$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: UBvRRFyYN/U01pb3lVid956IRgcuUH9faewFGIu8pos= Subject key identifier: 38:A1:E9:35:96:3F:13:88:93:FB:EA:B9:E1:84:12:11:E3:96:6D:1C Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 1B9CC97856DA9E374F3271CA0F0CE7B8A82E625C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 03F2 Signing time: Sun 01 Mar 2026 14:02:41 +0000 Manifest this update: Sun 01 Mar 2026 13:57:41 +0000 Manifest next update: Wed 04 Mar 2026 15:23:41 +0000 Files and hashes: 1: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: nsa9pjy/NLP4zv4ITiTJttMJj/3cdkuIGjoxim85/8k=) 2: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: 4JnfTGjY9X7X8+n4/R+zY+BatEjhdtcbcnnxtg34W0k=) 3: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw=) 4: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: x7A5/ydvWW7sOuPV1cJAWpXthBYyUBZokt+o03RLsFU=) 5: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: gpChKqdsCYOp/lH5E0Zrms5qo7Kcyfa0mYD/MLgV2Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9c:c9:78:56:da:9e:37:4f:32:71:ca:0f:0c:e7:b8:a8:2e:62:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Mar 1 13:57:41 2026 GMT Not After : Mar 4 15:23:41 2026 GMT Subject: CN=38A1E935963F138893FBEAB9E1841211E3966D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:0f:0b:6b:0f:f6:e9:55:f5:6a:6e:bd:b2: b8:20:c0:07:85:7c:b9:c7:b8:d1:5e:09:10:0a:9b: f8:3e:9f:fd:c0:f1:95:08:50:2f:6f:db:2e:55:aa: 1d:38:1c:b4:a0:2b:fe:dd:57:bc:99:d2:ea:e4:e5: b2:5d:41:f8:64:54:c4:eb:9b:18:8d:37:f6:a2:de: 1f:40:1e:83:0b:e2:f1:9b:5c:49:58:9a:1f:8b:cb: ab:5f:7e:a3:5a:57:b6:f4:45:3c:e3:1a:e8:91:1a: 70:ef:fd:d2:a4:88:42:39:97:c4:d0:be:69:ee:64: d8:17:d6:7d:d4:06:0e:7e:ec:aa:31:af:83:01:81: 27:54:db:64:ca:e7:a6:14:25:84:7b:7a:03:4b:29: ee:3e:87:2c:eb:c9:4e:0f:03:7c:d0:8e:9a:73:17: f4:3e:83:59:53:31:de:17:c5:1a:a6:29:06:cd:6d: b2:12:8b:a1:8e:b5:d5:69:fe:ca:0e:2f:1e:24:5e: b7:82:b4:5d:f0:94:1b:17:42:37:6d:e9:77:5e:2f: ec:6c:09:b2:c7:3f:71:a5:1b:05:70:7c:08:e7:ff: 3d:b6:95:ae:b9:0a:58:45:1b:83:be:18:af:ca:62: c9:96:51:2a:49:a7:dd:24:8b:58:eb:b1:aa:4b:56: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A1:E9:35:96:3F:13:88:93:FB:EA:B9:E1:84:12:11:E3:96:6D:1C X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:77:5a:53:9c:ce:80:50:12:64:36:fc:94:fe:91:9c:b3: 7c:ff:32:62:5b:c7:bb:43:c5:a7:64:e4:9b:df:35:24:8d:6d: 3b:f1:f1:7d:b7:3e:99:99:3a:73:65:e2:80:cd:90:c6:e8:ee: 67:c6:13:b7:e6:44:18:6e:3c:69:bd:a2:06:2b:92:0b:74:0c: c5:94:f9:34:8b:2e:6a:86:06:b1:6d:32:85:f2:5a:1b:77:37: b0:2c:ab:03:bf:d1:9c:8f:9e:57:f8:b5:f3:54:80:e7:a5:b3: 3f:97:c9:53:ef:a3:65:ae:c3:ac:e8:3f:18:43:da:ef:c7:6c: 26:bc:f7:95:c8:21:d4:4b:ee:bb:53:f4:df:0d:a5:f5:6c:5b: 1e:1e:95:77:d9:8d:fa:e7:28:c2:ef:ad:1b:29:12:de:c7:6b: 5f:78:3d:2e:53:9e:27:3f:57:0f:8b:7c:8b:8a:f9:cb:86:0a: 35:d6:40:cf:0f:3b:b4:88:b9:4f:6b:fb:71:fe:a2:89:3e:2b: 63:5b:59:c4:3e:bd:82:5c:55:92:80:09:8c:82:61:1e:67:ca: ec:75:3c:dd:f6:35:df:b2:1b:9e:61:a9:0f:44:e4:dc:92:bc: 6e:25:05:12:6e:c0:46:5b:99:87:20:57:81:fa:37:dd:c4:19: 98:45:b4:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5zJeFbanjdPMnHKDwznuKguYlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNjAzMDExMzU3NDFaFw0yNjAzMDQxNTIzNDFaMDMxMTAvBgNV BAMTKDM4QTFFOTM1OTYzRjEzODg5M0ZCRUFCOUUxODQxMjExRTM5NjZEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKg8Law/26VX1am69srggwAeF fLnHuNFeCRAKm/g+n/3A8ZUIUC9v2y5Vqh04HLSgK/7dV7yZ0urk5bJdQfhkVMTr mxiNN/ai3h9AHoML4vGbXElYmh+Ly6tffqNaV7b0RTzjGuiRGnDv/dKkiEI5l8TQ vmnuZNgX1n3UBg5+7Koxr4MBgSdU22TK56YUJYR7egNLKe4+hyzryU4PA3zQjppz F/Q+g1lTMd4XxRqmKQbNbbISi6GOtdVp/soOLx4kXreCtF3wlBsXQjdt6XdeL+xs CbLHP3GlGwVwfAjn/z22la65ClhFG4O+GK/KYsmWUSpJp90ki1jrsapLVr7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKHpNZY/E4iT++q54YQSEeOWbRwwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGHd1pTnM6AUBJkNvyU/pGcs3z/MmJbx7tD xadk5JvfNSSNbTvx8X23PpmZOnNl4oDNkMbo7mfGE7fmRBhuPGm9ogYrkgt0DMWU +TSLLmqGBrFtMoXyWht3N7AsqwO/0ZyPnlf4tfNUgOelsz+XyVPvo2Wuw6zoPxhD 2u/HbCa895XIIdRL7rtT9N8NpfVsWx4elXfZjfrnKMLvrRspEt7Ha194PS5Tnic/ Vw+LfIuK+cuGCjXWQM8PO7SIuU9r+3H+ook+K2NbWcQ+vYJcVZKACYyCYR5nyux1 PN32Nd+yG55hqQ9E5NySvG4lBRJuwEZbmYcgV4H6N93EGZhFtDs= -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:42 2026 by rpki-client