$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: /j5ITIcYlliyt4jSQmkZZ7EcfArl6f+fTqEgKFTYBRQ= Subject key identifier: 27:8A:45:B0:51:45:D0:E8:FC:91:8E:2D:90:60:C1:D5:FF:42:4B:CF Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 32EA1296C2CB0DA0F22352B315994A18ED7199D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 0252 Signing time: Sun 01 Mar 2026 04:31:45 +0000 Manifest this update: Sun 01 Mar 2026 04:26:45 +0000 Manifest next update: Wed 04 Mar 2026 12:39:45 +0000 Files and hashes: 1: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) 2: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: tfDO4WwmkX2auWW3Xup9JMGsBNXMG7Nnl4tFUKqcL9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ea:12:96:c2:cb:0d:a0:f2:23:52:b3:15:99:4a:18:ed:71:99:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Mar 1 04:26:45 2026 GMT Not After : Mar 4 12:39:45 2026 GMT Subject: CN=278A45B05145D0E8FC918E2D9060C1D5FF424BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:db:8b:7a:29:8b:2c:e2:7a:1e:96:2a:33: e1:13:0a:d7:8d:fc:54:f7:ea:27:44:3d:a8:52:48: 73:97:f1:1e:60:5b:e4:99:6c:a9:0d:8c:86:14:82: d9:65:c5:03:f6:21:10:b3:c0:d3:22:8c:7e:04:3e: 56:a2:a6:1b:1f:d0:81:7b:7f:4e:2e:d4:74:99:9a: 17:03:ca:89:d8:0b:47:e7:89:2f:db:22:e0:b6:81: 3a:df:1e:4b:0d:ed:d9:81:21:43:d6:f7:5d:99:0f: 08:44:af:8f:64:a2:a4:99:df:53:5a:1d:01:69:6f: d7:6e:27:ef:c7:16:68:b3:77:92:3e:6e:d0:71:97: 3e:90:dd:ab:da:5c:74:ca:82:f8:0d:70:1d:68:10: e4:5b:87:81:cd:e1:91:0f:ae:c6:d2:78:ff:b6:bb: 8c:39:ca:9b:ff:65:a3:22:92:b2:79:cb:85:73:1c: 14:51:e5:cc:37:65:cd:eb:3a:3a:50:b0:c9:d2:fd: 1a:f6:cd:e0:cf:68:d3:3d:be:b2:ca:8d:c1:fb:b2: 4c:cf:cd:c8:3e:bd:c6:28:75:fb:35:a9:fc:56:1f: 7a:94:6b:06:e8:c2:f1:41:00:89:54:44:6d:fb:7d: f9:4d:21:8e:78:e7:15:60:8e:8a:fc:f9:fc:91:34: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:45:B0:51:45:D0:E8:FC:91:8E:2D:90:60:C1:D5:FF:42:4B:CF X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:03:86:64:b7:83:ea:9c:9f:4b:81:9b:ba:e3:54:b9:f3:0c: 2d:ba:0e:38:3f:5c:bf:3b:0b:3b:bd:e0:d9:b0:01:e1:ef:c0: da:f0:21:e7:18:68:b5:f8:55:18:6c:85:7b:d8:da:f1:68:8e: c4:a0:20:55:b6:2a:0e:96:11:f4:35:ec:5e:85:a3:b1:82:0b: 84:1a:0f:69:a6:f6:9f:88:d2:64:c1:7e:3d:6e:51:31:8a:3f: bb:6f:95:15:ce:d6:0c:74:97:48:5c:e5:d2:06:bd:a5:cd:a4: 08:4e:76:2a:43:d5:5f:3e:a2:e5:6c:83:26:11:c0:e2:0b:0c: 53:4f:57:a6:d1:ff:d1:7f:55:cc:8e:d5:de:88:cc:56:2b:31: 6f:da:93:82:2c:7d:01:dd:7b:65:64:32:15:13:56:68:85:05: 98:44:ce:d8:74:2c:b2:b4:85:0d:87:c7:cf:c5:d2:96:1a:1c: 2f:bb:b4:a5:ca:9b:e8:ab:6d:71:d3:56:6b:e5:f2:34:ea:6a: f3:8d:9b:50:fd:a4:86:ef:65:cf:ee:41:95:e4:03:3b:56:2b: 9c:73:ef:a9:e7:fa:20:f9:2d:19:f5:c3:e1:5b:e1:d2:64:74: d1:20:d3:eb:3a:a0:31:0b:3e:16:d0:46:df:06:a4:ec:07:f7: 87:ee:6b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuoSlsLLDaDyI1KzFZlKGO1xmdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNjAzMDEwNDI2NDVaFw0yNjAzMDQxMjM5NDVaMDMxMTAvBgNV BAMTKDI3OEE0NUIwNTE0NUQwRThGQzkxOEUyRDkwNjBDMUQ1RkY0MjRCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mduLeimLLOJ6HpYqM+ETCteN /FT36idEPahSSHOX8R5gW+SZbKkNjIYUgtllxQP2IRCzwNMijH4EPlaiphsf0IF7 f04u1HSZmhcDyonYC0fniS/bIuC2gTrfHksN7dmBIUPW912ZDwhEr49koqSZ31Na HQFpb9duJ+/HFmizd5I+btBxlz6Q3avaXHTKgvgNcB1oEORbh4HN4ZEPrsbSeP+2 u4w5ypv/ZaMikrJ5y4VzHBRR5cw3Zc3rOjpQsMnS/Rr2zeDPaNM9vrLKjcH7skzP zcg+vcYodfs1qfxWH3qUawbowvFBAIlURG37fflNIY545xVgjor8+fyRNGVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4pFsFFF0Oj8kY4tkGDB1f9CS88wHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0DhmS3g+qcn0uBm7rjVLnzDC26Djg/XL87 Czu94NmwAeHvwNrwIecYaLX4VRhshXvY2vFojsSgIFW2Kg6WEfQ17F6Fo7GCC4Qa D2mm9p+I0mTBfj1uUTGKP7tvlRXO1gx0l0hc5dIGvaXNpAhOdipD1V8+ouVsgyYR wOILDFNPV6bR/9F/VcyO1d6IzFYrMW/ak4IsfQHde2VkMhUTVmiFBZhEzth0LLK0 hQ2Hx8/F0pYaHC+7tKXKm+irbXHTVmvl8jTqavONm1D9pIbvZc/uQZXkAztWK5xz 76nn+iD5LRn1w+Fb4dJkdNEg0+s6oDELPhbQRt8GpOwH94fua9w= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:49 2026 by rpki-client