$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: W/17Pyml1b3IiosWRWy9bJMn0ChLBp4jW2hXdhb1dks= Subject key identifier: 9D:61:43:04:F9:34:E1:F1:DF:B3:4D:C4:8B:BD:CE:5C:16:3C:C4:10 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 271C5AC2B74325CC6532047478FA3A64C2EB735F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 03D3 Signing time: Wed 25 Mar 2026 06:51:05 +0000 Manifest this update: Wed 25 Mar 2026 06:46:05 +0000 Manifest next update: Sat 28 Mar 2026 17:35:05 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: 2Mco9ackQ4PwcAVBn4smFndK+Bf6IWVVGl+ndoOGQrM=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: RN2smBBo+LI6gEsZcz4NPHJoB1Uf70XYldtVwkeU68Q=) 3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: yOWWrmF7VI65mmW/qJSqfIDXS5If5ryvU0shcYEJ4r4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1c:5a:c2:b7:43:25:cc:65:32:04:74:78:fa:3a:64:c2:eb:73:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Mar 25 06:46:05 2026 GMT Not After : Mar 28 17:35:05 2026 GMT Subject: CN=9D614304F934E1F1DFB34DC48BBDCE5C163CC410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:1e:cd:07:51:e9:56:ee:09:4b:c4:58:99: 57:b0:e5:bb:10:18:8d:d4:c0:f6:53:9f:4c:b7:03: e0:2b:99:a8:bc:b1:d8:ab:d5:c8:1a:e7:2b:be:94: b6:af:5a:bd:a7:56:5c:5f:6e:7d:a8:b4:d5:f5:a9: a1:22:c4:f6:26:f8:55:77:72:3d:ff:c3:2e:bf:d9: f2:93:07:7c:f7:56:de:e5:c8:69:6c:8f:26:f9:b0: bb:d8:7f:b2:40:e7:fd:d6:02:cd:43:14:3c:37:13: 58:07:51:34:ca:29:f1:24:31:36:3b:85:23:78:50: 5f:5d:f0:eb:7f:6b:a3:23:27:ce:bb:05:af:8e:8d: 5d:a6:e3:6c:25:18:a7:27:d3:24:a5:1d:77:07:92: 89:62:82:5c:19:14:8b:79:82:93:52:b7:2e:e5:84: b7:c3:e7:32:ad:4f:8e:1c:27:96:05:25:27:69:71: 0e:ad:b0:0a:2a:57:62:ce:3a:8f:40:d0:48:56:c7: 74:62:ce:2c:a3:26:83:0d:5a:87:35:61:85:e1:73: 15:9b:c9:73:f2:2f:38:1b:cc:3d:1d:02:f1:97:68: da:ba:d3:3e:36:ff:da:69:31:79:26:ea:d3:18:0e: 92:ff:8e:2e:b5:ab:ac:78:e3:6e:53:58:a5:0c:fb: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:61:43:04:F9:34:E1:F1:DF:B3:4D:C4:8B:BD:CE:5C:16:3C:C4:10 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d5:7f:d3:b6:a8:d5:ec:ff:5d:6d:a4:b6:c7:22:ea:19:d0: 02:65:7a:27:a1:bd:ab:fa:a8:ae:f6:e8:0a:38:95:32:be:6a: c6:07:c7:a4:04:82:98:7d:c0:52:d1:f6:9f:42:e2:18:ed:97: be:89:a7:76:73:7e:e7:d2:8d:66:72:52:85:63:71:2b:08:af: 9e:09:a1:82:26:fc:3f:72:55:37:8e:19:63:4d:eb:af:27:5e: 3a:c2:93:2d:c9:3f:df:08:47:51:e5:01:d4:a5:cb:ac:c5:f5: 50:c5:39:45:85:01:ec:ca:8c:b7:49:d4:c2:97:79:a7:6d:75: 6a:92:f5:4b:43:f8:ad:ac:65:6b:cd:9a:b3:e8:ab:10:c6:21: c6:85:f1:d7:45:1f:bd:ad:6d:51:5a:20:29:b9:f6:ed:3c:a1: ab:5b:d6:c6:91:ab:c4:66:ac:49:15:8f:26:2c:26:d3:0e:92: ae:ad:71:48:07:be:f7:dd:a7:ea:ad:76:b4:8d:b6:c7:af:b3: 5f:cf:63:7f:a1:66:9a:0a:0f:75:af:01:bc:3f:69:62:b1:62: 02:f3:88:7f:08:7e:11:98:65:91:56:5b:1f:2c:50:23:f7:ab: 8a:8c:5a:a0:6e:aa:56:78:5c:be:98:40:03:f2:8d:25:65:5d: 73:fa:4f:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxxawrdDJcxlMgR0ePo6ZMLrc18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNjAzMjUwNjQ2MDVaFw0yNjAzMjgxNzM1MDVaMDMxMTAvBgNV BAMTKDlENjE0MzA0RjkzNEUxRjFERkIzNERDNDhCQkRDRTVDMTYzQ0M0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7B7NB1HpVu4JS8RYmVew5bsQ GI3UwPZTn0y3A+Armai8sdir1cga5yu+lLavWr2nVlxfbn2otNX1qaEixPYm+FV3 cj3/wy6/2fKTB3z3Vt7lyGlsjyb5sLvYf7JA5/3WAs1DFDw3E1gHUTTKKfEkMTY7 hSN4UF9d8Ot/a6MjJ867Ba+OjV2m42wlGKcn0ySlHXcHkoliglwZFIt5gpNSty7l hLfD5zKtT44cJ5YFJSdpcQ6tsAoqV2LOOo9A0EhWx3RiziyjJoMNWoc1YYXhcxWb yXPyLzgbzD0dAvGXaNq60z42/9ppMXkm6tMYDpL/ji61q6x4425TWKUM++w7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnWFDBPk04fHfs03Ei73OXBY8xBAwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvVf9O2qNXs/11tpLbHIuoZ0AJleiehvav6 qK726Ao4lTK+asYHx6QEgph9wFLR9p9C4hjtl76Jp3ZzfufSjWZyUoVjcSsIr54J oYIm/D9yVTeOGWNN668nXjrCky3JP98IR1HlAdSly6zF9VDFOUWFAezKjLdJ1MKX eadtdWqS9UtD+K2sZWvNmrPoqxDGIcaF8ddFH72tbVFaICm59u08oatb1saRq8Rm rEkVjyYsJtMOkq6tcUgHvvfdp+qtdrSNtsevs1/PY3+hZpoKD3WvAbw/aWKxYgLz iH8IfhGYZZFWWx8sUCP3q4qMWqBuqlZ4XL6YQAPyjSVlXXP6T28= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:35 2026 by rpki-client