$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: CaglN9GxpAcnrQikb8e1JEe7ov5UKDxMVRJP992h5Ts= Subject key identifier: FB:97:B0:4E:EA:A2:EC:90:93:E6:2E:8D:F5:68:B6:A9:2A:0A:7A:A8 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 046F21F6DA25031E1CBC6078C13AD2FAC7446968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 0258 Signing time: Wed 25 Mar 2026 15:22:08 +0000 Manifest this update: Wed 25 Mar 2026 15:17:08 +0000 Manifest next update: Sat 28 Mar 2026 21:52:08 +0000 Files and hashes: 1: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 2: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 3: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 4: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 5: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 6: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 7: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) 8: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: J28j2F65Np72yBnQo59h/aVyIRfuBG8QUjmyvo5EF4I=) 9: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 10: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 11: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 12: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 13: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 14: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 15: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 16: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 17: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6f:21:f6:da:25:03:1e:1c:bc:60:78:c1:3a:d2:fa:c7:44:69:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Mar 25 15:17:08 2026 GMT Not After : Mar 28 21:52:08 2026 GMT Subject: CN=FB97B04EEAA2EC9093E62E8DF568B6A92A0A7AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:03:b1:ed:5b:d3:9c:b5:2b:91:9b:14:5d: f3:3b:b9:4c:be:78:76:55:54:2a:42:b3:72:e3:5d: d1:6a:dd:d9:86:6a:ac:c4:07:1b:09:24:db:5e:fa: 58:3d:92:67:8c:47:dc:52:d8:38:a8:d4:03:01:9b: da:87:de:86:9a:b8:0f:50:42:00:80:32:da:0a:b5: 27:29:96:24:26:fc:cf:39:4d:7d:fe:08:94:0a:ca: f1:03:22:ed:a2:fd:fb:83:68:ae:70:c2:10:f9:6d: 70:25:e2:4a:35:4b:b1:31:76:05:6d:60:b8:20:e4: 8c:0a:7c:74:07:f6:99:cd:3e:f2:b8:fc:e1:06:53: 40:6d:4b:c3:46:35:65:b8:80:b2:67:58:f3:c5:be: 31:b6:8f:cb:90:65:29:15:37:a1:7e:6b:72:6c:a8: 05:fc:12:2d:89:ab:d1:d6:68:49:fc:d8:90:99:11: 27:cc:6c:4d:61:5e:6e:a7:d1:72:16:17:4f:16:d8: 24:37:f5:58:20:e2:22:ed:df:41:fa:79:5a:ad:84: 4a:6a:e8:7d:53:b8:5d:80:b0:bd:98:8a:a0:32:2b: 1e:92:8a:39:26:ae:a0:e0:ef:e9:ed:a7:3a:89:4a: 3b:7a:a6:c4:d7:48:bf:3d:9f:f8:33:40:b9:a3:1c: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:97:B0:4E:EA:A2:EC:90:93:E6:2E:8D:F5:68:B6:A9:2A:0A:7A:A8 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:da:58:d6:03:5e:38:90:8c:e3:6a:d5:b3:3f:73:38:4a:9d: 42:a7:93:d0:d9:f0:65:8d:1d:27:b8:be:31:9d:24:84:1a:b4: b0:63:34:23:a2:82:9c:ae:dc:02:98:ff:c8:c2:8d:85:72:c1: f4:e0:49:95:d6:bb:39:4e:88:ce:62:62:ee:08:74:40:6e:d8: 74:b1:37:27:78:f9:74:9a:d5:19:34:8f:b0:e6:4b:ac:a1:75: 42:dc:87:9a:07:99:64:af:5c:66:e8:05:e7:1c:28:b0:45:b7: c4:e1:10:ff:f3:b4:0c:b6:bf:98:31:08:71:11:fe:6c:fb:c9: 4d:24:5d:b4:b2:8b:79:8d:d5:a9:d3:8e:9c:33:a6:e2:3d:2b: c6:bb:81:cf:fb:2b:a7:b8:90:4a:fe:83:37:16:94:88:3e:8d: 26:b0:53:0e:fa:fc:4c:5d:de:0d:9f:94:ad:69:b9:37:66:81: b1:d6:ad:ec:1c:2d:fd:32:9d:47:cd:42:7d:d5:11:2b:ca:6f: 02:13:b5:d0:7a:a4:04:55:cf:c4:4a:7e:84:5c:68:eb:d8:c6: 1b:49:15:e2:94:34:3b:0f:2f:a1:79:43:9e:8e:c2:66:e8:b8: 0c:1b:4e:f1:d9:d8:e3:da:d6:ae:20:36:40:60:44:36:cc:33: ec:2f:ca:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBG8h9tolAx4cvGB4wTrS+sdEaWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjAzMjUxNTE3MDhaFw0yNjAzMjgyMTUyMDhaMDMxMTAvBgNV BAMTKEZCOTdCMDRFRUFBMkVDOTA5M0U2MkU4REY1NjhCNkE5MkEwQTdBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDidAOx7VvTnLUrkZsUXfM7uUy+ eHZVVCpCs3LjXdFq3dmGaqzEBxsJJNte+lg9kmeMR9xS2Dio1AMBm9qH3oaauA9Q QgCAMtoKtScpliQm/M85TX3+CJQKyvEDIu2i/fuDaK5wwhD5bXAl4ko1S7ExdgVt YLgg5IwKfHQH9pnNPvK4/OEGU0BtS8NGNWW4gLJnWPPFvjG2j8uQZSkVN6F+a3Js qAX8Ei2Jq9HWaEn82JCZESfMbE1hXm6n0XIWF08W2CQ39Vgg4iLt30H6eVqthEpq 6H1TuF2AsL2YiqAyKx6SijkmrqDg7+ntpzqJSjt6psTXSL89n/gzQLmjHDcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5ewTuqi7JCT5i6N9Wi2qSoKeqgwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjaWNYDXjiQjONq1bM/czhKnUKnk9DZ8GWN HSe4vjGdJIQatLBjNCOigpyu3AKY/8jCjYVywfTgSZXWuzlOiM5iYu4IdEBu2HSx Nyd4+XSa1Rk0j7DmS6yhdULch5oHmWSvXGboBeccKLBFt8ThEP/ztAy2v5gxCHER /mz7yU0kXbSyi3mN1anTjpwzpuI9K8a7gc/7K6e4kEr+gzcWlIg+jSawUw76/Exd 3g2flK1puTdmgbHWrewcLf0ynUfNQn3VESvKbwITtdB6pARVz8RKfoRcaOvYxhtJ FeKUNDsPL6F5Q56OwmbouAwbTvHZ2OPa1q4gNkBgRDbMM+wvylg= -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:35 2026 by rpki-client