$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: I55nTSdjSKYyEf4YvO71QSjr5jDtosHvhHOfZkPxUuU= Subject key identifier: 04:F3:18:92:92:C1:8C:21:88:34:8C:32:03:7F:45:EA:46:E6:64:50 Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 2DD0E0B50A89AE8B404AA6E06CBDD6767059FE4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 018B Signing time: Tue 24 Mar 2026 15:01:46 +0000 Manifest this update: Tue 24 Mar 2026 14:56:46 +0000 Manifest next update: Fri 27 Mar 2026 20:14:46 +0000 Files and hashes: 1: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=) 2: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=) 3: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=) 4: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: zPxYziroZmFnk5Fg+czvsRSTTdnpnyeMySjVI61WUJo=) 5: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=) 6: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=) 7: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d0:e0:b5:0a:89:ae:8b:40:4a:a6:e0:6c:bd:d6:76:70:59:fe:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Mar 24 14:56:46 2026 GMT Not After : Mar 27 20:14:46 2026 GMT Subject: CN=04F3189292C18C2188348C32037F45EA46E66450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:97:30:1b:85:bb:e4:5e:a7:e2:05:bd:68:ae: ab:1d:97:b3:1c:7b:8e:ab:47:55:0f:f4:0a:69:79: b4:62:a2:3f:8a:73:05:37:0b:67:50:6c:9e:83:a4: bb:be:76:cd:25:e3:a6:2e:16:f1:98:cc:36:9f:fc: f2:bb:35:45:3d:f8:28:79:9c:99:12:61:99:34:a5: ff:56:29:b4:0d:40:77:3d:e8:25:89:44:44:4b:dc: 3f:1c:5b:2b:37:d2:70:74:94:ef:c7:c7:0a:65:d7: 11:59:6c:23:7d:ea:78:04:b0:2f:7d:92:b0:f7:2a: 83:99:99:5b:53:48:e3:f4:84:30:f9:b2:99:7f:ce: 68:1d:af:48:a3:db:eb:80:ff:14:95:78:5a:e4:22: e3:b1:60:0e:31:cd:69:9a:44:ca:a3:40:ec:95:ff: 69:63:f8:9b:ff:96:9d:67:5a:ab:04:fd:8f:79:29: 61:6e:dc:b9:aa:30:2e:0c:27:5c:a8:a4:9d:fd:c5: ce:03:88:a3:86:7d:13:0c:81:10:52:42:e2:b3:a5: d6:34:73:3d:8c:db:c2:92:e2:29:6f:50:c6:d2:ee: ff:98:ee:15:26:ae:12:a4:33:be:11:fd:7f:14:c7: cf:62:5e:7e:1b:3e:cb:72:55:ba:cf:0a:24:20:53: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F3:18:92:92:C1:8C:21:88:34:8C:32:03:7F:45:EA:46:E6:64:50 X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:44:46:5f:4d:89:e1:c1:15:73:21:64:c0:54:b5:06:83:98: 14:63:ce:fe:3e:e4:b0:cc:5a:dc:6d:a5:ff:02:e2:98:ef:89: 2f:9d:49:d7:12:3e:46:eb:01:77:81:6a:29:bb:ed:89:f9:5c: aa:59:97:8f:8a:2c:c7:f7:da:7a:03:bc:3b:32:ec:e8:f2:ac: 67:2e:81:94:01:c8:e8:cd:19:92:f9:c2:b4:ae:d2:20:8c:d5: d8:83:b9:a4:3d:b7:37:bc:f5:df:ec:52:9d:72:68:72:18:92: 5c:40:9a:03:b9:3b:90:a9:8b:67:c5:2a:89:bd:df:5f:06:24: 74:1a:82:81:93:cc:11:a7:1d:09:1c:ea:02:a3:77:08:ba:d6: 89:f7:c3:7d:dd:1f:d4:d9:2f:bc:d4:a4:7d:f3:81:7c:42:74: 37:e4:83:ee:81:71:44:48:f0:04:83:5e:63:7f:ca:15:6a:0e: 24:8d:93:e6:27:ed:a5:a5:a9:f9:94:60:8d:6d:7c:ae:37:ea: 26:3e:55:6b:ba:85:42:35:f0:72:01:45:c0:83:7a:6a:48:72: a8:fb:3e:64:75:7b:48:41:12:0d:3d:da:b2:2b:99:b0:68:36: f5:49:53:5b:50:bf:51:19:17:b0:c0:90:8e:c2:44:59:81:08: 8e:b5:41:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdDgtQqJrotASqbgbL3WdnBZ/kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNjAzMjQxNDU2NDZaFw0yNjAzMjcyMDE0NDZaMDMxMTAvBgNV BAMTKDA0RjMxODkyOTJDMThDMjE4ODM0OEMzMjAzN0Y0NUVBNDZFNjY0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtlzAbhbvkXqfiBb1orqsdl7Mc e46rR1UP9AppebRioj+KcwU3C2dQbJ6DpLu+ds0l46YuFvGYzDaf/PK7NUU9+Ch5 nJkSYZk0pf9WKbQNQHc96CWJRERL3D8cWys30nB0lO/Hxwpl1xFZbCN96ngEsC99 krD3KoOZmVtTSOP0hDD5spl/zmgdr0ij2+uA/xSVeFrkIuOxYA4xzWmaRMqjQOyV /2lj+Jv/lp1nWqsE/Y95KWFu3LmqMC4MJ1yopJ39xc4DiKOGfRMMgRBSQuKzpdY0 cz2M28KS4ilvUMbS7v+Y7hUmrhKkM74R/X8Ux89iXn4bPstyVbrPCiQgU8wRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPMYkpLBjCGINIwyA39F6kbmZFAwHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpERl9NieHBFXMhZMBUtQaDmBRjzv4+5LDM Wtxtpf8C4pjviS+dSdcSPkbrAXeBaim77Yn5XKpZl4+KLMf32noDvDsy7OjyrGcu gZQByOjNGZL5wrSu0iCM1diDuaQ9tze89d/sUp1yaHIYklxAmgO5O5Cpi2fFKom9 318GJHQagoGTzBGnHQkc6gKjdwi61on3w33dH9TZL7zUpH3zgXxCdDfkg+6BcURI 8ASDXmN/yhVqDiSNk+Yn7aWlqfmUYI1tfK436iY+VWu6hUI18HIBRcCDempIcqj7 PmR1e0hBEg092rIrmbBoNvVJU1tQv1EZF7DAkI7CRFmBCI61QTc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:47 2026 by rpki-client