$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json) Hash identifier: RHoOrmR9MAipSGxtZsUam1WpE+IiNlIiO06Orkmgmz8= Subject key identifier: 73:1A:40:40:85:7F:6C:FF:9D:15:E0:E2:7A:6F:2F:41:64:5B:1B:45 Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB Certificate serial: 2D1099732D0AC6C228ADD59DE0295C9D67D44F06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft Manifest number: 011F Signing time: Wed 18 Mar 2026 02:31:39 +0000 Manifest this update: Wed 18 Mar 2026 02:26:39 +0000 Manifest next update: Sat 21 Mar 2026 08:52:39 +0000 Files and hashes: 1: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: E3Afi8brnwwO44QQ7zrLJhjXCklWKJd4s5oimS1XW8A=) 2: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: duc/nW/lwmBNmiITPEL+YAjjKd+i4I/G1lQVRzIKszY=) 3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: FypiTvw7/6zoGLZTgLWOrltsYvNEoaU3f9V6Y8zl7gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 08:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:10:99:73:2d:0a:c6:c2:28:ad:d5:9d:e0:29:5c:9d:67:d4:4f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB Validity Not Before: Mar 18 02:26:39 2026 GMT Not After : Mar 21 08:52:39 2026 GMT Subject: CN=731A4040857F6CFF9D15E0E27A6F2F41645B1B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:10:13:8a:f6:96:fe:33:72:77:9f:0e:1f: a6:80:da:c4:99:f3:14:6b:1a:b5:8a:92:da:1b:f9: a0:d6:fe:6a:00:53:3d:76:f2:5d:cf:35:12:e5:25: 7d:90:d5:2b:23:c8:8c:65:dc:e6:4f:d2:e4:ac:95: 94:44:e7:0d:64:f0:bb:ac:90:21:fa:c2:21:2b:cf: 0e:4d:e7:1e:6a:36:41:9b:11:45:1b:53:4c:45:76: 4d:59:a1:3a:b5:76:7a:14:f7:6f:d9:78:e2:ed:bc: 04:52:e9:87:d2:aa:e1:98:79:f1:64:bf:8d:e7:9b: 24:37:81:6e:1b:8a:bb:11:da:23:ce:14:b9:72:28: 2e:e7:e7:a0:e9:59:3a:ba:8e:41:b8:ba:c4:7d:bf: 32:46:d4:fb:db:dd:39:e3:7b:6d:f0:04:a9:93:c6: 75:1b:45:cb:02:02:d1:1f:4a:e0:29:1b:6f:4a:fd: 0b:c3:8c:d6:84:3e:66:5a:d1:7d:d8:2d:da:04:ff: 6c:75:70:04:63:b0:20:bb:0c:37:ed:00:01:72:9a: 00:22:91:10:18:49:82:ed:38:c1:f3:41:66:3b:5a: 52:c5:bc:95:45:d8:24:6c:fe:aa:4f:6e:6d:23:3c: 31:25:6b:33:7d:f3:7b:18:db:81:f3:88:80:1b:e5: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1A:40:40:85:7F:6C:FF:9D:15:E0:E2:7A:6F:2F:41:64:5B:1B:45 X509v3 Authority Key Identifier: keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:78:61:b8:c0:3d:6d:3e:8f:68:40:d0:96:d1:6a:47:9a:41: ef:04:2d:87:e1:2d:49:1d:4b:d4:b7:db:cf:ca:f8:b7:c2:fd: a6:33:ca:29:4b:19:b3:71:5a:74:46:10:1f:03:71:28:fa:9f: 5d:fd:d5:92:23:b9:7c:77:da:c8:f3:0e:61:3f:ba:a0:a6:1e: 0b:a6:15:25:0c:ee:5f:4e:6a:b4:22:7e:44:c7:04:fb:78:a1: a2:90:03:cc:e8:5b:65:17:31:8c:86:ad:5f:4f:32:bc:85:08: 36:bb:80:28:3a:d6:0d:3b:1a:0d:ca:95:a4:73:1b:9d:21:a4: ae:57:6f:6a:b8:2e:09:c3:56:51:a9:a1:1b:9c:98:97:a6:1f: ed:74:9b:91:42:43:62:31:83:2f:5c:c8:ff:09:24:51:78:9a: f5:de:a4:c0:77:41:d5:ed:f8:3d:32:23:45:fe:90:2a:75:24: fa:b6:fa:1f:3a:a3:f6:82:9e:ad:d2:73:43:fb:4a:b4:46:f9: ac:a1:41:0e:ec:76:2e:db:03:f3:12:d2:ef:a7:ad:36:d5:e0: 42:14:cf:b0:6a:7a:53:b2:dc:96:84:c6:61:a8:5b:20:6d:63: a3:eb:1f:df:e2:c1:99:e6:71:c7:2e:48:e9:f3:a6:24:b2:76: 06:5d:e8:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRCZcy0KxsIordWd4ClcnWfUTwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3 NkM3MTRDQjAeFw0yNjAzMTgwMjI2MzlaFw0yNjAzMjEwODUyMzlaMDMxMTAvBgNV BAMTKDczMUE0MDQwODU3RjZDRkY5RDE1RTBFMjdBNkYyRjQxNjQ1QjFCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEBATivaW/jNyd58OH6aA2sSZ 8xRrGrWKktob+aDW/moAUz128l3PNRLlJX2Q1SsjyIxl3OZP0uSslZRE5w1k8Lus kCH6wiErzw5N5x5qNkGbEUUbU0xFdk1ZoTq1dnoU92/ZeOLtvARS6YfSquGYefFk v43nmyQ3gW4birsR2iPOFLlyKC7n56DpWTq6jkG4usR9vzJG1Pvb3Tnje23wBKmT xnUbRcsCAtEfSuApG29K/QvDjNaEPmZa0X3YLdoE/2x1cARjsCC7DDftAAFymgAi kRAYSYLtOMHzQWY7WlLFvJVF2CRs/qpPbm0jPDElazN983sY24HziIAb5athAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxpAQIV/bP+dFeDiem8vQWRbG0UwHwYDVR0j BBgwFoAUmvlpKeDpmk8lObsVE3CT2XbHFMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTIxZTVlZS01ODgyLTQ5NDMtYjQwOC00M2MzNzU4MmZiMGIvMC85QUY5NjkyOUUw RTk5QTRGMjUzOUJCMTUxMzcwOTNEOTc2QzcxNENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkzRDk3NkM3 MTRDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzUyMWU1ZWUtNTg4Mi00OTQzLWI0 MDgtNDNjMzc1ODJmYjBiLzAvOUFGOTY5MjlFMEU5OUE0RjI1MzlCQjE1MTM3MDkz RDk3NkM3MTRDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB14YbjAPW0+j2hA0JbRakeaQe8ELYfhLUkd S9S328/K+LfC/aYzyilLGbNxWnRGEB8DcSj6n1391ZIjuXx32sjzDmE/uqCmHgum FSUM7l9OarQifkTHBPt4oaKQA8zoW2UXMYyGrV9PMryFCDa7gCg61g07Gg3KlaRz G50hpK5Xb2q4LgnDVlGpoRucmJemH+10m5FCQ2Ixgy9cyP8JJFF4mvXepMB3QdXt +D0yI0X+kCp1JPq2+h86o/aCnq3Sc0P7SrRG+ayhQQ7sdi7bA/MS0u+nrTbV4EIU z7BqelOy3JaExmGoWyBtY6PrH9/iwZnmcccuSOnzpiSydgZd6Ak= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:53 2026 by rpki-client