$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: ifzuCfh6vbJzjIz7mhr5EBANX9bLC+Dc5nU7W2A8BnM= Subject key identifier: E0:2B:16:B4:69:AC:71:1B:CC:0F:42:DF:24:40:BA:DA:2F:C9:59:5A Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 2B6D64853AB911AFC6B42C4D2056A4765AA390BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 022F Signing time: Mon 16 Mar 2026 21:32:04 +0000 Manifest this update: Mon 16 Mar 2026 21:27:04 +0000 Manifest next update: Fri 20 Mar 2026 08:39:04 +0000 Files and hashes: 1: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: Z0YSL1jUGUcMlhyqmc0kLVGK6jk4OSIM3dOB14d1j48=) 2: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: Qbfj7YZ+Tv9kxXnnd1sm955UDQ2gPaQwP9s5E0g+wJQ=) 3: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: nuo6rTsOQ8GLTVMyngbuiKoMALEUg+h1rEUVjMfH5nU=) 4: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: 6M2tSRAEtO4icIKg0WJOGaj3E1zsgEWIzLxTXHoBXWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 08:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6d:64:85:3a:b9:11:af:c6:b4:2c:4d:20:56:a4:76:5a:a3:90:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Mar 16 21:27:04 2026 GMT Not After : Mar 20 08:39:04 2026 GMT Subject: CN=E02B16B469AC711BCC0F42DF2440BADA2FC9595A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:42:b2:54:30:c9:7b:2d:a0:80:6a:ce:0e: b7:cc:d7:c1:59:24:15:04:63:0f:3e:36:c3:63:68: 38:51:97:c1:85:fc:86:6b:4e:7f:f4:53:f3:c4:c9: 04:97:0f:d2:3c:82:dd:20:63:e7:5c:df:e7:da:91: 77:cc:00:9a:3d:99:36:6a:85:26:10:72:9e:f5:47: fd:91:53:bf:ba:47:fa:37:e6:0d:ad:8e:ba:01:8b: 7f:4d:0a:fc:eb:1d:f3:b7:4b:20:37:e3:a9:ee:92: cd:fc:6e:4d:f3:84:5b:29:bc:fe:be:2d:b8:24:27: 7e:04:db:d5:fa:25:c3:8c:45:f8:59:4a:19:77:eb: 85:3c:92:f4:f5:9f:07:d3:60:df:5f:92:82:db:d5: c2:99:e3:b9:1d:96:2b:e9:12:fb:dc:9c:1d:e4:d5: e3:a4:a9:fe:43:d9:37:8c:03:18:bb:84:71:01:a9: ce:aa:22:6e:88:49:6a:05:d8:e3:fb:4d:8b:7c:83: 9c:c4:4a:7e:ff:5a:6c:64:18:ad:1f:51:36:66:66: 86:cd:69:0d:40:67:d0:59:90:a9:89:b4:9c:14:86: f2:76:ee:cc:72:24:7a:38:65:c4:f0:90:a5:10:06: 04:b2:81:23:f4:f3:01:d6:46:1e:8a:4b:38:89:5f: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2B:16:B4:69:AC:71:1B:CC:0F:42:DF:24:40:BA:DA:2F:C9:59:5A X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:26:d5:25:99:a9:ff:12:1d:ed:33:64:fc:b2:b7:16:a3:b8: 88:c0:01:db:7a:03:bb:f4:89:48:26:f2:49:cd:68:05:1d:9e: 51:e6:65:64:34:4d:01:c6:e1:b3:7d:41:b7:96:d3:39:f9:cb: 20:b7:8c:d0:4f:ae:0b:0d:60:52:51:71:7d:76:e3:ad:90:03: 82:f5:c9:07:3d:6c:84:30:a6:fc:7e:33:aa:b7:9d:ee:24:f5: 0b:a4:7d:b8:c9:27:f4:cb:43:9d:85:e5:e0:5f:83:13:38:46: 3d:60:c9:fd:ae:82:b7:5a:52:ab:64:df:5a:81:ce:3a:ab:23: 99:12:d7:c1:b2:c1:c0:3d:7d:8a:68:18:c6:5a:cc:d3:fe:8c: b6:7a:5b:c5:78:fa:3a:d9:55:23:1b:cf:25:2d:3a:7d:e4:ba: 19:04:3f:af:d3:eb:dd:2b:24:30:d2:6f:f4:f8:2a:04:54:d6: 42:f9:ce:6f:b0:6e:a6:15:ce:4f:3f:4a:10:b8:ab:be:2c:6b: 32:ea:2e:db:d4:5c:7d:27:15:9b:b0:30:63:4d:b2:e2:c5:9f: 28:a0:cd:2f:81:fe:39:bf:b9:e8:44:34:8f:21:5c:e1:7d:8a: 2f:28:42:cd:b0:d4:77:bf:c8:a1:26:e5:a7:cd:2f:39:c8:ee: 00:d1:6d:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK21khTq5Ea/GtCxNIFakdlqjkL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNjAzMTYyMTI3MDRaFw0yNjAzMjAwODM5MDRaMDMxMTAvBgNV BAMTKEUwMkIxNkI0NjlBQzcxMUJDQzBGNDJERjI0NDBCQURBMkZDOTU5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ30KyVDDJey2ggGrODrfM18FZ JBUEYw8+NsNjaDhRl8GF/IZrTn/0U/PEyQSXD9I8gt0gY+dc3+fakXfMAJo9mTZq hSYQcp71R/2RU7+6R/o35g2tjroBi39NCvzrHfO3SyA346nuks38bk3zhFspvP6+ LbgkJ34E29X6JcOMRfhZShl364U8kvT1nwfTYN9fkoLb1cKZ47kdlivpEvvcnB3k 1eOkqf5D2TeMAxi7hHEBqc6qIm6ISWoF2OP7TYt8g5zESn7/WmxkGK0fUTZmZobN aQ1AZ9BZkKmJtJwUhvJ27sxyJHo4ZcTwkKUQBgSygSP08wHWRh6KSziJX0G7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4CsWtGmscRvMD0LfJEC62i/JWVowHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQm1SWZqf8SHe0zZPyytxajuIjAAdt6A7v0 iUgm8knNaAUdnlHmZWQ0TQHG4bN9QbeW0zn5yyC3jNBPrgsNYFJRcX12462QA4L1 yQc9bIQwpvx+M6q3ne4k9QukfbjJJ/TLQ52F5eBfgxM4Rj1gyf2ugrdaUqtk31qB zjqrI5kS18GywcA9fYpoGMZazNP+jLZ6W8V4+jrZVSMbzyUtOn3kuhkEP6/T690r JDDSb/T4KgRU1kL5zm+wbqYVzk8/ShC4q74sazLqLtvUXH0nFZuwMGNNsuLFnyig zS+B/jm/uehENI8hXOF9ii8oQs2w1He/yKEm5afNLznI7gDRbZc= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:04 2026 by rpki-client