$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: 8gVWS9E1YQXUFsoZynsvoX4aUGLnIWN3Wh9acjLC5SE= Subject key identifier: 20:62:E2:A9:B0:3A:D5:3B:A4:9C:78:1A:97:96:0C:25:C7:C1:82:2F Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 022D7B8221A761284FE0032E69A40F9685422030 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: 0117 Signing time: Sat 28 Feb 2026 06:31:34 +0000 Manifest this update: Sat 28 Feb 2026 06:26:34 +0000 Manifest next update: Tue 03 Mar 2026 12:46:34 +0000 Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: j+XMswe+CxatPEZpAEWL8FT66isPdWniEzzKbdfK3I0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:7b:82:21:a7:61:28:4f:e0:03:2e:69:a4:0f:96:85:42:20:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Feb 28 06:26:34 2026 GMT Not After : Mar 3 12:46:34 2026 GMT Subject: CN=2062E2A9B03AD53BA49C781A97960C25C7C1822F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:bb:c2:53:1c:89:d4:ad:c4:ee:94:05:78: 8f:d2:47:ed:9f:99:f5:a8:a7:d9:d0:ea:de:33:7c: d7:36:a5:9d:3f:13:ec:43:76:64:3c:88:ce:91:f6: 84:7e:c5:c2:b4:11:88:07:89:f8:5f:d7:26:ab:17: 7e:6c:fe:8e:97:2d:69:35:28:f1:2e:95:c1:38:91: d6:17:ce:e5:ba:45:47:0d:ec:ce:43:15:ef:5a:98: f1:3e:0f:36:bd:54:04:62:c0:b2:d9:eb:a7:dc:9e: f1:9a:25:01:34:b7:5d:62:b2:7d:7e:21:59:98:e3: 44:8e:f5:d9:69:c4:78:7b:85:f1:57:91:33:e7:64: c5:d1:28:d8:00:bc:1a:ed:c7:7d:01:09:5e:e2:8b: aa:1b:65:93:56:39:d1:26:ac:be:8d:d5:77:f3:d0: 09:39:cd:46:98:b7:93:93:e1:22:d3:be:7b:08:40: 02:74:44:71:b8:b7:1f:8b:e9:b4:0a:e3:7d:e0:59: ca:a2:40:7c:e9:8c:91:38:a5:03:09:45:ca:d0:df: 10:9a:94:aa:6b:0a:a9:d4:67:2c:75:d9:f3:e7:31: d6:01:5e:db:10:0f:af:60:c3:6d:65:70:41:c9:76: c0:42:e6:64:39:ad:f2:f3:c6:a4:39:45:e1:9d:37: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:62:E2:A9:B0:3A:D5:3B:A4:9C:78:1A:97:96:0C:25:C7:C1:82:2F X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:03:4b:9c:be:69:93:68:83:7e:b5:92:47:4b:41:64:ae:82: d0:85:f9:2c:7f:41:8e:5f:87:b5:c3:fe:fa:85:9a:56:50:43: 5c:6e:cd:bd:0d:40:07:74:48:8d:76:34:e8:5b:79:51:b0:17: 0a:d5:98:3f:5d:c9:27:31:83:58:ea:1d:49:b8:ff:35:fe:99: 40:2b:3f:a0:3d:58:82:ff:b9:78:9f:e4:3c:3f:81:a5:9d:37: 62:c2:d4:f5:0a:1c:d9:f9:a7:3c:50:e4:27:01:25:2e:39:cb: 89:f6:97:27:63:c9:de:bb:ff:3e:9f:d8:b6:f6:48:28:f2:f5: 09:9e:2d:4c:1b:5c:0f:d6:3a:54:5e:91:c3:e1:1e:3c:71:ec: ee:4a:7a:34:2e:66:78:db:30:b7:93:87:90:ca:c3:51:8d:93: 97:4e:4c:f1:d5:ef:68:3d:3a:62:ce:ba:d6:7a:88:ab:a7:e8: 69:a1:19:70:2b:9e:5d:58:83:23:c7:7f:a8:3d:e6:28:17:5f: 65:27:60:26:7e:cf:0c:24:ca:e0:13:a2:c9:45:6c:7b:5d:3f: f5:c7:ef:69:d0:c3:f5:81:15:d1:3a:30:5e:5e:88:b3:96:db: 22:fe:aa:52:97:66:0d:cc:04:af:f1:09:bd:a5:ab:8c:ac:c1: 41:fe:31:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAi17giGnYShP4AMuaaQPloVCIDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNjAyMjgwNjI2MzRaFw0yNjAzMDMxMjQ2MzRaMDMxMTAvBgNV BAMTKDIwNjJFMkE5QjAzQUQ1M0JBNDlDNzgxQTk3OTYwQzI1QzdDMTgyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRd7vCUxyJ1K3E7pQFeI/SR+2f mfWop9nQ6t4zfNc2pZ0/E+xDdmQ8iM6R9oR+xcK0EYgHifhf1yarF35s/o6XLWk1 KPEulcE4kdYXzuW6RUcN7M5DFe9amPE+Dza9VARiwLLZ66fcnvGaJQE0t11isn1+ IVmY40SO9dlpxHh7hfFXkTPnZMXRKNgAvBrtx30BCV7ii6obZZNWOdEmrL6N1Xfz 0Ak5zUaYt5OT4SLTvnsIQAJ0RHG4tx+L6bQK433gWcqiQHzpjJE4pQMJRcrQ3xCa lKprCqnUZyx12fPnMdYBXtsQD69gw21lcEHJdsBC5mQ5rfLzxqQ5ReGdN8vPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGLiqbA61TuknHgal5YMJcfBgi8wHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcDS5y+aZNog361kkdLQWSugtCF+Sx/QY5f h7XD/vqFmlZQQ1xuzb0NQAd0SI12NOhbeVGwFwrVmD9dyScxg1jqHUm4/zX+mUAr P6A9WIL/uXif5Dw/gaWdN2LC1PUKHNn5pzxQ5CcBJS45y4n2lydjyd67/z6f2Lb2 SCjy9QmeLUwbXA/WOlRekcPhHjxx7O5KejQuZnjbMLeTh5DKw1GNk5dOTPHV72g9 OmLOutZ6iKun6GmhGXArnl1YgyPHf6g95igXX2UnYCZ+zwwkyuAToslFbHtdP/XH 72nQw/WBFdE6MF5eiLOW2yL+qlKXZg3MBK/xCb2lq4yswUH+MXk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:05 2026 by rpki-client