$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: IdAGCdVPCBM7WmcbSoFPUa0dlogmExgZWTp+TyLyY58= Subject key identifier: 7C:C6:A3:DB:D0:2D:2E:B2:8F:8D:EE:C4:C6:66:80:2E:30:5D:3A:5D Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 67AD05E5A2F48C1BD31DB77609AE47102F53CDC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 0114 Signing time: Thu 26 Mar 2026 04:11:37 +0000 Manifest this update: Thu 26 Mar 2026 04:06:37 +0000 Manifest next update: Sun 29 Mar 2026 09:22:37 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 2: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) 4: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: WhvIfuNrHFTg+Y+Fr1idojIHGIBiE+++1femnDLA4Aw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ad:05:e5:a2:f4:8c:1b:d3:1d:b7:76:09:ae:47:10:2f:53:cd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Mar 26 04:06:37 2026 GMT Not After : Mar 29 09:22:37 2026 GMT Subject: CN=7CC6A3DBD02D2EB28F8DEEC4C666802E305D3A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:37:df:ba:38:74:91:df:14:25:64:5e:d7: fb:c3:5d:7f:25:d4:9d:41:3e:cb:3e:f4:08:51:a7: 5c:4e:0a:a6:17:9e:50:5e:24:29:4e:d2:39:4c:7a: 3a:52:e0:fb:d7:93:dd:f5:76:25:f2:f3:de:c6:21: 7c:52:b4:63:5c:83:ec:ad:26:ee:09:09:bd:76:75: fe:10:50:28:81:d7:8e:a8:7a:15:c1:58:9f:2e:f6: 94:88:ac:73:2b:ad:7e:b2:de:f4:4c:87:ce:b5:34: 3d:35:9f:2f:ea:04:ad:e0:e8:27:3f:61:30:23:4b: cf:c1:d9:ab:b3:cd:c5:e6:8f:86:4d:bf:fd:d8:a6: f7:68:9b:c0:f3:66:88:77:1d:e0:2f:fe:32:a7:be: 90:a9:30:27:42:89:02:81:7e:2c:f6:f7:d6:ce:bc: 63:a5:c4:f8:39:67:c5:e1:5f:f3:bb:74:46:2c:a4: 2b:c3:98:64:86:0b:b7:4f:ea:fe:82:b6:33:be:31: 66:5b:33:ea:a9:ef:2b:07:8b:16:be:ce:ad:70:d5: 90:96:f7:dc:ab:48:e4:5f:69:4f:21:39:6c:54:d9: ac:83:26:7d:e8:2c:f8:79:71:07:69:77:8c:e6:6e: 21:17:a6:cc:b7:e6:7d:c1:7e:c9:dc:ff:7b:34:cd: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C6:A3:DB:D0:2D:2E:B2:8F:8D:EE:C4:C6:66:80:2E:30:5D:3A:5D X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:be:8f:60:08:53:ce:16:8a:5b:e4:38:3b:66:ae:7f:98:c7: 78:4a:03:85:aa:71:c2:a7:02:7f:3a:3b:46:21:c1:6a:26:b8: 1e:ec:72:ae:0c:1c:74:7a:01:3f:5f:11:39:b2:07:11:0b:75: 8c:98:e5:36:7e:44:73:52:39:ae:76:b9:1f:94:8d:ea:5a:70: 02:bc:55:53:dd:1f:07:a8:30:71:11:64:c4:55:e0:43:a4:64: 54:91:30:a6:fc:9e:ff:29:7b:71:6d:02:52:ae:1d:37:a7:0a: 4f:ac:a0:3e:bc:ed:2a:74:21:1c:a9:a9:8a:21:66:03:ad:70: 76:75:75:5c:92:96:8c:d5:4d:3a:e2:9f:c8:fd:ef:5b:2c:32: 60:ef:a4:9d:6d:47:59:2a:11:1f:3f:e2:8d:87:a6:c2:6c:fb: 09:d4:b0:c0:7b:e0:b1:03:e8:e0:7a:80:94:8b:8f:e2:f9:ba: 1d:75:e3:99:b3:96:df:4b:13:9e:75:ab:5c:0b:7a:08:62:85: 08:b6:12:70:5c:29:aa:34:72:fb:82:5a:a1:68:e6:92:38:0c: 07:44:25:48:4f:f5:db:16:76:bb:a3:9e:ca:f2:b3:95:ee:d2: b8:ab:87:58:d9:05:1e:0a:e8:b0:3c:7c:c0:e3:c5:9e:0c:ab: cd:fc:41:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ60F5aL0jBvTHbd2Ca5HEC9TzcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNjAzMjYwNDA2MzdaFw0yNjAzMjkwOTIyMzdaMDMxMTAvBgNV BAMTKDdDQzZBM0RCRDAyRDJFQjI4RjhERUVDNEM2NjY4MDJFMzA1RDNBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNTffujh0kd8UJWRe1/vDXX8l 1J1BPss+9AhRp1xOCqYXnlBeJClO0jlMejpS4PvXk931diXy897GIXxStGNcg+yt Ju4JCb12df4QUCiB146oehXBWJ8u9pSIrHMrrX6y3vRMh861ND01ny/qBK3g6Cc/ YTAjS8/B2auzzcXmj4ZNv/3Ypvdom8DzZoh3HeAv/jKnvpCpMCdCiQKBfiz299bO vGOlxPg5Z8XhX/O7dEYspCvDmGSGC7dP6v6CtjO+MWZbM+qp7ysHixa+zq1w1ZCW 99yrSORfaU8hOWxU2ayDJn3oLPh5cQdpd4zmbiEXpsy35n3Bfsnc/3s0zT43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMaj29AtLrKPje7ExmaALjBdOl0wHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy+j2AIU84WilvkODtmrn+Yx3hKA4WqccKn An86O0YhwWomuB7scq4MHHR6AT9fETmyBxELdYyY5TZ+RHNSOa52uR+UjepacAK8 VVPdHweoMHERZMRV4EOkZFSRMKb8nv8pe3FtAlKuHTenCk+soD687Sp0IRypqYoh ZgOtcHZ1dVySlozVTTrin8j971ssMmDvpJ1tR1kqER8/4o2HpsJs+wnUsMB74LED 6OB6gJSLj+L5uh1145mzlt9LE551q1wLeghihQi2EnBcKao0cvuCWqFo5pI4DAdE JUhP9dsWdrujnsrys5Xu0rirh1jZBR4K6LA8fMDjxZ4Mq838QW0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:14 2026 by rpki-client