$ rpki-client -vvf repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft File: 9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft (raw, json) Hash identifier: S9TGOMNyE8M8cq7mw5y8CljwukPnWvgMed0zDHp5mFQ= Subject key identifier: FE:E2:CC:4A:A6:91:AA:F5:BC:9A:8D:56:A1:D1:1E:27:21:D0:27:9B Authority key identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E Certificate issuer: /CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Certificate serial: 34F40731B6411E1C797AD76A35B6510243CBD19D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft Manifest number: 0F Signing time: Mon 02 Mar 2026 00:52:08 +0000 Manifest this update: Mon 02 Mar 2026 00:47:08 +0000 Manifest next update: Thu 05 Mar 2026 11:11:08 +0000 Files and hashes: 1: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: vIdWvMmfluMelQHkhyfoZHyeqo8LPRhVZA8PTloxyKI=) 2: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: 72QFlEs4lj2ZXEfA6O7YDbDvXdQYKnzr/OAYVv/VuXE=) 3: 9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl (hash: UhaoqRQly5d7oehIcVwhCeTwM8BlPxTwmYHDpT2MK44=) 4: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: HgK/3fIDXVnyurkcMARYmUeVpUpCNrqd+nWZwUb84uA=) 5: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: 9Uz1YR0iTgOvm7UaD7Tg7g6FNpfb/PScm7M9Tqt3tUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f4:07:31:b6:41:1e:1c:79:7a:d7:6a:35:b6:51:02:43:cb:d1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Validity Not Before: Mar 2 00:47:08 2026 GMT Not After : Mar 5 11:11:08 2026 GMT Subject: CN=FEE2CC4AA691AAF5BC9A8D56A1D11E2721D0279B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:d2:7c:c9:ee:65:ab:f6:13:ad:52:cc:5e: 93:46:f4:92:7d:fd:0a:90:8c:7b:fb:20:53:34:f4: 2d:a8:5b:4b:25:d3:5a:2d:35:57:1c:1b:37:71:69: 83:f4:05:7c:3d:6f:67:71:c7:eb:92:ea:f7:81:48: 5a:4d:64:c5:7a:67:8d:f1:c0:63:bb:1c:34:54:3a: 09:14:87:03:f6:f5:15:99:d2:90:05:53:8e:ed:4a: 7b:1d:ff:86:6d:c7:32:67:df:1f:56:78:16:1e:0d: 2e:38:42:d3:f3:d0:4b:1e:90:96:b2:b9:0e:d2:b2: a6:48:3a:71:c1:da:4d:32:c1:c7:e4:37:68:6b:39: be:59:2f:70:82:58:8c:ff:2a:a8:a7:4e:74:e3:e2: 28:f5:5f:a0:e0:37:c4:09:4c:71:c3:72:0a:0b:0a: 3f:3c:52:f8:53:f7:77:50:42:eb:42:98:d7:8b:e1: 47:80:49:7e:18:65:b1:d9:0d:32:cb:4c:38:0a:ec: b8:ab:bc:c5:2f:ea:1e:63:28:5c:8d:ca:ac:28:20: 32:1e:6c:78:fb:7e:14:a8:e7:96:e8:a8:5c:10:04: b5:85:64:83:42:c3:0e:6f:f9:ac:f3:79:57:e9:90: 45:d1:87:c2:51:12:f3:6e:a8:b2:1b:89:a2:74:f6: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E2:CC:4A:A6:91:AA:F5:BC:9A:8D:56:A1:D1:1E:27:21:D0:27:9B X509v3 Authority Key Identifier: keyid:94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:21:5b:1d:c9:25:f7:b0:29:d2:6e:74:9f:5a:28:8a:b8:87: 93:85:54:b2:66:b1:22:e4:81:cf:36:a6:ec:8c:7a:0c:c7:7b: eb:c8:fe:8d:12:74:63:99:9f:55:2c:9d:6e:74:2a:17:ef:53: 6c:ac:ef:52:dc:95:fe:ac:c3:57:d2:78:69:7d:74:1f:14:a9: 11:3a:2f:c8:f0:5e:f0:5a:c0:85:de:87:62:69:05:2e:22:92: ad:37:21:39:95:b7:52:e1:54:6e:72:30:46:a6:16:02:6f:04: 2f:27:1d:50:3b:d6:93:93:25:a6:44:b7:0f:f9:e9:38:44:26: 3d:70:b6:e4:d6:8e:d7:8c:1e:76:54:73:07:4a:fa:c1:a8:a6: b7:28:54:3e:0a:00:bc:25:13:3f:78:b5:95:50:6d:f4:2a:6e: 5c:8d:b1:de:56:90:5a:eb:b4:92:b0:7c:50:fd:78:dd:5a:0a: 50:8e:92:86:9f:40:1b:8b:52:dd:98:68:6e:3a:45:b1:6c:cb: 52:6a:77:bc:cc:d7:56:99:5b:b8:ee:05:cd:ba:ae:fd:eb:15: e3:5d:a2:a1:bf:5f:cf:45:21:7a:46:b8:1c:38:86:fd:2a:db: 29:7f:c4:6f:8c:f7:52:5d:c3:ce:10:86:88:32:38:fd:af:ca: 94:46:c5:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPQHMbZBHhx5etdqNbZRAkPL0Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEz M0YxMTA0RTAeFw0yNjAzMDIwMDQ3MDhaFw0yNjAzMDUxMTExMDhaMDMxMTAvBgNV BAMTKEZFRTJDQzRBQTY5MUFBRjVCQzlBOEQ1NkExRDExRTI3MjFEMDI3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GdJ8ye5lq/YTrVLMXpNG9JJ9 /QqQjHv7IFM09C2oW0sl01otNVccGzdxaYP0BXw9b2dxx+uS6veBSFpNZMV6Z43x wGO7HDRUOgkUhwP29RWZ0pAFU47tSnsd/4ZtxzJn3x9WeBYeDS44QtPz0EsekJay uQ7SsqZIOnHB2k0ywcfkN2hrOb5ZL3CCWIz/KqinTnTj4ij1X6DgN8QJTHHDcgoL Cj88UvhT93dQQutCmNeL4UeASX4YZbHZDTLLTDgK7LirvMUv6h5jKFyNyqwoIDIe bHj7fhSo55boqFwQBLWFZINCww5v+azzeVfpkEXRh8JREvNuqLIbiaJ09oq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/uLMSqaRqvW8mo1WodEeJyHQJ5swHwYDVR0j BBgwFoAUlDLTeCF6i+7jTZU6i//VqjPxEE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMC85NDMyRDM3ODIx N0E4QkVFRTM0RDk1M0E4QkZGRDVBQTMzRjExMDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEzM0Yx MTA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc2NjA3ZWEtYWRkNy00Y2E1LThm MmQtZGE4Yjc5MWEzYjQyLzAvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1 QUEzM0YxMTA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAhWx3JJfewKdJudJ9aKIq4h5OFVLJmsSLk gc82puyMegzHe+vI/o0SdGOZn1UsnW50KhfvU2ys71Lclf6sw1fSeGl9dB8UqRE6 L8jwXvBawIXeh2JpBS4ikq03ITmVt1LhVG5yMEamFgJvBC8nHVA71pOTJaZEtw/5 6ThEJj1wtuTWjteMHnZUcwdK+sGoprcoVD4KALwlEz94tZVQbfQqblyNsd5WkFrr tJKwfFD9eN1aClCOkoafQBuLUt2YaG46RbFsy1Jqd7zM11aZW7juBc26rv3rFeNd oqG/X89FIXpGuBw4hv0q2yl/xG+M91Jdw84QhogyOP2vypRGxco= -----END CERTIFICATE-----Generated at Mon Mar 2 18:44:14 2026 by rpki-client