$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft File: 9B481670EF7678276B7F667CD9CB3577AF393FD0.mft (raw, json) Hash identifier: 2M0Ml6XbjhdjbdTc8rug3nIXsoiwFhplDa2S3+tyhRo= Subject key identifier: 36:B1:01:92:B1:E5:E0:82:96:C9:A7:CC:14:4D:2D:82:E9:69:7E:F1 Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 Certificate issuer: /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Certificate serial: 0EF69DE7AC6FAE1AC2DC136497780066A7B33D15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft Manifest number: 017C Signing time: Sun 01 Mar 2026 12:41:26 +0000 Manifest this update: Sun 01 Mar 2026 12:36:26 +0000 Manifest next update: Wed 04 Mar 2026 20:04:26 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: nctnXPjyCy8J8rL5xXqCg2sFFkEJpXiz1am6alHjeHM=) 2: 9B481670EF7678276B7F667CD9CB3577AF393FD0.crl (hash: 3Q0tbAe2MTuapcg5LGDeD+/A5bjXePz71FnsCKO3oo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f6:9d:e7:ac:6f:ae:1a:c2:dc:13:64:97:78:00:66:a7:b3:3d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0 Validity Not Before: Mar 1 12:36:26 2026 GMT Not After : Mar 4 20:04:26 2026 GMT Subject: CN=36B10192B1E5E08296C9A7CC144D2D82E9697EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:dc:f9:61:fe:6e:b3:f2:e7:6a:71:d5:b2: b0:66:7b:b8:bd:6d:fb:04:ec:39:5c:60:64:9a:be: 92:bb:66:84:8c:e8:09:d8:c4:08:5c:ef:3e:f3:4d: 7e:a9:cd:86:72:43:7d:be:ed:5d:5e:95:c6:48:09: e5:e5:84:f0:9d:f9:94:56:e0:8c:7e:a3:05:a9:6a: 86:86:01:01:9e:35:6b:d6:72:3e:20:fa:60:96:85: 27:89:6c:7a:2c:b0:9b:6f:01:ba:0c:bb:4c:f4:00: a4:06:c6:70:7e:02:e1:fd:2e:47:1b:58:e9:f0:6a: 30:d1:1a:c5:e1:6c:a1:26:85:c4:ad:cf:45:7f:03: 67:74:9c:1a:b1:34:7f:42:de:ee:6b:10:ab:65:e3: 61:77:2a:93:d9:39:f2:c4:0b:bb:d6:d7:39:69:85: ce:0d:9c:3f:ff:2e:f9:3e:41:8b:2f:ab:a6:55:3c: 9c:ec:14:f1:0b:2a:83:83:ec:e0:ed:ac:b3:eb:af: 1f:6d:55:7d:c2:8a:c1:27:29:c7:49:16:71:70:f0: 50:6d:c8:2a:f5:95:c2:50:01:96:3c:9d:c6:97:59: d4:1c:38:6f:8b:38:e4:20:4f:1d:35:a4:d3:ca:0f: 8d:86:21:21:19:03:1f:05:ff:b4:30:44:16:0e:a1: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B1:01:92:B1:E5:E0:82:96:C9:A7:CC:14:4D:2D:82:E9:69:7E:F1 X509v3 Authority Key Identifier: keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6c:44:97:02:7a:5f:65:59:72:1b:45:55:49:e9:1d:7f:e9: 0c:c2:85:0a:64:3e:ba:9e:27:3b:2a:08:3f:d4:6c:9e:76:9c: f3:a9:94:f9:73:3b:60:86:4b:67:c4:b0:58:85:91:90:b1:2c: ac:33:3e:b8:3b:16:8e:c0:ac:96:5e:71:76:dc:6a:87:13:ef: 28:a0:2b:7e:05:05:ea:45:ee:e5:d6:b5:8f:c2:68:b9:eb:36: d2:7b:1b:5b:0b:4a:99:82:43:f5:a3:64:6e:e3:27:72:77:5a: 8e:9a:fd:9f:ad:0c:57:40:12:80:3c:7a:9d:52:91:c3:fd:d3: b5:09:96:e2:bd:a4:40:43:45:24:0e:11:c5:b6:e1:cd:63:e6: bc:56:bc:67:9c:04:b4:7c:73:2d:8f:af:1e:0e:00:07:52:67: 92:31:57:ad:6f:ce:47:21:6f:94:f8:c3:45:82:a2:13:2f:73: 18:af:7c:8f:30:98:7d:f9:d9:69:19:aa:4b:48:44:63:9a:b3: 30:01:71:11:9b:14:78:f9:45:42:b5:8e:85:6c:db:f1:03:da: 84:8e:1c:e2:49:00:86:d4:f1:4c:81:16:6c:b9:59:30:be:58: 60:76:b1:a6:8d:55:fa:d2:62:39:ac:74:f5:2e:6e:df:30:4b: 04:04:66:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvad56xvrhrC3BNkl3gAZqezPRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdB RjM5M0ZEMDAeFw0yNjAzMDExMjM2MjZaFw0yNjAzMDQyMDA0MjZaMDMxMTAvBgNV BAMTKDM2QjEwMTkyQjFFNUUwODI5NkM5QTdDQzE0NEQyRDgyRTk2OTdFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAidz5Yf5us/LnanHVsrBme7i9 bfsE7DlcYGSavpK7ZoSM6AnYxAhc7z7zTX6pzYZyQ32+7V1elcZICeXlhPCd+ZRW 4Ix+owWpaoaGAQGeNWvWcj4g+mCWhSeJbHossJtvAboMu0z0AKQGxnB+AuH9Lkcb WOnwajDRGsXhbKEmhcStz0V/A2d0nBqxNH9C3u5rEKtl42F3KpPZOfLEC7vW1zlp hc4NnD//Lvk+QYsvq6ZVPJzsFPELKoOD7ODtrLPrrx9tVX3CisEnKcdJFnFw8FBt yCr1lcJQAZY8ncaXWdQcOG+LOOQgTx01pNPKD42GISEZAx8F/7QwRBYOoXrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNrEBkrHl4IKWyafMFE0tgulpfvEwHwYDVR0j BBgwFoAUm0gWcO92eCdrf2Z82cs1d685P9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzZiNWFiYy0yYzU0LTRjNWYtYjNmOC0zMzQ2ZjE5ZTZjYzgvMC85QjQ4MTY3MEVG NzY3ODI3NkI3RjY2N0NEOUNCMzU3N0FGMzkzRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1NzdBRjM5 M0ZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvOUI0ODE2NzBFRjc2NzgyNzZCN0Y2NjdDRDlDQjM1 NzdBRjM5M0ZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRsRJcCel9lWXIbRVVJ6R1/6QzChQpkPrqe JzsqCD/UbJ52nPOplPlzO2CGS2fEsFiFkZCxLKwzPrg7Fo7ArJZecXbcaocT7yig K34FBepF7uXWtY/CaLnrNtJ7G1sLSpmCQ/WjZG7jJ3J3Wo6a/Z+tDFdAEoA8ep1S kcP907UJluK9pEBDRSQOEcW24c1j5rxWvGecBLR8cy2Prx4OAAdSZ5IxV61vzkch b5T4w0WCohMvcxivfI8wmH352WkZqktIRGOaszABcRGbFHj5RUK1joVs2/ED2oSO HOJJAIbU8UyBFmy5WTC+WGB2saaNVfrSYjmsdPUubt8wSwQEZmw= -----END CERTIFICATE-----Generated at Mon Mar 2 16:24:47 2026 by rpki-client