$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: iP2CnjkMXbyZ53jjrAqXueqUS9zV20iQJOpHUZod4HU= Subject key identifier: B8:DD:BC:DD:BB:A1:A3:72:79:AD:E9:86:DE:1B:54:19:D4:DF:03:F8 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 53771D326CA15BFB6651BB04DE308018C700C8DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: 016D Signing time: Mon 23 Mar 2026 23:31:26 +0000 Manifest this update: Mon 23 Mar 2026 23:26:26 +0000 Manifest next update: Fri 27 Mar 2026 08:53:26 +0000 Files and hashes: 1: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=) 2: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=) 3: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=) 4: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: d22pdPxL9Z3Ogpso5Vp2if5SI0mts9e36jq2e4yR8s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:77:1d:32:6c:a1:5b:fb:66:51:bb:04:de:30:80:18:c7:00:c8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Mar 23 23:26:26 2026 GMT Not After : Mar 27 08:53:26 2026 GMT Subject: CN=B8DDBCDDBBA1A37279ADE986DE1B5419D4DF03F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:c2:d1:81:2e:df:b1:e4:52:96:32:be:aa: 3d:99:fd:fe:c7:d5:ae:b7:30:13:0c:a1:38:39:76: 92:9b:65:3b:ca:8f:1a:d9:6f:21:e4:50:2a:c4:38: 81:f6:c8:b1:8b:52:da:8f:e7:47:cc:dd:5b:e1:5c: c8:f0:fb:78:ea:00:ee:84:55:f0:9f:5d:ba:ca:ee: 47:10:a0:15:4e:35:24:f8:d9:0c:3f:ea:17:3c:2a: 86:57:2a:9a:93:f5:c0:39:d0:21:cf:01:00:93:41: c0:f4:b3:6d:f1:d6:7b:8c:20:1b:11:68:ce:3c:9c: 3f:eb:4d:f8:ad:7c:fc:a3:c5:53:52:db:4d:ad:3c: 6a:b8:2e:e6:c4:ad:2e:0e:53:2b:f8:12:b7:cf:94: b1:7c:be:6b:0b:aa:9c:dc:78:52:be:4f:05:62:23: 6a:1d:cd:06:1c:70:93:53:f1:16:c4:ae:07:15:2b: f4:18:a0:c7:1a:0d:a0:ae:5b:36:e4:e9:d6:4b:1a: 8d:d8:6a:d8:c8:74:3b:c4:7b:39:e6:8e:7f:1e:30: 73:b7:a8:ef:cb:ed:38:d2:f3:a6:36:c6:07:24:d0: 4f:14:c6:48:76:fb:8f:96:0b:47:df:d6:5e:0c:30: 35:e3:06:63:6b:76:06:34:bc:d0:71:e4:c8:ee:9a: 31:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:BC:DD:BB:A1:A3:72:79:AD:E9:86:DE:1B:54:19:D4:DF:03:F8 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1d:3b:06:85:80:32:96:09:22:ab:40:8d:3c:d0:80:76:46: 0e:af:e8:2f:ed:c8:3a:b8:b1:aa:56:4f:f8:9a:74:90:38:9b: 6d:cb:12:b9:07:98:9d:5d:7b:73:44:db:d6:6b:ee:ef:2e:59: 5d:ed:d2:07:5d:e2:c7:cd:2a:d6:a6:9a:8f:33:ce:a6:b6:fd: 3b:0b:32:c2:b3:31:8b:16:24:63:78:d7:af:1c:35:b5:ab:5d: c5:bc:22:68:5d:b6:66:79:71:d1:3f:5c:96:1b:89:10:25:40: fc:9a:af:b3:53:94:e8:41:6e:40:1b:68:dc:a1:d0:02:a1:45: 8c:10:6d:14:26:a6:d9:75:01:a0:3c:de:aa:c4:07:f5:42:2c: 40:9e:65:56:84:4c:12:99:0f:4b:b9:42:3b:b6:ad:53:51:51: 2a:fa:4c:2c:ba:a0:c4:87:b1:e5:f7:ac:84:b0:de:0a:04:21: 74:0a:6e:13:91:7a:7c:4a:6f:b0:95:94:e5:36:0d:b8:a7:c0: fb:03:0b:32:1d:1c:1f:b6:1e:28:60:6a:ed:03:24:da:95:1a: c3:66:b0:44:81:2a:d1:04:2d:0a:1c:e1:18:93:a3:d5:80:a1: 55:22:30:1e:6e:a2:8e:a2:e7:2a:dc:7c:8b:03:7e:b0:98:1b: 1f:c9:1e:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3cdMmyhW/tmUbsE3jCAGMcAyNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNjAzMjMyMzI2MjZaFw0yNjAzMjcwODUzMjZaMDMxMTAvBgNV BAMTKEI4RERCQ0REQkJBMUEzNzI3OUFERTk4NkRFMUI1NDE5RDRERjAzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZq8LRgS7fseRSljK+qj2Z/f7H 1a63MBMMoTg5dpKbZTvKjxrZbyHkUCrEOIH2yLGLUtqP50fM3VvhXMjw+3jqAO6E VfCfXbrK7kcQoBVONST42Qw/6hc8KoZXKpqT9cA50CHPAQCTQcD0s23x1nuMIBsR aM48nD/rTfitfPyjxVNS202tPGq4LubErS4OUyv4ErfPlLF8vmsLqpzceFK+TwVi I2odzQYccJNT8RbErgcVK/QYoMcaDaCuWzbk6dZLGo3YatjIdDvEeznmjn8eMHO3 qO/L7TjS86Y2xgck0E8Uxkh2+4+WC0ff1l4MMDXjBmNrdgY0vNBx5MjumjEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuN283buho3J5remG3htUGdTfA/gwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwdOwaFgDKWCSKrQI080IB2Rg6v6C/tyDq4 sapWT/iadJA4m23LErkHmJ1de3NE29Zr7u8uWV3t0gdd4sfNKtammo8zzqa2/TsL MsKzMYsWJGN4168cNbWrXcW8ImhdtmZ5cdE/XJYbiRAlQPyar7NTlOhBbkAbaNyh 0AKhRYwQbRQmptl1AaA83qrEB/VCLECeZVaETBKZD0u5Qju2rVNRUSr6TCy6oMSH seX3rISw3goEIXQKbhORenxKb7CVlOU2DbinwPsDCzIdHB+2Hihgau0DJNqVGsNm sESBKtEELQoc4RiTo9WAoVUiMB5uoo6i5yrcfIsDfrCYGx/JHrk= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:48 2026 by rpki-client