$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: HDsknlTfmBoDo+gjfQqye9Udwv5Jy1m+pLGEVuVkMVE= Subject key identifier: A0:76:36:5B:8F:E3:09:03:7D:5B:56:8A:83:7F:56:94:C4:EB:3F:5E Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 24D69A48A77D53F7E8500A74F904A7E0C77354FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 010E Signing time: Sun 01 Mar 2026 09:10:06 +0000 Manifest this update: Sun 01 Mar 2026 09:05:06 +0000 Manifest next update: Wed 04 Mar 2026 12:16:06 +0000 Files and hashes: 1: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 2: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 3: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 4: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) 5: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 6: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: ot7Ic1QOCfeL/iqaBcuI3zdrWgGnKMjimj+baDCrI1s=) 7: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) 8: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=) 9: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d6:9a:48:a7:7d:53:f7:e8:50:0a:74:f9:04:a7:e0:c7:73:54:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Mar 1 09:05:06 2026 GMT Not After : Mar 4 12:16:06 2026 GMT Subject: CN=A076365B8FE309037D5B568A837F5694C4EB3F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:6c:bd:04:e5:bd:4c:2b:f6:85:f7:75:59: 7b:d3:5d:12:c8:b3:cd:57:a5:00:4a:c5:51:49:d5: aa:41:66:50:73:fd:0f:4e:5e:b1:60:80:74:91:ca: f8:98:59:7a:df:ea:da:88:f7:e9:11:21:23:2f:c1: 2c:5d:25:52:04:a3:67:0a:f1:bb:02:63:a9:a5:d7: 4d:8f:60:1d:68:d9:e8:0e:6a:8f:d8:91:ea:5f:6a: 87:6a:39:9d:d5:ad:fd:c7:b5:fd:be:04:84:6c:32: fc:84:47:eb:3e:8d:a3:21:64:fd:41:aa:10:37:de: 51:51:02:ce:63:d0:c7:72:94:8a:b7:f8:26:f5:48: f2:e4:6a:52:94:26:0f:98:23:b0:7f:6d:52:f9:0e: 61:d9:5a:81:42:68:2e:9e:0c:9a:f2:c7:e2:98:4d: 35:bb:58:99:d2:9b:3e:fa:fb:84:ef:13:5f:1f:28: 90:1c:7b:e9:9c:4e:16:ab:b4:19:ff:04:e9:26:32: 80:42:4b:46:b4:a9:6d:ae:bb:b4:a2:5e:6c:f8:2e: 6f:fe:e8:f1:41:e8:ba:8e:91:87:d4:cf:26:b1:81: 0a:0f:3b:65:f6:7f:52:f6:9c:f0:e7:58:06:e7:c6: 26:b3:3b:9b:4e:7d:74:a0:94:22:63:86:f8:f8:21: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:36:5B:8F:E3:09:03:7D:5B:56:8A:83:7F:56:94:C4:EB:3F:5E X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5f:0f:e5:55:20:94:59:bd:98:f5:64:ad:1a:5a:d1:58:9f: 96:05:c0:1f:62:aa:36:0f:3e:6b:f2:51:17:93:3d:54:58:b7: ba:8b:70:98:8d:5e:e8:c1:04:d9:ac:1f:6d:17:03:db:18:e8: c7:1a:e9:30:47:82:c7:b3:af:4f:25:f3:8c:87:e3:e0:36:d2: 58:01:27:72:48:ae:04:99:77:5c:2e:0d:0a:84:98:94:0b:ef: 25:ae:d3:2f:dd:9a:77:74:4f:f3:46:84:7e:50:c7:ee:00:f2: 18:2e:2c:88:f7:ab:ab:9b:a9:b5:43:81:f2:49:c6:01:4a:66: 01:18:85:53:42:b6:0d:b0:ae:8c:0f:d4:c3:ab:df:33:bf:d6: b7:be:a1:18:1d:f5:8a:3d:28:eb:9f:99:1a:83:a4:57:ee:04: 87:44:6a:1d:9e:28:87:e7:e9:7a:97:23:53:45:fb:b5:c9:e2: 90:14:e9:42:89:50:75:e4:31:59:9e:45:62:22:99:87:ea:aa: a1:bf:1d:b5:61:c3:e0:92:ea:4b:c1:4e:34:48:f7:a6:17:cc: 50:8e:e1:2f:8e:38:b1:8c:01:5f:a8:48:ff:eb:97:81:ff:05: ba:e7:79:eb:a9:c7:e9:75:7b:cb:04:7a:0c:2f:ea:1f:55:b5: bf:d9:2d:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNaaSKd9U/foUAp0+QSn4MdzVPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNjAzMDEwOTA1MDZaFw0yNjAzMDQxMjE2MDZaMDMxMTAvBgNV BAMTKEEwNzYzNjVCOEZFMzA5MDM3RDVCNTY4QTgzN0Y1Njk0QzRFQjNGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrF2y9BOW9TCv2hfd1WXvTXRLI s81XpQBKxVFJ1apBZlBz/Q9OXrFggHSRyviYWXrf6tqI9+kRISMvwSxdJVIEo2cK 8bsCY6ml102PYB1o2egOao/YkepfaodqOZ3Vrf3Htf2+BIRsMvyER+s+jaMhZP1B qhA33lFRAs5j0MdylIq3+Cb1SPLkalKUJg+YI7B/bVL5DmHZWoFCaC6eDJryx+KY TTW7WJnSmz76+4TvE18fKJAce+mcThartBn/BOkmMoBCS0a0qW2uu7SiXmz4Lm/+ 6PFB6LqOkYfUzyaxgQoPO2X2f1L2nPDnWAbnxiazO5tOfXSglCJjhvj4ITaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHY2W4/jCQN9W1aKg39WlMTrP14wHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpfD+VVIJRZvZj1ZK0aWtFYn5YFwB9iqjYP PmvyUReTPVRYt7qLcJiNXujBBNmsH20XA9sY6Mca6TBHgsezr08l84yH4+A20lgB J3JIrgSZd1wuDQqEmJQL7yWu0y/dmnd0T/NGhH5Qx+4A8hguLIj3q6ubqbVDgfJJ xgFKZgEYhVNCtg2wrowP1MOr3zO/1re+oRgd9Yo9KOufmRqDpFfuBIdEah2eKIfn 6XqXI1NF+7XJ4pAU6UKJUHXkMVmeRWIimYfqqqG/HbVhw+CS6kvBTjRI96YXzFCO 4S+OOLGMAV+oSP/rl4H/Bbrneeupx+l1e8sEegwv6h9Vtb/ZLbk= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:55 2026 by rpki-client