$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft File: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft (raw, json) Hash identifier: OK941C6xte38n3XdfMYvF+2maeDyus0lNx6zf8c6KA8= Subject key identifier: 03:37:A6:86:97:0B:CD:03:A6:F8:4D:4D:F9:10:75:58:27:52:5A:C9 Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E Certificate issuer: /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Certificate serial: 3D6C851C475719EF0AC8C318A56BCE0808951C32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft Manifest number: 01B4 Signing time: Mon 02 Mar 2026 04:40:45 +0000 Manifest this update: Mon 02 Mar 2026 04:35:45 +0000 Manifest next update: Thu 05 Mar 2026 05:40:45 +0000 Files and hashes: 1: 9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl (hash: mP9pZao0CrHvXjBQD6sOiZlBjx7RQCitZYgOeyMpyXM=) 2: 3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (hash: +olAq7p56zfhKu5twJLCWaLZ5DJyPxgYj3wH5RLPlus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6c:85:1c:47:57:19:ef:0a:c8:c3:18:a5:6b:ce:08:08:95:1c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E Validity Not Before: Mar 2 04:35:45 2026 GMT Not After : Mar 5 05:40:45 2026 GMT Subject: CN=0337A686970BCD03A6F84D4DF910755827525AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:63:89:7e:be:1f:ae:1a:b4:b0:61:a4:63: 69:11:1d:9a:76:3a:90:02:87:1b:ce:df:d4:f0:1f: 3e:ef:cc:91:f6:1f:a3:17:4c:8f:ed:28:96:8c:c3: 35:65:c2:a5:d8:ff:43:26:3f:5c:65:82:20:f7:3c: ad:ec:a1:87:32:71:53:46:19:26:f0:d0:74:45:38: 5e:35:99:db:24:93:b9:f2:72:5d:2a:26:cf:35:0d: 58:7e:7f:37:d0:1a:cf:f6:04:d7:47:8f:50:1c:cf: 04:37:de:35:ef:71:75:45:66:2a:2d:35:33:b6:83: fa:e9:0c:d0:34:c1:39:44:a1:da:89:39:b6:fc:51: bf:a1:86:bc:e3:7f:df:44:94:91:14:01:ca:29:d0: 3d:f3:cf:f6:9b:82:2e:46:9b:ad:29:d0:65:c1:64: 83:3f:6a:b7:44:04:d8:70:b2:5e:ff:47:33:75:0d: 20:45:f3:c7:4f:59:98:85:26:6c:26:6d:7f:21:23: e5:ca:46:94:2b:3d:c7:82:10:3e:eb:4d:c4:44:20: 2f:88:05:d2:51:6c:ed:8c:46:6b:df:46:b6:b1:d8: 14:ea:01:8b:c0:9c:ed:59:65:5d:35:be:76:2a:c9: 1b:2c:7d:cd:57:da:de:02:cf:96:b5:3b:f6:b1:df: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:37:A6:86:97:0B:CD:03:A6:F8:4D:4D:F9:10:75:58:27:52:5A:C9 X509v3 Authority Key Identifier: keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a3:bd:2a:96:84:6b:19:be:e1:47:f5:a8:51:76:47:07:ee: 7a:25:69:52:d4:0b:8d:97:9e:62:5b:3b:99:61:1c:96:c2:aa: 56:72:f1:73:58:9f:ff:1a:02:e5:c8:d0:2c:e1:08:0d:2a:03: 7e:9b:40:d8:78:d7:f7:f7:56:73:5d:54:25:68:c9:6c:0d:c0: 67:21:7b:7f:ab:99:3d:b6:58:ac:5a:94:68:a9:22:dc:c4:49: 60:fc:6e:58:de:08:38:1a:ee:db:5e:48:cf:2b:6e:c6:ed:a7: 8c:3e:c1:a0:e5:74:65:dc:ff:08:57:27:31:e2:cc:d2:15:37: f1:1a:9a:d3:a3:c9:f0:33:21:f5:c8:93:55:65:ae:27:dd:87: f6:2b:6f:ac:b8:10:d9:4d:b4:dc:aa:ae:5d:3b:43:42:13:ff: f4:b0:e0:7c:1c:d5:d7:d3:5f:26:0a:9a:40:01:c5:b0:99:22: f0:b2:12:37:99:6f:40:5e:f2:57:83:3d:98:a3:15:2a:0a:79: 6c:00:d2:21:ac:37:ba:a7:c6:77:fb:af:be:8f:a6:20:84:db: 78:be:a6:99:ef:11:e3:8c:41:8c:48:42:a5:7b:ee:ca:d2:45: 6b:77:e2:de:0f:20:1c:cc:c2:4e:f8:0b:1e:21:c8:a3:fa:cf: e2:2b:ff:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWyFHEdXGe8KyMMYpWvOCAiVHDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2 NTQxREIwRTAeFw0yNjAzMDIwNDM1NDVaFw0yNjAzMDUwNTQwNDVaMDMxMTAvBgNV BAMTKDAzMzdBNjg2OTcwQkNEMDNBNkY4NEQ0REY5MTA3NTU4Mjc1MjVBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWWOJfr4frhq0sGGkY2kRHZp2 OpAChxvO39TwHz7vzJH2H6MXTI/tKJaMwzVlwqXY/0MmP1xlgiD3PK3soYcycVNG GSbw0HRFOF41mdskk7nycl0qJs81DVh+fzfQGs/2BNdHj1AczwQ33jXvcXVFZiot NTO2g/rpDNA0wTlEodqJObb8Ub+hhrzjf99ElJEUAcop0D3zz/abgi5Gm60p0GXB ZIM/ardEBNhwsl7/RzN1DSBF88dPWZiFJmwmbX8hI+XKRpQrPceCED7rTcREIC+I BdJRbO2MRmvfRrax2BTqAYvAnO1ZZV01vnYqyRssfc1X2t4Cz5a1O/ax31gNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzemhpcLzQOm+E1N+RB1WCdSWskwHwYDVR0j BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1 M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx REIwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjNmNjZDItODg5Ny00YTRlLTgx Y2UtYzM2MWE1ZTY4ZGQ2LzAvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIw OUY2NTQxREIwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqjvSqWhGsZvuFH9ahRdkcH7nolaVLUC42X nmJbO5lhHJbCqlZy8XNYn/8aAuXI0CzhCA0qA36bQNh41/f3VnNdVCVoyWwNwGch e3+rmT22WKxalGipItzESWD8bljeCDga7tteSM8rbsbtp4w+waDldGXc/whXJzHi zNIVN/EamtOjyfAzIfXIk1Vlrifdh/Yrb6y4ENlNtNyqrl07Q0IT//Sw4Hwc1dfT XyYKmkABxbCZIvCyEjeZb0Be8leDPZijFSoKeWwA0iGsN7qnxnf7r76PpiCE23i+ ppnvEeOMQYxIQqV77srSRWt34t4PIBzMwk74Cx4hyKP6z+Ir/1I= -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:08 2026 by rpki-client