$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: LU3Hqu1Sgi2jR68xU2H2O9Y3s04O0MTw2KDNzDgVdYA= Subject key identifier: C3:0F:5C:2C:EF:79:D4:9C:0D:06:30:2D:13:45:E6:68:95:EC:BE:0E Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 2DD8D71A19FBF9B23EB523177F35AC8EB4173B9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 025E Signing time: Wed 25 Mar 2026 21:11:43 +0000 Manifest this update: Wed 25 Mar 2026 21:06:43 +0000 Manifest next update: Sat 28 Mar 2026 22:03:43 +0000 Files and hashes: 1: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: kmf/C2IV5F/oiloTbhFnnOjSNt4JgW0GFQaX4GMvD/U=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: 16REvE5kemlxlXUkBlf2MUSEFyN5rENLT9cPzHwRYNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d8:d7:1a:19:fb:f9:b2:3e:b5:23:17:7f:35:ac:8e:b4:17:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Mar 25 21:06:43 2026 GMT Not After : Mar 28 22:03:43 2026 GMT Subject: CN=C30F5C2CEF79D49C0D06302D1345E66895ECBE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:92:32:eb:18:4b:7d:79:88:bf:7b:3f:6d: e5:58:5d:1a:98:96:0c:08:1d:78:3a:ac:c0:c6:59: 79:51:35:72:b8:b8:74:52:bc:ad:2d:fb:db:7c:6d: c7:10:57:19:33:d1:fe:9f:72:06:1f:86:c4:54:aa: 4f:5f:4a:d7:15:1b:cc:a3:94:f9:30:af:ee:ff:91: 1c:b3:7b:84:db:03:94:25:48:78:eb:26:aa:04:aa: fb:9b:0f:50:43:45:fa:ab:33:1f:2e:65:9e:0d:02: e5:86:3d:88:18:00:e3:3e:72:d2:58:52:63:f2:5a: 83:0f:6f:c0:68:8b:a2:71:67:e4:72:64:38:60:10: c4:fa:9f:1a:cc:d5:04:5a:22:93:0c:4e:51:a3:e7: 3c:71:a6:34:75:ec:0e:50:20:d6:c9:c1:97:6c:f8: 07:f1:95:97:6b:0f:64:58:5b:53:dc:44:1a:55:42: 2d:ee:c8:2f:b5:55:e2:25:df:18:c2:03:bc:67:9f: a8:e1:6d:57:ea:5c:77:bd:7f:fc:5c:b3:48:84:52: ce:34:84:47:50:64:d6:ba:c2:30:cf:03:15:7e:ee: fe:db:b8:21:b1:a3:5d:2a:76:52:86:74:4a:2e:22: 13:71:8a:48:ab:68:6a:81:08:19:7a:ee:19:33:2e: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0F:5C:2C:EF:79:D4:9C:0D:06:30:2D:13:45:E6:68:95:EC:BE:0E X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f6:7b:55:db:4f:18:62:2d:e4:43:8c:65:e0:2b:b4:83:17: 98:d4:d8:b4:9f:62:9a:a2:d4:f9:12:21:01:ff:35:31:a9:c9: 5a:73:9c:e3:79:ff:8c:b3:bc:bb:04:88:57:59:77:80:e4:8f: c2:72:cd:65:8b:27:f2:15:99:f2:6b:43:3d:c6:7f:4b:0f:fa: 62:fd:89:23:46:42:d0:ab:b1:11:32:41:56:8f:1d:ee:a4:34: 9b:b8:94:98:28:1d:2e:44:bc:26:66:83:9a:b0:5e:db:9c:1a: 78:f0:61:00:c1:71:e6:36:16:18:3e:5a:80:60:0f:2c:d0:13: a0:91:62:6a:ba:3d:47:9e:d1:dc:f9:63:fe:4b:68:74:5d:14: cd:3c:0b:e2:4d:c4:71:8d:6d:c9:0c:d3:23:66:fa:b4:64:e9: 48:18:b2:d3:4e:11:4b:0a:2b:59:67:62:2e:71:21:46:8e:d9: 2c:f3:2f:17:70:3d:98:06:34:32:29:cc:0d:a4:a2:b5:e1:60: cc:a6:7a:03:60:78:a8:df:15:11:ce:54:f0:f1:4e:78:52:a0: ef:1f:03:8f:95:9c:b5:81:0e:77:ae:ac:ed:f3:ae:49:25:2d: a6:e3:fe:2a:28:3a:2c:95:f3:d5:56:a0:00:a2:f9:d4:c4:42: f1:52:0d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdjXGhn7+bI+tSMXfzWsjrQXO5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNjAzMjUyMTA2NDNaFw0yNjAzMjgyMjAzNDNaMDMxMTAvBgNV BAMTKEMzMEY1QzJDRUY3OUQ0OUMwRDA2MzAyRDEzNDVFNjY4OTVFQ0JFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvJIy6xhLfXmIv3s/beVYXRqY lgwIHXg6rMDGWXlRNXK4uHRSvK0t+9t8bccQVxkz0f6fcgYfhsRUqk9fStcVG8yj lPkwr+7/kRyze4TbA5QlSHjrJqoEqvubD1BDRfqrMx8uZZ4NAuWGPYgYAOM+ctJY UmPyWoMPb8Boi6JxZ+RyZDhgEMT6nxrM1QRaIpMMTlGj5zxxpjR17A5QINbJwZds +AfxlZdrD2RYW1PcRBpVQi3uyC+1VeIl3xjCA7xnn6jhbVfqXHe9f/xcs0iEUs40 hEdQZNa6wjDPAxV+7v7buCGxo10qdlKGdEouIhNxikiraGqBCBl67hkzLh8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUww9cLO951JwNBjAtE0XmaJXsvg4wHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv2e1XbTxhiLeRDjGXgK7SDF5jU2LSfYpqi 1PkSIQH/NTGpyVpznON5/4yzvLsEiFdZd4Dkj8JyzWWLJ/IVmfJrQz3Gf0sP+mL9 iSNGQtCrsREyQVaPHe6kNJu4lJgoHS5EvCZmg5qwXtucGnjwYQDBceY2Fhg+WoBg DyzQE6CRYmq6PUee0dz5Y/5LaHRdFM08C+JNxHGNbckM0yNm+rRk6UgYstNOEUsK K1lnYi5xIUaO2SzzLxdwPZgGNDIpzA2korXhYMymegNgeKjfFRHOVPDxTnhSoO8f A4+VnLWBDneurO3zrkklLabj/iooOiyV89VWoACi+dTEQvFSDU8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:08 2026 by rpki-client