$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: pTYf0XOuNepCHqU99eTS5cpMGWh//wN7H/i9eCj64e4= Subject key identifier: 1B:BB:4F:40:24:DC:CE:12:13:4B:73:AA:4B:11:BE:7F:11:84:C5:47 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 337BCAA2C5007876B79E8E00823D2DE9AA9B8149 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 0267 Signing time: Sun 01 Mar 2026 23:10:02 +0000 Manifest this update: Sun 01 Mar 2026 23:05:02 +0000 Manifest next update: Wed 04 Mar 2026 23:32:02 +0000 Files and hashes: 1: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: 1HQfbWQz8TQ/U0ue8CqX8CipPvoj254cn3JMlqDQtws=) 2: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: AFR0edy2SHetpvZoQe2ubb0WOVaatbTPgTEPsgvzJTQ=) 3: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: o8Eq5t6Mk+hd9dwfnTZpNOihBNUXxd4E6fT/2/8YTG4=) 4: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: BuwBDfXMOpFxOjhB/2A0CNUSVbMyArJwojKIcFdRjmQ=) 5: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: 2MI1BO2UxF3UElXDLPD2q10Wy6TxPuTbV7jsB0zYy48=) 6: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: lF0dOyIyZG9RuRsQ/tt5Ru3/SkbdBI8dlNM+ehbBJXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7b:ca:a2:c5:00:78:76:b7:9e:8e:00:82:3d:2d:e9:aa:9b:81:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: Mar 1 23:05:02 2026 GMT Not After : Mar 4 23:32:02 2026 GMT Subject: CN=1BBB4F4024DCCE12134B73AA4B11BE7F1184C547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:5c:2f:80:2a:64:f6:ce:eb:09:72:7f:cc: e3:27:25:3b:fc:45:c4:44:0c:ed:25:bf:a2:82:46: 20:41:f3:dd:be:02:6e:eb:9f:0b:98:82:f6:ff:65: 58:8b:69:01:fd:3a:61:d8:7c:78:b3:4c:ba:f1:e0: ef:be:68:30:24:1f:3f:02:ae:ef:23:a1:81:f8:86: 04:5a:cc:1b:3d:80:c8:c2:f5:62:86:a3:05:86:27: 05:dc:38:21:bf:8f:04:f8:3e:f4:1a:ed:e1:46:6c: f8:38:a3:de:c1:20:70:b0:a9:fd:fd:4e:4f:00:ba: 7d:09:10:60:db:78:4c:13:2c:19:8c:c8:e8:39:05: a7:03:45:0e:7b:f3:1a:2d:55:9f:48:b8:92:32:d1: 14:0d:2a:03:01:0d:89:dc:69:81:04:8a:39:73:33: 7d:e4:98:0c:27:27:73:c5:45:ca:38:27:02:45:3c: 67:07:ef:45:10:fc:15:fd:d9:62:db:5b:29:9a:43: de:f5:2b:d6:c9:3b:30:c1:ad:2c:8f:14:24:a9:d1: e4:6b:bb:e7:14:b3:27:f3:fa:c0:f4:c7:e7:06:36: 73:50:3b:41:24:c3:2c:ac:95:cd:62:fb:d2:b9:13: 59:25:cc:fb:06:67:bc:5a:5c:05:84:bc:21:e9:ec: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BB:4F:40:24:DC:CE:12:13:4B:73:AA:4B:11:BE:7F:11:84:C5:47 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:89:33:77:ec:ec:dc:7f:48:38:b0:9c:e9:eb:aa:6c:d9:d2: 55:8c:2a:5a:b2:a7:3b:0f:2e:c7:0a:b4:23:bb:86:01:f5:a7: aa:a9:47:7f:94:54:09:d1:c5:6a:80:a8:d8:a7:d1:ec:26:9b: 18:24:a9:24:b3:a7:ed:9c:73:d3:34:e0:99:43:8d:4e:56:b7: 0d:82:6a:7c:1d:54:57:c9:14:50:8c:d6:07:e2:4b:5e:64:02: 00:ef:2a:6d:e8:f1:f9:9a:9b:3c:e4:8b:b4:27:56:fe:44:1e: 68:52:a1:e9:ea:93:d8:44:2d:6b:35:17:f0:9a:f4:40:d3:4b: d1:fc:bc:de:bf:eb:fa:01:8d:7b:4c:37:73:ac:fe:96:ca:8c: d3:01:15:d3:9d:0b:7d:03:ed:bb:11:0e:30:75:15:0f:5d:11: 27:9b:4a:83:5e:7c:2d:55:4d:5e:e6:35:51:cb:10:88:eb:79: 22:e7:30:f1:25:0f:53:a1:69:b0:90:a6:98:f1:42:1c:26:75: 1c:5c:1b:25:07:4b:2d:ca:e9:6c:70:b2:22:be:04:a6:da:8d: b0:51:20:ee:5f:3e:99:46:b7:74:db:48:85:22:d8:0a:aa:fd: 18:ce:9a:0a:70:44:f1:28:17:92:55:8c:0b:28:c8:84:9c:2c: 36:0d:5b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3vKosUAeHa3no4Agj0t6aqbgUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNjAzMDEyMzA1MDJaFw0yNjAzMDQyMzMyMDJaMDMxMTAvBgNV BAMTKDFCQkI0RjQwMjREQ0NFMTIxMzRCNzNBQTRCMTFCRTdGMTE4NEM1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWo1wvgCpk9s7rCXJ/zOMnJTv8 RcREDO0lv6KCRiBB892+Am7rnwuYgvb/ZViLaQH9OmHYfHizTLrx4O++aDAkHz8C ru8joYH4hgRazBs9gMjC9WKGowWGJwXcOCG/jwT4PvQa7eFGbPg4o97BIHCwqf39 Tk8Aun0JEGDbeEwTLBmMyOg5BacDRQ578xotVZ9IuJIy0RQNKgMBDYncaYEEijlz M33kmAwnJ3PFRco4JwJFPGcH70UQ/BX92WLbWymaQ971K9bJOzDBrSyPFCSp0eRr u+cUsyfz+sD0x+cGNnNQO0Ekwyyslc1i+9K5E1klzPsGZ7xaXAWEvCHp7C7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG7tPQCTczhITS3OqSxG+fxGExUcwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISJM3fs7Nx/SDiwnOnrqmzZ0lWMKlqypzsP LscKtCO7hgH1p6qpR3+UVAnRxWqAqNin0ewmmxgkqSSzp+2cc9M04JlDjU5Wtw2C anwdVFfJFFCM1gfiS15kAgDvKm3o8fmamzzki7QnVv5EHmhSoenqk9hELWs1F/Ca 9EDTS9H8vN6/6/oBjXtMN3Os/pbKjNMBFdOdC30D7bsRDjB1FQ9dESebSoNefC1V TV7mNVHLEIjreSLnMPElD1OhabCQppjxQhwmdRxcGyUHSy3K6WxwsiK+BKbajbBR IO5fPplGt3TbSIUi2Aqq/RjOmgpwRPEoF5JVjAsoyIScLDYNWyc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:05 2026 by rpki-client