$ rpki-client -vvf repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft File: E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft (raw, json) Hash identifier: 43RnTJOJojBSSK0hpoVlevn2gTIJ1epup7rqHvqsUJ8= Subject key identifier: 8E:CF:3D:84:4D:14:1F:E9:34:2F:2A:DD:19:4F:F3:88:47:99:3A:4A Authority key identifier: E9:DF:36:C3:9D:2A:9C:B3:B5:EE:9B:37:23:4A:45:A0:D2:E0:D5:9E Certificate issuer: /CN=E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E Certificate serial: 352FFE172E4DBC313211E3A4F371B42BCDCEE3C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft Manifest number: 03 Signing time: Sun 01 Mar 2026 22:11:49 +0000 Manifest this update: Sun 01 Mar 2026 22:06:49 +0000 Manifest next update: Thu 05 Mar 2026 06:39:49 +0000 Files and hashes: 1: E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl (hash: QcoDv7WKv6tT7h6uhxLs3qiFyjndh1PaD82DO2t1RbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2f:fe:17:2e:4d:bc:31:32:11:e3:a4:f3:71:b4:2b:cd:ce:e3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E Validity Not Before: Mar 1 22:06:49 2026 GMT Not After : Mar 5 06:39:49 2026 GMT Subject: CN=8ECF3D844D141FE9342F2ADD194FF38847993A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:06:e2:66:52:55:05:1f:be:12:ff:0d:c3: c3:62:fb:21:1f:5e:9b:86:1e:3f:8a:b8:59:2b:e5: c1:5f:74:06:e5:8e:bc:b3:30:54:7b:4f:4f:d2:ef: 58:26:59:10:3b:18:b2:7b:84:ea:94:7f:bd:0c:c1: 1d:02:ba:55:df:c4:fe:ee:f5:7f:d8:86:0d:9a:e4: 60:02:ad:50:5e:47:ea:3d:5a:88:07:b4:80:f4:c2: dc:1c:a9:c1:0e:72:bc:05:d4:47:c9:82:2a:03:2c: 6b:8e:af:56:f1:1e:04:97:ec:47:63:bf:4a:6c:a8: 75:28:be:92:41:a9:62:60:8c:17:2c:66:5d:fa:78: d4:fd:54:2f:b9:ca:4b:a6:0b:27:1b:aa:19:65:2b: 57:c3:26:d4:6a:23:16:37:e8:31:ee:76:c2:62:fd: fe:5b:9c:b3:81:f3:32:b3:90:c8:48:6a:c5:48:27: 55:87:be:0c:9b:65:8e:a7:8f:00:24:77:66:0c:93: 14:46:83:8a:7b:88:8a:20:d3:4a:06:d7:5d:d7:11: 38:e6:35:a5:90:41:b9:d4:a7:e2:d3:97:52:b4:44: 09:9c:8b:43:8f:53:d9:3b:97:66:5b:74:a6:41:63: ce:a1:2e:ee:20:23:c1:ed:6f:05:44:a9:52:ca:a3: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CF:3D:84:4D:14:1F:E9:34:2F:2A:DD:19:4F:F3:88:47:99:3A:4A X509v3 Authority Key Identifier: keyid:E9:DF:36:C3:9D:2A:9C:B3:B5:EE:9B:37:23:4A:45:A0:D2:E0:D5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/E9DF36C39D2A9CB3B5EE9B37234A45A0D2E0D59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:9a:9f:b3:b6:45:d2:8d:3a:74:8b:1a:9d:21:99:1d:14: 2b:f2:58:f4:6d:a9:bb:0f:88:16:9e:94:38:12:75:b9:0b:18: 40:40:76:10:ee:97:d8:bf:9b:b1:87:e5:97:3a:2d:8a:ee:fe: 51:c9:23:0d:d3:e7:2d:eb:d1:05:6d:04:3a:2e:de:2d:b0:02: f0:17:fe:3f:0b:56:60:53:cd:9c:2a:41:19:ca:5f:9a:72:c3: 1f:15:76:5d:55:5d:3d:63:10:37:5f:24:43:bc:58:e5:c9:ae: 1b:58:30:67:cb:06:88:f5:4d:9b:42:55:9f:f9:9c:2b:f5:54: 6c:97:93:26:ea:48:6f:e8:f4:97:cc:b9:ae:62:5c:6b:6b:f2: fb:22:34:43:23:e4:70:5f:2e:98:92:bb:92:99:9e:47:21:ae: d9:84:0c:49:1b:de:de:16:72:56:86:b3:1a:82:d2:20:c0:f5: e2:17:9d:d1:e5:d3:27:b9:f9:0d:57:ea:14:17:b9:27:1f:79: ac:53:f5:28:47:d7:42:c5:c9:cd:e3:33:2f:46:db:e0:dd:02: c8:83:41:82:26:36:34:c4:57:ff:b4:5c:38:99:6f:7a:f2:1c: e8:18:96:4d:3f:b8:39:49:ef:32:b1:1f:fb:55:e5:7d:5b:4b: 44:3f:e2:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNS/+Fy5NvDEyEeOk83G0K83O48kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1QTBE MkUwRDU5RTAeFw0yNjAzMDEyMjA2NDlaFw0yNjAzMDUwNjM5NDlaMDMxMTAvBgNV BAMTKDhFQ0YzRDg0NEQxNDFGRTkzNDJGMkFERDE5NEZGMzg4NDc5OTNBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDekQbiZlJVBR++Ev8Nw8Ni+yEf XpuGHj+KuFkr5cFfdAbljryzMFR7T0/S71gmWRA7GLJ7hOqUf70MwR0CulXfxP7u 9X/Yhg2a5GACrVBeR+o9WogHtID0wtwcqcEOcrwF1EfJgioDLGuOr1bxHgSX7Edj v0psqHUovpJBqWJgjBcsZl36eNT9VC+5ykumCycbqhllK1fDJtRqIxY36DHudsJi /f5bnLOB8zKzkMhIasVIJ1WHvgybZY6njwAkd2YMkxRGg4p7iIog00oG113XETjm NaWQQbnUp+LTl1K0RAmci0OPU9k7l2ZbdKZBY86hLu4gI8HtbwVEqVLKo4dxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjs89hE0UH+k0LyrdGU/ziEeZOkowHwYDVR0j BBgwFoAU6d82w50qnLO17ps3I0pFoNLg1Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMC9FOURGMzZDMzlE MkE5Q0IzQjVFRTlCMzcyMzRBNDVBMEQyRTBENTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1QTBEMkUw RDU5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzAvRTlERjM2QzM5RDJBOUNCM0I1RUU5QjM3MjM0QTQ1 QTBEMkUwRDU5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaXmp+ztkXSjTp0ixqdIZkdFCvyWPRtqbsP iBaelDgSdbkLGEBAdhDul9i/m7GH5Zc6LYru/lHJIw3T5y3r0QVtBDou3i2wAvAX /j8LVmBTzZwqQRnKX5pywx8Vdl1VXT1jEDdfJEO8WOXJrhtYMGfLBoj1TZtCVZ/5 nCv1VGyXkybqSG/o9JfMua5iXGtr8vsiNEMj5HBfLpiSu5KZnkchrtmEDEkb3t4W claGsxqC0iDA9eIXndHl0ye5+Q1X6hQXuScfeaxT9ShH10LFyc3jMy9G2+DdAsiD QYImNjTEV/+0XDiZb3ryHOgYlk0/uDlJ7zKxH/tV5X1bS0Q/4p4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:22:01 2026 by rpki-client