$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft File: 091F7323435A889C466D811B73B98389C1E084DD.mft (raw, json) Hash identifier: 2kA+SoRpCbjU0QFQ4HLrKSiDdKibp2+E4eBY4QVtthI= Subject key identifier: C8:B7:C0:8D:14:79:E9:9D:1A:FC:A9:F0:03:7D:65:8B:86:20:A7:44 Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD Certificate issuer: /CN=091F7323435A889C466D811B73B98389C1E084DD Certificate serial: 42B598F901C1756A2C0B88334DBD2ACE2E840FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft Manifest number: 02B7 Signing time: Thu 26 Mar 2026 15:12:01 +0000 Manifest this update: Thu 26 Mar 2026 15:07:01 +0000 Manifest next update: Sun 29 Mar 2026 19:56:01 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: HWtlgeL3MiIhlDvuL8DrSz4LAVxkX8H7joJ9R29LLYc=) 2: 091F7323435A889C466D811B73B98389C1E084DD.crl (hash: NzwWngA6eQ+mMesA2VcbX1ROGH/uGCo1NWLbphTvy0M=) 3: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=) 4: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: MsT3Z49E42KS28/Nv+cFIfYRhlxroO4eKBgAGaRI40k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b5:98:f9:01:c1:75:6a:2c:0b:88:33:4d:bd:2a:ce:2e:84:0f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD Validity Not Before: Mar 26 15:07:01 2026 GMT Not After : Mar 29 19:56:01 2026 GMT Subject: CN=C8B7C08D1479E99D1AFCA9F0037D658B8620A744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:07:20:f7:d7:e1:43:83:35:36:46:33:df: ca:de:d3:93:75:ec:0d:94:20:f8:ce:ce:88:07:1f: 4e:12:c9:aa:61:74:8e:d9:a6:38:28:5e:65:5d:ac: d5:b7:e0:6b:02:bf:93:f0:1c:52:be:28:8c:2c:76: bf:9a:f7:c5:98:94:3b:70:07:00:04:b6:40:20:43: b1:0c:08:24:41:c4:55:ad:15:00:e4:89:c7:5e:d8: 01:b0:2d:f1:37:5b:cd:82:1d:d8:67:9b:17:43:f2: 52:b3:e5:44:d6:53:c7:75:db:67:47:57:6e:8b:cf: c9:cd:95:24:8c:76:f9:ba:56:22:8c:cf:8d:b8:2e: fb:d3:3b:e7:86:4e:19:3b:f1:50:da:49:16:35:56: 22:e1:b0:e4:f4:3f:cc:27:6c:db:c4:9f:44:01:70: 5c:57:a3:9f:8d:7d:c1:e5:d9:6e:93:92:a7:7b:66: d2:0a:fe:42:54:ca:af:87:f3:4c:f7:f8:ba:6a:7d: d3:8b:9a:ba:ca:b6:2e:97:05:78:f8:f0:30:6c:ac: 83:76:8d:75:20:3a:2a:73:35:ae:c5:e2:ab:26:99: 4d:e8:2b:68:31:f8:d8:7b:d7:cd:49:84:ea:3a:c8: e5:05:bc:3d:6f:2f:d0:46:a8:3a:5b:29:c0:0e:fa: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B7:C0:8D:14:79:E9:9D:1A:FC:A9:F0:03:7D:65:8B:86:20:A7:44 X509v3 Authority Key Identifier: keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:81:07:53:81:0b:8a:47:da:ac:e2:b1:44:4a:5c:4d:07:16: a4:f9:86:37:1a:1e:76:02:6a:7c:de:dc:f3:58:8c:9c:01:78: a0:45:14:70:2a:4c:d0:14:b4:25:b7:ba:04:a8:e1:f0:fe:36: b9:37:8b:4e:9c:46:0d:1b:eb:ff:0b:3b:e0:01:92:cd:c4:c8: 39:9c:ac:34:c9:56:76:6f:f0:03:bf:55:89:08:9c:03:6d:bd: 5f:d4:fc:5d:e4:b2:4e:b2:2a:f9:fc:1f:2e:cc:00:2d:2d:23: 0e:9e:3f:64:f0:92:25:9e:c8:c7:4a:38:9d:5d:20:de:3b:93: 43:20:38:dc:c0:9b:09:9a:80:bc:d1:13:85:79:70:96:e5:07: bb:e4:b7:9f:6e:e1:3f:41:c9:d0:ae:3a:b1:32:c7:2e:23:de: 20:da:fc:b3:13:7e:e8:da:6c:5a:90:e9:08:7c:0b:3d:c7:3a: 52:30:19:aa:f5:2d:1c:b6:24:f5:dd:0d:cc:99:79:14:92:03: 3e:7a:b5:6c:38:1a:70:f7:ae:5e:3d:1d:9a:05:a4:ca:c4:24: ab:d3:39:6e:be:3f:f3:24:f4:af:ec:8f:88:c0:e4:d5:8a:0b: 90:81:b5:9b:4e:3e:0b:54:8c:b0:89:77:fa:6b:f2:6a:e7:59: ea:95:ad:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrWY+QHBdWosC4gzTb0qzi6ED9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlD MUUwODRERDAeFw0yNjAzMjYxNTA3MDFaFw0yNjAzMjkxOTU2MDFaMDMxMTAvBgNV BAMTKEM4QjdDMDhEMTQ3OUU5OUQxQUZDQTlGMDAzN0Q2NThCODYyMEE3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcQcg99fhQ4M1NkYz38re05N1 7A2UIPjOzogHH04SyaphdI7ZpjgoXmVdrNW34GsCv5PwHFK+KIwsdr+a98WYlDtw BwAEtkAgQ7EMCCRBxFWtFQDkicde2AGwLfE3W82CHdhnmxdD8lKz5UTWU8d122dH V26Lz8nNlSSMdvm6ViKMz424LvvTO+eGThk78VDaSRY1ViLhsOT0P8wnbNvEn0QB cFxXo5+NfcHl2W6Tkqd7ZtIK/kJUyq+H80z3+LpqfdOLmrrKti6XBXj48DBsrIN2 jXUgOipzNa7F4qsmmU3oK2gx+Nh7181JhOo6yOUFvD1vL9BGqDpbKcAO+vWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLfAjRR56Z0a/KnwA31li4Ygp0QwHwYDVR0j BBgwFoAUCR9zI0NaiJxGbYEbc7mDicHghN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzFlODBkNC02ZWJlLTQ5MmMtYTBjNS1kNzU5ODI3NTMzYjMvMC8wOTFGNzMyMzQz NUE4ODlDNDY2RDgxMUI3M0I5ODM4OUMxRTA4NERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgzODlDMUUw ODRERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvMDkxRjczMjM0MzVBODg5QzQ2NkQ4MTFCNzNCOTgz ODlDMUUwODRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKBB1OBC4pH2qzisURKXE0HFqT5hjcaHnYC anze3PNYjJwBeKBFFHAqTNAUtCW3ugSo4fD+Nrk3i06cRg0b6/8LO+ABks3EyDmc rDTJVnZv8AO/VYkInANtvV/U/F3ksk6yKvn8Hy7MAC0tIw6eP2TwkiWeyMdKOJ1d IN47k0MgONzAmwmagLzRE4V5cJblB7vkt59u4T9BydCuOrEyxy4j3iDa/LMTfuja bFqQ6Qh8Cz3HOlIwGar1LRy2JPXdDcyZeRSSAz56tWw4GnD3rl49HZoFpMrEJKvT OW6+P/Mk9K/sj4jA5NWKC5CBtZtOPgtUjLCJd/pr8mrnWeqVrT8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:27 2026 by rpki-client