$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft File: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json) Hash identifier: TPOjJuiiY6BUgjkS9est596/4kXefwJCCiBa2tiebck= Subject key identifier: F3:6A:0A:B2:9F:F2:C6:94:EF:FE:E0:79:5C:4B:11:99:FF:15:0B:0C Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 1A357DED46597687E32F2F849DE6907895BF6222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft Manifest number: 024D Signing time: Sun 01 Mar 2026 04:03:12 +0000 Manifest this update: Sun 01 Mar 2026 03:58:12 +0000 Manifest next update: Wed 04 Mar 2026 07:48:12 +0000 Files and hashes: 1: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: TKIaCGNmw0FCbWe/3+O7LJSlQ7xoNdfmZ92Bv+OHeJ0=) 2: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: eli9HVW5SbIlHlZ77bLJSw28nBX7PJuxpjeRLJ5LE+4=) 3: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: AUrPeDtvCDIlLijZhNwOF27tO0OFAv5oKcq9RZUfz7k=) 4: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: /+k3ui8GytmO1tlj+y1Z8gmj9HsQuJiXxCeCVdhSkSk=) 5: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=) 6: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: N5eERUeQNaFZd/P1rBCfu7Ha/6ifWn0+V/u4P7yUDQQ=) 7: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: U7xVJqzcdtgk1gwOwySKzGn7HVpecbzvGscMv3tKmH8=) 8: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: OcKouWixei8TpwsTFVkFBcyninhRrEylV36bA4eOzLY=) 9: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g=) 10: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: QQEl1leZhF0X49G+UBT0CT/1lmpnoPikc672j59nRAg=) 11: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: xYglbiMVDb2Bz7L8ERkpC+mlCGlzNAlNUw0DloGlYMY=) 12: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI=) 13: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: WCaydPpduBP1gTZ18eU836XFVth8SjC2QKbaWvlZDFc=) 14: 3230332e39392e3130332e302f32342d3234203d3e203536323431.roa (hash: SXMkU1Rh4Uz2EVIKbRBDwUsHYWkICcmXLOypacuWtf8=) 15: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: d70EdgOAl/ZvYk+xnYqFc0mp89JoqalAszoU+/bGI6Q=) 16: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: zgTpovsan0hE2/TqYtQvmb9ath7hpHAxBFsGqZb1Rco=) 17: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: BQH0kw0B4e6ppzio5BwiL1URsCzNmPHuZzOzrCjwaYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:35:7d:ed:46:59:76:87:e3:2f:2f:84:9d:e6:90:78:95:bf:62:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Mar 1 03:58:12 2026 GMT Not After : Mar 4 07:48:12 2026 GMT Subject: CN=F36A0AB29FF2C694EFFEE0795C4B1199FF150B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:b7:e6:0e:65:65:30:ac:e0:3d:97:e8:54: 0d:b7:b0:f7:5e:97:ec:5e:85:b4:c5:80:8a:4a:d4: a2:0a:35:2c:4e:10:e7:81:50:a5:86:51:8d:ba:4c: f1:92:a3:cb:70:36:a8:97:c3:b5:aa:64:c3:f7:64: 11:7e:68:3b:7f:fa:2d:3c:5e:20:62:89:14:0a:c2: fe:d5:42:71:fb:35:b7:5e:c0:27:ea:a4:a1:b7:39: e2:82:f1:01:a3:3b:6b:01:0d:02:eb:42:d0:c2:a5: bc:41:9a:14:a2:eb:a6:6a:da:37:db:23:30:8b:da: 42:75:a3:1a:bc:f3:dc:9c:03:e5:25:aa:88:3e:2b: 88:63:de:3d:4b:72:a8:34:34:d1:7f:e1:ea:83:96: b8:b2:f6:06:69:00:46:95:d3:80:06:6a:23:67:f7: 6f:db:aa:fd:81:ae:3e:43:67:cf:3a:0a:77:2c:97: 1d:32:48:a5:2a:92:33:c9:20:54:11:02:79:aa:b5: 79:d2:af:15:a8:38:5d:b3:d6:cc:64:1d:16:63:c7: 6f:f6:a9:2e:bd:9c:3a:0a:40:49:3f:70:c7:4b:a2: a1:bb:20:b6:4e:db:d6:00:51:59:1b:f8:10:fc:0b: 95:32:e1:e1:0f:e8:5d:d6:e1:e8:eb:58:9a:a8:a6: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6A:0A:B2:9F:F2:C6:94:EF:FE:E0:79:5C:4B:11:99:FF:15:0B:0C X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:31:c0:89:1d:30:e6:58:ab:e3:7c:8f:3f:aa:c8:8e:76:5f: 36:84:a0:4e:f7:63:67:c2:23:b5:c1:3e:a7:96:08:77:c4:c3: 87:58:3e:ae:30:ba:a2:5b:c2:98:8a:e0:5b:67:1f:f7:e4:0a: ad:10:0e:f7:71:b9:3d:6a:38:2b:af:7f:c9:be:38:a3:d5:e4: cb:06:ea:ff:c9:7c:5f:36:a2:fa:da:8a:cc:b5:13:88:2b:30: 6a:08:be:d0:4d:18:b6:0a:8e:17:b9:4e:ed:f0:0e:ae:6c:6b: 35:7f:86:f9:96:b5:96:45:32:dd:1f:06:67:5e:1a:9c:43:7b: e5:c7:e7:ac:70:05:3f:05:5c:f4:19:b4:9a:b5:2f:4a:ea:91: 3f:ae:25:61:00:a3:8d:0f:96:e3:6d:5e:66:c2:19:61:a2:d0: 29:c6:74:f7:85:86:a2:b7:ad:1d:62:94:18:c1:b2:57:ce:7d: a9:0a:23:ae:c8:20:f5:63:d6:4c:59:e6:ef:b1:cd:35:29:f8: 95:47:71:e3:db:27:93:e9:6d:29:ba:76:6a:0c:3c:86:2d:d5: 7b:4e:09:3a:ff:70:95:35:47:33:77:0d:3c:00:26:be:24:f5: 6a:0c:84:cd:62:e4:c9:3c:39:1c:cf:9f:d0:f2:a2:ba:64:68: 3b:23:84:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjV97UZZdofjLy+EneaQeJW/YiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNjAzMDEwMzU4MTJaFw0yNjAzMDQwNzQ4MTJaMDMxMTAvBgNV BAMTKEYzNkEwQUIyOUZGMkM2OTRFRkZFRTA3OTVDNEIxMTk5RkYxNTBCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzf7fmDmVlMKzgPZfoVA23sPde l+xehbTFgIpK1KIKNSxOEOeBUKWGUY26TPGSo8twNqiXw7WqZMP3ZBF+aDt/+i08 XiBiiRQKwv7VQnH7NbdewCfqpKG3OeKC8QGjO2sBDQLrQtDCpbxBmhSi66Zq2jfb IzCL2kJ1oxq889ycA+Ulqog+K4hj3j1Lcqg0NNF/4eqDlriy9gZpAEaV04AGaiNn 92/bqv2Brj5DZ886Cncslx0ySKUqkjPJIFQRAnmqtXnSrxWoOF2z1sxkHRZjx2/2 qS69nDoKQEk/cMdLoqG7ILZO29YAUVkb+BD8C5Uy4eEP6F3W4ejrWJqopsB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU82oKsp/yxpTv/uB5XEsRmf8VCwwwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1OWRiN2UtOTRmNi00MDAyLTk5 ZWYtNWU5NmQ4ZTM3ZTUwLzAvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBG RkEzRkJERjY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwxwIkdMOZYq+N8jz+qyI52XzaEoE73Y2fC I7XBPqeWCHfEw4dYPq4wuqJbwpiK4FtnH/fkCq0QDvdxuT1qOCuvf8m+OKPV5MsG 6v/JfF82ovraisy1E4grMGoIvtBNGLYKjhe5Tu3wDq5sazV/hvmWtZZFMt0fBmde GpxDe+XH56xwBT8FXPQZtJq1L0rqkT+uJWEAo40PluNtXmbCGWGi0CnGdPeFhqK3 rR1ilBjBslfOfakKI67IIPVj1kxZ5u+xzTUp+JVHcePbJ5PpbSm6dmoMPIYt1XtO CTr/cJU1RzN3DTwAJr4k9WoMhM1i5Mk8ORzPn9DyorpkaDsjhBI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:09 2026 by rpki-client