$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft File: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft (raw, json) Hash identifier: 23Ez0K5M6YTawyGEV/a80Q+aeiW3APln61rjXl7Ri3M= Subject key identifier: 3A:3D:93:0E:8E:CA:6F:C1:D2:95:17:27:99:6E:36:57:6B:76:F4:3C Authority key identifier: 9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 Certificate issuer: /CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Certificate serial: 1C140B7CE6BC00BD80AE6C436D9ADCF7DABD54DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft Manifest number: 2E Signing time: Fri 27 Mar 2026 16:12:34 +0000 Manifest this update: Fri 27 Mar 2026 16:07:34 +0000 Manifest next update: Mon 30 Mar 2026 18:26:34 +0000 Files and hashes: 1: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl (hash: vmC44KiWzFioiFEV1dJwoDbWSU2PrHGhnyTs4qWOaXU=) 2: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: oUENuD0SMegzfgG7zCwjryjELhYU0l7sm/nxY+l6d1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 18:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:14:0b:7c:e6:bc:00:bd:80:ae:6c:43:6d:9a:dc:f7:da:bd:54:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45 Validity Not Before: Mar 27 16:07:34 2026 GMT Not After : Mar 30 18:26:34 2026 GMT Subject: CN=3A3D930E8ECA6FC1D2951727996E36576B76F43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:47:db:14:17:bc:d5:49:9c:13:9e:7f:02:ea: 9a:af:b8:74:19:59:ae:86:8d:6e:5f:11:ca:f3:e9: 55:4c:84:8d:66:18:51:63:67:bd:7f:9c:63:77:a1: eb:ee:96:a0:01:72:95:9e:c7:84:3c:f6:29:62:e8: c9:79:79:c0:f8:2f:1b:51:21:0d:3d:13:7c:69:87: a0:a2:22:d2:b5:80:fe:4f:ce:ce:5e:88:5b:9f:6f: ed:95:4f:6e:c0:44:5f:60:b1:c1:fb:ac:e3:d2:f2: 02:79:77:53:3a:50:0f:29:5f:47:0d:b6:6d:95:52: 61:97:1e:87:af:7b:60:0d:16:c3:b5:a1:a5:1b:28: 1d:03:49:63:3b:31:71:95:27:dd:36:5d:9a:f2:6e: af:0c:67:c1:85:f9:18:f6:d7:e9:b9:09:b2:05:d4: 09:4c:73:8d:fe:85:5b:58:69:85:95:ae:91:73:ff: db:1c:33:8c:62:17:cb:a7:cf:a8:37:29:e6:a1:d4: 53:73:1e:ce:6c:a1:ff:2b:aa:a5:eb:16:b6:99:8b: 96:1e:02:b0:ad:b1:7f:2f:7d:e8:fe:51:99:0f:69: 69:b8:9b:ef:fc:9d:49:16:36:96:49:85:09:cf:3f: 97:8f:47:91:38:6a:16:93:6f:e8:cb:a7:cb:a7:24: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:93:0E:8E:CA:6F:C1:D2:95:17:27:99:6E:36:57:6B:76:F4:3C X509v3 Authority Key Identifier: keyid:9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:66:38:93:bd:72:d4:41:42:ce:59:ff:95:77:37:0d:f9:ce: 74:e5:a5:ec:78:46:5e:11:48:c7:11:ae:7d:5b:be:16:bc:79: a7:8e:1e:7a:af:6f:0a:60:3b:69:65:f6:02:96:44:c3:a9:85: c0:47:5a:0b:f2:99:fd:87:f1:39:85:91:a7:f8:67:b7:32:99: 95:28:11:4f:22:da:09:64:89:3b:b4:4c:e2:66:b9:ff:c4:a4: 79:ff:e2:d0:df:4d:29:55:4e:ac:00:b7:c8:e7:0a:21:16:40: a8:f5:bc:c1:e8:70:6c:e8:34:9a:24:d9:5e:0d:0b:4f:26:75: 5c:5b:40:e4:d6:f5:95:8d:be:a4:71:2c:3e:b2:91:93:1d:5a: fd:89:89:5f:4a:00:1c:c8:a3:a8:28:0d:4d:a3:4a:46:6c:f5: 8c:7b:bf:cc:8a:de:05:70:93:ca:d0:ed:49:a9:81:24:96:96: 5b:21:b7:53:10:a4:c1:63:f1:f6:91:e1:f6:79:e4:c5:42:30: 3f:71:23:d5:fc:13:be:f7:a8:11:1f:0d:d6:a9:86:d2:96:a5: 47:d4:1a:51:a5:c7:81:91:70:30:6f:ae:f5:a3:7b:81:c9:b8: f2:1b:c4:84:fd:ea:ee:1c:a4:71:35:1e:7e:19:2f:bf:03:7f: 5f:af:49:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBQLfOa8AL2ArmxDbZrc99q9VN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVB Q0EzRkU0NTAeFw0yNjAzMjcxNjA3MzRaFw0yNjAzMzAxODI2MzRaMDMxMTAvBgNV BAMTKDNBM0Q5MzBFOEVDQTZGQzFEMjk1MTcyNzk5NkUzNjU3NkI3NkY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtR9sUF7zVSZwTnn8C6pqvuHQZ Wa6GjW5fEcrz6VVMhI1mGFFjZ71/nGN3oevulqABcpWex4Q89ili6Ml5ecD4LxtR IQ09E3xph6CiItK1gP5Pzs5eiFufb+2VT27ARF9gscH7rOPS8gJ5d1M6UA8pX0cN tm2VUmGXHoeve2ANFsO1oaUbKB0DSWM7MXGVJ902XZrybq8MZ8GF+Rj21+m5CbIF 1AlMc43+hVtYaYWVrpFz/9scM4xiF8unz6g3Keah1FNzHs5sof8rqqXrFraZi5Ye ArCtsX8vfej+UZkPaWm4m+/8nUkWNpZJhQnPP5ePR5E4ahaTb+jLp8unJChpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOj2TDo7Kb8HSlRcnmW42V2t29DwwHwYDVR0j BBgwFoAUnZumcPIcILy3tCeFiuVCxayj/kUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMC85RDlCQTY3MEYy MUMyMEJDQjdCNDI3ODU4QUU1NDJDNUFDQTNGRTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQyQzVBQ0Ez RkU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThlNDYxMGEtYTc5NC00MDU5LTk3 ZDktZjJjNjlkYTU0YzhiLzAvOUQ5QkE2NzBGMjFDMjBCQ0I3QjQyNzg1OEFFNTQy QzVBQ0EzRkU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhmOJO9ctRBQs5Z/5V3Nw35znTlpex4Rl4R SMcRrn1bvha8eaeOHnqvbwpgO2ll9gKWRMOphcBHWgvymf2H8TmFkaf4Z7cymZUo EU8i2glkiTu0TOJmuf/EpHn/4tDfTSlVTqwAt8jnCiEWQKj1vMHocGzoNJok2V4N C08mdVxbQOTW9ZWNvqRxLD6ykZMdWv2JiV9KABzIo6goDU2jSkZs9Yx7v8yK3gVw k8rQ7UmpgSSWllsht1MQpMFj8faR4fZ55MVCMD9xI9X8E773qBEfDdaphtKWpUfU GlGlx4GRcDBvrvWje4HJuPIbxIT96u4cpHE1Hn4ZL78Df1+vSYE= -----END CERTIFICATE-----Generated at Sun Mar 29 19:23:13 2026 by rpki-client