$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: hrSlvgeq4NLZNkj1JFaIMmR8t2IPibvv+Zjd7Ib6gj0= Subject key identifier: E7:A0:29:24:46:81:A4:7A:A8:2F:D0:94:F7:22:24:AA:0E:3A:AF:0C Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 6AA95B7BB364362B3043A560F6F216398731E533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 04B1 Signing time: Tue 24 Mar 2026 22:11:13 +0000 Manifest this update: Tue 24 Mar 2026 22:06:13 +0000 Manifest next update: Sat 28 Mar 2026 07:27:13 +0000 Files and hashes: 1: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: /yyFGZZFwEz4QbtbcllFlYskKG6GOBtA5r757OUjICI=) 2: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: xjNgDeRMgF2rvQrnjQijkWjQJOO6HqOFcQsiUsDKJMg=) 3: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: AVL+dQA9MipPaxVIeJbGk8qimnAmyuom1Scld/9M2rM=) 4: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: pKHdGJHsGSGfDl46o2wosXGehRbXUqIap7Vy4E4vB9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a9:5b:7b:b3:64:36:2b:30:43:a5:60:f6:f2:16:39:87:31:e5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Mar 24 22:06:13 2026 GMT Not After : Mar 28 07:27:13 2026 GMT Subject: CN=E7A029244681A47AA82FD094F72224AA0E3AAF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ca:e0:ae:97:8f:10:c3:49:6d:dd:f7:b7:e0: 7d:cf:47:c4:95:22:4a:74:13:9a:7b:90:69:cf:56: e9:c8:ba:f0:94:11:b1:1f:8f:cb:fe:e2:23:c0:2d: f1:51:53:83:79:97:5f:14:25:e4:7d:eb:1e:58:d2: 78:f8:21:93:e3:51:39:19:b5:55:2e:92:22:9a:bd: 85:d9:c0:91:20:dc:38:d3:05:b4:23:8a:4a:19:aa: 85:87:56:00:0e:23:c8:c7:76:27:88:f2:be:37:14: 8a:3f:89:08:2d:36:db:f6:79:26:31:c4:c1:4d:b0: b8:c6:94:71:c7:0d:38:5a:b5:d9:0b:5e:74:a2:ca: 63:67:4c:b3:bb:1a:f3:2c:b4:bd:9e:19:4e:a7:68: a8:3d:fc:60:51:1e:69:8c:e3:ed:08:5f:d7:a9:52: 53:cc:b6:00:77:78:7e:d8:8d:66:cd:50:a9:5d:27: af:7c:21:37:eb:25:ff:d9:0b:47:59:39:7a:1b:f5: 5c:aa:cf:a9:55:97:08:e6:30:54:1a:58:44:80:06: d3:15:43:c8:32:37:2a:56:03:47:83:17:db:89:76: a5:02:3f:d9:ad:50:dd:9c:2e:ee:3e:e7:97:51:7f: fa:e3:2e:76:ed:21:88:2a:3d:29:1b:f8:71:b6:8b: 97:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:29:24:46:81:A4:7A:A8:2F:D0:94:F7:22:24:AA:0E:3A:AF:0C X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3d:cb:2c:c8:3e:da:73:b6:1e:0b:77:fc:15:9d:66:5c:44: 2a:87:5b:e4:5a:3f:27:de:d1:6f:ef:bb:7f:cd:06:77:af:15: 24:5e:49:b3:dc:4f:47:8e:b9:23:73:c3:3e:a8:be:eb:25:c2: ce:ab:6a:96:94:d2:63:6c:01:39:f7:5a:4c:38:c6:8e:0f:4d: b9:90:05:24:6c:07:cf:54:ce:d9:57:03:0c:ab:b2:8f:1a:f6: e2:35:38:6f:dd:ed:62:1f:85:b4:44:74:a3:e3:0a:05:42:d4: 76:4d:a6:7b:3d:d8:99:93:4f:1e:b1:45:56:71:6a:c7:db:b5: 98:27:87:e8:5c:40:68:cb:76:b3:8a:5c:ea:01:6c:0d:89:5e: 0f:21:0c:bf:25:47:d9:e0:b2:cd:40:7c:77:e3:d8:a6:46:ad: 2f:d9:d8:3a:40:ce:68:46:97:95:99:31:21:13:d4:80:d3:c2: 86:52:53:00:fc:d0:ec:81:80:bc:6f:f0:87:9e:c0:fa:85:19: 52:29:4d:e3:01:3b:2b:1f:4b:0a:cc:b9:f1:ca:b8:ca:61:3c: d7:94:06:dc:2d:da:e0:0e:ef:c8:6a:29:39:70:df:fd:c2:d3: 8a:8b:80:22:da:a6:11:a0:6d:72:df:76:27:af:10:42:46:44: c9:9c:30:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqlbe7NkNiswQ6Vg9vIWOYcx5TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNjAzMjQyMjA2MTNaFw0yNjAzMjgwNzI3MTNaMDMxMTAvBgNV BAMTKEU3QTAyOTI0NDY4MUE0N0FBODJGRDA5NEY3MjIyNEFBMEUzQUFGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5yuCul48Qw0lt3fe34H3PR8SV Ikp0E5p7kGnPVunIuvCUEbEfj8v+4iPALfFRU4N5l18UJeR96x5Y0nj4IZPjUTkZ tVUukiKavYXZwJEg3DjTBbQjikoZqoWHVgAOI8jHdieI8r43FIo/iQgtNtv2eSYx xMFNsLjGlHHHDThatdkLXnSiymNnTLO7GvMstL2eGU6naKg9/GBRHmmM4+0IX9ep UlPMtgB3eH7YjWbNUKldJ698ITfrJf/ZC0dZOXob9Vyqz6lVlwjmMFQaWESABtMV Q8gyNypWA0eDF9uJdqUCP9mtUN2cLu4+55dRf/rjLnbtIYgqPSkb+HG2i5ejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU56ApJEaBpHqoL9CU9yIkqg46rwwwHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE89yyzIPtpzth4Ld/wVnWZcRCqHW+RaPyfe 0W/vu3/NBnevFSReSbPcT0eOuSNzwz6ovuslws6rapaU0mNsATn3Wkw4xo4PTbmQ BSRsB89UztlXAwyrso8a9uI1OG/d7WIfhbREdKPjCgVC1HZNpns92JmTTx6xRVZx asfbtZgnh+hcQGjLdrOKXOoBbA2JXg8hDL8lR9ngss1AfHfj2KZGrS/Z2DpAzmhG l5WZMSET1IDTwoZSUwD80OyBgLxv8IeewPqFGVIpTeMBOysfSwrMufHKuMphPNeU Btwt2uAO78hqKTlw3/3C04qLgCLaphGgbXLfdievEEJGRMmcMBI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:04:07 2026 by rpki-client