$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: 1oqq3CnNWLExxAijUjL3zzLKQ2ZG/8y5xkoYJWGXxXI= Subject key identifier: 66:1C:C4:D7:CC:4C:92:47:FC:D9:EB:7D:91:F2:8F:DA:EC:96:97:52 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 65100FF617748B49472DF9A9834F2FD10A8A563E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 0228 Signing time: Sun 01 Mar 2026 06:51:59 +0000 Manifest this update: Sun 01 Mar 2026 06:46:59 +0000 Manifest next update: Wed 04 Mar 2026 11:47:59 +0000 Files and hashes: 1: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: Qbfj7YZ+Tv9kxXnnd1sm955UDQ2gPaQwP9s5E0g+wJQ=) 2: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: 3PWjXfpwJqV9QN5GBdBP8GQxLZaQG4nMbQYJkVGyy9s=) 3: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 6M2tSRAEtO4icIKg0WJOGaj3E1zsgEWIzLxTXHoBXWE=) 4: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: Z0YSL1jUGUcMlhyqmc0kLVGK6jk4OSIM3dOB14d1j48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:10:0f:f6:17:74:8b:49:47:2d:f9:a9:83:4f:2f:d1:0a:8a:56:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Mar 1 06:46:59 2026 GMT Not After : Mar 4 11:47:59 2026 GMT Subject: CN=661CC4D7CC4C9247FCD9EB7D91F28FDAEC969752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:7f:5f:05:c8:9f:97:1a:ce:f7:26:3c:e7: e6:57:ff:fd:05:74:99:13:a9:0d:ab:f8:29:33:02: f9:8f:25:18:b0:a1:b6:9a:b5:84:69:0f:41:5c:98: 01:05:4a:5b:7b:b6:3a:41:54:7f:71:d7:c3:c1:8e: 76:87:24:57:43:14:a2:66:af:27:57:17:db:14:88: 4e:50:61:46:d2:54:0d:cc:c3:12:ad:95:45:e1:20: 8d:e3:8d:c4:5d:49:e9:48:42:83:2e:7e:e2:86:79: e7:c8:de:93:fe:03:09:3b:62:d7:91:0b:2e:58:48: 47:fe:fe:b1:20:9e:71:82:24:99:98:c4:c7:c0:f6: c5:26:9a:c5:3a:ab:81:7e:89:ef:59:c3:aa:01:01: 53:63:f1:c1:63:d4:5e:02:80:85:ea:9c:dc:b2:25: 4f:22:3d:29:82:e5:09:b5:03:61:53:7a:96:a5:1a: b5:ab:98:f4:80:65:e2:02:f3:2d:2d:48:e5:bb:ea: 8b:88:9f:52:ab:06:eb:c2:fb:4c:5e:a8:c2:cd:b8: 9d:13:af:8e:32:5c:b9:b0:bc:d4:b7:74:9b:a0:dc: f9:e3:8e:97:54:ea:27:70:74:fc:75:dd:f8:57:7a: d5:65:38:5f:85:70:e8:6e:02:04:5e:e8:96:40:54: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:C4:D7:CC:4C:92:47:FC:D9:EB:7D:91:F2:8F:DA:EC:96:97:52 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ea:1f:9d:f0:eb:46:53:fc:9c:27:1b:3f:8e:19:13:f8:6d: cc:1c:1a:47:1d:73:5c:a7:d3:27:63:b0:68:1a:b1:54:1d:20: 07:32:18:24:cc:15:fe:30:ac:64:ef:1f:33:82:39:0d:79:d4: cc:c6:bb:41:d3:cb:1c:96:cc:b6:61:8f:b6:78:ac:17:a2:1f: 5b:ad:a7:04:87:03:10:5e:5b:9e:34:ae:45:25:39:b0:43:f5: 62:83:db:2d:80:86:f9:57:f9:4f:f2:38:c4:4d:2b:16:7f:39: 27:0a:a7:88:dd:b4:d9:33:d6:b3:45:4d:bd:bd:17:5e:b4:3b: 80:75:7f:83:87:b8:62:6b:5a:20:8c:e6:bc:04:cc:5b:da:54: ea:2a:59:b8:7c:fe:05:b0:2c:15:f9:c8:5c:83:fd:85:8c:a1: d7:fb:db:6c:57:4d:4b:3f:67:f8:10:1e:5d:75:1f:5e:7b:a1: 6c:91:39:aa:18:12:24:28:f8:fb:45:61:41:d4:c8:fc:5d:ff: 40:b2:9a:b9:5a:5e:d9:aa:c4:2f:87:30:9c:d5:94:63:6d:74: 2d:ad:29:f7:9f:b1:24:ab:db:6f:d8:6a:eb:65:2d:d3:3a:3a: 21:f5:c8:7d:75:73:c2:fa:17:16:f2:5d:d8:5a:1d:10:42:26: 0c:27:c0:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRAP9hd0i0lHLfmpg08v0QqKVj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNjAzMDEwNjQ2NTlaFw0yNjAzMDQxMTQ3NTlaMDMxMTAvBgNV BAMTKDY2MUNDNEQ3Q0M0QzkyNDdGQ0Q5RUI3RDkxRjI4RkRBRUM5Njk3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxg39fBciflxrO9yY85+ZX//0F dJkTqQ2r+CkzAvmPJRiwobaatYRpD0FcmAEFSlt7tjpBVH9x18PBjnaHJFdDFKJm rydXF9sUiE5QYUbSVA3MwxKtlUXhII3jjcRdSelIQoMufuKGeefI3pP+Awk7YteR Cy5YSEf+/rEgnnGCJJmYxMfA9sUmmsU6q4F+ie9Zw6oBAVNj8cFj1F4CgIXqnNyy JU8iPSmC5Qm1A2FTepalGrWrmPSAZeIC8y0tSOW76ouIn1KrBuvC+0xeqMLNuJ0T r44yXLmwvNS3dJug3PnjjpdU6idwdPx13fhXetVlOF+FcOhuAgRe6JZAVOBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZhzE18xMkkf82et9kfKP2uyWl1IwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnqH53w60ZT/JwnGz+OGRP4bcwcGkcdc1yn 0ydjsGgasVQdIAcyGCTMFf4wrGTvHzOCOQ151MzGu0HTyxyWzLZhj7Z4rBeiH1ut pwSHAxBeW540rkUlObBD9WKD2y2AhvlX+U/yOMRNKxZ/OScKp4jdtNkz1rNFTb29 F160O4B1f4OHuGJrWiCM5rwEzFvaVOoqWbh8/gWwLBX5yFyD/YWModf722xXTUs/ Z/gQHl11H157oWyROaoYEiQo+PtFYUHUyPxd/0CymrlaXtmqxC+HMJzVlGNtdC2t KfefsSSr22/YautlLdM6OiH1yH11c8L6FxbyXdhaHRBCJgwnwKs= -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:41 2026 by rpki-client