$ rpki-client -vvf repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft File: 9D6C92F2A768B42C165992C6E76B882F559231B7.mft (raw, json) Hash identifier: H5/eB3gslmgpZ5QAKpb+tVgmg8jzN/wwprm14Cm6dwo= Subject key identifier: DD:D9:BC:F6:17:1A:7C:98:8E:89:AA:91:54:F3:F9:CF:9A:43:06:4B Authority key identifier: 9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 Certificate issuer: /CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Certificate serial: 7C0EE88514D0913B2A547146CD2891E27E723DD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft Manifest number: 0500 Signing time: Wed 25 Mar 2026 22:10:42 +0000 Manifest this update: Wed 25 Mar 2026 22:05:42 +0000 Manifest next update: Sun 29 Mar 2026 09:40:42 +0000 Files and hashes: 1: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: iAHJXG4K6+3EiEQSytu2MEfHZRYK05stg/Yr8f+Zlv8=) 2: 9D6C92F2A768B42C165992C6E76B882F559231B7.crl (hash: 6AJX+l/ycv6URfPsAY0SRjA4i19h+rtmmH4eGhmPk9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0e:e8:85:14:d0:91:3b:2a:54:71:46:cd:28:91:e2:7e:72:3d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D6C92F2A768B42C165992C6E76B882F559231B7 Validity Not Before: Mar 25 22:05:42 2026 GMT Not After : Mar 29 09:40:42 2026 GMT Subject: CN=DDD9BCF6171A7C988E89AA9154F3F9CF9A43064B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:a9:04:9d:f0:1c:37:4a:92:c8:cb:75:39: 37:90:b3:46:74:9c:72:33:fa:8d:f8:76:9c:0a:9b: 55:28:f4:e9:e1:32:80:42:58:0b:0f:84:a5:b8:39: 1e:0f:06:36:34:2e:17:49:8a:62:2a:16:69:65:a9: 38:b8:e4:6f:4a:65:0b:fc:2c:aa:d7:b6:97:da:42: 85:1d:60:f3:b7:28:87:92:11:6e:0b:de:c4:f1:50: 81:01:5a:2c:26:e0:4d:b7:fd:98:f2:25:12:c7:ea: f2:dd:29:35:49:da:ed:33:ab:b0:27:65:f7:66:bb: e5:da:4c:a9:4b:b9:45:62:ff:61:f4:6c:10:54:0b: a2:48:eb:dc:b4:82:a4:01:43:2c:e3:2e:b5:89:2e: a7:e2:c3:f0:ce:22:c2:69:18:da:a4:41:13:bf:cd: 41:ab:7f:19:84:ab:06:19:6b:02:cf:73:50:fd:6c: 3f:f2:74:3f:26:85:01:16:57:ba:5d:69:14:1b:61: 7c:fa:f3:96:36:eb:8e:47:29:d9:bf:0f:dd:b1:24: 9b:d0:0a:cc:86:6b:0a:96:0e:f0:dd:7c:ea:be:73: 44:30:a2:26:13:ac:9e:f3:a3:17:fd:a2:d4:d8:23: 00:86:4a:d6:d4:5b:e2:d7:c6:bc:35:0d:fb:d8:ad: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:BC:F6:17:1A:7C:98:8E:89:AA:91:54:F3:F9:CF:9A:43:06:4B X509v3 Authority Key Identifier: keyid:9D:6C:92:F2:A7:68:B4:2C:16:59:92:C6:E7:6B:88:2F:55:92:31:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D6C92F2A768B42C165992C6E76B882F559231B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/9D6C92F2A768B42C165992C6E76B882F559231B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:7d:78:7a:47:45:aa:23:e1:33:a9:1d:6a:36:70:f6:19: 12:b7:09:c7:ca:07:41:6a:41:97:ed:f4:88:32:3a:16:8b:bd: cf:5a:bc:b7:e7:58:77:de:4b:ba:c8:1c:ce:50:44:b3:55:cc: 6f:26:2b:79:0d:c4:c2:d5:f8:17:65:ee:c4:a9:e4:57:10:bc: 8a:9d:77:c7:2d:c1:35:3b:a2:c5:c0:1f:da:3e:d7:3b:aa:f3: 15:b7:54:d4:95:f9:00:e5:0f:6e:95:ac:50:8e:aa:bf:c2:dc: a6:b7:6c:c1:6c:d0:42:d9:34:9d:1c:db:1a:7b:da:65:88:16: e4:31:a5:07:e3:0c:fe:61:33:47:4d:5e:43:15:c0:44:be:b5: a1:b6:31:a4:2b:44:83:11:5e:a9:ae:f5:03:64:fc:e7:cd:e9: 2d:66:64:8a:48:20:3b:ff:fd:cd:cf:d6:ad:c9:44:99:47:80: ac:c3:4d:fd:33:2a:41:29:49:b7:8f:0d:80:75:9c:57:4d:ff: af:8e:4f:4f:cb:fa:3d:1f:83:c3:3a:f7:06:57:86:76:c0:4c: 87:d9:5d:4c:b4:92:e2:a7:cb:f1:43:e3:64:ce:ba:41:01:39: bd:b4:8e:35:22:58:ab:2d:71:a0:c3:33:af:c7:ca:b6:b3:3c: b9:05:49:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfA7ohRTQkTsqVHFGzSiR4n5yPdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1 NTkyMzFCNzAeFw0yNjAzMjUyMjA1NDJaFw0yNjAzMjkwOTQwNDJaMDMxMTAvBgNV BAMTKERERDlCQ0Y2MTcxQTdDOTg4RTg5QUE5MTU0RjNGOUNGOUE0MzA2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQKkEnfAcN0qSyMt1OTeQs0Z0 nHIz+o34dpwKm1Uo9OnhMoBCWAsPhKW4OR4PBjY0LhdJimIqFmllqTi45G9KZQv8 LKrXtpfaQoUdYPO3KIeSEW4L3sTxUIEBWiwm4E23/ZjyJRLH6vLdKTVJ2u0zq7An Zfdmu+XaTKlLuUVi/2H0bBBUC6JI69y0gqQBQyzjLrWJLqfiw/DOIsJpGNqkQRO/ zUGrfxmEqwYZawLPc1D9bD/ydD8mhQEWV7pdaRQbYXz685Y2645HKdm/D92xJJvQ CsyGawqWDvDdfOq+c0QwoiYTrJ7zoxf9otTYIwCGStbUW+LXxrw1DfvYrWqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dm89hcafJiOiaqRVPP5z5pDBkswHwYDVR0j BBgwFoAUnWyS8qdotCwWWZLG52uIL1WSMbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDA0YmFkMS0yYjNlLTQxNDEtOWZjNS1kZjk5YjJiZDBhMjIvMC85RDZDOTJGMkE3 NjhCNDJDMTY1OTkyQzZFNzZCODgyRjU1OTIzMUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4MkY1NTky MzFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvOUQ2QzkyRjJBNzY4QjQyQzE2NTk5MkM2RTc2Qjg4 MkY1NTkyMzFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMvfXh6R0WqI+EzqR1qNnD2GRK3CcfKB0Fq QZft9IgyOhaLvc9avLfnWHfeS7rIHM5QRLNVzG8mK3kNxMLV+Bdl7sSp5FcQvIqd d8ctwTU7osXAH9o+1zuq8xW3VNSV+QDlD26VrFCOqr/C3Ka3bMFs0ELZNJ0c2xp7 2mWIFuQxpQfjDP5hM0dNXkMVwES+taG2MaQrRIMRXqmu9QNk/OfN6S1mZIpIIDv/ /c3P1q3JRJlHgKzDTf0zKkEpSbePDYB1nFdN/6+OT0/L+j0fg8M69wZXhnbATIfZ XUy0kuKny/FD42TOukEBOb20jjUiWKstcaDDM6/HyrazPLkFSQk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:49 2026 by rpki-client