$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft File: 9789A84AF43285D8FD7ED7A3B9667B682B770585.mft (raw, json) Hash identifier: yjEsbZ8Yl5JxOte0SOpOFSFt2y/fjdWjDUCM9DZIVGY= Subject key identifier: CE:50:78:39:98:29:A4:5D:D3:33:6C:92:D3:F2:11:5C:CB:33:36:F5 Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 5DDE30CEFAF814BE7BD7326947901B4176BC5992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft Manifest number: 0109 Signing time: Sun 01 Mar 2026 20:31:38 +0000 Manifest this update: Sun 01 Mar 2026 20:26:38 +0000 Manifest next update: Wed 04 Mar 2026 22:26:38 +0000 Files and hashes: 1: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (hash: KMsE85UnBDykN5bsVvZJhU4S4BHAeh9im464PCr3L7g=) 2: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (hash: j6GGNkDlZ8/5j/chso3KUABnf96v3SEZ7wOBbSLK09c=) 3: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (hash: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0=) 4: 9789A84AF43285D8FD7ED7A3B9667B682B770585.crl (hash: 0cZBntmRgdg6KQikjqLNMC3Q5KdSCk3FsWaTCG+nU2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:de:30:ce:fa:f8:14:be:7b:d7:32:69:47:90:1b:41:76:bc:59:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Mar 1 20:26:38 2026 GMT Not After : Mar 4 22:26:38 2026 GMT Subject: CN=CE5078399829A45DD3336C92D3F2115CCB3336F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:47:e6:df:0b:4b:e0:9a:c5:b2:b9:e2:e5: 31:19:b3:b8:3a:7f:e7:b4:0e:4a:43:7d:b9:91:d7: 5d:19:59:e8:63:bc:f0:b7:9a:88:54:0c:2b:25:2b: 79:b9:ef:18:ca:79:18:7d:72:55:c6:b7:c4:ac:8e: 15:be:b0:77:ff:e6:98:04:03:33:30:4c:87:5e:7c: 1f:9b:86:fe:c4:3c:43:23:23:c0:7f:c2:36:a9:0d: e6:cf:21:4e:64:28:83:cb:20:b8:10:f7:fd:73:75: 7b:5c:53:3e:9a:92:ba:ff:f3:70:69:af:8d:95:1e: d0:cb:94:e0:38:9f:01:d3:66:ec:87:d9:08:e8:97: 0d:3e:29:84:4a:37:5d:97:8f:0b:cb:bb:4b:91:90: ba:bb:8d:d9:e8:3d:46:40:59:92:a7:6a:b6:72:bc: a4:ae:e2:fc:48:13:f8:96:be:ac:0f:24:2f:b4:06: 21:36:5b:9c:47:e0:94:38:01:11:83:37:c8:32:b0: 33:4b:52:8c:ea:95:e5:8f:bd:38:d0:e2:5e:18:3b: 8d:29:04:ea:b8:4c:da:55:41:9f:52:0a:d1:e7:cf: 28:5a:1b:2e:e1:d3:e2:ba:07:fe:fc:84:48:56:31: 36:1b:2e:a8:fa:ba:16:11:48:ed:00:75:1e:39:e3: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:50:78:39:98:29:A4:5D:D3:33:6C:92:D3:F2:11:5C:CB:33:36:F5 X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b0:b0:43:45:62:03:a3:ee:b0:25:4b:4d:44:ef:ea:67:97: 22:4e:c6:cc:cf:a9:d8:b0:dc:0b:55:c5:5b:79:a3:62:14:3b: 43:97:d2:a7:cd:1c:72:0a:c3:96:0d:3c:e2:d0:98:68:9e:25: 14:50:cd:78:67:45:a9:10:fa:05:d4:1d:a6:8a:cf:cd:ab:a6: 3d:6b:6c:dd:f4:83:27:56:9a:b7:9f:9d:98:8e:aa:0e:6b:2d: 5e:cb:d2:f7:53:93:0d:f1:85:12:60:dd:98:0a:97:54:96:9c: 39:c1:2e:53:33:96:46:90:3f:15:b2:e9:e1:28:02:7b:ea:05: bf:d1:de:54:c8:84:4d:e0:a1:0a:b2:9c:16:59:cb:4a:3b:ba: bb:bf:f3:7f:fe:3b:ee:f7:a8:a8:5c:e1:35:e6:1d:c2:01:d8: af:49:2b:1b:97:0d:70:64:08:2d:dc:41:55:1f:e0:cb:45:9a: 08:88:42:9b:14:e1:14:dc:c9:c3:5d:7a:0d:69:d9:a7:af:c9: c6:a9:05:86:dc:e9:d4:c3:bd:98:f5:76:91:cc:92:2e:d0:61: 7e:07:74:df:59:7b:12:65:f6:5d:05:a8:14:a1:36:9e:61:93: 8f:ee:10:06:f7:f6:82:e0:9c:bc:84:51:e9:87:84:46:2c:ee: a5:13:cd:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXd4wzvr4FL571zJpR5AbQXa8WZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNjAzMDEyMDI2MzhaFw0yNjAzMDQyMjI2MzhaMDMxMTAvBgNV BAMTKENFNTA3ODM5OTgyOUE0NUREMzMzNkM5MkQzRjIxMTVDQ0IzMzM2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHEfm3wtL4JrFsrni5TEZs7g6 f+e0DkpDfbmR110ZWehjvPC3mohUDCslK3m57xjKeRh9clXGt8SsjhW+sHf/5pgE AzMwTIdefB+bhv7EPEMjI8B/wjapDebPIU5kKIPLILgQ9/1zdXtcUz6akrr/83Bp r42VHtDLlOA4nwHTZuyH2Qjolw0+KYRKN12XjwvLu0uRkLq7jdnoPUZAWZKnarZy vKSu4vxIE/iWvqwPJC+0BiE2W5xH4JQ4ARGDN8gysDNLUozqleWPvTjQ4l4YO40p BOq4TNpVQZ9SCtHnzyhaGy7h0+K6B/78hEhWMTYbLqj6uhYRSO0AdR454zZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlB4OZgppF3TM2yS0/IRXMszNvUwHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYxYTBkZjYtMWQzYS00YmNjLWIz ZDEtNjQ2OTVmODdlMzdmLzAvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdC NjgyQjc3MDU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGwsENFYgOj7rAlS01E7+pnlyJOxszPqdiw 3AtVxVt5o2IUO0OX0qfNHHIKw5YNPOLQmGieJRRQzXhnRakQ+gXUHaaKz82rpj1r bN30gydWmrefnZiOqg5rLV7L0vdTkw3xhRJg3ZgKl1SWnDnBLlMzlkaQPxWy6eEo AnvqBb/R3lTIhE3goQqynBZZy0o7uru/83/+O+73qKhc4TXmHcIB2K9JKxuXDXBk CC3cQVUf4MtFmgiIQpsU4RTcycNdeg1p2aevycapBYbc6dTDvZj1dpHMki7QYX4H dN9ZexJl9l0FqBShNp5hk4/uEAb39oLgnLyEUemHhEYs7qUTzQc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:00 2026 by rpki-client