$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: a3b7Pq8vV3vpMDQebi7M+9T6TmskmXdg2cXflQQT03M= Subject key identifier: C6:38:49:11:65:A2:D7:2C:C8:DE:11:64:BE:B8:8F:4F:74:BD:B3:BD Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 29090A749D6378513000C1D0CC078FDD9D85B940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: 0161 Signing time: Sun 01 Mar 2026 08:02:32 +0000 Manifest this update: Sun 01 Mar 2026 07:57:32 +0000 Manifest next update: Wed 04 Mar 2026 19:12:32 +0000 Files and hashes: 1: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: 2aBF3TlPpZvgBg8RcuAyt7db252emxas0qRgZU5RuEU=) 2: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: oXg5R5ccBiqamdjVwmyANnQ42uvN42s9+j4C6y/OPzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:09:0a:74:9d:63:78:51:30:00:c1:d0:cc:07:8f:dd:9d:85:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Mar 1 07:57:32 2026 GMT Not After : Mar 4 19:12:32 2026 GMT Subject: CN=C638491165A2D72CC8DE1164BEB88F4F74BDB3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:0a:d3:5e:38:52:66:b0:28:0c:2a:31:a1: c9:c9:e7:5e:0f:2f:da:f5:e9:c8:d7:fd:4d:1c:5e: d1:85:29:93:39:5b:bc:73:24:36:73:30:6b:cf:89: 6f:5c:0f:a4:93:7e:58:2c:4b:88:5b:33:f0:ef:89: 9f:dd:ec:47:75:da:80:28:1d:28:65:2e:31:f9:31: cf:01:e4:1f:02:c0:82:85:fe:5d:f3:11:af:46:d9: 2a:0f:bd:a8:f0:28:09:d7:6d:d6:28:90:68:10:67: bb:7e:ac:0c:5a:89:ba:4d:3a:04:b1:98:2d:c1:00: 3d:3c:05:8b:fe:fe:7c:e2:fc:68:eb:7f:24:8b:bb: 38:fd:2e:b6:2d:51:47:16:dd:d2:2b:f7:5f:cd:a1: 37:28:e4:9b:ad:1c:88:27:55:f0:e0:b6:7b:bc:10: 40:c9:c7:82:8c:0e:08:37:67:41:f4:d0:01:6c:b0: c9:0d:e3:63:87:3a:20:b4:fe:af:3b:f4:cb:b0:be: ae:69:3e:8b:f4:24:43:a3:de:d3:e3:14:8b:82:6f: a6:31:4c:c4:73:37:59:12:f9:bb:e3:8f:6f:95:1e: ae:75:85:1b:88:5a:fc:e9:d0:14:82:6e:06:05:de: 0c:0b:83:e0:93:8d:58:dd:66:00:bf:5e:f2:3e:96: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:38:49:11:65:A2:D7:2C:C8:DE:11:64:BE:B8:8F:4F:74:BD:B3:BD X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:06:22:55:6a:cb:cd:19:f4:7b:33:43:64:65:31:9c:f4:88: fc:39:c5:ee:b2:79:45:ce:ac:ed:0d:76:88:d1:95:f1:41:3d: ec:6b:a2:4b:05:30:12:b9:3f:79:b5:24:e7:ba:5f:98:3d:07: b5:13:27:2c:bb:76:c9:38:df:3a:2e:38:a0:56:6b:91:34:85: e9:69:23:26:eb:04:3b:66:37:2c:e9:ca:ec:c6:d0:20:09:47: 1e:a5:04:02:e7:fe:9b:98:0f:87:e9:08:66:9e:e3:42:1e:50: a9:e5:4b:6e:01:55:78:dc:ab:e2:77:b2:55:4e:73:f4:6b:7c: b1:21:e0:8f:3f:bf:6f:6b:e2:da:99:a3:b9:f7:7c:63:e2:4f: 9b:2a:29:b4:eb:81:06:69:13:08:e5:80:28:5c:22:c8:eb:45: 0b:2f:16:86:dd:31:86:9b:03:1c:8f:6d:a9:ce:61:0d:03:ed: 85:a8:43:33:fb:f8:07:c9:57:71:e7:ec:5d:38:e2:de:17:a2: 63:13:6c:bd:bf:44:f9:dc:00:96:3c:b5:39:3f:9b:71:93:80: 9a:89:19:d8:ec:91:3e:d3:6f:1b:3b:65:da:61:78:b4:c0:4a: a0:44:55:b9:bf:fc:34:7b:a8:5c:1a:a1:3b:5c:d1:de:24:fc: d6:2d:53:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQkKdJ1jeFEwAMHQzAeP3Z2FuUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNjAzMDEwNzU3MzJaFw0yNjAzMDQxOTEyMzJaMDMxMTAvBgNV BAMTKEM2Mzg0OTExNjVBMkQ3MkNDOERFMTE2NEJFQjg4RjRGNzRCREIzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3grTXjhSZrAoDCoxocnJ514P L9r16cjX/U0cXtGFKZM5W7xzJDZzMGvPiW9cD6STflgsS4hbM/DviZ/d7Ed12oAo HShlLjH5Mc8B5B8CwIKF/l3zEa9G2SoPvajwKAnXbdYokGgQZ7t+rAxaibpNOgSx mC3BAD08BYv+/nzi/GjrfySLuzj9LrYtUUcW3dIr91/NoTco5JutHIgnVfDgtnu8 EEDJx4KMDgg3Z0H00AFssMkN42OHOiC0/q879Muwvq5pPov0JEOj3tPjFIuCb6Yx TMRzN1kS+bvjj2+VHq51hRuIWvzp0BSCbgYF3gwLg+CTjVjdZgC/XvI+ln/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxjhJEWWi1yzI3hFkvriPT3S9s70wHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwGIlVqy80Z9HszQ2RlMZz0iPw5xe6yeUXO rO0NdojRlfFBPexroksFMBK5P3m1JOe6X5g9B7UTJyy7dsk43zouOKBWa5E0help IybrBDtmNyzpyuzG0CAJRx6lBALn/puYD4fpCGae40IeUKnlS24BVXjcq+J3slVO c/RrfLEh4I8/v29r4tqZo7n3fGPiT5sqKbTrgQZpEwjlgChcIsjrRQsvFobdMYab AxyPbanOYQ0D7YWoQzP7+AfJV3Hn7F044t4XomMTbL2/RPncAJY8tTk/m3GTgJqJ GdjskT7Tbxs7ZdpheLTASqBEVbm//DR7qFwaoTtc0d4k/NYtU+w= -----END CERTIFICATE-----Generated at Mon Mar 2 00:30:34 2026 by rpki-client