$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: GwP46wHL1RjmHIMVLa965K6RbAIVQfa4gsw0Cug/004= Subject key identifier: B5:09:B0:74:63:2A:95:CB:B4:D1:4F:C8:BB:19:54:94:A3:0A:CE:CB Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 54A0D272B5266876E1D8A535C10FF99A931AC207 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 021B Signing time: Mon 23 Mar 2026 12:31:28 +0000 Manifest this update: Mon 23 Mar 2026 12:26:28 +0000 Manifest next update: Fri 27 Mar 2026 00:14:28 +0000 Files and hashes: 1: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=) 2: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=) 3: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: l8jksGrjSMzG7TIi1TAAG3CtDyHsj5Cl1oQQkj83y3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 00:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a0:d2:72:b5:26:68:76:e1:d8:a5:35:c1:0f:f9:9a:93:1a:c2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Mar 23 12:26:28 2026 GMT Not After : Mar 27 00:14:28 2026 GMT Subject: CN=B509B074632A95CBB4D14FC8BB195494A30ACECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:1f:33:84:fb:4a:00:f9:74:2d:85:52:f6: 6f:d3:bc:f9:19:49:cc:55:2d:e6:92:a1:89:ac:44: 80:b0:f5:3e:4e:2e:ff:b5:f3:2a:e3:f1:9f:a2:97: df:6f:18:46:cf:e4:75:58:1f:5c:74:2e:fb:18:92: 48:de:09:7c:ab:82:a4:c1:85:25:39:e1:28:91:ce: 5e:42:c6:6a:60:ee:33:59:91:e3:68:c2:7c:54:ea: 75:9b:6b:b4:18:f4:0a:53:e9:8d:55:62:6b:e6:be: f7:87:56:9b:c0:b8:86:d5:7e:29:3a:6d:b6:dd:24: 36:a1:62:84:da:a2:ac:ed:d0:7c:4a:21:77:16:d3: 32:d7:c5:e2:ea:f5:6a:aa:74:cc:60:3f:9e:f9:25: ab:a5:29:4e:47:c3:14:ed:1b:20:1c:38:59:d0:6c: cb:b2:2c:f3:71:79:a8:88:a4:4d:96:ce:78:08:a5: 95:2b:49:a1:a8:52:48:67:34:7a:e1:51:61:14:b9: 71:b9:08:6d:a4:91:a9:61:6d:9a:67:92:60:87:d5: ef:cc:98:f9:f3:ae:94:73:b3:81:ed:dd:28:10:bb: de:df:78:72:9f:d7:17:ab:93:b1:89:d0:18:c7:07: 31:da:c9:ff:60:2a:64:2d:e9:ae:04:9a:5c:f2:3d: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:09:B0:74:63:2A:95:CB:B4:D1:4F:C8:BB:19:54:94:A3:0A:CE:CB X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d9:5e:29:e5:f4:06:49:7e:a6:3b:94:07:ba:80:48:eb:f6: 50:50:cb:39:25:12:14:f6:03:3e:de:dc:5d:10:09:f3:77:95: 0f:31:7b:36:56:83:3c:95:04:c5:9d:1d:91:ac:86:45:6b:70: 6b:8e:e0:ef:04:f4:d8:cd:03:59:fb:8e:27:d4:dd:3f:89:a8: dd:16:3f:50:53:4d:0e:69:bd:b3:b1:cf:1d:2f:43:c8:b4:db: b7:86:48:41:7c:7e:f8:f4:eb:20:e9:f0:53:d5:60:b9:26:2b: 63:77:17:3f:58:aa:29:c2:a8:68:e6:68:a3:5c:c9:d7:59:96: 36:00:2a:c1:50:8c:4c:fa:28:5f:66:9d:1f:7e:f6:d9:f9:b9: 9f:4e:21:6c:ea:87:2f:4f:a5:fb:20:cb:cb:cf:39:53:bb:b7: 7a:09:ae:af:e2:ee:f7:9e:03:84:7e:c0:cb:a3:bc:53:39:90: 77:d9:85:6f:a2:37:f0:15:8f:51:18:a2:96:15:c6:9c:2d:ae: 72:29:25:1f:60:b7:a2:c5:d3:f1:63:7a:d1:f8:96:49:6c:c8: 34:b2:43:e4:46:69:a7:16:f8:69:1a:24:b7:ed:b1:d9:41:12: 1b:3d:af:db:8f:ef:95:5f:4f:01:e5:2b:66:38:26:ad:41:24: f3:aa:5f:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKDScrUmaHbh2KU1wQ/5mpMawgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNjAzMjMxMjI2MjhaFw0yNjAzMjcwMDE0MjhaMDMxMTAvBgNV BAMTKEI1MDlCMDc0NjMyQTk1Q0JCNEQxNEZDOEJCMTk1NDk0QTMwQUNFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurh8zhPtKAPl0LYVS9m/TvPkZ ScxVLeaSoYmsRICw9T5OLv+18yrj8Z+il99vGEbP5HVYH1x0LvsYkkjeCXyrgqTB hSU54SiRzl5Cxmpg7jNZkeNownxU6nWba7QY9ApT6Y1VYmvmvveHVpvAuIbVfik6 bbbdJDahYoTaoqzt0HxKIXcW0zLXxeLq9WqqdMxgP575JaulKU5HwxTtGyAcOFnQ bMuyLPNxeaiIpE2WzngIpZUrSaGoUkhnNHrhUWEUuXG5CG2kkalhbZpnkmCH1e/M mPnzrpRzs4Ht3SgQu97feHKf1xerk7GJ0BjHBzHayf9gKmQt6a4EmlzyPW9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQmwdGMqlcu00U/IuxlUlKMKzsswHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvZXinl9AZJfqY7lAe6gEjr9lBQyzklEhT2 Az7e3F0QCfN3lQ8xezZWgzyVBMWdHZGshkVrcGuO4O8E9NjNA1n7jifU3T+JqN0W P1BTTQ5pvbOxzx0vQ8i027eGSEF8fvj06yDp8FPVYLkmK2N3Fz9YqinCqGjmaKNc yddZljYAKsFQjEz6KF9mnR9+9tn5uZ9OIWzqhy9Ppfsgy8vPOVO7t3oJrq/i7vee A4R+wMujvFM5kHfZhW+iN/AVj1EYopYVxpwtrnIpJR9gt6LF0/FjetH4lklsyDSy Q+RGaacW+GkaJLftsdlBEhs9r9uP75VfTwHlK2Y4Jq1BJPOqXyA= -----END CERTIFICATE-----Generated at Tue Mar 24 23:01:43 2026 by rpki-client