$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: Yqlaj+711D5aglS14I77BQgEv7fpNUEfOcUqIAtdFLM= Subject key identifier: BE:E0:6A:83:D5:5F:4B:7E:B2:2D:47:47:2E:1A:89:8D:9A:45:A9:A4 Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 7722EDF5BC4645B857DA1CB04DFA9C5FA2CD993F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 0118 Signing time: Tue 24 Mar 2026 13:00:06 +0000 Manifest this update: Tue 24 Mar 2026 12:55:06 +0000 Manifest next update: Fri 27 Mar 2026 17:30:06 +0000 Files and hashes: 1: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 2: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=) 3: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 4: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: L/he2fD173MFTKI8wBzHrp4go48SGTE2yD/2nM+Enng=) 5: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 6: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) 7: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) 8: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 9: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:22:ed:f5:bc:46:45:b8:57:da:1c:b0:4d:fa:9c:5f:a2:cd:99:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Mar 24 12:55:06 2026 GMT Not After : Mar 27 17:30:06 2026 GMT Subject: CN=BEE06A83D55F4B7EB22D47472E1A898D9A45A9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:b8:30:f2:ca:41:0d:a8:ed:52:82:24:1b: d0:fa:27:42:22:d2:b3:56:00:02:84:a6:96:0a:53: 0d:21:af:6d:65:1b:d6:89:3a:c1:85:8e:23:f5:5f: 01:9f:6a:8c:57:c0:82:c4:7b:01:22:c3:c9:1e:aa: 38:7d:15:29:4f:a1:c9:a9:22:2e:8e:89:04:16:33: 41:fe:d3:5e:89:5e:d8:6a:dd:69:88:ab:64:e8:96: 5d:d5:d4:51:c1:22:fb:b6:b7:6e:d2:78:a7:4a:39: e6:c4:08:88:48:43:83:1d:85:6e:11:b0:a3:f0:9e: 24:10:72:8e:86:df:1b:dd:48:db:59:a2:00:b2:8e: b1:c5:4a:f6:91:ef:85:f2:15:b3:9a:22:5f:e2:84: 54:e5:cc:08:0e:26:07:e3:38:97:e7:53:df:02:fc: 46:80:26:cc:21:67:79:69:28:a7:26:58:24:e3:26: ff:57:14:7c:84:db:91:14:9a:e7:e6:06:23:9a:de: 44:db:29:e6:f3:cd:ee:f9:79:75:30:d5:77:5c:43: ae:31:54:5a:72:60:e7:69:79:e8:ca:bc:d5:a3:c8: 74:2c:18:0b:3a:20:5c:f1:f4:c4:cc:50:32:68:4d: f0:d7:4d:26:6a:96:3e:34:cc:96:0e:68:d6:93:f7: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E0:6A:83:D5:5F:4B:7E:B2:2D:47:47:2E:1A:89:8D:9A:45:A9:A4 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6f:3c:fa:2a:71:11:e9:81:f2:3f:15:6c:0f:55:79:38:1d: 93:92:a0:11:96:19:0c:16:f8:00:2f:a1:19:25:3e:4a:32:14: bd:50:72:a3:41:89:a7:42:85:7d:ac:16:c7:49:b7:1a:15:92: 11:18:a0:2d:1d:cd:98:a0:ef:e6:bd:aa:b4:80:e6:56:6f:f6: fc:ec:f5:0e:1f:2d:5e:4f:3c:d0:4f:2a:57:5f:52:24:34:0b: bd:78:1c:75:10:63:10:79:d4:e0:1e:e8:0f:99:7e:8d:ab:da: 8a:7b:d3:69:a9:bc:cb:ab:66:92:59:06:08:c3:ab:ee:74:8f: d6:05:dd:c2:6a:bf:4e:e0:0a:24:ae:80:b4:39:48:ed:76:17: c9:d7:72:e0:58:f1:38:d7:ce:35:b5:a7:1a:7c:f5:52:d2:0b: 9f:b9:e5:16:23:07:9a:94:c9:2a:d5:03:1f:d5:2f:c2:70:88: de:9e:6f:27:4b:fe:0f:b5:32:d9:4b:0c:69:09:a6:39:08:6c: 96:2a:5d:96:9a:2a:85:52:ee:07:d3:90:3b:c1:57:70:e3:38: b8:f8:9b:9f:83:af:7b:4f:24:53:b0:43:02:c5:ff:ca:6e:92: 58:72:52:9c:71:d9:7b:35:13:9a:ca:da:9a:72:f0:e8:cc:a0: 15:a7:9b:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyLt9bxGRbhX2hywTfqcX6LNmT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNjAzMjQxMjU1MDZaFw0yNjAzMjcxNzMwMDZaMDMxMTAvBgNV BAMTKEJFRTA2QTgzRDU1RjRCN0VCMjJENDc0NzJFMUE4OThEOUE0NUE5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9frgw8spBDajtUoIkG9D6J0Ii 0rNWAAKEppYKUw0hr21lG9aJOsGFjiP1XwGfaoxXwILEewEiw8keqjh9FSlPocmp Ii6OiQQWM0H+016JXthq3WmIq2Toll3V1FHBIvu2t27SeKdKOebECIhIQ4MdhW4R sKPwniQQco6G3xvdSNtZogCyjrHFSvaR74XyFbOaIl/ihFTlzAgOJgfjOJfnU98C /EaAJswhZ3lpKKcmWCTjJv9XFHyE25EUmufmBiOa3kTbKebzze75eXUw1XdcQ64x VFpyYOdpeejKvNWjyHQsGAs6IFzx9MTMUDJoTfDXTSZqlj40zJYOaNaT99xZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvuBqg9VfS36yLUdHLhqJjZpFqaQwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdvPPoqcRHpgfI/FWwPVXk4HZOSoBGWGQwW +AAvoRklPkoyFL1QcqNBiadChX2sFsdJtxoVkhEYoC0dzZig7+a9qrSA5lZv9vzs 9Q4fLV5PPNBPKldfUiQ0C714HHUQYxB51OAe6A+Zfo2r2op702mpvMurZpJZBgjD q+50j9YF3cJqv07gCiSugLQ5SO12F8nXcuBY8TjXzjW1pxp89VLSC5+55RYjB5qU ySrVAx/VL8JwiN6ebydL/g+1MtlLDGkJpjkIbJYqXZaaKoVS7gfTkDvBV3DjOLj4 m5+Dr3tPJFOwQwLF/8puklhyUpxx2Xs1E5rK2ppy8OjMoBWnm3Q= -----END CERTIFICATE-----Generated at Thu Mar 26 17:43:52 2026 by rpki-client