$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: LZ41kwnBu7+oCnm77iPmw0ui5zv70SDX+QzIGd2gMCA= Subject key identifier: BA:44:6D:2C:5E:BA:C8:0C:18:10:E2:9B:F7:24:69:BC:2D:11:BC:9E Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 5F1D8DA7EA1DC36CBFFCE65D6171D0FEE67F9606 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: DF Signing time: Wed 25 Mar 2026 02:40:54 +0000 Manifest this update: Wed 25 Mar 2026 02:35:54 +0000 Manifest next update: Sat 28 Mar 2026 08:57:54 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: cJL7o+8fsK8/wnC+27360tCxEMPESOc9TZdTmtPUgXk=) 3: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1d:8d:a7:ea:1d:c3:6c:bf:fc:e6:5d:61:71:d0:fe:e6:7f:96:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Mar 25 02:35:54 2026 GMT Not After : Mar 28 08:57:54 2026 GMT Subject: CN=BA446D2C5EBAC80C1810E29BF72469BC2D11BC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:c6:07:39:bb:00:3d:8a:c3:96:8e:1e:48: a8:e2:ea:e2:f6:22:20:71:83:3b:d1:f7:aa:39:03: 29:1b:3b:70:16:61:05:81:eb:84:28:04:42:33:36: 85:6b:a9:86:70:77:ce:46:7f:10:55:d3:d5:6d:ee: ef:a9:32:ad:45:17:c5:a6:f8:05:7e:0d:c7:f3:1f: 7c:3e:05:b4:74:7e:ff:6e:70:0d:13:9a:53:e1:9f: cb:93:a4:72:7c:80:e4:98:f5:b3:28:c0:4b:90:44: d8:a5:0d:bb:d8:df:e1:f6:12:21:e3:4c:5d:d2:ea: df:74:4b:08:a8:2b:52:11:1d:78:2e:02:29:52:cd: c7:2c:c0:ac:9b:3d:1b:7c:9f:b6:b9:e8:f2:21:6f: 3f:97:98:0c:82:81:28:80:e6:1a:cd:35:ef:9c:d2: 5d:1d:ae:ec:eb:b1:fd:c3:08:07:d3:f9:86:6c:c3: 81:dd:57:68:aa:84:a9:5d:3d:ad:b4:8a:f8:57:0c: 69:ee:42:ac:12:e3:b2:96:ce:07:b8:e8:a4:bb:10: cc:1f:7f:4d:7b:3d:21:70:b4:04:2f:02:3e:a0:31: 3e:0e:7e:3b:3e:59:12:38:ff:19:49:01:50:2b:7c: da:0d:91:05:77:09:65:30:42:e4:6f:fb:ea:0f:c8: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:44:6D:2C:5E:BA:C8:0C:18:10:E2:9B:F7:24:69:BC:2D:11:BC:9E X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:8d:46:71:91:7a:87:74:e8:61:b8:dc:42:1f:f4:23:cb: d4:9d:bb:0d:fd:b3:c3:f0:f4:f2:ab:26:e7:45:69:ca:60:63: cc:9d:17:d3:c0:49:be:59:5b:d6:13:98:cb:58:14:77:35:b1: 6f:06:34:04:e5:6e:8d:8c:83:bc:cc:76:e1:b8:7c:a8:0f:b2: 44:b8:78:39:b0:27:c9:a2:54:21:86:6e:24:14:dd:4f:26:48: cf:71:17:42:7e:df:50:58:a1:87:8b:c2:e1:29:99:e6:10:48: 95:df:9b:69:c8:d7:ec:02:9b:cf:04:02:1e:f2:24:37:26:f2: 1c:a0:03:1f:87:57:47:cd:55:3a:c8:94:b1:d6:88:a9:a9:fd: 91:43:6c:b3:4b:47:1e:f9:51:6c:82:9e:79:e6:96:45:12:df: 6f:09:d2:d1:db:ce:18:64:2e:4c:bd:02:4a:b5:b3:38:7c:0c: e5:05:bf:b1:d9:1d:18:26:4c:c6:ad:67:93:90:fe:11:b7:bf: 5d:83:ba:07:77:18:d5:13:8d:2d:b2:63:fd:7c:60:dd:c8:a6: 7e:44:8a:71:8c:bc:4c:ee:fc:b1:cd:4a:e9:77:ce:1d:13:81: 34:ab:50:84:23:f3:64:da:34:97:99:14:40:40:0d:95:21:7d: 5d:91:47:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXx2Np+odw2y//OZdYXHQ/uZ/lgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjAzMjUwMjM1NTRaFw0yNjAzMjgwODU3NTRaMDMxMTAvBgNV BAMTKEJBNDQ2RDJDNUVCQUM4MEMxODEwRTI5QkY3MjQ2OUJDMkQxMUJDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDre8YHObsAPYrDlo4eSKji6uL2 IiBxgzvR96o5AykbO3AWYQWB64QoBEIzNoVrqYZwd85GfxBV09Vt7u+pMq1FF8Wm +AV+DcfzH3w+BbR0fv9ucA0TmlPhn8uTpHJ8gOSY9bMowEuQRNilDbvY3+H2EiHj TF3S6t90SwioK1IRHXguAilSzccswKybPRt8n7a56PIhbz+XmAyCgSiA5hrNNe+c 0l0druzrsf3DCAfT+YZsw4HdV2iqhKldPa20ivhXDGnuQqwS47KWzge46KS7EMwf f017PSFwtAQvAj6gMT4Ofjs+WRI4/xlJAVArfNoNkQV3CWUwQuRv++oPyGwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukRtLF66yAwYEOKb9yRpvC0RvJ4wHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH4jUZxkXqHdOhhuNxCH/Qjy9Sduw39s8Pw 9PKrJudFacpgY8ydF9PASb5ZW9YTmMtYFHc1sW8GNATlbo2Mg7zMduG4fKgPskS4 eDmwJ8miVCGGbiQU3U8mSM9xF0J+31BYoYeLwuEpmeYQSJXfm2nI1+wCm88EAh7y JDcm8hygAx+HV0fNVTrIlLHWiKmp/ZFDbLNLRx75UWyCnnnmlkUS328J0tHbzhhk Lky9Akq1szh8DOUFv7HZHRgmTMatZ5OQ/hG3v12Dugd3GNUTjS2yY/18YN3Ipn5E inGMvEzu/LHNSul3zh0TgTSrUIQj82TaNJeZFEBADZUhfV2RR2g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:22 2026 by rpki-client