$ rpki-client -vvf repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft File: 9B0395E989465D693E38FF5140C2FABE1631B562.mft (raw, json) Hash identifier: 2vEKjmP2IXtRhwMSdVJjCJA6TM2wfoI26cLolXNgg5k= Subject key identifier: C0:55:7C:69:66:D4:B5:3A:EE:26:F5:C5:05:3D:AF:08:2C:3D:4F:1E Authority key identifier: 9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 Certificate issuer: /CN=9B0395E989465D693E38FF5140C2FABE1631B562 Certificate serial: 9A86FDE96777A22148C8687999636298BB130D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft Manifest number: 0117 Signing time: Tue 24 Mar 2026 10:10:06 +0000 Manifest this update: Tue 24 Mar 2026 10:05:06 +0000 Manifest next update: Fri 27 Mar 2026 20:23:06 +0000 Files and hashes: 1: 9B0395E989465D693E38FF5140C2FABE1631B562.crl (hash: vn31O0QZCpGmD0dewA5P8hkNdEHhn2NrGoQxeMB0ku0=) 2: 3130332e31382e3233322e302f32332d3234203d3e20313530323331.roa (hash: wUtK6lO7dD/y5QIQIRKJysOh0xNgmCTXdRc7wOm6Gq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9a:86:fd:e9:67:77:a2:21:48:c8:68:79:99:63:62:98:bb:13:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B0395E989465D693E38FF5140C2FABE1631B562 Validity Not Before: Mar 24 10:05:06 2026 GMT Not After : Mar 27 20:23:06 2026 GMT Subject: CN=C0557C6966D4B53AEE26F5C5053DAF082C3D4F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:56:1d:fc:a0:f8:8b:d0:3b:e0:71:f1:43: ea:fe:fb:7a:4b:cc:e4:b3:b7:93:89:58:92:6a:f7: 5b:37:3c:47:62:33:f7:d7:1e:4b:b6:30:2b:a4:53: 74:f7:32:56:f2:81:72:de:1a:45:0a:42:81:93:b9: a9:fe:05:9c:12:5e:ad:f9:77:19:7b:00:40:45:e3: ac:30:a9:a3:02:3c:4e:c7:bd:35:ea:68:ed:54:65: 86:89:93:5a:eb:99:44:05:d9:c3:1e:c9:19:ef:63: 5e:6a:67:85:7f:51:ee:1e:90:f4:99:90:49:ed:85: 26:53:72:86:36:f0:bf:a7:ff:62:4a:4f:05:38:8d: 34:cf:f1:ba:b5:70:73:0e:77:13:b5:47:25:53:47: 05:d5:59:00:c8:60:15:3d:ca:52:69:b7:b2:33:1d: df:20:6e:d4:e9:1c:81:6b:91:82:cd:9a:52:63:44: 07:2e:93:0c:eb:d5:f4:8f:7a:28:8e:ef:b9:5f:72: b3:40:66:d5:b9:d6:47:e9:10:e5:41:11:ee:46:01: 11:c6:f3:7a:d7:c0:d8:86:d6:46:be:ca:9b:bd:5b: 2f:13:0f:25:b8:4c:ba:5a:0c:19:72:74:0c:8f:e4: 7d:65:36:ef:41:e0:7b:98:c2:c2:fe:aa:6a:27:dc: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:55:7C:69:66:D4:B5:3A:EE:26:F5:C5:05:3D:AF:08:2C:3D:4F:1E X509v3 Authority Key Identifier: keyid:9B:03:95:E9:89:46:5D:69:3E:38:FF:51:40:C2:FA:BE:16:31:B5:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B0395E989465D693E38FF5140C2FABE1631B562.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7224191-bff0-4815-be0e-a2aa8d38d5a0/0/9B0395E989465D693E38FF5140C2FABE1631B562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:26:0b:f1:ed:d0:fc:81:8c:07:c7:91:62:b0:ef:53:5f:47: af:35:88:e6:2d:91:97:34:8d:08:80:96:e3:07:11:98:c1:f2: 98:77:68:8c:b1:54:af:76:77:8f:c4:66:7c:9f:c4:87:17:83: 89:67:55:6b:23:fc:c9:e8:8a:90:0d:01:a1:a8:7d:e0:48:9a: 25:1c:b6:05:61:35:7e:04:66:50:c1:e4:39:ad:d7:ad:f2:3e: 6e:2a:7e:1d:d8:e3:6e:73:ba:06:67:af:fa:21:ee:13:2f:cd: 27:f6:d8:ce:6a:29:b3:0b:55:9c:22:93:bf:df:e1:c7:f4:c4: 87:e8:39:4f:79:67:a6:e1:dd:84:3b:61:61:19:93:7d:16:42: 92:ed:24:71:30:15:d4:18:7e:fc:8b:75:79:09:e0:f4:b3:ae: 5e:30:33:8b:82:d1:4f:9d:f7:21:e3:2f:4a:83:e4:41:e3:92: a6:f6:4b:17:ff:fc:4c:3b:08:d4:07:f6:97:ca:5c:e4:54:dd: 9c:27:1d:c9:74:e7:b4:e4:7f:43:e7:f9:c6:1b:35:66:2c:ac: 7b:c6:fd:92:02:1d:81:12:c9:f1:74:bd:d3:f0:9f:7f:dc:de: 59:10:13:07:ee:98:da:19:fc:ed:c7:33:8d:81:e3:5e:e9:ed: 2e:21:72:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJqG/elnd6IhSMhoeZljYpi7Ew0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUx NjMxQjU2MjAeFw0yNjAzMjQxMDA1MDZaFw0yNjAzMjcyMDIzMDZaMDMxMTAvBgNV BAMTKEMwNTU3QzY5NjZENEI1M0FFRTI2RjVDNTA1M0RBRjA4MkMzRDRGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIlYd/KD4i9A74HHxQ+r++3pL zOSzt5OJWJJq91s3PEdiM/fXHku2MCukU3T3MlbygXLeGkUKQoGTuan+BZwSXq35 dxl7AEBF46wwqaMCPE7HvTXqaO1UZYaJk1rrmUQF2cMeyRnvY15qZ4V/Ue4ekPSZ kEnthSZTcoY28L+n/2JKTwU4jTTP8bq1cHMOdxO1RyVTRwXVWQDIYBU9ylJpt7Iz Hd8gbtTpHIFrkYLNmlJjRAcukwzr1fSPeiiO77lfcrNAZtW51kfpEOVBEe5GARHG 83rXwNiG1ka+ypu9Wy8TDyW4TLpaDBlydAyP5H1lNu9B4HuYwsL+qmon3IwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwFV8aWbUtTruJvXFBT2vCCw9Tx4wHwYDVR0j BBgwFoAUmwOV6YlGXWk+OP9RQML6vhYxtWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIyNDE5MS1iZmYwLTQ4MTUtYmUwZS1hMmFhOGQzOGQ1YTAvMC85QjAzOTVFOTg5 NDY1RDY5M0UzOEZGNTE0MEMyRkFCRTE2MzFCNTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZBQkUxNjMx QjU2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMjQxOTEtYmZmMC00ODE1LWJl MGUtYTJhYThkMzhkNWEwLzAvOUIwMzk1RTk4OTQ2NUQ2OTNFMzhGRjUxNDBDMkZB QkUxNjMxQjU2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwmC/Ht0PyBjAfHkWKw71NfR681iOYtkZc0 jQiAluMHEZjB8ph3aIyxVK92d4/EZnyfxIcXg4lnVWsj/MnoipANAaGofeBImiUc tgVhNX4EZlDB5Dmt163yPm4qfh3Y425zugZnr/oh7hMvzSf22M5qKbMLVZwik7/f 4cf0xIfoOU95Z6bh3YQ7YWEZk30WQpLtJHEwFdQYfvyLdXkJ4PSzrl4wM4uC0U+d 9yHjL0qD5EHjkqb2Sxf//Ew7CNQH9pfKXORU3ZwnHcl057Tkf0Pn+cYbNWYsrHvG /ZICHYESyfF0vdPwn3/c3lkQEwfumNoZ/O3HM42B417p7S4hcrc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:40 2026 by rpki-client