$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: qywOYtQFia2TrlQOk10oW79TJaGZXuRYgSGXlV2GMNA= Subject key identifier: D5:09:CA:2D:39:82:23:73:61:A6:92:F4:89:86:C3:F6:50:D5:17:42 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 216F200B33BBF3F5B39319F88F2AEF2F1B3B502C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 0233 Signing time: Fri 17 Apr 2026 20:12:11 +0000 Manifest this update: Fri 17 Apr 2026 20:07:11 +0000 Manifest next update: Mon 20 Apr 2026 20:52:11 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: 7RZtwP5oZfUkQZS4EkWT8vLCWsMzt3O0TaYHl45TPVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6f:20:0b:33:bb:f3:f5:b3:93:19:f8:8f:2a:ef:2f:1b:3b:50:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Apr 17 20:07:11 2026 GMT Not After : Apr 20 20:52:11 2026 GMT Subject: CN=D509CA2D3982237361A692F48986C3F650D51742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:e5:f7:0a:c1:ee:07:36:d9:13:a7:e3:38: 88:71:5f:39:2e:3b:4f:ca:7a:68:ce:d1:7f:0e:5e: 9c:62:48:29:11:51:b1:a6:2c:a4:ea:c0:cf:a8:8c: ad:de:ca:e1:f4:37:53:4e:0a:29:df:1c:39:e9:ad: 9a:0d:1f:bc:b7:4f:71:15:bf:6d:6a:dd:ce:61:3c: a7:66:63:94:75:b5:73:e9:c1:41:be:87:41:3b:2b: 59:f7:4d:ad:c1:06:e9:49:1e:06:c8:30:cd:19:40: ec:9c:a4:08:fe:d4:fd:a9:a9:e3:d5:c1:8c:33:74: 34:a9:94:42:d1:0c:77:be:32:8b:a1:6d:f5:ab:20: af:e5:25:f7:4d:4c:21:70:1e:dd:64:2e:a5:19:bd: 03:99:a2:0d:6c:fc:27:fd:99:99:97:15:f4:b8:c9: 0a:22:aa:8c:d7:bc:e7:87:87:10:ce:6d:3b:d5:30: 64:e6:3d:f9:e9:2b:0c:b0:a8:46:c3:95:ee:31:4e: fd:7c:12:16:df:26:cb:5b:a9:9f:a0:2f:fb:91:fd: 25:d8:c1:5d:99:34:b6:0f:fa:a1:aa:08:e3:38:45: 5f:73:99:94:2d:2e:0f:88:52:fd:6e:8c:45:53:23: 5c:9e:43:a0:65:28:71:7a:3a:f8:0d:51:73:d6:0e: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:09:CA:2D:39:82:23:73:61:A6:92:F4:89:86:C3:F6:50:D5:17:42 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:65:c6:de:44:d5:12:8f:3f:57:e5:3f:80:85:86:ef:27:83: bd:18:40:3e:78:53:51:97:8c:35:bd:a3:a3:c7:ae:27:04:93: bf:eb:69:e9:25:00:bd:23:01:58:f5:9a:cc:78:ff:92:68:f5: 88:c9:f9:7e:ca:8a:8e:0a:cb:c7:fd:77:7c:de:1b:8f:ba:22: ac:cb:5d:05:a4:d1:71:2b:2f:cf:73:bb:c2:7a:d4:ea:4f:01: 45:67:a7:7b:a9:a2:10:2f:e6:3c:3b:6b:84:3b:06:d8:a4:de: 8b:29:a9:55:dc:90:04:9f:73:ff:4d:4b:89:3e:50:c8:f8:0d: 3c:64:07:96:e2:d9:d0:18:5e:32:3d:81:4a:54:c3:b6:81:1a: 89:7f:e7:12:c0:82:75:1a:8e:36:39:1d:04:af:34:00:21:88: 65:a0:c4:3f:f7:bc:77:c1:6d:27:f7:e7:89:67:8e:4b:5a:3f: b1:7f:19:bb:66:27:67:26:b9:d2:14:1a:ca:6f:82:68:c6:4f: b0:59:29:fe:ba:0d:35:b5:7f:d1:c0:8e:85:de:d6:b0:8a:db: d1:ce:8f:39:e4:d9:bb:1e:f8:13:c7:b9:ac:04:e9:e3:4b:66: 42:8d:86:57:4e:69:44:54:c5:3c:b5:35:88:c6:99:fe:af:99: 47:56:ce:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIW8gCzO78/Wzkxn4jyrvLxs7UCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNjA0MTcyMDA3MTFaFw0yNjA0MjAyMDUyMTFaMDMxMTAvBgNV BAMTKEQ1MDlDQTJEMzk4MjIzNzM2MUE2OTJGNDg5ODZDM0Y2NTBENTE3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3OX3CsHuBzbZE6fjOIhxXzku O0/KemjO0X8OXpxiSCkRUbGmLKTqwM+ojK3eyuH0N1NOCinfHDnprZoNH7y3T3EV v21q3c5hPKdmY5R1tXPpwUG+h0E7K1n3Ta3BBulJHgbIMM0ZQOycpAj+1P2pqePV wYwzdDSplELRDHe+MouhbfWrIK/lJfdNTCFwHt1kLqUZvQOZog1s/Cf9mZmXFfS4 yQoiqozXvOeHhxDObTvVMGTmPfnpKwywqEbDle4xTv18EhbfJstbqZ+gL/uR/SXY wV2ZNLYP+qGqCOM4RV9zmZQtLg+IUv1ujEVTI1yeQ6BlKHF6OvgNUXPWDl65AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1QnKLTmCI3NhppL0iYbD9lDVF0IwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVlxt5E1RKPP1flP4CFhu8ng70YQD54U1GX jDW9o6PHricEk7/raeklAL0jAVj1msx4/5Jo9YjJ+X7Kio4Ky8f9d3zeG4+6IqzL XQWk0XErL89zu8J61OpPAUVnp3upohAv5jw7a4Q7Btik3ospqVXckASfc/9NS4k+ UMj4DTxkB5bi2dAYXjI9gUpUw7aBGol/5xLAgnUajjY5HQSvNAAhiGWgxD/3vHfB bSf354lnjktaP7F/GbtmJ2cmudIUGspvgmjGT7BZKf66DTW1f9HAjoXe1rCK29HO jznk2bse+BPHuawE6eNLZkKNhldOaURUxTy1NYjGmf6vmUdWzsI= -----END CERTIFICATE-----Generated at Sun Apr 19 11:32:06 2026 by rpki-client