$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: FNJqXpJX08IBGNRef3ci38ZoMZhUY6qfbB4FO3dMsZc= Subject key identifier: 2C:2D:37:0D:1D:FD:26:2E:E1:BE:78:8D:8A:C0:93:FA:89:6D:7E:EF Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 784051FA3E6C8456F35EAAB749A018FA7EFBC68F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: 0111 Signing time: Sun 01 Mar 2026 16:21:29 +0000 Manifest this update: Sun 01 Mar 2026 16:16:29 +0000 Manifest next update: Wed 04 Mar 2026 20:30:29 +0000 Files and hashes: 1: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 2: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: C4rga4IV5CPAjqGl2IDQvxTkBLEzm0/wTmFyBM8eP5E=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:40:51:fa:3e:6c:84:56:f3:5e:aa:b7:49:a0:18:fa:7e:fb:c6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Mar 1 16:16:29 2026 GMT Not After : Mar 4 20:30:29 2026 GMT Subject: CN=2C2D370D1DFD262EE1BE788D8AC093FA896D7EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:24:c0:a0:14:33:84:bf:ab:d5:7d:3d:ae: 79:23:84:3f:ea:dc:5e:1e:7f:0e:6c:f3:66:c2:d7: 2c:ba:04:76:09:8a:44:59:ee:38:38:85:06:79:64: 63:bb:29:20:74:5b:57:e3:3b:de:72:c7:68:aa:27: ec:45:dc:6c:f9:ca:c1:61:92:b5:cc:64:c7:51:dd: 39:09:0b:3b:83:74:3a:20:6c:80:92:bc:25:60:07: 19:5a:4c:89:2e:16:f7:a1:3f:46:cc:42:15:54:3a: d5:49:ba:d5:ae:fd:db:e3:d1:70:eb:af:22:2e:f4: 7d:84:2f:32:16:2f:63:a0:4d:1d:96:e3:67:6b:0d: 0e:c5:fa:86:df:62:b4:03:e0:c9:a0:4a:70:5d:d2: 12:47:ef:51:c6:5e:a0:bf:c2:0a:fc:e7:17:e1:b7: ef:3d:fa:74:77:86:1a:06:c8:5b:be:a5:2a:3c:7d: 55:29:09:2b:ce:8f:7d:82:fc:a1:e4:15:0b:7e:89: 5b:68:05:26:dd:99:4b:b6:1b:0d:49:74:f5:5a:c8: 53:37:97:f9:91:c6:74:2e:c6:19:eb:b0:85:ab:cd: cd:89:df:0e:79:b4:d6:65:b7:72:9f:42:2f:4c:8c: aa:7f:53:28:a0:44:be:5f:87:c7:9e:26:77:5c:ab: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2D:37:0D:1D:FD:26:2E:E1:BE:78:8D:8A:C0:93:FA:89:6D:7E:EF X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:69:01:87:51:27:a2:dc:c5:51:0b:0a:53:9f:38:41:ad:28: 64:85:0c:6f:03:84:b3:80:17:b0:2c:b4:9e:b7:d1:04:68:a0: 73:b3:7f:30:19:86:94:1e:45:48:de:24:e9:a2:23:33:48:1c: 68:94:cd:ae:f9:14:d0:00:9b:80:27:3a:5c:e8:26:24:ce:b6: 2c:d5:3f:04:cb:de:9a:c0:c3:60:9b:b2:d8:3d:13:c1:49:15: 10:21:67:7b:03:5d:fb:75:c8:b6:fd:17:89:2e:be:7a:d3:92: 0f:90:63:45:4d:5d:82:f3:6a:90:9b:2f:e0:94:ce:31:27:81: 35:7e:34:a8:a1:4d:a2:b3:5e:7f:0c:d4:fd:61:65:5e:e4:20: 06:ab:e5:d3:c5:bd:bf:0d:62:7b:08:0b:da:33:26:c0:c8:06: b6:1e:4b:49:30:6d:46:93:cc:6e:7d:f2:a9:37:12:43:74:bd: 0f:28:24:4d:2f:1a:86:88:93:0d:98:e7:df:7c:71:db:1b:d3: 92:25:8c:b8:69:4b:84:de:9f:c1:fb:df:a3:5d:ff:14:38:cd: 39:c1:76:0d:f1:42:ab:f5:d8:70:23:22:22:81:df:de:03:5b: e6:d4:38:b9:60:d9:13:57:73:3c:c4:ca:f9:4d:1d:70:ec:ed: 60:62:df:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEBR+j5shFbzXqq3SaAY+n77xo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNjAzMDExNjE2MjlaFw0yNjAzMDQyMDMwMjlaMDMxMTAvBgNV BAMTKDJDMkQzNzBEMURGRDI2MkVFMUJFNzg4RDhBQzA5M0ZBODk2RDdFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oCTAoBQzhL+r1X09rnkjhD/q 3F4efw5s82bC1yy6BHYJikRZ7jg4hQZ5ZGO7KSB0W1fjO95yx2iqJ+xF3Gz5ysFh krXMZMdR3TkJCzuDdDogbICSvCVgBxlaTIkuFvehP0bMQhVUOtVJutWu/dvj0XDr ryIu9H2ELzIWL2OgTR2W42drDQ7F+obfYrQD4MmgSnBd0hJH71HGXqC/wgr85xfh t+89+nR3hhoGyFu+pSo8fVUpCSvOj32C/KHkFQt+iVtoBSbdmUu2Gw1JdPVayFM3 l/mRxnQuxhnrsIWrzc2J3w55tNZlt3KfQi9MjKp/UyigRL5fh8eeJndcq48DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULC03DR39Ji7hvniNisCT+oltfu8wHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVpAYdRJ6LcxVELClOfOEGtKGSFDG8DhLOA F7AstJ630QRooHOzfzAZhpQeRUjeJOmiIzNIHGiUza75FNAAm4AnOlzoJiTOtizV PwTL3prAw2Cbstg9E8FJFRAhZ3sDXft1yLb9F4kuvnrTkg+QY0VNXYLzapCbL+CU zjEngTV+NKihTaKzXn8M1P1hZV7kIAar5dPFvb8NYnsIC9ozJsDIBrYeS0kwbUaT zG598qk3EkN0vQ8oJE0vGoaIkw2Y5998cdsb05IljLhpS4Ten8H736Nd/xQ4zTnB dg3xQqv12HAjIiKB394DW+bUOLlg2RNXczzEyvlNHXDs7WBi33g= -----END CERTIFICATE-----Generated at Mon Mar 2 09:39:36 2026 by rpki-client