$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: 0p2XCnnv2dt2niZvUqzB09oUfS5xyY6piYs67ZUB0XQ= Subject key identifier: 72:2A:D7:99:AB:D5:7F:C8:C3:E4:00:0D:6C:39:5A:A2:AE:A2:F6:E1 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 42B78573057AFBA2A430CC11121435AB422EAA35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 02E2 Signing time: Thu 26 Mar 2026 06:00:45 +0000 Manifest this update: Thu 26 Mar 2026 05:55:45 +0000 Manifest next update: Sun 29 Mar 2026 14:05:45 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) 2: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: BgmSOIRy5qKRMJ5BwIzuwLcgotqCGsSfWZVIpmc9qUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b7:85:73:05:7a:fb:a2:a4:30:cc:11:12:14:35:ab:42:2e:aa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Mar 26 05:55:45 2026 GMT Not After : Mar 29 14:05:45 2026 GMT Subject: CN=722AD799ABD57FC8C3E4000D6C395AA2AEA2F6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:b8:18:cd:3a:68:39:a4:1d:4f:50:5b:4b: 11:7c:c6:fc:04:94:d7:16:93:89:e6:63:9b:88:86: aa:ea:16:83:04:92:b4:c9:a5:6e:3d:8b:1e:77:9e: 38:63:00:fa:d5:6c:6a:9c:bb:cb:68:d5:07:2b:81: 06:3c:5e:9e:a7:9f:0a:6f:43:86:9d:1f:79:59:47: 2c:da:12:c6:90:fa:d4:d1:08:d2:92:08:b6:25:8c: f9:95:9f:6b:31:1a:c4:c5:e5:b2:78:e7:5b:1e:e0: 51:2a:49:83:13:f1:87:75:41:f0:6f:9f:e4:1d:66: b5:47:97:5e:07:82:81:df:79:5e:d7:14:56:3a:de: 95:c8:57:8f:10:d4:8f:28:ca:16:b2:df:4b:78:a1: c4:9d:24:2e:01:3d:30:d2:09:18:a2:a4:d7:9a:59: 9e:0c:b4:b8:b4:59:4e:ba:60:74:fc:1f:3f:37:4e: ea:12:95:c2:75:83:68:80:68:de:87:d9:59:8e:90: 0c:69:2b:03:d8:69:a4:3d:4a:e4:9c:92:c8:52:b0: 90:63:7e:dd:c3:87:dc:e5:24:8f:e3:85:a5:a1:24: 8d:ce:20:06:f9:dd:e2:25:d2:08:c1:ab:c2:7a:55: 07:f4:c0:d1:99:65:31:1b:40:49:84:f1:b8:23:8d: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2A:D7:99:AB:D5:7F:C8:C3:E4:00:0D:6C:39:5A:A2:AE:A2:F6:E1 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:21:98:82:69:de:00:7b:9f:57:14:1f:99:5b:82:7a:06:92: fb:38:14:4f:8e:93:b1:11:19:fe:61:5d:94:d8:75:80:58:22: f6:e0:88:21:04:ad:59:7b:a3:4b:a6:1d:66:a5:13:9a:ac:71: 1e:b5:9d:fc:8a:50:fd:6e:c8:c2:d0:d8:11:75:f9:65:6b:da: 0c:b6:11:01:f5:73:cc:e1:df:d5:14:59:b9:57:28:c4:05:cc: 27:81:a2:41:78:53:e3:4e:5d:73:11:e3:d4:eb:69:76:39:54: 0a:c2:36:fb:a2:c0:7a:a3:29:1c:11:3d:e0:d6:fe:85:e6:8a: be:15:8b:45:e2:a7:bb:a6:b2:41:8a:4f:61:40:ab:3f:e7:f3: 6a:29:d7:a2:8f:68:56:d2:4c:16:d9:d2:f8:9b:27:64:6e:ed: 50:ae:71:7a:11:11:a1:36:e1:77:23:52:e4:19:75:fa:a4:16: 54:83:b2:0e:c3:75:f8:90:3b:79:50:cc:e9:b0:0e:2a:e5:12: 48:45:b1:af:e1:73:2a:55:b0:4d:e7:0d:9e:85:3f:c9:97:12: fc:42:83:8a:79:9c:91:f3:ce:7a:24:ff:0b:73:b2:65:08:05: 13:8f:f2:4e:4d:37:73:20:33:27:da:f1:94:4b:c0:20:ee:f8: 9d:92:ce:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQreFcwV6+6KkMMwREhQ1q0IuqjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNjAzMjYwNTU1NDVaFw0yNjAzMjkxNDA1NDVaMDMxMTAvBgNV BAMTKDcyMkFENzk5QUJENTdGQzhDM0U0MDAwRDZDMzk1QUEyQUVBMkY2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iLgYzTpoOaQdT1BbSxF8xvwE lNcWk4nmY5uIhqrqFoMEkrTJpW49ix53njhjAPrVbGqcu8to1QcrgQY8Xp6nnwpv Q4adH3lZRyzaEsaQ+tTRCNKSCLYljPmVn2sxGsTF5bJ451se4FEqSYMT8Yd1QfBv n+QdZrVHl14HgoHfeV7XFFY63pXIV48Q1I8oyhay30t4ocSdJC4BPTDSCRiipNea WZ4MtLi0WU66YHT8Hz83TuoSlcJ1g2iAaN6H2VmOkAxpKwPYaaQ9SuSckshSsJBj ft3Dh9zlJI/jhaWhJI3OIAb53eIl0gjBq8J6VQf0wNGZZTEbQEmE8bgjja5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcirXmavVf8jD5AANbDlaoq6i9uEwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQhmIJp3gB7n1cUH5lbgnoGkvs4FE+Ok7ER Gf5hXZTYdYBYIvbgiCEErVl7o0umHWalE5qscR61nfyKUP1uyMLQ2BF1+WVr2gy2 EQH1c8zh39UUWblXKMQFzCeBokF4U+NOXXMR49TraXY5VArCNvuiwHqjKRwRPeDW /oXmir4Vi0Xip7umskGKT2FAqz/n82op16KPaFbSTBbZ0vibJ2Ru7VCucXoREaE2 4XcjUuQZdfqkFlSDsg7DdfiQO3lQzOmwDirlEkhFsa/hcypVsE3nDZ6FP8mXEvxC g4p5nJHzznok/wtzsmUIBROP8k5NN3MgMyfa8ZRLwCDu+J2SzkE= -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:47 2026 by rpki-client