$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft File: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft (raw, json) Hash identifier: zNjdMvhMUr+lvNMPUuBqWvAbZ1+lDY/iwWSjmI+T9q8= Subject key identifier: C0:CC:01:72:D5:AA:B0:C7:8A:B2:3E:BB:C1:0F:81:73:39:7E:E2:58 Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD Certificate issuer: /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Certificate serial: 3D34D03D233ADA0B58E0C6CC32841EFE7BBBFC34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft Manifest number: 0121 Signing time: Thu 05 Mar 2026 22:52:23 +0000 Manifest this update: Thu 05 Mar 2026 22:47:23 +0000 Manifest next update: Mon 09 Mar 2026 09:01:23 +0000 Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: yzGdWGx0/LyfGs3EaQckTyBR5cGJiuvQbeLsUkZKPDA=) 2: F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl (hash: QHy5wEZv9ZXQeD8dquGSqtNKqe1D8qcJzFQTCSS50Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:34:d0:3d:23:3a:da:0b:58:e0:c6:cc:32:84:1e:fe:7b:bb:fc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD Validity Not Before: Mar 5 22:47:23 2026 GMT Not After : Mar 9 09:01:23 2026 GMT Subject: CN=C0CC0172D5AAB0C78AB23EBBC10F8173397EE258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:06:67:e5:da:f8:bf:66:cb:9d:ee:58:96: 88:d0:7b:98:05:55:d7:55:36:ba:50:58:14:0b:dc: 8c:5b:04:d6:7d:35:6b:84:62:c1:0a:99:d9:dc:0d: f8:a3:76:fd:cf:e7:71:da:ca:73:bf:32:57:0b:77: e4:91:a3:cc:98:f9:7a:22:ad:5d:d7:f0:02:52:12: 25:2a:7d:53:b9:89:20:a2:60:b6:88:82:a1:e5:fa: c9:ef:32:fe:5b:ef:6f:e1:74:14:19:5b:37:10:2a: 31:7a:4f:1d:a3:1a:63:42:50:5b:91:ca:6b:a5:13: d8:50:c3:8d:ed:3d:d6:65:68:cc:d8:5a:7a:97:d5: 38:2a:aa:1e:90:6b:9f:85:da:e0:03:a0:3f:ee:d2: 5a:bd:5d:5c:7f:91:e4:a7:be:6b:06:ed:b6:a7:f6: 6b:10:a4:f3:dc:03:22:ef:16:d6:11:3f:e3:a0:40: 2a:60:07:b5:35:91:ec:5d:65:d1:73:5b:5a:c0:c3: bd:c3:56:95:71:8c:3b:80:8c:22:a6:c7:00:3b:9f: 4d:50:e7:1c:4e:ac:82:f3:57:3e:10:f6:73:ba:c3: eb:44:15:7b:ac:8c:53:c2:5a:e7:00:51:29:4d:f4: fa:57:a0:71:56:c3:02:7c:4c:ce:43:99:e6:9f:fb: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CC:01:72:D5:AA:B0:C7:8A:B2:3E:BB:C1:0F:81:73:39:7E:E2:58 X509v3 Authority Key Identifier: keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cc:10:da:e1:67:37:0d:1c:40:c4:98:18:2f:10:af:45:84: fb:26:bd:f0:b3:40:bf:be:7a:7a:86:b0:62:b6:63:ef:f9:9e: 90:fd:10:09:3f:b3:2d:2e:72:4c:f6:63:d8:78:2f:f8:c9:2c: 5b:e2:44:19:a8:ed:9f:16:cb:ba:ce:64:5a:e6:71:91:09:50: c8:2f:b6:16:c3:a6:4f:b1:d5:49:86:97:3f:f2:f1:75:d1:58: f9:35:98:37:9f:57:e9:33:ee:00:c2:5a:ee:a8:6c:88:6c:d0: 6a:20:0d:dc:bb:18:52:c2:5b:2c:42:4b:3c:1f:2a:1f:70:da: 9a:4c:bd:b0:c9:32:63:e9:66:2d:e1:2f:d7:65:df:71:9d:f0: eb:7e:c0:12:70:a2:8d:3d:6f:e5:2a:63:95:1a:26:55:b8:fb: b6:a6:9d:1b:6a:5d:fb:7b:12:68:24:aa:f1:31:3a:00:0a:c3: 09:f3:f0:0a:c1:5a:b5:21:05:6c:69:56:96:02:1a:c6:1e:4e: 9f:7d:0b:0a:00:d2:67:13:0a:33:03:bd:ec:e2:ed:f1:ca:b6: 07:f4:cd:27:0f:fc:ef:20:20:eb:0d:62:91:39:ef:a3:11:3c: 32:c9:a1:00:1e:4d:5c:87:b6:63:4b:fb:2f:21:31:6f:b5:fd: f0:c9:25:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTTQPSM62gtY4MbMMoQe/nu7/DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC N0VDRTdCRDAeFw0yNjAzMDUyMjQ3MjNaFw0yNjAzMDkwOTAxMjNaMDMxMTAvBgNV BAMTKEMwQ0MwMTcyRDVBQUIwQzc4QUIyM0VCQkMxMEY4MTczMzk3RUUyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30wZn5dr4v2bLne5YlojQe5gF VddVNrpQWBQL3IxbBNZ9NWuEYsEKmdncDfijdv3P53HaynO/MlcLd+SRo8yY+Xoi rV3X8AJSEiUqfVO5iSCiYLaIgqHl+snvMv5b72/hdBQZWzcQKjF6Tx2jGmNCUFuR ymulE9hQw43tPdZlaMzYWnqX1Tgqqh6Qa5+F2uADoD/u0lq9XVx/keSnvmsG7ban 9msQpPPcAyLvFtYRP+OgQCpgB7U1kexdZdFzW1rAw73DVpVxjDuAjCKmxwA7n01Q 5xxOrILzVz4Q9nO6w+tEFXusjFPCWucAUSlN9PpXoHFWwwJ8TM5Dmeaf+4hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMwBctWqsMeKsj67wQ+Bczl+4lgwHwYDVR0j BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD RTdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3 QTBCN0VDRTdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDMENrhZzcNHEDEmBgvEK9FhPsmvfCzQL++ enqGsGK2Y+/5npD9EAk/sy0uckz2Y9h4L/jJLFviRBmo7Z8Wy7rOZFrmcZEJUMgv thbDpk+x1UmGlz/y8XXRWPk1mDefV+kz7gDCWu6obIhs0GogDdy7GFLCWyxCSzwf Kh9w2ppMvbDJMmPpZi3hL9dl33Gd8Ot+wBJwoo09b+UqY5UaJlW4+7amnRtqXft7 EmgkqvExOgAKwwnz8ArBWrUhBWxpVpYCGsYeTp99CwoA0mcTCjMDvezi7fHKtgf0 zScP/O8gIOsNYpE576MRPDLJoQAeTVyHtmNL+y8hMW+1/fDJJYQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:19 2026 by rpki-client