$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: xtrcqIHEf9R8xrX1oVSS5UKPMJ54yG4+5GhWRBh1VTM= Subject key identifier: 72:AA:CD:81:1A:E7:F3:70:74:6D:9F:10:A8:D7:56:88:ED:33:3F:69 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 306C196D28456434997BCD36532A0FEDE976690B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0262 Signing time: Wed 25 Mar 2026 02:01:12 +0000 Manifest this update: Wed 25 Mar 2026 01:56:12 +0000 Manifest next update: Sat 28 Mar 2026 06:19:12 +0000 Files and hashes: 1: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 2: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 3: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 4: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 5: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 6: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: TNC3GkOTeV87pqUEJSIpRb/pPZkMzZxuI1CJYeudIOY=) 7: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=) 8: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 9: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 10: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6c:19:6d:28:45:64:34:99:7b:cd:36:53:2a:0f:ed:e9:76:69:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Mar 25 01:56:12 2026 GMT Not After : Mar 28 06:19:12 2026 GMT Subject: CN=72AACD811AE7F370746D9F10A8D75688ED333F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:92:33:f2:dc:1e:25:77:40:a2:5a:11:97: 7a:5e:29:8b:44:86:dd:a3:46:15:08:6c:85:34:27: 7a:57:14:ad:ce:91:c7:4f:6f:52:ef:f7:5a:23:61: 40:cf:d4:3b:00:bb:7a:e1:5f:90:ef:c2:0f:7f:98: d8:87:cc:b5:5d:01:44:57:f7:6b:6e:ec:e2:ee:fc: 31:01:24:ba:81:23:91:7c:60:d3:b6:8b:95:b4:84: b2:06:6a:c1:80:82:4b:38:1e:52:94:f5:37:e0:8c: 5d:eb:fe:ad:51:b7:bf:dc:87:bd:50:20:f7:ea:23: 20:f8:93:31:30:6c:58:ce:39:61:7b:05:15:3f:a6: 06:bd:4e:d8:f8:98:96:f6:b5:87:89:0d:74:e9:40: b0:3f:2c:b7:7c:3e:83:9f:68:ea:cc:4e:ca:4b:fd: 74:52:d6:eb:03:18:15:73:08:ad:fe:27:a0:f0:ff: c8:41:d3:fd:8b:ea:d6:c0:75:9f:72:14:9b:c8:86: e1:35:f5:fc:24:ec:29:f7:60:63:6f:75:10:bc:bd: c9:f8:b2:1f:3d:55:39:07:cd:e1:95:e3:1c:bd:84: e4:eb:aa:3b:96:79:ce:fa:f7:54:32:db:8e:db:42: 9f:e5:3a:78:fb:a2:cd:63:cf:3f:6b:99:e9:67:b7: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:CD:81:1A:E7:F3:70:74:6D:9F:10:A8:D7:56:88:ED:33:3F:69 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d1:b0:ae:d1:14:d1:0d:ba:4d:da:10:04:b6:fb:d8:88:53: dc:12:52:67:3b:8c:50:8b:88:b5:69:ea:65:c3:d1:c6:03:49: 7a:5e:85:8a:37:e4:df:01:14:f9:7d:53:a3:f1:8b:d0:f4:79: 96:37:3e:ae:c6:fe:77:55:1c:95:3a:5c:48:f8:e5:b0:fa:d8: eb:e7:b2:4a:5e:a8:2f:63:41:61:7e:32:21:07:c2:0c:3a:c9: 7a:49:d0:bc:44:13:fd:0e:3a:6c:ea:ab:65:61:a3:50:5b:0c: 72:82:1d:a2:45:29:f9:39:7b:e7:63:20:a0:57:f6:aa:a9:af: 04:69:91:b3:71:5b:c8:15:64:46:c1:93:9f:ab:4e:a8:ab:28: e6:f9:9b:65:5e:75:72:37:7b:ea:f9:11:2d:95:d5:24:4c:60: 49:9a:c2:f7:dd:d6:eb:84:72:a4:bd:dd:d3:7c:bd:2e:d5:93: a3:a7:78:b7:09:6c:5b:9c:41:cd:82:0e:b4:0a:1a:fd:c6:19: ab:51:5c:b0:e5:97:ba:c5:b5:c3:f8:60:ea:1e:ae:c2:c8:64: 1d:12:e8:19:18:ba:99:59:7c:ff:15:db:5f:e8:f4:83:a5:53: 91:1b:09:ab:ad:c5:62:4a:90:76:33:f1:27:4c:09:b8:ad:6b: bb:16:99:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGwZbShFZDSZe802UyoP7el2aQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNjAzMjUwMTU2MTJaFw0yNjAzMjgwNjE5MTJaMDMxMTAvBgNV BAMTKDcyQUFDRDgxMUFFN0YzNzA3NDZEOUYxMEE4RDc1Njg4RUQzMzNGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nZIz8tweJXdAoloRl3peKYtE ht2jRhUIbIU0J3pXFK3OkcdPb1Lv91ojYUDP1DsAu3rhX5Dvwg9/mNiHzLVdAURX 92tu7OLu/DEBJLqBI5F8YNO2i5W0hLIGasGAgks4HlKU9TfgjF3r/q1Rt7/ch71Q IPfqIyD4kzEwbFjOOWF7BRU/pga9Ttj4mJb2tYeJDXTpQLA/LLd8PoOfaOrMTspL /XRS1usDGBVzCK3+J6Dw/8hB0/2L6tbAdZ9yFJvIhuE19fwk7Cn3YGNvdRC8vcn4 sh89VTkHzeGV4xy9hOTrqjuWec7691Qy247bQp/lOnj7os1jzz9rmelnt2FnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqrNgRrn83B0bZ8QqNdWiO0zP2kwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErRsK7RFNENuk3aEAS2+9iIU9wSUmc7jFCL iLVp6mXD0cYDSXpehYo35N8BFPl9U6Pxi9D0eZY3Pq7G/ndVHJU6XEj45bD62Ovn skpeqC9jQWF+MiEHwgw6yXpJ0LxEE/0OOmzqq2Vho1BbDHKCHaJFKfk5e+djIKBX 9qqprwRpkbNxW8gVZEbBk5+rTqirKOb5m2VedXI3e+r5ES2V1SRMYEmawvfd1uuE cqS93dN8vS7Vk6OneLcJbFucQc2CDrQKGv3GGatRXLDll7rFtcP4YOoersLIZB0S 6BkYuplZfP8V21/o9IOlU5EbCautxWJKkHYz8SdMCbita7sWmfw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:43:45 2026 by rpki-client