$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft (raw, json) Hash identifier: N6Vq1pA45EngPteaJq0BHmJGSmaQTL3p8P2P5k1TqS0= Subject key identifier: F9:FF:C2:17:8B:93:97:F6:6B:F5:A7:D5:7C:AB:F1:58:62:A7:3F:1C Authority key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Certificate issuer: /CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Certificate serial: 57F4B40A7629F671D4E6713E785E2EC97A04A58B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft Manifest number: 011E Signing time: Thu 26 Mar 2026 07:20:43 +0000 Manifest this update: Thu 26 Mar 2026 07:15:43 +0000 Manifest next update: Sun 29 Mar 2026 12:07:43 +0000 Files and hashes: 1: 3136302e32322e3139322e302f32342d3234203d3e20313532383330.roa (hash: EXKyIgdBdrm+oqB+8w3BPQbiAqGZ9xP3DtOQeOsYD5U=) 2: 3136302e32322e3139332e302f32342d3234203d3e20313532383330.roa (hash: 8LHoVIhEhZZi4ckWiEYo4t6/wwxdQqhZstJq2KaWDnQ=) 3: 3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (hash: 7f+WSF/qv05Nwf5ZCt2H4vcaZP85zFvyDk/p5y08ilY=) 4: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl (hash: 7fMVO9OO2uPA/RDFpTlEaOIWvODAlGvoGLsWa8AcNGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f4:b4:0a:76:29:f6:71:d4:e6:71:3e:78:5e:2e:c9:7a:04:a5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Validity Not Before: Mar 26 07:15:43 2026 GMT Not After : Mar 29 12:07:43 2026 GMT Subject: CN=F9FFC2178B9397F66BF5A7D57CABF15862A73F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:49:76:e2:48:e1:67:d0:52:2e:04:c4:5d: 75:74:a4:17:5c:15:52:10:5d:84:e7:a2:26:16:d8: 8c:98:9a:a6:46:49:6d:ae:72:aa:a6:e7:a0:e0:39: de:89:03:99:19:b5:c7:93:33:54:b0:c3:18:3f:6f: 9d:b6:f9:de:30:c3:a5:fb:90:f8:72:cf:b4:47:71: af:2a:f8:5b:c2:a7:eb:33:99:b3:1f:f8:0d:1f:29: 3a:1f:7e:30:67:46:f4:1d:f1:89:06:f8:d5:b5:fc: c5:0f:0e:82:0e:ba:76:ed:bc:19:45:25:14:7e:cb: ee:8a:ca:6c:20:1e:5a:2b:46:b8:15:4f:3d:de:ff: e2:74:57:45:9c:d5:06:58:5f:85:2c:7b:b9:af:33: d4:dd:55:9a:88:02:53:5c:75:dc:b8:83:01:31:19: ff:d7:ef:86:c5:5c:37:1e:7e:53:6a:b5:9c:34:2a: 4f:12:46:f0:6f:f8:c3:54:c7:54:e4:4e:4e:4f:a0: 70:0c:49:22:0e:e3:ac:91:3b:1e:4a:b8:52:df:fb: 3b:21:ee:46:bd:35:fb:4b:1b:a2:17:a6:c0:a7:0f: 47:b4:f8:52:95:77:7c:b0:75:3a:b4:a0:b3:fc:6c: 46:ce:c2:43:5d:d2:e0:1a:a3:90:33:3a:1b:f2:ba: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:C2:17:8B:93:97:F6:6B:F5:A7:D5:7C:AB:F1:58:62:A7:3F:1C X509v3 Authority Key Identifier: keyid:9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:50:b0:6b:1d:13:23:39:20:7b:c5:88:cc:9c:11:4a:a2:b6: 2d:7f:a4:6c:a9:4c:2f:2b:75:78:f9:ec:e5:5a:55:80:05:4e: 75:b4:5a:24:24:0d:a6:94:b4:1c:2c:d7:64:43:82:d3:2f:22: 75:5d:b7:b8:43:3f:0b:98:0e:7e:2a:f8:e6:57:4f:ca:b8:5f: 97:de:f3:35:e7:3f:51:2f:73:54:81:8d:8d:c2:ab:18:ff:18: 70:6a:9c:61:5f:75:63:e9:99:14:65:63:7f:fb:38:d8:68:ef: a0:87:0e:91:3b:f9:fd:93:2d:b8:81:7b:dc:b8:73:4f:39:1b: a3:8d:5d:a6:76:09:7b:1a:bd:28:39:c2:f5:9f:19:85:e2:29: ac:3f:a7:7c:4c:d3:82:4d:ae:42:f7:ce:f5:16:d4:d2:1a:cf: bb:d3:d0:46:1b:eb:23:ec:e3:bb:3b:43:74:9f:1b:c2:81:ff: ba:72:34:f8:99:83:43:f9:91:26:6d:98:a1:ab:8b:26:2d:3f: e9:5c:5c:90:c2:46:a3:79:43:6d:6d:65:42:cb:11:90:65:12: 45:bf:24:b8:d1:c6:bc:03:c8:a9:d9:07:e5:3a:50:57:1c:d4: 45:22:4f:08:b1:8f:20:be:38:c9:fd:2d:57:6c:06:a6:6b:de: 30:8d:35:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/S0CnYp9nHU5nE+eF4uyXoEpYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhD MDBGQzZGNTAeFw0yNjAzMjYwNzE1NDNaFw0yNjAzMjkxMjA3NDNaMDMxMTAvBgNV BAMTKEY5RkZDMjE3OEI5Mzk3RjY2QkY1QTdENTdDQUJGMTU4NjJBNzNGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y0l24kjhZ9BSLgTEXXV0pBdc FVIQXYTnoiYW2IyYmqZGSW2ucqqm56DgOd6JA5kZtceTM1Swwxg/b522+d4ww6X7 kPhyz7RHca8q+FvCp+szmbMf+A0fKToffjBnRvQd8YkG+NW1/MUPDoIOunbtvBlF JRR+y+6KymwgHlorRrgVTz3e/+J0V0Wc1QZYX4Use7mvM9TdVZqIAlNcddy4gwEx Gf/X74bFXDceflNqtZw0Kk8SRvBv+MNUx1TkTk5PoHAMSSIO46yROx5KuFLf+zsh 7ka9NftLG6IXpsCnD0e0+FKVd3ywdTq0oLP8bEbOwkNd0uAao5AzOhvyul+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+f/CF4uTl/Zr9afVfKvxWGKnPxwwHwYDVR0j BBgwFoAUn+7MRHYaE+omyjaFCLtqSMAPxvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMC85RkVFQ0M0NDc2 MUExM0VBMjZDQTM2ODUwOEJCNkE0OEMwMEZDNkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZBNDhDMDBG QzZGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzAvOUZFRUNDNDQ3NjFBMTNFQTI2Q0EzNjg1MDhCQjZB NDhDMDBGQzZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJQsGsdEyM5IHvFiMycEUqiti1/pGypTC8r dXj57OVaVYAFTnW0WiQkDaaUtBws12RDgtMvInVdt7hDPwuYDn4q+OZXT8q4X5fe 8zXnP1Evc1SBjY3Cqxj/GHBqnGFfdWPpmRRlY3/7ONho76CHDpE7+f2TLbiBe9y4 c085G6ONXaZ2CXsavSg5wvWfGYXiKaw/p3xM04JNrkL3zvUW1NIaz7vT0EYb6yPs 47s7Q3SfG8KB/7pyNPiZg0P5kSZtmKGriyYtP+lcXJDCRqN5Q21tZULLEZBlEkW/ JLjRxrwDyKnZB+U6UFcc1EUiTwixjyC+OMn9LVdsBqZr3jCNNXc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:41 2026 by rpki-client