$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft File: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft (raw, json) Hash identifier: LF2ft1RItIqIanELJJ6g2AOy54KAMRGzu3yqVxTeT4Q= Subject key identifier: D1:9C:83:98:56:18:4A:31:81:14:84:5E:73:CD:5E:40:A9:65:AB:74 Authority key identifier: 9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 Certificate issuer: /CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Certificate serial: 3C1A3F1457F9EA72257297C8244B11EBCB52CE41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft Manifest number: 2D Signing time: Wed 25 Mar 2026 14:22:32 +0000 Manifest this update: Wed 25 Mar 2026 14:17:32 +0000 Manifest next update: Sat 28 Mar 2026 16:11:32 +0000 Files and hashes: 1: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: oUENuD0SMegzfgG7zCwjryjELhYU0l7sm/nxY+l6d1M=) 2: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl (hash: ivoNXIMSanBcqdf0l9+FEsLFOvwDS3sCV1/LmTbopNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1a:3f:14:57:f9:ea:72:25:72:97:c8:24:4b:11:eb:cb:52:ce:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Validity Not Before: Mar 25 14:17:32 2026 GMT Not After : Mar 28 16:11:32 2026 GMT Subject: CN=D19C839856184A318114845E73CD5E40A965AB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:71:ce:79:d5:65:bc:9f:62:8a:ae:52:aa: 99:0a:55:48:42:ff:d5:74:17:ea:e7:d5:c9:4a:3f: dc:07:44:8e:7d:19:b8:ac:0a:b1:85:18:19:f4:9d: 47:72:2d:b8:89:7b:35:0e:e7:b4:96:6d:c9:fc:14: ae:f1:f5:9d:4a:32:34:d6:72:c1:fb:26:b4:f1:6b: b3:b0:3b:5b:02:9f:a6:5a:30:9b:a3:ed:fc:07:d0: 43:9d:6d:0d:f5:e0:d5:fa:a5:ed:09:34:2d:31:2e: 58:8e:02:1b:79:30:28:48:c0:8f:02:28:13:22:0e: a1:c9:05:fd:9b:9b:9b:d6:49:b5:1f:c1:66:bc:7d: 79:93:aa:eb:0b:0e:55:8f:a3:44:35:1f:8b:8a:d5: e5:d5:2c:b9:4e:ee:ee:d4:fd:7b:6c:da:bc:fb:85: b5:5d:5e:34:d6:44:36:ae:b9:ad:0b:1d:6a:4a:0c: d0:d2:d2:e7:1a:f4:5c:43:98:67:ed:ad:62:94:25: c4:44:69:10:cc:5a:ee:16:c8:28:39:eb:49:fb:ba: 37:16:3c:1c:e3:ca:4f:66:f3:90:41:28:c9:ae:6a: 11:3c:97:9e:8a:88:fd:b8:13:41:85:87:d7:67:9e: 77:60:04:8f:9e:91:68:51:dd:2d:af:72:c3:8b:c7: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9C:83:98:56:18:4A:31:81:14:84:5E:73:CD:5E:40:A9:65:AB:74 X509v3 Authority Key Identifier: keyid:9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:f9:fd:86:6e:19:aa:90:9c:ad:16:57:38:a0:e7:89:e0: a6:18:5e:cc:e6:41:fc:3a:4a:d2:50:ce:04:fc:84:f6:cd:b5: ea:a4:d6:7c:92:91:05:b2:ed:b9:0f:f4:33:ba:a6:aa:ce:5b: 0a:d5:3c:56:08:c3:5f:f6:dd:8c:d1:7d:52:27:c7:db:38:69: e3:72:ed:47:c2:e2:41:99:d2:20:3c:a1:f1:64:e2:6a:1b:a4: 57:67:b0:e0:21:5f:de:81:f8:a3:ae:d7:b6:41:45:4c:87:ee: d7:22:fc:d0:0d:1c:c0:4d:60:40:51:54:9e:f3:ad:99:fe:3a: 07:14:92:db:68:90:fe:36:db:8f:46:3a:69:c7:35:fb:57:c6: fc:66:bf:d3:13:97:79:d5:e3:1e:a8:92:64:a0:f6:cc:9e:52: 71:25:d0:a9:82:34:2c:2c:cf:0f:f0:a9:06:4f:a2:c9:02:99: 46:13:63:2a:89:29:82:e3:54:b3:ce:46:ed:bd:63:30:ca:c2: d6:53:d4:8f:49:69:b9:52:76:42:50:b7:de:02:38:25:d3:51: a0:08:fa:8d:3c:21:5c:7a:d0:98:d1:10:14:d1:3e:21:1e:ef: ef:55:cd:62:39:bb:d0:d0:66:d9:15:7a:eb:77:cb:b3:12:5c: 65:51:55:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBo/FFf56nIlcpfIJEsR68tSzkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVB Q0EzRkU0NTAeFw0yNjAzMjUxNDE3MzJaFw0yNjAzMjgxNjExMzJaMDMxMTAvBgNV BAMTKEQxOUM4Mzk4NTYxODRBMzE4MTE0ODQ1RTczQ0Q1RTQwQTk2NUFCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zHHOedVlvJ9iiq5SqpkKVUhC /9V0F+rn1clKP9wHRI59GbisCrGFGBn0nUdyLbiJezUO57SWbcn8FK7x9Z1KMjTW csH7JrTxa7OwO1sCn6ZaMJuj7fwH0EOdbQ314NX6pe0JNC0xLliOAht5MChIwI8C KBMiDqHJBf2bm5vWSbUfwWa8fXmTqusLDlWPo0Q1H4uK1eXVLLlO7u7U/Xts2rz7 hbVdXjTWRDauua0LHWpKDNDS0uca9FxDmGftrWKUJcREaRDMWu4WyCg560n7ujcW PBzjyk9m85BBKMmuahE8l56KiP24E0GFh9dnnndgBI+ekWhR3S2vcsOLx0xTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ZyDmFYYSjGBFIRec81eQKllq3QwHwYDVR0j BBgwFoAUnZumcPIcILy3tCeFiuVCxayj/kUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMC85RDlCQTY3MEYy MUMyMEJDQjdCNDI3ODU4QUU1NDJDNUFDQTNGRTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVBQ0Ez RkU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThlNDYxMGEtYTc5NC00MDU5LTk3 ZDktZjJjNjlkYTU0YzhiLzAvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQy QzVBQ0EzRkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBh+f2GbhmqkJytFlc4oOeJ4KYYXszmQfw6 StJQzgT8hPbNteqk1nySkQWy7bkP9DO6pqrOWwrVPFYIw1/23YzRfVInx9s4aeNy 7UfC4kGZ0iA8ofFk4mobpFdnsOAhX96B+KOu17ZBRUyH7tci/NANHMBNYEBRVJ7z rZn+OgcUkttokP42249GOmnHNftXxvxmv9MTl3nV4x6okmSg9syeUnEl0KmCNCws zw/wqQZPoskCmUYTYyqJKYLjVLPORu29YzDKwtZT1I9JablSdkJQt94COCXTUaAI +o08IVx60JjREBTRPiEe7+9VzWI5u9DQZtkVeut3y7MSXGVRVdI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:38 2026 by rpki-client