$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json) Hash identifier: 3XGvKSQUyzYG6U0u8lNmVs62WNMcssw02b4sfEWRXOs= Subject key identifier: 76:F2:92:E9:75:A2:59:6E:40:84:28:D8:44:42:96:43:74:2F:0A:0D Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Certificate serial: 6C4E2379D0EC6AD9EF46BF9F60CE4591BBCFF1B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft Manifest number: 013A Signing time: Mon 02 Mar 2026 05:22:28 +0000 Manifest this update: Mon 02 Mar 2026 05:17:28 +0000 Manifest next update: Thu 05 Mar 2026 07:12:28 +0000 Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: tYgibkzzAtGjQKdmBmuyqmxYY+aFNcFxJWH78M/BK54=) 2: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: wz9FkaDEPKIX7fvMlnKYnwZyLfb/BtGmfVMJ1v7QC1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4e:23:79:d0:ec:6a:d9:ef:46:bf:9f:60:ce:45:91:bb:cf:f1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71 Validity Not Before: Mar 2 05:17:28 2026 GMT Not After : Mar 5 07:12:28 2026 GMT Subject: CN=76F292E975A2596E408428D844429643742F0A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:92:80:40:ce:b6:d6:87:40:e0:9b:49:33: 87:3b:c6:81:b5:15:79:8f:29:be:0f:6e:a1:62:7f: 58:84:3c:df:20:66:9f:98:db:bc:2b:37:45:97:3a: 08:de:1f:11:72:bc:57:ef:e8:54:71:39:98:b3:94: 5b:0c:9b:42:8f:3a:30:f4:55:95:f6:e4:32:20:40: 14:e8:05:98:33:8b:00:df:ba:5c:75:75:a3:42:1e: d6:7e:82:23:4b:24:55:d4:06:b6:11:65:8d:27:28: e1:41:f1:74:02:54:a0:19:f4:ee:db:1e:7e:d3:c2: f5:38:e9:cf:10:e7:73:79:13:c9:60:2d:f2:2d:7d: 01:4b:b9:5b:63:f3:06:3f:69:6c:93:8f:32:56:84: 9c:5f:41:d2:b1:a0:71:da:f5:94:d8:90:1b:ac:ab: 0f:53:85:46:c8:b5:59:30:97:22:f9:2a:08:76:5f: 06:1d:aa:a7:41:3e:73:1a:f4:a9:b7:b1:14:8a:1a: 37:0e:dd:a8:94:4f:8e:d9:fd:fd:45:3b:26:cb:ac: 0d:6c:19:68:4a:78:da:34:eb:dc:a5:09:e9:9d:63: 83:0a:3b:3f:15:15:b8:79:e3:dd:86:e5:c6:3d:f5: 0b:45:84:a9:19:02:25:49:df:0b:fd:81:66:1a:35: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F2:92:E9:75:A2:59:6E:40:84:28:D8:44:42:96:43:74:2F:0A:0D X509v3 Authority Key Identifier: keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f2:05:d3:a5:f2:df:1a:f2:07:db:04:e3:65:30:83:13:b5: 67:08:40:0d:82:ef:63:e8:2e:d3:f8:c6:d5:22:ca:6f:0a:04: 4b:8b:95:80:b8:06:87:ec:dc:4b:bf:aa:e3:7e:5a:22:da:4e: c3:5e:54:6e:59:31:03:77:df:9f:38:9c:33:3d:8d:62:a6:55: 7d:f5:84:7a:35:e4:70:f2:5d:d0:13:a5:11:de:b6:7e:bc:72: cf:fd:1b:52:d4:7f:4f:26:ad:c7:86:e8:14:5c:77:fb:9c:ba: b4:60:a1:41:a3:05:d4:9f:bc:a9:c1:e1:af:5f:5d:91:b6:0f: b1:5f:26:d4:a5:ad:f4:dc:a5:de:3e:6a:a6:77:40:47:a5:10: d7:ef:3b:1c:35:35:5a:9d:6d:f4:b7:45:44:07:93:00:73:3a: 4f:cc:b0:86:6c:52:87:32:8c:d8:1c:7d:7b:ad:b0:67:b2:cd: 7a:b8:d0:08:21:ad:be:25:0d:27:7b:59:8a:69:be:bd:a8:1b: 37:d9:ce:ff:47:6f:98:0f:a4:96:16:28:f5:aa:98:5a:a9:79: 68:bf:3c:a7:da:1c:4d:89:d3:25:00:15:d6:f2:bd:19:eb:e2: 4b:59:cc:92:93:00:98:77:67:70:36:89:4f:11:12:18:de:cb: 33:97:4f:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbE4jedDsatnvRr+fYM5FkbvP8bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVF M0FGREY3MTAeFw0yNjAzMDIwNTE3MjhaFw0yNjAzMDUwNzEyMjhaMDMxMTAvBgNV BAMTKDc2RjI5MkU5NzVBMjU5NkU0MDg0MjhEODQ0NDI5NjQzNzQyRjBBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxpKAQM621odA4JtJM4c7xoG1 FXmPKb4PbqFif1iEPN8gZp+Y27wrN0WXOgjeHxFyvFfv6FRxOZizlFsMm0KPOjD0 VZX25DIgQBToBZgziwDfulx1daNCHtZ+giNLJFXUBrYRZY0nKOFB8XQCVKAZ9O7b Hn7TwvU46c8Q53N5E8lgLfItfQFLuVtj8wY/aWyTjzJWhJxfQdKxoHHa9ZTYkBus qw9ThUbItVkwlyL5Kgh2XwYdqqdBPnMa9Km3sRSKGjcO3aiUT47Z/f1FOybLrA1s GWhKeNo069ylCemdY4MKOz8VFbh5492G5cY99QtFhKkZAiVJ3wv9gWYaNb9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdvKS6XWiWW5AhCjYREKWQ3QvCg0wHwYDVR0j BBgwFoAUnSMYn2fKZppGElZ913zGReOv33EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVhY2IwNy05ZDVmLTQ5N2YtOTkzMi0zM2E0MzRkM2FhMzIvMC85RDIzMTg5RjY3 Q0E2NjlBNDYxMjU2N0RENzdDQzY0NUUzQUZERjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2NDVFM0FG REY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1YWNiMDctOWQ1Zi00OTdmLTk5 MzItMzNhNDM0ZDNhYTMyLzAvOUQyMzE4OUY2N0NBNjY5QTQ2MTI1NjdERDc3Q0M2 NDVFM0FGREY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3yBdOl8t8a8gfbBONlMIMTtWcIQA2C72Po LtP4xtUiym8KBEuLlYC4Bofs3Eu/quN+WiLaTsNeVG5ZMQN33584nDM9jWKmVX31 hHo15HDyXdATpRHetn68cs/9G1LUf08mrceG6BRcd/ucurRgoUGjBdSfvKnB4a9f XZG2D7FfJtSlrfTcpd4+aqZ3QEelENfvOxw1NVqdbfS3RUQHkwBzOk/MsIZsUocy jNgcfXutsGeyzXq40Aghrb4lDSd7WYppvr2oGzfZzv9Hb5gPpJYWKPWqmFqpeWi/ PKfaHE2J0yUAFdbyvRnr4ktZzJKTAJh3Z3A2iU8REhjeyzOXTx8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:06 2026 by rpki-client