$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: gQMJHHQ0px8QujAa/Rx0olQedu8JU2S3lgjJ1unnwO4= Subject key identifier: 4D:E2:70:9C:6F:B7:7C:23:BE:C1:BB:CD:2D:71:9B:9E:7E:01:80:38 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 3FFF122E72084AC8981B0C4EA26EC4C5BE3B9605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: FE Signing time: Sun 01 Mar 2026 20:10:00 +0000 Manifest this update: Sun 01 Mar 2026 20:05:00 +0000 Manifest next update: Thu 05 Mar 2026 03:37:00 +0000 Files and hashes: 1: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) 2: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: 6UEv4oRtJtQmsxLbsMCBfov4Wo7dvNZrC0mDju8x7Ns=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ff:12:2e:72:08:4a:c8:98:1b:0c:4e:a2:6e:c4:c5:be:3b:96:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Mar 1 20:05:00 2026 GMT Not After : Mar 5 03:37:00 2026 GMT Subject: CN=4DE2709C6FB77C23BEC1BBCD2D719B9E7E018038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:f6:29:f6:65:4c:6a:a3:12:6a:9e:17:57: cf:39:d9:b5:a8:02:37:55:e6:a0:21:79:b3:3b:bd: 4c:6a:6f:c7:74:e9:1e:7d:46:53:70:75:83:84:d7: 9a:08:31:f0:f5:c4:e1:73:82:94:56:0f:26:61:e9: cf:d9:57:ac:e3:c2:81:fe:f9:34:23:09:74:dd:ae: 45:9d:a2:e1:cd:64:8f:f2:23:03:6a:d9:3a:68:a2: f1:2a:9c:47:c1:22:f0:1c:a8:18:93:84:d5:16:d6: 5d:8e:c3:89:8c:98:cf:82:94:7f:f4:d5:30:4c:6c: 71:a2:3c:46:ab:c2:97:bf:b6:5e:69:f6:f9:fc:1d: 5b:08:91:14:5b:89:7d:af:bb:3e:f5:81:1d:24:80: 59:b7:76:23:39:fe:4a:7c:98:a7:23:b2:f8:b9:87: 97:41:e3:b9:cb:f3:d9:a2:a0:96:95:bf:42:1e:8e: 7e:0a:0e:09:eb:5d:79:eb:b1:3d:94:20:97:42:29: d9:fe:b8:00:bc:2f:5f:cf:bd:69:05:fc:8e:a9:16: 52:cc:db:6c:87:40:ff:9d:ed:ab:7e:3e:f3:08:08: bd:a7:89:79:cf:0c:4d:35:c7:cb:ff:37:ad:88:bb: f3:24:c8:95:ae:40:13:d0:5f:02:db:11:ae:d8:c1: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E2:70:9C:6F:B7:7C:23:BE:C1:BB:CD:2D:71:9B:9E:7E:01:80:38 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:75:d8:1f:12:72:72:e5:ac:45:2a:da:71:0d:ea:e9:d9:29: 23:19:f7:ec:af:94:4b:42:e2:d9:6b:fd:8b:77:c8:d3:f9:1c: 4f:8c:8b:34:5d:b8:5e:ff:be:83:03:03:66:ee:26:ec:75:53: 2e:9e:c8:0e:97:55:d9:25:35:03:81:f8:99:c9:4e:9c:50:af: 72:7c:58:79:93:18:c9:e9:24:60:6a:1f:c7:e9:48:53:f7:6f: 82:5f:28:98:d3:19:1c:8b:a9:d7:55:65:9f:51:0e:9a:59:46: 54:92:f1:bb:00:c1:3c:2c:43:d2:3e:2d:87:7a:4e:28:22:fb: fc:45:1b:61:ce:56:04:ba:ac:b1:e9:8c:64:57:71:67:07:39: 90:cd:6c:5e:8f:b8:21:49:fe:57:7f:33:08:a8:bf:d8:a2:c7: 1f:f9:55:2b:3e:f4:20:ef:53:93:a1:f5:6c:a3:ad:a5:93:20: 06:b5:07:46:ea:7a:11:ef:d5:26:3a:b4:d4:fc:2b:fe:a5:31: 51:e4:6d:9b:17:34:87:2f:c8:b8:e7:d2:1a:a2:4d:5f:77:53: d9:97:b6:ec:71:1f:6c:d4:0f:11:a5:c8:3f:d3:f5:9d:f9:f8: 0f:6c:73:69:e8:8e:5b:89:ba:e4:28:45:dc:1a:9a:30:ea:fd: e8:08:3f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/8SLnIISsiYGwxOom7Exb47lgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNjAzMDEyMDA1MDBaFw0yNjAzMDUwMzM3MDBaMDMxMTAvBgNV BAMTKDRERTI3MDlDNkZCNzdDMjNCRUMxQkJDRDJENzE5QjlFN0UwMTgwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYj/Yp9mVMaqMSap4XV8852bWo AjdV5qAhebM7vUxqb8d06R59RlNwdYOE15oIMfD1xOFzgpRWDyZh6c/ZV6zjwoH+ +TQjCXTdrkWdouHNZI/yIwNq2TpoovEqnEfBIvAcqBiThNUW1l2Ow4mMmM+ClH/0 1TBMbHGiPEarwpe/tl5p9vn8HVsIkRRbiX2vuz71gR0kgFm3diM5/kp8mKcjsvi5 h5dB47nL89mioJaVv0Iejn4KDgnrXXnrsT2UIJdCKdn+uAC8L1/PvWkF/I6pFlLM 22yHQP+d7at+PvMICL2niXnPDE01x8v/N62Iu/MkyJWuQBPQXwLbEa7YwWbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTeJwnG+3fCO+wbvNLXGbnn4BgDgwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt12B8ScnLlrEUq2nEN6unZKSMZ9+yvlEtC 4tlr/Yt3yNP5HE+MizRduF7/voMDA2buJux1Uy6eyA6XVdklNQOB+JnJTpxQr3J8 WHmTGMnpJGBqH8fpSFP3b4JfKJjTGRyLqddVZZ9RDppZRlSS8bsAwTwsQ9I+LYd6 Tigi+/xFG2HOVgS6rLHpjGRXcWcHOZDNbF6PuCFJ/ld/Mwiov9iixx/5VSs+9CDv U5Oh9WyjraWTIAa1B0bqehHv1SY6tNT8K/6lMVHkbZsXNIcvyLjn0hqiTV93U9mX tuxxH2zUDxGlyD/T9Z35+A9sc2nojluJuuQoRdwamjDq/egIP2M= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:26 2026 by rpki-client