6d:e2:6e:63:5a:9b:2e: 24:89:c4:c5:e6:fb:ca:49:4b:8a:cd:e1:4e:5f:19: d6:8e:93:a7:82:2b:3b:93:20:51:e1:e1:64:ef:5c: 68:94:67:b6:70:b3:0b:92:5a:e7:49:a0:3a:c7:cf: 59:a7:98:dc:c0:02:4c:0d:fd:ae:7d:ba:9b:d5:67: 10:88:50:b7:52:94:16:25:67:41:3e:b8:12:8c:b3: d5:3a:3c:18:27:91:53:4e:08:2b:1b:e9:5c:79:0e: 9d:b1:b3:84:c4:64:9b:48:e5:6e:93:22:2f:24:25: 3c:06:6f:40:db:33:10:ae:62:a6:f4:c0:4d:85:8d: 44:95:95:46:81:d5:4b:bf:55:ad:ff:77:de:61:6e: 1a:80:b1:7b:94:5c:c4:f2:4e:cc:82:ed:a2:2b:6b: 3d:70:f7:7a:06:29:77:6e:d6:d9:37:7d:4a:fa:65: 7f:f1:5b:33:de:57:f0:59:6f:2a:79:72:50:5a:fc: 3a:1d:b2:93:22:5f:cb:9c:10:71:14:08:94:4d:80: fe:19:5b:62:d1:24:b6:67:fa:b6:64:e1:2a:cc:8f: aa:da:a5:17:7a:1a:5f:3a:f2:0d:d8:0c:75:9c:04: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:40:67:AC:65:CB:BC:18:5D:2E:A3:EA:3E:92:F7:47:93:A8:0E:C5 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7a:9a:b9:a5:9d:3d:f8:19:da:e0:2a:28:32:0f:b3:0f:20: 30:8a:fd:fc:e8:62:f0:f0:d6:97:04:38:d0:e2:b8:ef:d8:8e: 1b:27:43:b8:6e:68:a0:4a:c6:a2:67:46:95:a9:bb:fb:ba:c1: 76:4f:72:58:4f:a5:18:04:da:cf:47:01:25:c5:c6:eb:ce:dc: 83:0d:22:69:0c:81:e3:2a:d8:b0:bd:a3:01:2b:74:13:21:5a: 5c:02:77:81:f1:c1:13:8d:f3:c6:72:16:c1:74:fb:13:af:d3: 08:ab:e6:c1:7d:42:cb:6a:ca:e5:36:09:ea:99:01:70:5d:8c: 83:85:9a:ea:f8:ad:6d:63:b5:b7:c8:e5:c0:a7:d2:4a:89:df: 36:d9:48:6f:7c:1e:03:77:57:0a:1d:f4:e5:cb:fb:89:c0:56: d4:a2:62:38:75:ac:46:3a:68:e4:7a:cc:f3:2c:b8:89:1b:bb: 2e:6d:04:e4:ec:aa:6d:b9:e7:c4:23:29:12:17:a8:d1:e3:9b: 35:82:5f:cf:96:0b:2d:da:e6:0b:c0:1d:13:93:f3:45:99:f2: 6c:58:9a:6c:35:ff:b2:76:c7:c6:7e:2c:f9:bb:88:2b:fb:21: 8f:9a:f9:0c:80:8e:21:95:ed:36:49:c4:d0:44:d0:0d:08:27: 2e:c0:1f:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOcQN9B3HPQ5llqouzdcmiwwiMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNjAzMDYxNzQ3MzJaFw0yNjAzMDkyMzAyMzJaMDMxMTAvBgNV BAMTKDY2NDA2N0FDNjVDQkJDMTg1RDJFQTNFQTNFOTJGNzQ3OTNBODBFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVqfLzSTfacRDk6N2vYIGStGt HSfZbeJuY1qbLiSJxMXm+8pJS4rN4U5fGdaOk6eCKzuTIFHh4WTvXGiUZ7ZwswuS WudJoDrHz1mnmNzAAkwN/a59upvVZxCIULdSlBYlZ0E+uBKMs9U6PBgnkVNOCCsb 6Vx5Dp2xs4TEZJtI5W6TIi8kJTwGb0DbMxCuYqb0wE2FjUSVlUaB1Uu/Va3/d95h bhqAsXuUXMTyTsyC7aIraz1w93oGKXdu1tk3fUr6ZX/xWzPeV/BZbyp5clBa/Dod spMiX8ucEHEUCJRNgP4ZW2LRJLZn+rZk4SrMj6rapRd6Gl868g3YDHWcBLB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZkBnrGXLvBhdLqPqPpL3R5OoDsUwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR6mrmlnT34GdrgKigyD7MPIDCK/fzoYvDw 1pcEONDiuO/YjhsnQ7huaKBKxqJnRpWpu/u6wXZPclhPpRgE2s9HASXFxuvO3IMN ImkMgeMq2LC9owErdBMhWlwCd4HxwRON88ZyFsF0+xOv0wir5sF9QstqyuU2CeqZ AXBdjIOFmur4rW1jtbfI5cCn0kqJ3zbZSG98HgN3Vwod9OXL+4nAVtSiYjh1rEY6 aOR6zPMsuIkbuy5tBOTsqm2558QjKRIXqNHjmzWCX8+WCy3a5gvAHROT80WZ8mxY mmw1/7J2x8Z+LPm7iCv7IY+a+QyAjiGV7TZJxNBE0A0IJy7AH1g= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:17 2026 by rpki-client