$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: NB7Yjq1R4NaNx6BWf6sgkKwLkLcw68fGn0qCMu9+pYQ= Subject key identifier: 62:46:01:13:98:05:AB:D7:DE:6C:EE:F6:5E:6D:25:AA:09:A6:F9:C1 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 7DA8C0312D9E14FCF8D591F85011BFD11FA7B787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 0365 Signing time: Wed 25 Mar 2026 00:11:53 +0000 Manifest this update: Wed 25 Mar 2026 00:06:53 +0000 Manifest next update: Sat 28 Mar 2026 08:34:53 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) 2: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) 3: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: cmmJAW3fdaUaN+DZsbm/c9BlsrRVuTmoQweZhkmNpis=) 4: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a8:c0:31:2d:9e:14:fc:f8:d5:91:f8:50:11:bf:d1:1f:a7:b7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Mar 25 00:06:53 2026 GMT Not After : Mar 28 08:34:53 2026 GMT Subject: CN=624601139805ABD7DE6CEEF65E6D25AA09A6F9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:61:a6:3c:9a:60:ba:89:f8:81:08:1e:b7: bb:a2:7e:94:4b:ff:2f:2e:a7:c2:c0:db:66:7a:b6: c1:42:07:53:24:1c:6f:b6:bd:8f:0f:a3:2b:f2:0b: e4:d4:bc:64:65:1b:58:86:18:ee:36:70:37:9c:0a: 86:9c:a0:ea:af:bd:ca:0a:93:9f:77:1e:93:c1:ca: 58:2a:90:49:72:96:b4:6e:f7:09:a0:27:6f:1c:f8: 56:4f:12:22:3a:4c:ab:cf:f5:28:70:13:0c:a1:81: 67:bc:b7:e1:18:04:b8:68:da:23:14:ec:d0:a7:f0: b8:95:43:69:01:60:4a:d3:11:12:b3:d5:22:f8:5c: eb:db:2f:ab:16:01:09:d8:2d:ff:f1:9f:50:7a:0c: e1:b5:2f:a2:30:71:44:58:70:20:82:e5:cb:6c:6f: 87:b9:78:bc:0b:02:de:51:f0:9f:02:ed:d5:24:66: d1:7b:76:08:30:2e:67:59:d7:19:f8:fc:2f:6f:42: 5a:0e:fc:38:f4:f1:71:db:52:74:43:6a:70:0c:d4: 75:51:51:83:7f:be:d0:1b:0b:a8:d9:b4:80:cb:f0: 3b:38:16:8d:3d:8d:9b:3d:14:d4:88:54:8c:92:cd: 82:ba:de:3e:29:83:0b:47:10:14:53:da:df:21:2f: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:01:13:98:05:AB:D7:DE:6C:EE:F6:5E:6D:25:AA:09:A6:F9:C1 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:06:d7:34:08:6e:ce:7b:9f:23:17:88:99:93:59:1b:c5:52: d8:90:34:24:10:cf:58:5e:0f:9b:9e:4e:22:49:f8:83:33:26: 5b:e7:63:b7:61:b2:b5:40:35:b0:50:4c:1d:5b:54:88:b0:8e: 91:d5:59:1b:85:1f:4b:1a:af:81:79:30:22:7d:b1:4d:4c:58: a2:b3:f2:07:f3:2f:cf:74:cf:1a:83:2f:3e:f1:da:1c:7c:f5: 81:ca:a6:f3:2c:ff:5a:94:e7:1b:ec:56:8c:7a:e4:6c:d2:42: c2:79:89:c6:a9:dd:fb:f2:74:8e:3d:b6:75:a6:59:ef:13:82: 99:63:7e:aa:86:52:58:6a:46:68:db:91:a6:02:92:01:b0:d3: 88:14:ac:dc:e0:14:56:e1:c1:1c:fe:2c:f1:4f:b1:3d:ce:89: f2:54:6c:06:79:83:16:91:48:62:bc:1c:6f:8d:85:3c:67:9c: a2:45:21:f1:f8:a9:f6:de:ed:ea:8a:9d:8d:b2:2a:79:fb:e0: 49:41:16:37:2e:9e:2f:3c:64:b5:91:39:16:49:63:ba:71:f3: e1:d1:07:12:e0:58:f5:24:0a:f5:cb:93:0a:f0:cb:05:e0:16: 53:6f:71:6e:3f:06:dc:a1:08:01:a1:85:ae:ca:4d:8a:28:8d: 84:fd:07:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfajAMS2eFPz41ZH4UBG/0R+nt4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNjAzMjUwMDA2NTNaFw0yNjAzMjgwODM0NTNaMDMxMTAvBgNV BAMTKDYyNDYwMTEzOTgwNUFCRDdERTZDRUVGNjVFNkQyNUFBMDlBNkY5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZeWGmPJpguon4gQget7uifpRL /y8up8LA22Z6tsFCB1MkHG+2vY8PoyvyC+TUvGRlG1iGGO42cDecCoacoOqvvcoK k593HpPBylgqkElylrRu9wmgJ28c+FZPEiI6TKvP9ShwEwyhgWe8t+EYBLho2iMU 7NCn8LiVQ2kBYErTERKz1SL4XOvbL6sWAQnYLf/xn1B6DOG1L6IwcURYcCCC5cts b4e5eLwLAt5R8J8C7dUkZtF7dggwLmdZ1xn4/C9vQloO/Dj08XHbUnRDanAM1HVR UYN/vtAbC6jZtIDL8Ds4Fo09jZs9FNSIVIySzYK63j4pgwtHEBRT2t8hLwlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkYBE5gFq9febO72Xm0lqgmm+cEwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwG1zQIbs57nyMXiJmTWRvFUtiQNCQQz1he D5ueTiJJ+IMzJlvnY7dhsrVANbBQTB1bVIiwjpHVWRuFH0sar4F5MCJ9sU1MWKKz 8gfzL890zxqDLz7x2hx89YHKpvMs/1qU5xvsVox65GzSQsJ5icap3fvydI49tnWm We8TgpljfqqGUlhqRmjbkaYCkgGw04gUrNzgFFbhwRz+LPFPsT3OifJUbAZ5gxaR SGK8HG+NhTxnnKJFIfH4qfbe7eqKnY2yKnn74ElBFjcuni88ZLWRORZJY7px8+HR BxLgWPUkCvXLkwrwywXgFlNvcW4/BtyhCAGhha7KTYoojYT9B/M= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:15 2026 by rpki-client