$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: 2ACk0cd/ECAqCLD9HKQ04sEt3xKsjAjFthr5LOgbzsQ= Subject key identifier: 81:F6:11:A2:0A:FD:ED:A8:2A:5F:C0:F7:F2:A8:DC:A6:B2:80:6D:B9 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 177CCBAC004CAD20966E01E60584EC85805538B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 0232 Signing time: Tue 24 Mar 2026 07:21:59 +0000 Manifest this update: Tue 24 Mar 2026 07:16:59 +0000 Manifest next update: Fri 27 Mar 2026 13:37:59 +0000 Files and hashes: 1: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: J0ofTcsAAc3ZYTsycvtxagZLwvWpqrpTFEDO4TnCtl0=) 2: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 6M2tSRAEtO4icIKg0WJOGaj3E1zsgEWIzLxTXHoBXWE=) 3: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: Z0YSL1jUGUcMlhyqmc0kLVGK6jk4OSIM3dOB14d1j48=) 4: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: Qbfj7YZ+Tv9kxXnnd1sm955UDQ2gPaQwP9s5E0g+wJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7c:cb:ac:00:4c:ad:20:96:6e:01:e6:05:84:ec:85:80:55:38:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Mar 24 07:16:59 2026 GMT Not After : Mar 27 13:37:59 2026 GMT Subject: CN=81F611A20AFDEDA82A5FC0F7F2A8DCA6B2806DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:71:89:d7:e5:a2:38:47:f9:5e:94:6d:24:39: ca:4a:c9:41:9d:7a:13:82:db:71:67:ab:b2:94:01: e7:4d:85:df:a2:8f:21:75:49:2c:32:42:fd:f1:e8: 48:c2:11:ab:d7:3c:66:87:6b:41:f0:58:80:c4:57: 65:f1:97:95:27:4b:3f:91:3e:95:4d:ef:35:0d:52: 58:7f:72:23:1d:54:77:53:f4:a5:7d:a2:70:34:45: 5c:57:c8:e2:a4:56:fe:f9:01:de:71:05:f0:5a:bf: d0:53:3a:18:65:8b:cc:4b:8c:df:fa:25:2d:d2:34: 5f:ff:fd:bd:41:c8:ac:72:ec:89:2c:71:94:f9:82: c2:ea:6c:69:8d:6a:03:ff:cc:39:86:43:db:6d:cc: 5f:10:bd:7b:7e:b4:1a:c5:cb:59:41:42:b1:8e:95: 7a:da:70:bf:d5:ca:3e:e7:7d:b9:b7:a8:35:df:80: 94:e7:08:4f:a5:af:1f:4d:29:70:f1:ec:26:0b:18: 22:aa:2b:06:41:03:00:5c:ea:27:89:d7:b1:d0:48: 5f:5c:c0:eb:89:03:f9:2d:0c:75:e4:e6:ea:b3:04: 8f:0a:e7:dc:a2:83:2c:4b:b4:91:8d:71:5d:1d:d0: 24:bd:ea:d0:05:aa:ac:7a:83:98:b2:e1:4a:f7:5f: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F6:11:A2:0A:FD:ED:A8:2A:5F:C0:F7:F2:A8:DC:A6:B2:80:6D:B9 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:72:b8:17:48:60:5a:aa:30:2b:8b:52:f3:90:26:6d:78:f8: 47:b9:f6:ae:48:68:50:90:f1:80:cb:3b:a5:e3:5d:5c:19:85: aa:fb:18:6f:b7:94:05:13:42:e3:d6:1f:41:a4:2d:38:ea:88: a8:8b:a3:72:24:d9:83:77:a9:73:d9:4e:54:f2:60:d6:26:3b: e2:f3:36:7a:2d:56:d9:17:03:27:f1:11:b0:25:f6:c9:b8:7d: b3:0b:7e:ae:03:d5:91:1b:68:83:bf:f7:21:79:7b:3c:eb:96: e2:a5:28:9d:d5:3c:b7:f6:79:68:41:80:24:95:38:ed:f9:18: 11:f3:1f:02:8f:6f:cc:f8:e9:58:be:58:5c:76:b8:f8:3b:51: f0:f7:79:bf:fc:99:8c:e1:80:cb:05:8d:42:d9:53:6f:d3:d3: ac:af:79:10:5a:6a:48:20:f4:fa:a4:fb:90:92:c7:bc:ae:8e: cd:16:c9:88:9c:79:b3:63:33:f3:04:e6:c5:72:d2:67:89:c1: 7d:2d:75:70:27:68:f3:fc:15:1e:70:96:f9:60:4c:b5:9a:fa: 29:46:64:ea:e2:30:0f:aa:94:95:44:4f:11:f0:71:6b:a0:56: 17:c6:87:72:47:40:74:aa:e3:4e:9e:7e:be:80:63:c6:00:ef: 16:40:4f:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3zLrABMrSCWbgHmBYTshYBVOLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNjAzMjQwNzE2NTlaFw0yNjAzMjcxMzM3NTlaMDMxMTAvBgNV BAMTKDgxRjYxMUEyMEFGREVEQTgyQTVGQzBGN0YyQThEQ0E2QjI4MDZEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5cYnX5aI4R/lelG0kOcpKyUGd ehOC23Fnq7KUAedNhd+ijyF1SSwyQv3x6EjCEavXPGaHa0HwWIDEV2Xxl5UnSz+R PpVN7zUNUlh/ciMdVHdT9KV9onA0RVxXyOKkVv75Ad5xBfBav9BTOhhli8xLjN/6 JS3SNF///b1ByKxy7IkscZT5gsLqbGmNagP/zDmGQ9ttzF8QvXt+tBrFy1lBQrGO lXracL/Vyj7nfbm3qDXfgJTnCE+lrx9NKXDx7CYLGCKqKwZBAwBc6ieJ17HQSF9c wOuJA/ktDHXk5uqzBI8K59yigyxLtJGNcV0d0CS96tAFqqx6g5iy4Ur3X/1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfYRogr97agqX8D38qjcprKAbbkwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJyuBdIYFqqMCuLUvOQJm14+Ee59q5IaFCQ 8YDLO6XjXVwZhar7GG+3lAUTQuPWH0GkLTjqiKiLo3Ik2YN3qXPZTlTyYNYmO+Lz NnotVtkXAyfxEbAl9sm4fbMLfq4D1ZEbaIO/9yF5ezzrluKlKJ3VPLf2eWhBgCSV OO35GBHzHwKPb8z46Vi+WFx2uPg7UfD3eb/8mYzhgMsFjULZU2/T06yveRBaakgg 9Pqk+5CSx7yujs0WyYicebNjM/ME5sVy0meJwX0tdXAnaPP8FR5wlvlgTLWa+ilG ZOriMA+qlJVETxHwcWugVhfGh3JHQHSq406efr6AY8YA7xZATxU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:37 2026 by rpki-client