$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: l5C8iEGw5i7lXfpFsOR50l+XkQZggNIZjdDIa4NWE6A= Subject key identifier: C0:82:D2:AA:30:3B:BD:FE:E2:2C:64:AC:AD:0C:A7:4A:C8:06:E3:A2 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 645923928BD714CC5DB1D155211345A98BCD5516 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 01BE Signing time: Tue 24 Mar 2026 14:00:43 +0000 Manifest this update: Tue 24 Mar 2026 13:55:43 +0000 Manifest next update: Sat 28 Mar 2026 00:39:43 +0000 Files and hashes: 1: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) 2: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: 0v8ZKWZxyjZ6ceTNlb5jTzCoEiPpdQwu6+0yNgxI3Zo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:59:23:92:8b:d7:14:cc:5d:b1:d1:55:21:13:45:a9:8b:cd:55:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Mar 24 13:55:43 2026 GMT Not After : Mar 28 00:39:43 2026 GMT Subject: CN=C082D2AA303BBDFEE22C64ACAD0CA74AC806E3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:38:5a:f7:e5:de:22:95:32:5d:1a:fb:c8: e6:9b:81:b5:ef:a1:c2:c6:ec:0c:36:0a:b5:a1:d1: 89:d9:08:85:30:2d:ff:67:a6:65:99:29:08:a9:68: 1a:69:05:0a:9b:33:a8:8e:e9:bf:4a:ec:e6:47:58: 07:29:93:df:d0:45:8b:48:af:b5:e9:91:5c:dc:68: 04:dc:4d:9b:75:24:51:74:ef:ed:33:5e:8f:ee:99: 7a:51:f4:60:88:14:20:f1:63:ea:33:1a:fc:53:70: c3:59:98:46:4d:15:5f:5a:e9:98:c6:2c:65:bc:85: a6:c6:0f:4f:af:cf:dc:79:02:46:c1:03:2e:02:f7: d0:13:84:37:39:74:44:b2:61:bc:9b:d4:83:eb:76: 1a:bc:5b:45:01:ff:9c:6e:be:3c:ed:ef:4f:27:b5: 39:3e:50:6f:ad:57:67:cc:4c:e5:5f:b3:5b:24:0d: a0:0e:9c:d7:91:d3:ae:14:43:60:48:54:a2:56:02: ef:70:60:81:f0:44:32:f8:fe:b1:f3:02:ba:0f:d3: 25:fc:8d:b9:65:e2:99:77:9d:de:19:7f:b2:19:00: 0d:c0:c0:16:3c:e8:79:3f:36:3e:47:93:5c:e4:3c: c5:4a:08:ea:1f:5f:d9:a7:98:a4:b3:59:eb:56:4f: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:82:D2:AA:30:3B:BD:FE:E2:2C:64:AC:AD:0C:A7:4A:C8:06:E3:A2 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:64:08:58:f9:39:3a:3b:0b:79:88:d8:7a:17:6e:8d:27:81: 4e:9d:af:04:61:64:fa:70:98:e1:06:a8:5e:9f:f8:9c:27:43: 06:bf:aa:79:f5:49:06:d4:ee:a5:cb:86:0d:72:04:e2:9c:04: a7:82:4f:3f:f7:c0:96:10:1b:e2:9b:51:25:53:0c:bb:06:4e: e3:21:3c:1a:28:ad:1b:cd:bc:4e:dd:4b:97:79:38:6a:1e:81: 16:ec:32:d2:bd:49:c1:d8:f9:ca:78:25:e1:cc:5b:64:b8:0f: 91:ae:67:9c:a4:7d:98:da:cb:d9:32:29:80:92:a2:78:3e:74: cf:4e:02:f2:62:6a:55:81:80:c7:47:40:ba:d3:e7:9a:57:8e: c6:5c:86:17:a0:ae:18:ae:01:35:45:e1:d6:6f:ab:90:9b:51: a5:d1:e6:8a:ae:4a:e5:35:16:c2:72:4a:fc:32:c9:88:a7:f1: b1:cb:91:02:9c:c7:81:7b:fd:5a:00:da:f6:d5:e2:cd:bc:ed: 96:b0:4d:00:82:4a:f9:8e:a6:ee:e6:4a:ac:9b:32:87:45:4d: e9:d2:3e:e6:de:a3:c7:99:b0:7d:27:ae:6c:3e:d5:65:7c:d2: 79:4f:5a:a5:6e:98:09:b0:d3:50:bf:d8:3b:d9:46:65:6b:84: 42:9c:26:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFkjkovXFMxdsdFVIRNFqYvNVRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNjAzMjQxMzU1NDNaFw0yNjAzMjgwMDM5NDNaMDMxMTAvBgNV BAMTKEMwODJEMkFBMzAzQkJERkVFMjJDNjRBQ0FEMENBNzRBQzgwNkUzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTIjha9+XeIpUyXRr7yOabgbXv ocLG7Aw2CrWh0YnZCIUwLf9npmWZKQipaBppBQqbM6iO6b9K7OZHWAcpk9/QRYtI r7XpkVzcaATcTZt1JFF07+0zXo/umXpR9GCIFCDxY+ozGvxTcMNZmEZNFV9a6ZjG LGW8habGD0+vz9x5AkbBAy4C99AThDc5dESyYbyb1IPrdhq8W0UB/5xuvjzt708n tTk+UG+tV2fMTOVfs1skDaAOnNeR064UQ2BIVKJWAu9wYIHwRDL4/rHzAroP0yX8 jbll4pl3nd4Zf7IZAA3AwBY86Hk/Nj5Hk1zkPMVKCOofX9mnmKSzWetWT7bpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwILSqjA7vf7iLGSsrQynSsgG46IwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBkCFj5OTo7C3mI2HoXbo0ngU6drwRhZPpw mOEGqF6f+JwnQwa/qnn1SQbU7qXLhg1yBOKcBKeCTz/3wJYQG+KbUSVTDLsGTuMh PBoorRvNvE7dS5d5OGoegRbsMtK9ScHY+cp4JeHMW2S4D5GuZ5ykfZjay9kyKYCS ong+dM9OAvJialWBgMdHQLrT55pXjsZchhegrhiuATVF4dZvq5CbUaXR5oquSuU1 FsJySvwyyYin8bHLkQKcx4F7/VoA2vbV4s287ZawTQCCSvmOpu7mSqybModFTenS Pubeo8eZsH0nrmw+1WV80nlPWqVumAmw01C/2DvZRmVrhEKcJnc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:05 2026 by rpki-client