$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: hVE/TMzzo3KBiCeIXdIp4rhjrlVhk5uAnE3DtWmVLPA= Subject key identifier: B8:B1:EE:43:3C:20:15:DE:E6:91:B1:E0:0E:0E:37:4C:FA:D9:14:BB Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 4740067653E2258673EB281BA3D99E115E040CA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 0174 Signing time: Sun 01 Mar 2026 09:42:28 +0000 Manifest this update: Sun 01 Mar 2026 09:37:28 +0000 Manifest next update: Wed 04 Mar 2026 14:01:28 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: IKnDbrTBOTLhi14jtF2Dui8txW9VqERen9FtyiqMzG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:40:06:76:53:e2:25:86:73:eb:28:1b:a3:d9:9e:11:5e:04:0c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Mar 1 09:37:28 2026 GMT Not After : Mar 4 14:01:28 2026 GMT Subject: CN=B8B1EE433C2015DEE691B1E00E0E374CFAD914BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:c1:9d:fc:27:c2:f3:36:e5:71:3b:e4:34: 62:24:41:15:26:17:48:09:99:cc:a6:d1:4b:ac:e5: e1:7a:79:72:ae:a1:59:6b:08:37:42:80:6c:94:cb: 93:ed:92:57:00:13:32:06:fc:42:1a:69:d6:ce:54: b9:7a:55:96:b8:52:64:89:a5:7c:5c:23:7b:a8:19: 1f:59:54:33:70:a5:3c:a1:68:a0:2f:4f:ef:e8:e9: bb:da:8c:52:9f:f0:65:a4:52:54:a2:fa:2f:ac:7d: 4b:ce:e5:a7:3d:1b:04:d4:c7:a2:0e:03:92:69:95: c6:f7:85:e4:83:fd:56:c3:89:6a:d2:7e:40:11:6f: d0:9a:52:1a:b5:e7:53:cc:ff:85:4f:16:2f:b2:ac: 0e:2b:f4:32:85:00:7f:a3:a2:95:7a:29:8e:2e:47: 23:db:93:51:ff:5b:72:be:85:c5:7d:98:a6:a1:6b: d6:02:25:0d:9e:36:a7:81:c1:0e:32:7a:d3:0e:47: d6:c0:0d:d5:9f:c5:3b:80:be:6e:59:a8:de:2f:bc: f0:fc:89:95:3c:4f:7d:da:9b:9d:89:a9:45:38:a8: 7e:a0:20:8c:e3:38:61:2f:45:0c:0c:bb:88:e1:67: 7f:74:7b:4a:50:b6:05:16:cb:be:5c:23:15:02:5e: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:EE:43:3C:20:15:DE:E6:91:B1:E0:0E:0E:37:4C:FA:D9:14:BB X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4c:04:cb:fe:db:0f:d1:16:2b:d7:66:5f:53:76:8f:be:37: 41:5e:80:e3:76:7c:a5:c9:c2:29:9c:95:6f:4e:2e:d4:89:a7: 9a:8f:e4:4d:ca:dd:2a:60:37:0c:57:29:92:48:53:27:59:02: 63:ac:0d:30:75:d0:e1:f8:21:12:b6:3d:7d:8b:ce:52:df:9f: e9:dc:ef:20:d1:8f:65:49:80:64:b0:41:fb:a9:66:8f:a3:db: 55:e2:b5:ca:9f:fb:6f:34:3f:84:34:4c:04:91:e0:7a:55:01: 50:4b:db:03:2f:f1:3c:71:0f:92:5d:07:1e:33:66:30:11:e2: b9:fd:8c:43:94:b3:fc:af:55:56:b7:81:1c:85:6f:ca:bd:6c: 95:d4:4b:69:d3:fe:7a:d3:7d:4a:d0:4c:c0:25:46:f3:51:cc: 63:d8:74:d3:6d:01:a3:1c:a9:d0:04:d5:e9:0d:38:ea:cd:e6: a7:72:1f:63:0c:54:4b:0d:20:ca:67:81:7c:68:76:de:b4:73: f1:c1:a9:2a:5a:82:1a:7d:8e:02:5b:ca:cb:71:4a:54:5d:91: d0:74:e6:22:ad:6b:ba:68:02:b4:bb:c9:c6:08:09:3e:ce:cb: 53:ae:39:24:4a:e2:b6:fb:70:e4:5a:b4:60:df:8a:08:da:dc: 3b:b5:98:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0AGdlPiJYZz6ygbo9meEV4EDKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNjAzMDEwOTM3MjhaFw0yNjAzMDQxNDAxMjhaMDMxMTAvBgNV BAMTKEI4QjFFRTQzM0MyMDE1REVFNjkxQjFFMDBFMEUzNzRDRkFEOTE0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENMGd/CfC8zblcTvkNGIkQRUm F0gJmcym0Uus5eF6eXKuoVlrCDdCgGyUy5PtklcAEzIG/EIaadbOVLl6VZa4UmSJ pXxcI3uoGR9ZVDNwpTyhaKAvT+/o6bvajFKf8GWkUlSi+i+sfUvO5ac9GwTUx6IO A5Jplcb3heSD/VbDiWrSfkARb9CaUhq151PM/4VPFi+yrA4r9DKFAH+jopV6KY4u RyPbk1H/W3K+hcV9mKaha9YCJQ2eNqeBwQ4yetMOR9bADdWfxTuAvm5ZqN4vvPD8 iZU8T33am52JqUU4qH6gIIzjOGEvRQwMu4jhZ390e0pQtgUWy75cIxUCXsR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuLHuQzwgFd7mkbHgDg43TPrZFLswHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFMBMv+2w/RFivXZl9Tdo++N0FegON2fKXJ wimclW9OLtSJp5qP5E3K3SpgNwxXKZJIUydZAmOsDTB10OH4IRK2PX2LzlLfn+nc 7yDRj2VJgGSwQfupZo+j21Xitcqf+280P4Q0TASR4HpVAVBL2wMv8TxxD5JdBx4z ZjAR4rn9jEOUs/yvVVa3gRyFb8q9bJXUS2nT/nrTfUrQTMAlRvNRzGPYdNNtAaMc qdAE1ekNOOrN5qdyH2MMVEsNIMpngXxodt60c/HBqSpaghp9jgJbystxSlRdkdB0 5iKta7poArS7ycYICT7Oy1OuOSRK4rb7cORatGDfigja3Du1mOk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:36:12 2026 by rpki-client