$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft File: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft (raw, json) Hash identifier: KVoFTX5HeldnyuGut8T98DQjtVv8QmFN2OpV0HTu/74= Subject key identifier: 01:FA:F7:FA:9C:B0:B2:5D:50:19:9A:D7:78:4E:F7:9F:13:0D:23:62 Authority key identifier: 9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 Certificate issuer: /CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Certificate serial: 274BD633CFC22C4CD3B65CD8A6D7781CD76B4C43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft Manifest number: 1B Signing time: Fri 17 Apr 2026 13:02:13 +0000 Manifest this update: Fri 17 Apr 2026 12:57:13 +0000 Manifest next update: Mon 20 Apr 2026 16:35:13 +0000 Files and hashes: 1: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl (hash: gg2wdq5MtHSLRcUIdTeHRZG/T/65aOwmtTSzx4LfFCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4b:d6:33:cf:c2:2c:4c:d3:b6:5c:d8:a6:d7:78:1c:d7:6b:4c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Validity Not Before: Apr 17 12:57:13 2026 GMT Not After : Apr 20 16:35:13 2026 GMT Subject: CN=01FAF7FA9CB0B25D50199AD7784EF79F130D2362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:57:d7:e8:99:c2:c6:ff:17:7a:a5:83:26: 5c:42:fa:61:9d:cc:4d:34:19:33:4f:56:34:9f:0a: 7a:38:ce:a0:83:b2:94:84:e5:af:69:25:8d:24:e7: ec:e2:b6:7e:16:93:9f:a4:08:ec:66:1e:14:8c:96: 91:7d:b4:1e:c5:1d:d1:b7:2a:9b:ae:07:e4:11:64: 40:94:f7:25:3e:db:b7:ff:da:b8:a4:32:7f:19:5b: 36:cb:18:a0:69:39:79:3f:e7:84:1a:c4:6d:19:6a: 63:9a:db:37:53:bb:fc:59:8d:3e:c0:2b:05:a4:47: 9a:94:12:05:1c:26:77:9b:4f:e9:6e:8b:a7:24:d9: 44:34:73:4a:82:02:2a:24:88:86:e0:c3:b2:5e:bf: 55:24:14:11:0c:af:66:3e:ab:17:29:33:98:9f:a9: c2:52:cd:a2:91:f0:70:90:fa:c9:1f:7f:bf:e5:7f: c8:28:68:65:5a:de:00:1c:b5:32:8b:43:0f:24:4d: 27:01:e0:e2:68:89:b6:18:df:46:8c:96:90:31:cb: f3:5e:79:97:8b:0f:7c:18:3f:a5:9d:3c:ac:38:a6: d0:7f:24:8f:fb:08:ac:d1:80:b6:b7:da:ea:ff:32: c8:ab:5b:26:25:e5:59:55:e1:e9:cb:4a:5a:a5:97: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:F7:FA:9C:B0:B2:5D:50:19:9A:D7:78:4E:F7:9F:13:0D:23:62 X509v3 Authority Key Identifier: keyid:9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:11:59:f1:96:c6:2b:e6:f0:a4:66:4b:f6:ce:af:82:2b:9f: 0d:3d:75:11:1d:8f:9f:33:8e:9f:4f:04:9b:73:bf:61:fe:c7: 93:98:af:33:2a:81:00:6c:e6:27:5e:a8:90:69:de:21:99:f4: dd:ba:38:37:81:62:14:c9:e1:8c:2a:4e:bb:12:14:ca:67:c2: ca:f3:bc:c5:1d:d3:93:d0:16:d8:d7:9f:1a:d1:23:6b:ff:5f: f1:88:52:44:ca:0c:b6:80:0f:41:d8:91:7d:43:c5:14:a9:9f: 2f:51:22:ba:55:d5:93:d3:e2:ba:9d:c6:e9:16:44:b5:50:b0: be:7b:e2:7b:44:76:df:cb:e3:fc:a0:b6:df:1c:d5:cb:3d:89: 96:8a:33:62:58:0f:78:d4:96:05:f2:7c:29:d9:bc:e5:86:43: 2c:85:dc:7f:4b:1e:d3:99:5a:b4:f8:bf:6a:89:96:5e:ea:bb: db:b6:b5:b5:38:48:39:35:64:af:4e:ec:da:90:52:b0:b9:16: 58:0e:97:c7:1b:65:dc:91:ba:fd:69:28:65:1d:8a:da:fb:c3: 1d:3b:30:e8:2e:a4:e9:93:59:e9:34:6c:c2:f9:06:b5:45:a3: 24:44:2a:b6:bd:97:96:80:f7:7f:16:ae:17:17:31:72:0e:cb: 1a:0a:f4:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0vWM8/CLEzTtlzYptd4HNdrTEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4MUQz MTNCODgzNjAeFw0yNjA0MTcxMjU3MTNaFw0yNjA0MjAxNjM1MTNaMDMxMTAvBgNV BAMTKDAxRkFGN0ZBOUNCMEIyNUQ1MDE5OUFENzc4NEVGNzlGMTMwRDIzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoVfX6JnCxv8XeqWDJlxC+mGd zE00GTNPVjSfCno4zqCDspSE5a9pJY0k5+zitn4Wk5+kCOxmHhSMlpF9tB7FHdG3 KpuuB+QRZECU9yU+27f/2rikMn8ZWzbLGKBpOXk/54QaxG0ZamOa2zdTu/xZjT7A KwWkR5qUEgUcJnebT+lui6ck2UQ0c0qCAiokiIbgw7Jev1UkFBEMr2Y+qxcpM5if qcJSzaKR8HCQ+skff7/lf8goaGVa3gActTKLQw8kTScB4OJoibYY30aMlpAxy/Ne eZeLD3wYP6WdPKw4ptB/JI/7CKzRgLa32ur/MsirWyYl5VlV4enLSlqll9InAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfr3+pywsl1QGZrXeE73nxMNI2IwHwYDVR0j BBgwFoAUn7HFDRNSasPbRzKC5b7IHTE7iDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMS85RkIxQzUwRDEz NTI2QUMzREI0NzMyODJFNUJFQzgxRDMxM0I4ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4MUQzMTNC ODgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvOUZCMUM1MEQxMzUyNkFDM0RCNDczMjgyRTVCRUM4 MUQzMTNCODgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoRWfGWxivm8KRmS/bOr4Irnw09dREdj58z jp9PBJtzv2H+x5OYrzMqgQBs5ideqJBp3iGZ9N26ODeBYhTJ4YwqTrsSFMpnwsrz vMUd05PQFtjXnxrRI2v/X/GIUkTKDLaAD0HYkX1DxRSpny9RIrpV1ZPT4rqdxukW RLVQsL574ntEdt/L4/ygtt8c1cs9iZaKM2JYD3jUlgXyfCnZvOWGQyyF3H9LHtOZ WrT4v2qJll7qu9u2tbU4SDk1ZK9O7NqQUrC5FlgOl8cbZdyRuv1pKGUditr7wx07 MOgupOmTWek0bML5BrVFoyREKra9l5aA938WrhcXMXIOyxoK9EU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:59:12 2026 by rpki-client