$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: h2/CvIMxwHhCF5f/I9Hrzp1Db9NdENkAfsM0vG47lIs= Subject key identifier: B0:EF:F3:43:46:ED:46:D9:52:A3:FF:72:1F:08:31:A9:70:2F:F9:1C Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 69BC192C940E078D3B8F3373A09AB03075BDB27F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 0326 Signing time: Mon 02 Mar 2026 09:12:36 +0000 Manifest this update: Mon 02 Mar 2026 09:07:36 +0000 Manifest next update: Thu 05 Mar 2026 15:56:36 +0000 Files and hashes: 1: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=) 2: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: DIH5tv9syuFuXWGqbtaf4rGa1I9YirPZnmtoiQIArjc=) 3: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:bc:19:2c:94:0e:07:8d:3b:8f:33:73:a0:9a:b0:30:75:bd:b2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Mar 2 09:07:36 2026 GMT Not After : Mar 5 15:56:36 2026 GMT Subject: CN=B0EFF34346ED46D952A3FF721F0831A9702FF91C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:63:a3:24:ba:6d:1e:55:d9:93:35:c3:94: 23:24:31:14:be:5e:44:b1:c5:48:cd:06:f9:2e:67: 01:f2:11:74:81:69:e6:eb:f6:e6:c6:2c:17:28:e7: 42:b2:59:01:b7:24:d6:07:65:74:c4:60:60:a0:c7: 89:69:dd:4d:5c:2a:87:75:9e:43:c3:0e:d2:7d:ab: f8:5b:7b:0d:e5:4b:45:50:03:09:02:53:e7:10:bb: cc:b3:d6:27:b3:41:e3:d3:55:6a:bb:57:4d:f0:f8: e2:b6:34:45:5f:dc:96:37:52:f8:5d:b3:11:ab:83: 83:60:e3:98:a8:52:b5:5d:a2:93:51:f7:2a:b4:67: 2d:a6:96:dc:a0:58:f6:61:78:4b:e3:3d:b6:ee:2d: dc:34:2a:88:d3:f9:37:2b:c5:01:67:46:2f:5e:0f: e1:4e:49:a3:16:77:db:47:57:80:14:53:a0:69:d8: 5d:ea:45:59:a1:c5:90:fb:a1:79:22:38:3e:d5:f9: 65:4f:40:fc:12:5e:33:4e:ae:ed:5c:33:0a:b3:79: 33:57:80:47:96:20:65:2d:bb:80:34:cd:af:3e:4e: 95:bc:99:db:2a:e7:3e:77:52:12:cd:4c:d5:58:7d: 29:c1:b0:df:cb:58:47:0d:8e:7e:69:d0:5c:57:7c: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:F3:43:46:ED:46:D9:52:A3:FF:72:1F:08:31:A9:70:2F:F9:1C X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b9:ce:ff:a8:be:20:c4:37:ff:b2:28:ac:9a:68:b2:df:c7: 46:d6:24:c4:da:6a:c5:05:47:d7:34:33:e1:44:ee:ff:d5:8e: 31:92:83:68:3f:dc:6d:2c:ad:b4:d1:57:b5:1c:26:23:56:6c: d7:83:58:67:d8:3e:14:dc:17:3c:65:9e:90:98:2a:ab:d5:75: e1:b3:50:e3:a7:f9:8a:13:49:97:63:f0:45:72:ec:61:6d:b1: 4e:95:4c:80:ee:ed:9a:94:93:11:83:29:07:5d:c5:8e:1d:17: 5f:d5:aa:1d:51:3c:8e:ac:54:e3:d1:dd:4a:72:13:46:09:0a: 76:65:ad:7f:91:71:6f:c2:7f:80:e5:b2:be:9c:f0:bc:50:c1: 54:23:49:8b:a6:d4:9d:ca:ea:b0:fb:29:50:8d:8c:5d:e4:ff: f8:bf:91:d1:2f:8b:6c:a8:09:3f:d5:dd:e7:64:84:f2:59:5b: 5b:a6:bd:c8:e4:7f:1f:ad:5b:5f:be:42:c2:d6:6a:b6:32:72: dc:41:69:44:a0:55:8c:55:2a:04:21:ef:05:a4:72:69:ef:da: 1a:ab:21:7c:32:88:18:76:b4:0a:6f:dc:a4:c8:a3:e7:d3:11: 85:e8:a0:2d:8b:9c:9e:cc:74:18:c7:a8:cc:bf:bf:ae:ee:e6: e3:d3:f5:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabwZLJQOB407jzNzoJqwMHW9sn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNjAzMDIwOTA3MzZaFw0yNjAzMDUxNTU2MzZaMDMxMTAvBgNV BAMTKEIwRUZGMzQzNDZFRDQ2RDk1MkEzRkY3MjFGMDgzMUE5NzAyRkY5MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsmOjJLptHlXZkzXDlCMkMRS+ XkSxxUjNBvkuZwHyEXSBaebr9ubGLBco50KyWQG3JNYHZXTEYGCgx4lp3U1cKod1 nkPDDtJ9q/hbew3lS0VQAwkCU+cQu8yz1iezQePTVWq7V03w+OK2NEVf3JY3Uvhd sxGrg4Ng45ioUrVdopNR9yq0Zy2mltygWPZheEvjPbbuLdw0KojT+TcrxQFnRi9e D+FOSaMWd9tHV4AUU6Bp2F3qRVmhxZD7oXkiOD7V+WVPQPwSXjNOru1cMwqzeTNX gEeWIGUtu4A0za8+TpW8mdsq5z53UhLNTNVYfSnBsN/LWEcNjn5p0FxXfCcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsO/zQ0btRtlSo/9yHwgxqXAv+RwwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABS5zv+oviDEN/+yKKyaaLLfx0bWJMTaasUF R9c0M+FE7v/VjjGSg2g/3G0srbTRV7UcJiNWbNeDWGfYPhTcFzxlnpCYKqvVdeGz UOOn+YoTSZdj8EVy7GFtsU6VTIDu7ZqUkxGDKQddxY4dF1/Vqh1RPI6sVOPR3Upy E0YJCnZlrX+RcW/Cf4Dlsr6c8LxQwVQjSYum1J3K6rD7KVCNjF3k//i/kdEvi2yo CT/V3edkhPJZW1umvcjkfx+tW1++QsLWarYyctxBaUSgVYxVKgQh7wWkcmnv2hqr IXwyiBh2tApv3KTIo+fTEYXooC2LnJ7MdBjHqMy/v67u5uPT9UA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:33 2026 by rpki-client