$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft File: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft (raw, json) Hash identifier: JBQW7ZtWGm/LY1yu9su9u58CNPUk9erQ/Z42ELOlTrc= Subject key identifier: DF:34:0F:4D:20:BD:93:F1:85:B5:67:2A:7D:5E:72:41:F4:B1:02:A9 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 14971425E6B5416D177E916098AC6452EE881AAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft Manifest number: 0572 Signing time: Tue 24 Mar 2026 16:50:55 +0000 Manifest this update: Tue 24 Mar 2026 16:45:55 +0000 Manifest next update: Fri 27 Mar 2026 20:09:55 +0000 Files and hashes: 1: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: E3+NRC3VjXItTWrq3I3RCmXGmxhXv0rFF7yaUnokJmY=) 2: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: dZG8PuN4hDz7vnWbBJwf0vedp1FXcfJd17aOP8ITVq4=) 3: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: zV6VOfyU7gHl6iq1/boiJwTObcVc0Um3Mv8W2+pcczY=) 4: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: qaFCPFspiQeiO/D4iLrD1q+n5cnqG21DWLl7U5yS6HU=) 5: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: fmCDQtKS2ftUrbPcEbad1XBtr6cEi/QP2/W3MlVCX1c=) 6: 9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl (hash: KIMp2B/lJwZZGus8SR7uWiN1RHaJ3nIqTZ/87CEzmWw=) 7: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: VArGluacjPIXzb+nl1+PqiIKNzHKscV2RQj2F/IjCew=) 8: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: z6RH1urHvz4DWcpVUdgKl8GebYPf5sPgLD/rSpRR2GM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:97:14:25:e6:b5:41:6d:17:7e:91:60:98:ac:64:52:ee:88:1a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Mar 24 16:45:55 2026 GMT Not After : Mar 27 20:09:55 2026 GMT Subject: CN=DF340F4D20BD93F185B5672A7D5E7241F4B102A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3d:6a:07:f7:6a:32:73:61:a6:63:63:3c:88: 3f:14:c4:61:68:1e:2d:29:16:2a:d9:3a:03:f4:a1: df:8d:8e:62:33:a6:06:8e:df:40:78:58:6b:69:05: 6e:7b:0c:8c:df:5a:7a:ab:53:c4:17:1e:9e:6b:24: 05:12:e3:05:42:fe:80:9e:d3:24:f2:fd:ee:bd:63: 24:ef:c6:c0:b4:5b:fe:fe:01:25:76:11:48:da:16: ad:29:b0:96:8e:20:ed:d3:41:21:f1:85:0b:5e:45: 21:1f:bb:59:66:a1:17:08:b2:8f:1a:c2:f7:64:82: 2e:21:5e:7b:c7:4e:ff:a0:a8:77:71:e2:c3:dc:ea: 5d:61:98:c3:45:73:03:45:7c:04:13:f0:f5:a8:3c: 4b:84:1a:1f:dd:fb:68:27:ee:86:8b:73:a2:55:49: 93:69:7a:53:96:71:21:16:67:58:76:29:f5:30:51: c9:93:44:b1:05:29:14:fc:d1:5f:0e:b0:51:a7:72: 46:df:37:9e:8b:65:c5:48:14:a5:f8:a4:02:a7:0b: 84:8d:bf:e2:2a:45:59:f1:da:fc:c1:b7:94:39:0e: c0:9e:a9:39:d7:a7:c7:9e:19:7a:1c:b5:58:2a:ba: 15:6d:ed:aa:76:f8:9b:4a:fd:b3:71:a4:f2:63:7e: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:34:0F:4D:20:BD:93:F1:85:B5:67:2A:7D:5E:72:41:F4:B1:02:A9 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3d:5e:33:1a:d2:72:71:42:1e:39:f1:da:34:26:59:13:c8: de:5b:ef:9c:97:ee:0d:df:6f:c8:0c:1b:0f:7a:10:3d:78:af: 29:da:83:5c:dc:a6:a2:4e:b1:cd:bc:72:e2:68:bc:4c:ef:55: 9f:86:76:c7:c0:0b:c3:de:6c:b7:55:9e:b7:d9:18:04:58:f7: ed:a1:8c:da:b9:e3:7b:1e:f6:f3:1e:9a:c6:f2:87:67:62:d0: f2:1f:d7:1d:38:66:a2:48:40:e2:4e:4c:be:0d:ef:dc:96:41: 88:37:41:db:b3:53:53:7a:62:02:ca:c8:58:70:09:e4:f7:cf: c7:a1:94:88:26:5a:f1:94:d9:d4:c5:da:f4:7e:2a:f2:99:95: ed:d6:89:98:c2:22:f2:99:f0:fa:60:67:65:90:df:1d:4f:02: 7e:5c:0b:53:e3:91:b9:b2:4c:ce:56:f8:29:2a:03:44:e4:8a: 5b:8f:a0:8b:2b:54:33:0c:24:da:75:03:b7:07:f0:cd:f4:9a: e9:fd:5e:7c:2f:ab:25:ee:b4:48:24:9c:3f:a0:74:5b:88:4f: 79:38:5a:d0:db:cc:8c:cb:36:7c:49:7f:69:a7:2d:81:37:63: cd:9d:00:d0:02:be:c3:71:0c:2a:a8:e4:61:47:f8:4d:4e:fd: 8e:7e:f9:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJcUJea1QW0XfpFgmKxkUu6IGq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNjAzMjQxNjQ1NTVaFw0yNjAzMjcyMDA5NTVaMDMxMTAvBgNV BAMTKERGMzQwRjREMjBCRDkzRjE4NUI1NjcyQTdENUU3MjQxRjRCMTAyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0PWoH92oyc2GmY2M8iD8UxGFo Hi0pFirZOgP0od+NjmIzpgaO30B4WGtpBW57DIzfWnqrU8QXHp5rJAUS4wVC/oCe 0yTy/e69YyTvxsC0W/7+ASV2EUjaFq0psJaOIO3TQSHxhQteRSEfu1lmoRcIso8a wvdkgi4hXnvHTv+gqHdx4sPc6l1hmMNFcwNFfAQT8PWoPEuEGh/d+2gn7oaLc6JV SZNpelOWcSEWZ1h2KfUwUcmTRLEFKRT80V8OsFGnckbfN56LZcVIFKX4pAKnC4SN v+IqRVnx2vzBt5Q5DsCeqTnXp8eeGXoctVgquhVt7ap2+JtK/bNxpPJjfk8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zQPTSC9k/GFtWcqfV5yQfSxAqkwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiY2MwMGQtY2U3OS00MjE2LWE2 MmItZTNkNTBjYzc5NDQyLzAvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0 RjUxMkU0RkQ2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU9XjMa0nJxQh458do0JlkTyN5b75yX7g3f b8gMGw96ED14rynag1zcpqJOsc28cuJovEzvVZ+GdsfAC8PebLdVnrfZGARY9+2h jNq543se9vMemsbyh2di0PIf1x04ZqJIQOJOTL4N79yWQYg3QduzU1N6YgLKyFhw CeT3z8ehlIgmWvGU2dTF2vR+KvKZle3WiZjCIvKZ8PpgZ2WQ3x1PAn5cC1Pjkbmy TM5W+CkqA0TkiluPoIsrVDMMJNp1A7cH8M30mun9XnwvqyXutEgknD+gdFuIT3k4 WtDbzIzLNnxJf2mnLYE3Y82dANACvsNxDCqo5GFH+E1O/Y5++YE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:12:47 2026 by rpki-client