$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: ZhthMCLjkCfeAQlvvhJHeCp4iZfHf49Q0l90Dovs7b8= Subject key identifier: EF:73:93:0A:67:E9:F4:EB:E6:4C:0A:69:91:0D:63:7D:8D:85:AF:63 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 35C0A006CB5AA3D20B4A3051183741C1B2C3B24B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: D4 Signing time: Sat 28 Feb 2026 02:40:52 +0000 Manifest this update: Sat 28 Feb 2026 02:35:52 +0000 Manifest next update: Tue 03 Mar 2026 10:39:52 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: 4YQQ1qi2A2Wnplb9L11WBEh1nYAdgmUCQU/YT5mtCBo=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) 4: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c0:a0:06:cb:5a:a3:d2:0b:4a:30:51:18:37:41:c1:b2:c3:b2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Feb 28 02:35:52 2026 GMT Not After : Mar 3 10:39:52 2026 GMT Subject: CN=EF73930A67E9F4EBE64C0A69910D637D8D85AF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:6d:97:37:89:63:81:10:5b:ab:c1:aa:77: 69:49:4b:81:6a:79:ad:85:8d:d6:1f:61:9e:27:99: a0:1d:c6:b3:4e:51:52:de:ab:ef:83:4c:56:a3:cd: 55:6f:cf:82:8e:11:07:c9:7b:f4:62:f2:cc:e3:74: b5:9f:f6:62:fc:8f:cd:9d:4f:e1:a5:f2:84:c8:21: 18:fd:86:11:dd:ce:51:a4:5a:27:95:ca:85:22:c7: 1f:0d:eb:41:04:0b:76:93:20:08:c7:44:34:8a:1d: a1:37:5d:dc:42:83:24:1d:cc:7d:4c:ea:6d:af:48: 43:de:bc:e2:d2:f0:e5:f0:1d:a2:48:f7:ed:f6:7a: f6:15:46:58:40:86:8a:1a:82:6a:f5:c4:f3:42:30: a4:3a:e9:91:9a:6c:64:7d:49:63:d6:da:a3:62:6a: 01:c1:a6:70:02:dd:7e:3d:3b:06:97:09:01:12:31: 22:df:14:c5:b7:2b:89:4d:77:9a:5d:64:b4:34:5f: ad:e2:d2:09:5e:39:59:a7:ff:fe:6a:ae:34:53:5b: 3f:ff:40:39:6e:01:7c:e8:c3:3d:f6:ad:94:11:f3: 69:95:d8:6d:35:9e:7f:00:11:d8:07:1e:de:b9:63: 70:dc:0f:a7:9d:05:dc:62:0b:68:3c:a5:20:67:0b: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:73:93:0A:67:E9:F4:EB:E6:4C:0A:69:91:0D:63:7D:8D:85:AF:63 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:a0:84:65:38:28:82:50:7c:b0:bc:93:ae:b7:82:b2:08:37: cd:81:d9:80:fc:30:34:23:62:08:8e:ce:2c:78:cf:3c:10:70: ef:0c:85:83:d8:85:0a:57:21:bd:ce:e6:2f:94:7b:2f:c3:23: 98:d8:d1:ac:38:1d:2b:0e:ca:37:87:3d:6e:f7:9e:44:04:8c: b2:87:5f:14:ee:c5:70:81:06:11:69:26:2a:9e:ad:ef:f0:90: e4:2e:65:dd:1e:58:ea:35:eb:95:0f:8e:0f:13:98:b9:af:17: 8b:22:df:ce:02:3c:cd:9f:57:a1:76:a3:15:e8:ca:8b:8c:1f: c2:a9:6a:2d:69:f7:f4:39:4a:5a:5b:70:78:b2:d7:6e:df:c5: 35:a5:e4:b1:73:67:ed:2f:85:0d:e3:7c:4d:40:7a:67:30:0a: 7c:33:92:6a:4e:a2:6e:0b:79:24:63:34:ff:dd:89:dc:e5:cd: bd:0c:61:0e:81:43:3e:b9:ef:53:7b:64:16:c2:46:e5:de:5e: 80:19:78:6f:ae:d0:b2:76:51:96:96:4f:ba:71:bc:66:b9:31: 14:2a:41:94:74:c2:03:54:7d:7b:98:50:25:85:b3:81:69:fb: 3a:8d:26:23:21:0c:df:86:eb:a1:88:63:23:df:54:7a:33:25: 55:8f:63:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcCgBstao9ILSjBRGDdBwbLDskswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjAyMjgwMjM1NTJaFw0yNjAzMDMxMDM5NTJaMDMxMTAvBgNV BAMTKEVGNzM5MzBBNjdFOUY0RUJFNjRDMEE2OTkxMEQ2MzdEOEQ4NUFGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzG2XN4ljgRBbq8Gqd2lJS4Fq ea2FjdYfYZ4nmaAdxrNOUVLeq++DTFajzVVvz4KOEQfJe/Ri8szjdLWf9mL8j82d T+Gl8oTIIRj9hhHdzlGkWieVyoUixx8N60EEC3aTIAjHRDSKHaE3XdxCgyQdzH1M 6m2vSEPevOLS8OXwHaJI9+32evYVRlhAhooagmr1xPNCMKQ66ZGabGR9SWPW2qNi agHBpnAC3X49OwaXCQESMSLfFMW3K4lNd5pdZLQ0X63i0gleOVmn//5qrjRTWz// QDluAXzowz32rZQR82mV2G01nn8AEdgHHt65Y3DcD6edBdxiC2g8pSBnC9bbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73OTCmfp9OvmTAppkQ1jfY2Fr2MwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANmghGU4KIJQfLC8k663grIIN82B2YD8MDQj YgiOzix4zzwQcO8MhYPYhQpXIb3O5i+Uey/DI5jY0aw4HSsOyjeHPW73nkQEjLKH XxTuxXCBBhFpJiqere/wkOQuZd0eWOo165UPjg8TmLmvF4si384CPM2fV6F2oxXo youMH8Kpai1p9/Q5SlpbcHiy127fxTWl5LFzZ+0vhQ3jfE1AemcwCnwzkmpOom4L eSRjNP/didzlzb0MYQ6BQz6571N7ZBbCRuXeXoAZeG+u0LJ2UZaWT7pxvGa5MRQq QZR0wgNUfXuYUCWFs4Fp+zqNJiMhDN+G66GIYyPfVHozJVWPY60= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:26 2026 by rpki-client