$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: a1uEBe17lYWgNbejQ7E40Gd175hCQiWEuHwJ0fbqjgc= Subject key identifier: CE:6E:1F:9C:6C:48:A9:EF:04:A9:02:A6:21:F7:8A:0C:FF:D6:AA:16 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 696A213EA881EFF0F10FF2BA9C1157338C071BF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 023D Signing time: Sun 01 Mar 2026 19:02:19 +0000 Manifest this update: Sun 01 Mar 2026 18:57:19 +0000 Manifest next update: Thu 05 Mar 2026 05:29:19 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: 5I0chKwWkMCPwD8yTYUAmXg9KZGqZJ+CQsK9w9FkIuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6a:21:3e:a8:81:ef:f0:f1:0f:f2:ba:9c:11:57:33:8c:07:1b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Mar 1 18:57:19 2026 GMT Not After : Mar 5 05:29:19 2026 GMT Subject: CN=CE6E1F9C6C48A9EF04A902A621F78A0CFFD6AA16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:19:fc:84:1b:78:c2:9a:f4:c9:d7:5c:32: 18:0a:47:e6:99:ca:1a:70:d1:b7:77:45:7f:b5:16: 7f:58:7d:de:1a:52:6b:0f:57:6d:4a:56:18:36:20: 1d:01:16:46:88:d9:80:ae:df:15:5a:0a:e9:7a:f5: 8c:e5:09:c0:e2:36:12:c2:10:62:07:74:44:05:aa: 8c:32:56:cc:c2:b9:92:a5:d7:9d:f5:28:b8:f9:41: c8:cb:b4:da:6f:53:e8:7c:73:ca:63:fd:32:71:fe: 44:27:24:31:6c:2c:57:8e:cb:a3:12:69:15:f7:f7: 8e:eb:6b:5d:92:74:5d:ec:57:4f:45:1d:08:20:81: 53:73:2c:c0:4d:48:71:72:6f:d3:d1:c0:0e:c1:6f: 07:9c:52:76:01:ce:77:37:70:b9:b6:45:10:8b:de: 41:50:b0:60:44:2f:8b:ec:07:d1:a4:b2:18:34:a3: 5f:9a:6d:fc:46:69:0f:63:43:ca:bf:97:73:16:78: 8a:08:ea:8d:f2:13:72:a0:46:45:6e:3c:ec:63:7b: 0d:8b:de:f3:1a:49:74:19:44:0e:2e:60:c0:0e:15: c8:38:34:bd:81:37:59:df:72:47:ca:68:9e:8d:ca: 6a:1e:23:77:da:9e:c0:dd:95:a3:1f:7c:6e:b1:7d: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6E:1F:9C:6C:48:A9:EF:04:A9:02:A6:21:F7:8A:0C:FF:D6:AA:16 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:a6:b9:bb:18:0e:60:98:73:49:e3:0d:ba:4c:ff:46:e2: da:ef:7d:6e:a1:7c:ab:05:b2:8f:1c:f4:f3:47:b5:16:c8:c8: e5:e4:fb:a5:13:01:5f:9a:0d:21:a9:47:44:3a:f4:42:b8:6b: aa:49:74:f5:cb:39:92:26:45:39:30:44:e3:16:4f:54:64:75: 58:07:3c:47:1d:5f:96:53:9b:a0:2f:cc:09:d1:c6:e5:a9:9b: 7f:3f:34:35:f1:ac:80:78:ca:16:87:60:12:3b:1d:c9:a8:17: fa:f3:5c:31:88:5a:f6:3b:30:35:a0:eb:b6:a0:b8:02:90:e7: 08:3a:11:c7:2e:a7:97:e4:a4:e7:79:87:27:5f:2b:c4:50:65: 2c:53:07:e8:03:ee:15:ad:ad:ed:41:0f:d6:e8:bd:4a:2f:4c: 64:cf:74:6e:c0:7c:34:b0:00:b6:8e:5f:5f:7a:13:27:c6:75: dc:bc:b9:dc:21:9a:0d:bb:cc:a9:ee:20:6a:4d:a3:a5:49:da: 46:a6:19:71:cf:78:0d:09:ff:68:e3:33:22:1a:3c:f8:28:4b: 22:54:dc:41:46:62:e6:92:57:5c:2e:46:1d:49:db:0f:e4:81: 84:57:48:7e:b3:81:09:1f:f5:ff:ce:a4:95:9a:b6:c6:f8:eb: c0:0b:40:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWohPqiB7/DxD/K6nBFXM4wHG/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNjAzMDExODU3MTlaFw0yNjAzMDUwNTI5MTlaMDMxMTAvBgNV BAMTKENFNkUxRjlDNkM0OEE5RUYwNEE5MDJBNjIxRjc4QTBDRkZENkFBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUhn8hBt4wpr0yddcMhgKR+aZ yhpw0bd3RX+1Fn9Yfd4aUmsPV21KVhg2IB0BFkaI2YCu3xVaCul69YzlCcDiNhLC EGIHdEQFqowyVszCuZKl1531KLj5QcjLtNpvU+h8c8pj/TJx/kQnJDFsLFeOy6MS aRX3947ra12SdF3sV09FHQgggVNzLMBNSHFyb9PRwA7BbwecUnYBznc3cLm2RRCL 3kFQsGBEL4vsB9Gkshg0o1+abfxGaQ9jQ8q/l3MWeIoI6o3yE3KgRkVuPOxjew2L 3vMaSXQZRA4uYMAOFcg4NL2BN1nfckfKaJ6NymoeI3fansDdlaMffG6xfSgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzm4fnGxIqe8EqQKmIfeKDP/WqhYwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9dprm7GA5gmHNJ4w26TP9G4trvfW6hfKsF so8c9PNHtRbIyOXk+6UTAV+aDSGpR0Q69EK4a6pJdPXLOZImRTkwROMWT1RkdVgH PEcdX5ZTm6AvzAnRxuWpm38/NDXxrIB4yhaHYBI7HcmoF/rzXDGIWvY7MDWg67ag uAKQ5wg6Eccup5fkpOd5hydfK8RQZSxTB+gD7hWtre1BD9bovUovTGTPdG7AfDSw ALaOX196EyfGddy8udwhmg27zKnuIGpNo6VJ2kamGXHPeA0J/2jjMyIaPPgoSyJU 3EFGYuaSV1wuRh1J2w/kgYRXSH6zgQkf9f/OpJWatsb468ALQIc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:23 2026 by rpki-client