$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: UpOxfjxQbaP8c5F2F9BYijyqaEThFsXJtOujyDxZGio= Subject key identifier: 09:AF:05:1A:93:3C:07:0F:3B:38:3A:C4:F2:D0:36:78:5E:1E:4A:2E Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 7FE46D4CBDA41BF44A8059F24DA4FEF5780B0ECF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 0309 Signing time: Mon 02 Mar 2026 13:12:15 +0000 Manifest this update: Mon 02 Mar 2026 13:07:15 +0000 Manifest next update: Thu 05 Mar 2026 14:05:15 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 2: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: jZSd6KvbTSt5+IuRkdOkSQyHKw0T0fckcQqEdClSH0Q=) 3: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) 4: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e4:6d:4c:bd:a4:1b:f4:4a:80:59:f2:4d:a4:fe:f5:78:0b:0e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Mar 2 13:07:15 2026 GMT Not After : Mar 5 14:05:15 2026 GMT Subject: CN=09AF051A933C070F3B383AC4F2D036785E1E4A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:cf:07:14:3a:e0:95:32:9c:54:ae:2b:6a: 8d:c4:fe:dc:31:74:53:f8:43:77:d1:eb:29:96:d1: c6:f7:b9:d3:41:28:9c:53:ec:9a:e1:a0:51:47:22: 87:0d:89:29:12:17:3a:bc:05:7b:24:32:d5:bb:08: f7:01:32:eb:c9:b1:a6:eb:3a:61:35:8e:0c:bf:14: 06:6c:35:3b:74:89:4c:b8:64:67:f8:0b:b3:a2:48: 8b:91:61:bd:fb:3e:3a:99:2e:a6:aa:c8:fa:2e:87: 3e:3a:17:5c:fc:b8:b1:f8:7b:65:c2:5c:b0:9e:06: d5:be:74:ac:30:a3:10:5e:a0:94:0f:3e:82:86:5e: d0:bf:76:f4:12:4d:75:08:8f:02:f4:87:36:0b:0f: 06:3f:7e:a1:32:50:d6:5c:89:c5:7f:1b:5f:8a:a2: 03:66:ba:5b:fd:eb:76:f7:91:1f:05:77:73:08:a2: 6d:ac:ca:45:62:15:46:83:26:66:79:0d:0f:4f:55: f8:3a:65:5e:70:7d:52:88:f6:3b:f1:8f:9b:0c:38: 35:5e:24:e3:f9:1d:cb:94:ea:ed:66:31:c8:0c:c4: 4a:c3:c2:e2:2c:a9:5e:af:3c:ad:bb:da:87:b9:b5: ca:73:98:90:37:66:81:d9:c2:ca:9b:3f:fb:81:3c: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AF:05:1A:93:3C:07:0F:3B:38:3A:C4:F2:D0:36:78:5E:1E:4A:2E X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:25:c8:5a:1d:e0:2d:bd:36:16:f1:57:84:af:2f:fd:00:e5: f4:6e:ad:72:36:6e:39:39:2c:55:18:b3:0d:6a:c3:6e:0e:00: c5:72:91:5b:90:19:ac:b1:b2:89:9a:cc:97:84:b3:89:4a:43: 40:66:3e:36:b7:b8:88:74:d3:f1:76:a2:a9:b7:55:13:c8:90: 0f:4e:62:e8:4f:e3:0e:d6:4a:02:e0:3e:a4:f2:eb:fa:10:88: c7:13:0b:0f:9f:eb:69:69:5d:c0:ea:89:35:32:97:06:22:2a: d0:4e:9a:40:ab:e9:ba:de:5e:26:b9:02:da:f5:c0:e1:a2:dc: 2e:a8:97:66:e4:09:7f:8e:e5:a4:d2:a5:78:8f:bf:4f:8f:fe: 54:d9:01:35:7e:76:b3:d9:4b:6a:32:7e:b3:af:e8:64:d1:61: 2e:eb:7c:58:5a:1b:10:e6:50:b9:ee:75:25:42:c3:bc:c0:ee: ca:8a:2f:76:03:ca:f2:2f:50:7d:09:0a:de:d5:81:b0:53:1d: c8:b3:cc:30:ba:1e:bc:ab:9b:47:ca:d2:ec:5e:0b:fc:01:e8: 7b:ad:b3:02:6d:a9:1a:b0:5f:c6:c4:d7:20:fe:39:a4:e4:6a: 0a:5f:4e:77:d1:30:2c:b9:be:fa:c0:2a:cf:92:dd:6c:49:b1: 2b:34:41:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+RtTL2kG/RKgFnyTaT+9XgLDs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNjAzMDIxMzA3MTVaFw0yNjAzMDUxNDA1MTVaMDMxMTAvBgNV BAMTKDA5QUYwNTFBOTMzQzA3MEYzQjM4M0FDNEYyRDAzNjc4NUUxRTRBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAc8HFDrglTKcVK4rao3E/twx dFP4Q3fR6ymW0cb3udNBKJxT7JrhoFFHIocNiSkSFzq8BXskMtW7CPcBMuvJsabr OmE1jgy/FAZsNTt0iUy4ZGf4C7OiSIuRYb37PjqZLqaqyPouhz46F1z8uLH4e2XC XLCeBtW+dKwwoxBeoJQPPoKGXtC/dvQSTXUIjwL0hzYLDwY/fqEyUNZcicV/G1+K ogNmulv963b3kR8Fd3MIom2sykViFUaDJmZ5DQ9PVfg6ZV5wfVKI9jvxj5sMODVe JOP5HcuU6u1mMcgMxErDwuIsqV6vPK272oe5tcpzmJA3ZoHZwsqbP/uBPB7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCa8FGpM8Bw87ODrE8tA2eF4eSi4wHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADglyFod4C29NhbxV4SvL/0A5fRurXI2bjk5 LFUYsw1qw24OAMVykVuQGayxsomazJeEs4lKQ0BmPja3uIh00/F2oqm3VRPIkA9O YuhP4w7WSgLgPqTy6/oQiMcTCw+f62lpXcDqiTUylwYiKtBOmkCr6breXia5Atr1 wOGi3C6ol2bkCX+O5aTSpXiPv0+P/lTZATV+drPZS2oyfrOv6GTRYS7rfFhaGxDm ULnudSVCw7zA7sqKL3YDyvIvUH0JCt7VgbBTHcizzDC6Hryrm0fK0uxeC/wB6Hut swJtqRqwX8bE1yD+OaTkagpfTnfRMCy5vvrAKs+S3WxJsSs0QUQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:01:34 2026 by rpki-client