$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft File: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft (raw, json) Hash identifier: S7nGp6C0zWHwuPdCxW4Q9DXXYZi8dNwH6GyVxvTsMq4= Subject key identifier: 16:47:AB:7A:95:6C:AB:90:B1:25:4E:4B:78:1E:AC:BF:9F:08:BE:BE Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 Certificate issuer: /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Certificate serial: 419A3F0E4B0BEBC3758DC33BD254DCC9D2FCA075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft Manifest number: 011B Signing time: Thu 26 Mar 2026 10:30:05 +0000 Manifest this update: Thu 26 Mar 2026 10:25:05 +0000 Manifest next update: Sun 29 Mar 2026 15:00:05 +0000 Files and hashes: 1: 3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (hash: n4Oi/nBqUvnEfpPYXXTcmZ2bFem4wR2z3sm1N0yX44M=) 2: 3136302e32322e36372e302f32342d3234203d3e20313532383134.roa (hash: Ey7L9KsZTmEk5ltcrs4Z+pnj7s7l3HrY1Uvag6NQq84=) 3: 9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl (hash: GYhXquAo0JWRoirMxKE6b4d3X8dhCYQoiGhOFsjuxj4=) 4: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (hash: JUUaehnloKhTb4CXmYBNJbFrHSQ9nWl3U3tWDUYZLk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9a:3f:0e:4b:0b:eb:c3:75:8d:c3:3b:d2:54:dc:c9:d2:fc:a0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652 Validity Not Before: Mar 26 10:25:05 2026 GMT Not After : Mar 29 15:00:05 2026 GMT Subject: CN=1647AB7A956CAB90B1254E4B781EACBF9F08BEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:c4:99:79:3e:86:7b:d3:ca:20:79:23:f2: fc:d6:3c:02:9e:64:54:d9:54:0b:b2:7b:0f:91:18: 41:41:4c:6f:6c:36:7d:fb:78:fe:82:70:48:0f:fc: f0:42:c1:f9:5e:dc:fa:5c:56:e6:a6:7c:7b:08:74: 17:72:de:98:16:51:7a:62:76:e5:27:08:7f:89:9c: c2:b9:a9:5c:25:39:ff:19:80:a2:79:c9:22:37:14: c9:db:46:fd:7d:63:34:01:93:7d:5d:b0:a7:f9:19: b4:be:47:54:37:ed:c9:f0:da:e3:86:83:65:82:bc: 0b:30:63:da:18:98:2c:9a:ae:51:76:56:f8:14:ff: 41:e1:d2:21:8d:ad:8f:5b:ff:68:2c:8e:21:33:e9: fb:95:8f:6d:7c:0f:a9:6f:6a:f9:0f:49:f3:ff:ea: 6a:03:5e:8b:80:ce:bc:0a:b5:b2:85:80:54:a3:92: bb:3f:4f:3d:f4:da:21:c1:a5:33:fc:9a:db:94:e2: 48:39:eb:8b:54:e5:a0:f7:96:da:34:2e:c1:be:93: a4:2e:e2:1b:4b:a1:14:3e:54:33:d6:47:c7:c7:42: 40:90:bd:00:55:0f:f7:02:8c:ac:76:fd:d0:12:24: 50:e3:71:e6:57:b5:f8:c3:5e:61:05:fc:0f:36:d6: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:47:AB:7A:95:6C:AB:90:B1:25:4E:4B:78:1E:AC:BF:9F:08:BE:BE X509v3 Authority Key Identifier: keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8c:b0:52:49:38:af:e6:1d:9b:89:eb:17:6d:bd:a2:8a:c9: bf:54:04:c6:fd:ab:87:dc:f9:f5:2e:56:f5:da:93:e1:53:f8: 56:99:da:ea:69:aa:d5:ee:95:93:65:0b:6c:99:a4:8c:91:60: d2:3f:e3:9c:c0:50:bd:66:c2:77:59:4e:3a:da:d0:4e:8e:c5: 06:8c:73:5c:43:e5:3f:79:7f:9b:23:e2:87:18:ec:f2:43:92: 7d:1d:ca:ea:e2:72:5f:23:e2:c1:e1:ec:b7:63:03:a7:a4:8e: 90:e6:51:d6:d0:31:93:23:5b:6c:d6:4d:12:11:13:15:2e:b1: 38:87:62:4c:3d:30:fb:37:12:45:75:44:22:52:3d:d7:ce:c7: d8:5b:21:8a:3b:1f:63:3c:e8:09:03:fe:a1:a3:3b:43:e1:ba: f2:25:fb:cb:e0:d3:15:e4:00:c3:6f:38:7e:b3:81:87:9d:09: fa:fd:1c:61:7c:76:45:16:9d:d2:3d:02:0c:eb:52:c1:a7:7d: a5:7e:54:63:0b:23:06:73:33:30:26:be:a0:b9:68:9c:37:fe: c3:91:7e:cd:f9:e1:51:02:78:5b:a4:b8:69:44:72:95:35:a0: d2:a4:ec:63:b1:84:01:c7:46:ec:4c:ce:72:97:d6:8e:96:19: 0c:10:67:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZo/DksL68N1jcM70lTcydL8oHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD MDlDRjY1MjAeFw0yNjAzMjYxMDI1MDVaFw0yNjAzMjkxNTAwMDVaMDMxMTAvBgNV BAMTKDE2NDdBQjdBOTU2Q0FCOTBCMTI1NEU0Qjc4MUVBQ0JGOUYwOEJFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QsSZeT6Ge9PKIHkj8vzWPAKe ZFTZVAuyew+RGEFBTG9sNn37eP6CcEgP/PBCwfle3PpcVuamfHsIdBdy3pgWUXpi duUnCH+JnMK5qVwlOf8ZgKJ5ySI3FMnbRv19YzQBk31dsKf5GbS+R1Q37cnw2uOG g2WCvAswY9oYmCyarlF2VvgU/0Hh0iGNrY9b/2gsjiEz6fuVj218D6lvavkPSfP/ 6moDXouAzrwKtbKFgFSjkrs/Tz302iHBpTP8mtuU4kg564tU5aD3lto0LsG+k6Qu 4htLoRQ+VDPWR8fHQkCQvQBVD/cCjKx2/dASJFDjceZXtfjDXmEF/A821io3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkerepVsq5CxJU5LeB6sv58Ivr4wHwYDVR0j BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD RjY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRiOTI3ZGYtYmM5Yy00YmU2LWEx ZmEtMmUxMjVjNDY5ZjcxLzAvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYz M0RDMDlDRjY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASMsFJJOK/mHZuJ6xdtvaKKyb9UBMb9q4fc +fUuVvXak+FT+FaZ2uppqtXulZNlC2yZpIyRYNI/45zAUL1mwndZTjra0E6OxQaM c1xD5T95f5sj4ocY7PJDkn0dyuricl8j4sHh7LdjA6ekjpDmUdbQMZMjW2zWTRIR ExUusTiHYkw9MPs3EkV1RCJSPdfOx9hbIYo7H2M86AkD/qGjO0PhuvIl+8vg0xXk AMNvOH6zgYedCfr9HGF8dkUWndI9AgzrUsGnfaV+VGMLIwZzMzAmvqC5aJw3/sOR fs354VECeFukuGlEcpU1oNKk7GOxhAHHRuxMznKX1o6WGQwQZ3E= -----END CERTIFICATE-----Generated at Fri Mar 27 03:30:43 2026 by rpki-client