$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: utcL9IJuW1Hf2kkRDu9ycUdX2TA+hcEdiliqIXSt2bI= Subject key identifier: E1:8C:2B:8A:A8:6B:F8:1E:78:BA:E3:61:CC:24:36:AE:ED:01:5B:FD Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 66D7494AB7D4FDE604A014F22690FCE1FB347671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 055D Signing time: Tue 24 Mar 2026 14:50:01 +0000 Manifest this update: Tue 24 Mar 2026 14:45:01 +0000 Manifest next update: Fri 27 Mar 2026 17:00:01 +0000 Files and hashes: 1: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: hBTSTofwcqpzXYSHncKh7eEUiPp6MpPe+4meIf61kTU=) 2: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: 8d1124p6osknr5mIf0Fwnuo5LSN5Fn+xLhfttGNnPCo=) 3: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: DdTfav5v9Nuo9UKyCJ7g/yrdlbTB09KnChtDn6Xlvuw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d7:49:4a:b7:d4:fd:e6:04:a0:14:f2:26:90:fc:e1:fb:34:76:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: Mar 24 14:45:01 2026 GMT Not After : Mar 27 17:00:01 2026 GMT Subject: CN=E18C2B8AA86BF81E78BAE361CC2436AEED015BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a4:9c:30:f2:f4:b7:fe:83:14:29:c3:aa:08: 06:f5:bb:fd:1a:ed:90:04:f0:67:c8:68:ec:b6:af: a8:57:ee:02:b3:45:31:e3:0c:6c:92:b1:e2:bb:41: 0a:71:c1:5a:ee:89:75:b7:07:43:ec:6e:9c:30:53: 93:95:03:8d:88:41:f2:ec:41:fc:85:af:92:3b:70: 6b:31:59:ae:15:29:40:0d:95:1e:7e:b7:a8:c5:34: a2:b7:00:fb:89:0e:0e:31:e5:e9:7b:35:a5:12:a7: a0:55:a6:12:41:0f:67:06:29:86:0e:1f:bf:55:a0: ad:75:e2:fd:25:92:9b:54:a1:f5:80:e8:cb:58:65: 04:88:1b:15:53:b9:75:c3:46:90:c7:07:4b:cc:f4: f9:fd:b0:48:c0:84:80:43:06:ed:80:22:58:f3:e3: 0f:d0:66:52:8f:43:c3:44:7a:de:84:f3:92:24:89: 1a:0a:f0:3d:02:b7:b0:2c:ca:f3:68:45:60:75:1e: 6e:ab:0c:f8:bc:7c:59:41:7b:8a:b0:09:90:0f:34: 90:69:45:e1:03:11:5d:e1:b7:9f:5c:6c:5d:65:09: 42:68:3a:21:9f:6d:a4:a9:6c:c0:38:71:25:e9:3f: 44:48:ea:58:7f:28:ae:b7:e3:da:9c:c0:d3:82:f6: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:2B:8A:A8:6B:F8:1E:78:BA:E3:61:CC:24:36:AE:ED:01:5B:FD X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c7:22:b8:5a:83:60:13:0f:88:f9:ca:c1:4a:6a:a4:a9:b6: 86:77:66:ad:63:e9:66:5b:ba:f8:3f:03:f0:b1:f1:ed:ff:df: 84:fa:62:47:88:9a:0c:a2:64:73:6e:03:37:75:10:24:ae:ea: 7b:82:20:21:2e:75:76:e3:31:ab:37:82:79:3d:c5:02:ad:e8: cd:cb:59:f6:b7:11:ad:21:bb:41:dc:e7:ad:d7:83:c6:49:75: 95:56:b1:f3:95:75:70:3c:5e:9b:77:84:f4:e5:01:b8:83:88: 1f:5f:4a:eb:c9:5c:84:8a:69:20:f5:85:6d:c2:53:3d:29:16: 56:11:c6:31:fd:e3:a0:a3:f1:f4:08:1d:a8:83:51:e9:ec:cd: a1:74:00:b6:21:67:c0:2b:6f:27:f6:d3:a7:85:da:5d:87:27: dc:61:45:d7:ed:08:b1:dd:21:c2:68:8e:52:33:44:58:40:a2: 0a:a1:c4:2f:43:a1:1a:0e:10:1d:aa:58:c3:5e:54:bf:5c:67: 67:f9:3c:64:02:07:c1:fc:18:b4:af:cc:a2:c9:8d:d0:84:bc: 27:d3:6a:80:e9:0b:73:07:48:ce:25:59:a6:2a:87:b3:2f:a1: 0f:14:ba:48:e4:30:49:ff:2f:0f:a0:52:4c:cc:46:0d:b1:18: 8f:cb:6c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtdJSrfU/eYEoBTyJpD84fs0dnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNjAzMjQxNDQ1MDFaFw0yNjAzMjcxNzAwMDFaMDMxMTAvBgNV BAMTKEUxOEMyQjhBQTg2QkY4MUU3OEJBRTM2MUNDMjQzNkFFRUQwMTVCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupJww8vS3/oMUKcOqCAb1u/0a 7ZAE8GfIaOy2r6hX7gKzRTHjDGySseK7QQpxwVruiXW3B0PsbpwwU5OVA42IQfLs QfyFr5I7cGsxWa4VKUANlR5+t6jFNKK3APuJDg4x5el7NaUSp6BVphJBD2cGKYYO H79VoK114v0lkptUofWA6MtYZQSIGxVTuXXDRpDHB0vM9Pn9sEjAhIBDBu2AIljz 4w/QZlKPQ8NEet6E85IkiRoK8D0Ct7AsyvNoRWB1Hm6rDPi8fFlBe4qwCZAPNJBp ReEDEV3ht59cbF1lCUJoOiGfbaSpbMA4cSXpP0RI6lh/KK6349qcwNOC9hyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Ywriqhr+B54uuNhzCQ2ru0BW/0wHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDHIrhag2ATD4j5ysFKaqSptoZ3Zq1j6WZb uvg/A/Cx8e3/34T6YkeImgyiZHNuAzd1ECSu6nuCICEudXbjMas3gnk9xQKt6M3L Wfa3Ea0hu0Hc563Xg8ZJdZVWsfOVdXA8Xpt3hPTlAbiDiB9fSuvJXISKaSD1hW3C Uz0pFlYRxjH946Cj8fQIHaiDUenszaF0ALYhZ8Arbyf206eF2l2HJ9xhRdftCLHd IcJojlIzRFhAogqhxC9DoRoOEB2qWMNeVL9cZ2f5PGQCB8H8GLSvzKLJjdCEvCfT aoDpC3MHSM4lWaYqh7MvoQ8UukjkMEn/Lw+gUkzMRg2xGI/LbDY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:52 2026 by rpki-client