$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: UJ4nUzIRiS+gkfKTrbfIsAGoEKWBNFvoq2aQQpCITys= Subject key identifier: 5D:0D:97:E4:D1:EC:8A:F1:63:56:D1:27:E9:56:C3:5A:02:89:4B:D9 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 2E17CB9F96F18B0C1AEF00D1D5BB460043E0A7F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 03FD Signing time: Wed 25 Mar 2026 07:42:16 +0000 Manifest this update: Wed 25 Mar 2026 07:37:16 +0000 Manifest next update: Sat 28 Mar 2026 18:59:16 +0000 Files and hashes: 1: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: x7A5/ydvWW7sOuPV1cJAWpXthBYyUBZokt+o03RLsFU=) 2: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: 4JnfTGjY9X7X8+n4/R+zY+BatEjhdtcbcnnxtg34W0k=) 3: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: gpChKqdsCYOp/lH5E0Zrms5qo7Kcyfa0mYD/MLgV2Ps=) 4: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: mPyIVlbhKd/mHdeP4ceUJkgmxEiA9UZfcIrONzLAzPY=) 5: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw=) 6: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:17:cb:9f:96:f1:8b:0c:1a:ef:00:d1:d5:bb:46:00:43:e0:a7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Mar 25 07:37:16 2026 GMT Not After : Mar 28 18:59:16 2026 GMT Subject: CN=5D0D97E4D1EC8AF16356D127E956C35A02894BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:e2:a6:b4:a6:21:36:f3:1f:ea:30:5c:61: ba:1e:3e:d9:4b:62:f5:a7:77:f4:51:bd:97:94:7f: a4:83:21:86:d5:c3:d2:f6:a0:93:40:29:e6:d6:06: 85:69:1c:67:92:4c:57:f8:1b:bc:5f:33:6c:71:29: 56:94:97:d1:91:34:41:5f:64:46:13:ea:d0:47:b8: c0:bc:53:99:08:ea:6f:e5:e0:92:12:6d:1d:87:90: 9c:ad:dd:5b:81:91:90:e8:dc:46:3e:a3:f2:78:a9: 27:68:2e:3a:71:0e:33:6b:ed:56:31:9d:b2:e0:43: d6:ff:2a:ed:a6:c8:1d:7b:99:25:41:5b:b0:51:ca: 3d:0a:c0:18:ed:81:c1:e7:e9:ce:94:42:72:a4:1b: b4:8f:b4:8a:c1:79:d0:48:ed:23:04:33:ca:f7:ba: e5:ba:31:75:9b:61:6d:3b:4a:06:88:ca:1b:04:37: 87:c3:39:65:c9:02:8f:bb:12:63:cf:ba:af:15:01: c6:a1:c6:65:97:b5:65:e4:ab:4a:9a:51:2b:40:7e: cf:17:d1:dc:e5:bc:a0:0f:20:82:5f:ba:11:bc:8d: 0a:81:21:fd:9b:8b:2a:3d:9d:5f:86:ff:47:11:6e: 5c:5f:31:f8:fb:2a:02:8f:8d:3d:dc:ce:48:a0:75: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:97:E4:D1:EC:8A:F1:63:56:D1:27:E9:56:C3:5A:02:89:4B:D9 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bd:47:34:50:00:69:70:54:33:67:04:a9:bb:f4:fb:09:ed: 88:6c:19:0c:88:6d:8c:86:e9:d7:a8:09:b2:81:f0:c4:08:25: c4:da:c5:7a:74:a4:63:82:f8:f3:7b:a7:69:18:9a:a8:f8:17: 03:cf:f0:24:6c:99:4b:47:e3:cb:13:7e:47:6b:10:27:cf:bd: 78:1a:5c:8b:9f:a7:3f:f9:14:f0:58:76:48:65:22:e1:de:e7: dc:7d:0e:b2:65:88:c9:b9:33:e0:5e:12:7b:fd:d5:11:05:5e: d4:cc:4d:c9:fc:ca:8f:4d:f8:01:1e:1b:46:42:1e:ae:50:83: bc:8a:85:02:93:8a:f0:34:d8:06:00:a2:72:98:dd:bf:a6:fa: f4:32:65:4f:f0:46:7a:1b:f3:17:15:aa:be:f8:b9:ec:34:78: b6:6d:e8:02:88:64:10:a2:00:12:06:50:74:d1:9d:c9:06:89: 32:2b:d3:c9:5e:c3:39:0f:6e:62:2f:c4:44:97:38:3a:2b:32: 6e:2c:bb:84:0e:d5:b2:3f:a4:e6:95:3c:4b:77:3e:5f:75:73: 44:9f:49:c0:bc:f7:fe:58:27:d6:a0:7c:43:a6:35:81:c5:d0: da:4e:14:a6:76:85:41:d2:73:f2:11:1f:0d:19:88:94:c0:f7: 2e:78:ae:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhfLn5bxiwwa7wDR1btGAEPgp/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNjAzMjUwNzM3MTZaFw0yNjAzMjgxODU5MTZaMDMxMTAvBgNV BAMTKDVEMEQ5N0U0RDFFQzhBRjE2MzU2RDEyN0U5NTZDMzVBMDI4OTRCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQOKmtKYhNvMf6jBcYboePtlL YvWnd/RRvZeUf6SDIYbVw9L2oJNAKebWBoVpHGeSTFf4G7xfM2xxKVaUl9GRNEFf ZEYT6tBHuMC8U5kI6m/l4JISbR2HkJyt3VuBkZDo3EY+o/J4qSdoLjpxDjNr7VYx nbLgQ9b/Ku2myB17mSVBW7BRyj0KwBjtgcHn6c6UQnKkG7SPtIrBedBI7SMEM8r3 uuW6MXWbYW07SgaIyhsEN4fDOWXJAo+7EmPPuq8VAcahxmWXtWXkq0qaUStAfs8X 0dzlvKAPIIJfuhG8jQqBIf2biyo9nV+G/0cRblxfMfj7KgKPjT3czkigdTURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQ2X5NHsivFjVtEn6VbDWgKJS9kwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS9RzRQAGlwVDNnBKm79PsJ7YhsGQyIbYyG 6deoCbKB8MQIJcTaxXp0pGOC+PN7p2kYmqj4FwPP8CRsmUtH48sTfkdrECfPvXga XIufpz/5FPBYdkhlIuHe59x9DrJliMm5M+BeEnv91REFXtTMTcn8yo9N+AEeG0ZC Hq5Qg7yKhQKTivA02AYAonKY3b+m+vQyZU/wRnob8xcVqr74uew0eLZt6AKIZBCi ABIGUHTRnckGiTIr08lewzkPbmIvxESXODorMm4su4QO1bI/pOaVPEt3Pl91c0Sf ScC89/5YJ9agfEOmNYHF0NpOFKZ2hUHSc/IRHw0ZiJTA9y54rvo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:31:27 2026 by rpki-client