$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: h3rNin4gBxaBnc0ODXzI2IlYkRBVKe8SF9iGDvzaVk0= Subject key identifier: C9:6A:0C:57:4C:C5:F2:9E:B4:16:C5:B1:9F:0A:24:2B:48:94:FC:50 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 4B16300EE247C4763AB27FE22F045EFCE31D1D01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 03D7 Signing time: Fri 03 Apr 2026 09:11:02 +0000 Manifest this update: Fri 03 Apr 2026 09:06:02 +0000 Manifest next update: Mon 06 Apr 2026 17:16:02 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: yOWWrmF7VI65mmW/qJSqfIDXS5If5ryvU0shcYEJ4r4=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: w526PAfJq8FQEvesEEIrYfO1mfozEkD9x2m8G39TwoU=) 3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: 2Mco9ackQ4PwcAVBn4smFndK+Bf6IWVVGl+ndoOGQrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 17:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:30:0e:e2:47:c4:76:3a:b2:7f:e2:2f:04:5e:fc:e3:1d:1d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Apr 3 09:06:02 2026 GMT Not After : Apr 6 17:16:02 2026 GMT Subject: CN=C96A0C574CC5F29EB416C5B19F0A242B4894FC50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:a5:b6:90:85:28:3e:79:c2:72:80:cc:fd: f0:2d:18:bc:e6:3b:32:2c:2a:5f:8d:43:ec:44:fc: d4:de:ec:88:69:5b:ce:52:23:17:45:95:82:31:7c: a4:3a:23:42:73:1a:80:2d:2a:d5:1e:28:4c:f5:6a: ab:71:7e:08:d5:aa:fc:88:c7:45:b6:e5:98:6e:41: 2d:ba:85:48:95:06:08:07:77:69:38:54:0d:02:62: dd:bd:d8:aa:8e:f7:bc:f0:75:83:ed:74:fe:6f:de: 71:1f:36:b9:88:46:d6:c3:36:c2:2a:a2:d3:17:c4: 0a:32:25:c0:5f:6c:26:0c:85:e3:1f:5e:ed:12:71: ca:01:ff:c2:71:ed:09:51:9f:70:af:42:40:b9:d0: a8:af:c1:1c:b1:50:93:20:78:de:0e:7e:6f:69:39: b1:35:46:54:08:8f:fc:85:4d:4f:b3:98:db:d2:6d: fe:84:54:41:b9:5d:f9:f8:fa:85:5a:0e:8f:d8:f7: 32:34:22:2c:14:6d:40:93:72:4f:37:e9:ed:8b:0b: 15:b6:d8:8a:48:e3:d5:41:55:5b:26:4f:80:c8:07: d7:08:08:8b:d9:b7:69:c4:92:59:ae:4c:db:62:e4: e8:ad:16:57:20:0b:31:ed:8e:00:50:67:01:85:5b: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6A:0C:57:4C:C5:F2:9E:B4:16:C5:B1:9F:0A:24:2B:48:94:FC:50 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:73:b1:d6:b5:5a:46:b0:00:17:59:c7:21:d3:db:0c:f0:e5: 05:b7:70:bc:bf:24:19:09:9e:11:e4:67:30:bd:ba:12:17:07: b3:f9:8a:66:95:69:37:bb:77:10:4f:42:61:3c:2b:a1:29:06: 8c:24:18:69:18:40:e3:84:af:1b:2a:1b:4a:4c:62:74:08:a7: e6:2b:e7:13:0d:46:70:89:94:d2:50:75:ec:d4:87:62:f5:b5: 5f:b3:ab:49:40:72:3d:8f:43:c5:55:a6:a5:d2:74:1e:ba:aa: 6f:fb:76:fc:95:6b:c7:9f:ea:d1:4b:ad:50:cb:34:74:19:83: 5e:9b:4a:d9:e3:dd:1b:69:6a:f2:d9:34:4a:a4:25:da:a0:0f: 38:60:1e:51:ba:a2:03:96:bd:fe:29:bf:d7:10:73:cb:c5:39: 5a:b2:8f:dc:37:11:be:67:3f:3d:ad:d0:73:96:ca:0f:ad:f3: c3:9f:20:f4:49:b3:68:7e:ab:03:51:93:c6:64:1c:d7:e9:07: 36:74:fa:cd:82:05:a7:3d:ab:59:ab:c8:10:07:b0:db:16:38: ce:8c:c3:8e:04:43:5c:46:37:50:d4:ff:fa:b3:e1:58:50:83: 45:5f:99:8f:1e:1d:d0:3b:a8:81:0e:57:bf:5b:6e:e9:69:90: 7e:de:36:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxYwDuJHxHY6sn/iLwRe/OMdHQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNjA0MDMwOTA2MDJaFw0yNjA0MDYxNzE2MDJaMDMxMTAvBgNV BAMTKEM5NkEwQzU3NENDNUYyOUVCNDE2QzVCMTlGMEEyNDJCNDg5NEZDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuH6W2kIUoPnnCcoDM/fAtGLzm OzIsKl+NQ+xE/NTe7IhpW85SIxdFlYIxfKQ6I0JzGoAtKtUeKEz1aqtxfgjVqvyI x0W25ZhuQS26hUiVBggHd2k4VA0CYt292KqO97zwdYPtdP5v3nEfNrmIRtbDNsIq otMXxAoyJcBfbCYMheMfXu0SccoB/8Jx7QlRn3CvQkC50KivwRyxUJMgeN4Ofm9p ObE1RlQIj/yFTU+zmNvSbf6EVEG5Xfn4+oVaDo/Y9zI0IiwUbUCTck836e2LCxW2 2IpI49VBVVsmT4DIB9cICIvZt2nEklmuTNti5OitFlcgCzHtjgBQZwGFW4F1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyWoMV0zF8p60FsWxnwokK0iU/FAwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJzsda1WkawABdZxyHT2wzw5QW3cLy/JBkJ nhHkZzC9uhIXB7P5imaVaTe7dxBPQmE8K6EpBowkGGkYQOOErxsqG0pMYnQIp+Yr 5xMNRnCJlNJQdezUh2L1tV+zq0lAcj2PQ8VVpqXSdB66qm/7dvyVa8ef6tFLrVDL NHQZg16bStnj3RtpavLZNEqkJdqgDzhgHlG6ogOWvf4pv9cQc8vFOVqyj9w3Eb5n Pz2t0HOWyg+t88OfIPRJs2h+qwNRk8ZkHNfpBzZ0+s2CBac9q1mryBAHsNsWOM6M w44EQ1xGN1DU//qz4VhQg0VfmY8eHdA7qIEOV79bbulpkH7eNhc= -----END CERTIFICATE-----Generated at Sun Apr 5 17:51:51 2026 by rpki-client