$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: fLZDYxjVuzpEReU+rvsr4tsE7DNY7QAzFHVue2o+Tac= Subject key identifier: EB:35:7F:AD:1B:D7:B8:22:76:1E:2E:75:2D:0D:98:23:EB:63:4D:35 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 0BECA67F079C9B98AC4998634AAC5F2A8CEA564D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 013A Signing time: Mon 02 Mar 2026 06:32:36 +0000 Manifest this update: Mon 02 Mar 2026 06:27:36 +0000 Manifest next update: Thu 05 Mar 2026 13:09:36 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: Ce03cBKu63LjT9u05vkv8CxCjChzglzTt2jRxIzb4f0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ec:a6:7f:07:9c:9b:98:ac:49:98:63:4a:ac:5f:2a:8c:ea:56:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Mar 2 06:27:36 2026 GMT Not After : Mar 5 13:09:36 2026 GMT Subject: CN=EB357FAD1BD7B822761E2E752D0D9823EB634D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:13:16:cf:07:1c:88:5d:a8:6a:cf:e9:e9: a3:1c:aa:44:e1:9c:72:5d:0f:c8:2f:d4:2e:29:ed: 87:00:1c:aa:5f:0d:09:36:8e:b4:4a:b7:52:8d:f3: c1:14:0b:e4:c1:a5:e9:18:63:bb:02:04:35:5f:8b: 3a:51:d1:25:2c:d8:da:7c:6c:71:39:89:d8:9d:1f: 1d:c9:46:ed:55:0d:e7:3b:95:80:7f:40:27:8f:81: 36:b4:76:3b:33:21:26:ef:a9:99:db:ab:26:43:55: 5d:cd:67:64:df:fb:88:f1:5a:2b:81:45:28:7d:6d: 4f:2d:d9:24:00:83:76:4f:0b:d4:d6:41:f0:82:a9: 2a:92:6c:30:3a:b5:ab:da:f0:f4:b2:d7:0e:77:db: a8:f0:c5:71:56:75:82:02:d1:ed:69:27:ed:ac:f5: 46:48:16:45:99:3d:23:db:3c:05:10:1b:0c:7c:e0: 7b:3c:60:bf:3a:97:4d:0c:77:be:65:e8:7d:7f:6f: a7:2d:2a:a1:dc:5a:ca:fb:4e:11:c6:ae:1b:6d:1b: 3f:ec:18:a3:d8:97:cd:5d:3a:c2:4c:10:b2:22:e9: d4:79:6d:53:ec:a8:d5:4b:d2:a0:26:23:ba:ce:a8: 22:cf:93:ab:74:5d:a2:83:1f:3c:90:c6:a4:fc:a2: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:7F:AD:1B:D7:B8:22:76:1E:2E:75:2D:0D:98:23:EB:63:4D:35 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:76:0b:02:7e:69:95:51:ca:6a:ad:eb:16:59:c3:10:b4:00: f7:af:29:44:c0:cf:ca:9f:81:96:fb:5e:00:a9:bc:69:63:b7: ca:7c:42:2e:14:2e:70:22:3c:0a:dc:82:7a:b3:14:2f:be:5a: ad:db:2f:8b:ea:30:43:70:88:49:59:03:b6:cb:0e:cb:b6:ba: 93:ba:46:d8:a6:d8:8b:f3:a8:7f:67:7b:42:c0:ea:da:82:3a: b3:71:bc:90:5c:af:15:79:49:90:ee:be:40:db:d0:b1:6c:b7: 72:46:46:b4:5b:51:5c:aa:16:fd:f3:62:0f:10:b1:97:c3:7e: 19:16:35:a0:e1:59:8c:ea:13:88:85:45:aa:6b:ee:1a:2e:c2: 66:b4:ed:da:da:67:6c:a2:60:63:ae:a9:a6:10:30:c4:cd:e9: cf:85:ca:a3:22:1b:fa:8a:d1:1d:b6:52:83:02:c0:a9:d8:3d: 61:72:1b:c2:ae:6e:0e:a8:9c:a3:78:67:00:85:df:53:e0:01: 0c:49:d4:a5:63:c3:20:d7:1b:f7:b5:78:b7:35:54:48:a8:fb: c2:cf:3a:e9:b4:11:9c:9c:be:0f:d7:9b:be:8d:b2:3d:6d:8e: e5:23:bd:60:b7:67:b5:c9:03:ca:d6:61:6b:34:07:a8:f5:67: ef:06:3e:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+ymfwecm5isSZhjSqxfKozqVk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNjAzMDIwNjI3MzZaFw0yNjAzMDUxMzA5MzZaMDMxMTAvBgNV BAMTKEVCMzU3RkFEMUJEN0I4MjI3NjFFMkU3NTJEMEQ5ODIzRUI2MzREMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7whMWzwcciF2oas/p6aMcqkTh nHJdD8gv1C4p7YcAHKpfDQk2jrRKt1KN88EUC+TBpekYY7sCBDVfizpR0SUs2Np8 bHE5ididHx3JRu1VDec7lYB/QCePgTa0djszISbvqZnbqyZDVV3NZ2Tf+4jxWiuB RSh9bU8t2SQAg3ZPC9TWQfCCqSqSbDA6tava8PSy1w5326jwxXFWdYIC0e1pJ+2s 9UZIFkWZPSPbPAUQGwx84Hs8YL86l00Md75l6H1/b6ctKqHcWsr7ThHGrhttGz/s GKPYl81dOsJMELIi6dR5bVPsqNVL0qAmI7rOqCLPk6t0XaKDHzyQxqT8ojWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6zV/rRvXuCJ2Hi51LQ2YI+tjTTUwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH92CwJ+aZVRymqt6xZZwxC0APevKUTAz8qf gZb7XgCpvGljt8p8Qi4ULnAiPArcgnqzFC++Wq3bL4vqMENwiElZA7bLDsu2upO6 Rtim2IvzqH9ne0LA6tqCOrNxvJBcrxV5SZDuvkDb0LFst3JGRrRbUVyqFv3zYg8Q sZfDfhkWNaDhWYzqE4iFRapr7houwma07draZ2yiYGOuqaYQMMTN6c+FyqMiG/qK 0R22UoMCwKnYPWFyG8Kubg6onKN4ZwCF31PgAQxJ1KVjwyDXG/e1eLc1VEio+8LP Oum0EZycvg/Xm76Nsj1tjuUjvWC3Z7XJA8rWYWs0B6j1Z+8GPr4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:28 2026 by rpki-client