$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: 0xoIcvXKq0Ukbb0GC8vWt0BCGY15HD378RQ5T25v3/0= Subject key identifier: DC:8F:BD:79:48:EA:95:EE:1F:77:33:06:5E:FF:A3:0C:54:22:59:CE Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 56046C883F3CA84A7FCFD97CFC7454C24E72205C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 0186 Signing time: Mon 23 Mar 2026 22:41:29 +0000 Manifest this update: Mon 23 Mar 2026 22:36:29 +0000 Manifest next update: Fri 27 Mar 2026 08:28:29 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) 2: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: aMT5+Gm0fSsAnPFSFINiugZ3kksOHP7d5Iqy7IUlxPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:04:6c:88:3f:3c:a8:4a:7f:cf:d9:7c:fc:74:54:c2:4e:72:20:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Mar 23 22:36:29 2026 GMT Not After : Mar 27 08:28:29 2026 GMT Subject: CN=DC8FBD7948EA95EE1F7733065EFFA30C542259CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:5c:13:95:63:91:46:13:90:73:14:a3:18: e1:a7:07:40:03:02:96:12:f6:21:6d:73:59:2b:5c: 25:2d:2e:f7:ef:68:12:c6:c4:12:ec:f3:fe:62:27: 01:7c:63:75:95:ba:41:19:5a:08:79:68:05:e2:79: 99:32:2b:df:a1:7c:8c:4a:d0:29:3d:a3:62:98:a0: 13:d1:8d:04:e4:74:8c:5d:39:df:6c:31:ae:b9:fa: 03:1c:40:cb:82:5f:df:2b:f9:9e:57:1b:c9:98:ca: e8:2e:46:dc:97:bb:6f:66:4d:9f:c9:e6:37:44:8e: 42:f9:22:89:1c:47:70:f4:85:2e:f5:fe:ad:c3:b1: cf:1e:a6:50:4d:f4:3a:ef:52:b3:91:89:24:e2:b0: 54:70:c4:eb:60:58:86:05:69:9b:f1:58:d5:df:2e: 9f:bb:d5:f4:a7:be:0f:99:e0:c1:17:97:27:da:c0: c2:48:59:e7:38:b9:cb:2a:3a:ba:69:13:34:f8:80: d4:12:c8:98:fa:6e:08:cd:25:83:81:90:67:84:df: 36:cd:ab:a6:91:9a:59:ac:26:6f:25:8a:b3:2c:67: 5e:cd:13:40:77:a3:f5:4d:3d:e2:0b:3f:60:b4:c0: b0:08:78:a7:75:41:99:1c:93:4b:89:5a:49:96:e5: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8F:BD:79:48:EA:95:EE:1F:77:33:06:5E:FF:A3:0C:54:22:59:CE X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:21:6c:05:ba:30:ae:39:f0:e5:aa:5d:7d:b8:10:23:f6:8f: 89:e8:8e:7b:ae:35:1e:04:51:29:3a:b8:9a:f6:8d:ff:56:ea: c6:30:f6:6d:3f:24:36:e2:e1:34:11:af:d1:62:74:b2:5b:0c: 53:f3:95:f9:e5:fb:70:04:e8:90:a1:9c:26:e5:e2:46:2a:6a: 50:6d:ad:de:fe:02:73:97:4a:ce:85:8e:59:e6:3d:2a:5d:43: fe:31:ca:92:7c:64:d0:97:27:cd:25:7f:6b:29:4a:f8:c9:20: fc:43:92:f2:f3:4e:4a:c4:d4:12:18:42:a2:12:ac:a1:07:5b: 42:b8:92:fe:b5:52:e1:2b:aa:4e:0f:83:ec:88:94:38:51:a5: 64:51:5f:aa:6c:6d:7c:cf:38:ac:b2:7a:38:7b:cc:02:13:e4: a2:d8:ab:de:a2:db:2a:5e:23:b1:29:7b:8c:d3:da:98:c4:29: 0e:0b:09:23:b9:4a:43:c2:ea:3f:ff:18:42:98:60:46:4a:ae: 91:a4:75:12:58:3d:1b:25:1c:0a:42:72:6a:d0:fb:14:29:9f: 6f:ce:d8:d8:35:c3:da:07:06:e8:4d:d9:9c:83:01:f6:d9:6f: 96:b1:a9:b9:98:65:24:e9:a1:b4:64:6f:1f:db:72:85:a9:b3: fb:ea:1f:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgRsiD88qEp/z9l8/HRUwk5yIFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNjAzMjMyMjM2MjlaFw0yNjAzMjcwODI4MjlaMDMxMTAvBgNV BAMTKERDOEZCRDc5NDhFQTk1RUUxRjc3MzMwNjVFRkZBMzBDNTQyMjU5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjFwTlWORRhOQcxSjGOGnB0AD ApYS9iFtc1krXCUtLvfvaBLGxBLs8/5iJwF8Y3WVukEZWgh5aAXieZkyK9+hfIxK 0Ck9o2KYoBPRjQTkdIxdOd9sMa65+gMcQMuCX98r+Z5XG8mYyuguRtyXu29mTZ/J 5jdEjkL5IokcR3D0hS71/q3Dsc8eplBN9DrvUrORiSTisFRwxOtgWIYFaZvxWNXf Lp+71fSnvg+Z4MEXlyfawMJIWec4ucsqOrppEzT4gNQSyJj6bgjNJYOBkGeE3zbN q6aRmlmsJm8lirMsZ17NE0B3o/VNPeILP2C0wLAIeKd1QZkck0uJWkmW5fXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3I+9eUjqle4fdzMGXv+jDFQiWc4wHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8hbAW6MK458OWqXX24ECP2j4nojnuuNR4E USk6uJr2jf9W6sYw9m0/JDbi4TQRr9FidLJbDFPzlfnl+3AE6JChnCbl4kYqalBt rd7+AnOXSs6FjlnmPSpdQ/4xypJ8ZNCXJ80lf2spSvjJIPxDkvLzTkrE1BIYQqIS rKEHW0K4kv61UuErqk4Pg+yIlDhRpWRRX6psbXzPOKyyejh7zAIT5KLYq96i2ype I7Epe4zT2pjEKQ4LCSO5SkPC6j//GEKYYEZKrpGkdRJYPRslHApCcmrQ+xQpn2/O 2Ng1w9oHBuhN2ZyDAfbZb5axqbmYZSTpobRkbx/bcoWps/vqH2Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:13 2026 by rpki-client