$ rpki-client -vvf repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft File: 9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft (raw, json) Hash identifier: 09ZwPOQBZQxqu3Qic4GpWVYKcV2XB8TIIprEYfUDTFs= Subject key identifier: 3D:67:09:2B:22:88:5E:24:06:41:3C:93:0E:35:3A:AD:42:2F:2A:C1 Authority key identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E Certificate issuer: /CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Certificate serial: 432A8D9C68CDBC9495EFF457FBA83B7122B16C31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft Manifest number: 10 Signing time: Wed 04 Mar 2026 11:12:10 +0000 Manifest this update: Wed 04 Mar 2026 11:07:10 +0000 Manifest next update: Sat 07 Mar 2026 18:45:10 +0000 Files and hashes: 1: 9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl (hash: 7ds4TTVx0lgvW6fZyt4jrR0V+VDAWoj8NApkUGdiVOg=) 2: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: HgK/3fIDXVnyurkcMARYmUeVpUpCNrqd+nWZwUb84uA=) 3: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: 9Uz1YR0iTgOvm7UaD7Tg7g6FNpfb/PScm7M9Tqt3tUs=) 4: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: vIdWvMmfluMelQHkhyfoZHyeqo8LPRhVZA8PTloxyKI=) 5: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: 72QFlEs4lj2ZXEfA6O7YDbDvXdQYKnzr/OAYVv/VuXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 18:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2a:8d:9c:68:cd:bc:94:95:ef:f4:57:fb:a8:3b:71:22:b1:6c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Validity Not Before: Mar 4 11:07:10 2026 GMT Not After : Mar 7 18:45:10 2026 GMT Subject: CN=3D67092B22885E2406413C930E353AAD422F2AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:a4:d6:98:f5:8b:4a:cd:bd:9c:e5:d6:7a: 38:f5:a5:38:42:18:c5:53:67:f0:59:dc:8e:89:98: d2:c6:19:ab:58:7f:48:4c:52:f8:53:3c:c5:dd:91: 1e:bf:0a:45:27:c4:1e:ca:d5:29:f4:59:40:72:fc: 3a:21:6d:d6:05:4c:ad:e9:76:e7:01:5a:5a:f2:77: 74:5a:68:d6:af:be:93:00:74:7d:87:e1:f3:0b:70: 26:50:7c:b5:19:20:83:cf:8b:e8:f3:e0:77:b1:e7: 0b:c5:1e:4d:cf:91:05:bb:75:94:bf:c6:3d:ad:9a: 7d:0e:ef:1e:10:d0:b3:26:60:bb:12:e1:0d:b7:db: 47:ca:b6:b0:1b:44:38:86:a5:d7:96:b2:58:b6:44: 7a:e2:17:3b:a0:9c:c5:5d:bf:7b:c5:9a:92:27:85: a6:c5:e8:4a:8e:c0:ca:3d:04:a4:45:82:6f:4a:2d: 45:a1:ca:eb:b9:0c:7f:22:f8:9b:91:dd:9d:f2:e3: 87:9b:36:4f:2c:a4:ac:09:9b:c9:05:2a:7b:cd:0e: 47:28:54:21:21:2a:e0:a2:cf:47:cd:d9:e7:88:32: 78:24:28:02:a2:78:a6:2d:07:a0:cb:2c:d0:bb:05: c1:5c:0c:8b:d9:75:83:e4:cf:aa:ec:97:c5:db:55: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:67:09:2B:22:88:5E:24:06:41:3C:93:0E:35:3A:AD:42:2F:2A:C1 X509v3 Authority Key Identifier: keyid:94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:74:e7:23:1e:90:3a:f8:80:5c:4a:32:ac:9b:4a:78:e8:91: a3:58:cd:25:01:9c:cf:a1:d2:45:e0:35:41:a7:91:db:99:9e: 70:72:d5:76:f2:2f:13:a3:80:8d:7b:73:55:d4:9d:2d:a3:ec: 0e:f0:df:b5:04:5c:06:7c:de:62:86:8a:b3:8b:53:32:52:68: 8c:82:f9:8f:a7:4b:eb:e3:cc:87:6e:e8:16:c0:f8:8d:cb:f2: 71:67:8d:12:df:74:ab:46:8e:b4:76:09:ea:17:e1:68:5f:b5: 94:19:48:86:e4:2f:e3:ce:77:f6:71:57:77:eb:4d:c4:0b:b2: 87:fd:70:35:83:26:ca:22:13:ac:6d:fd:af:a3:76:23:74:a6: ac:46:0c:52:9c:04:e5:de:66:52:fb:e3:84:3c:5d:a2:eb:e8: ff:49:65:65:af:3a:79:ad:8a:97:96:23:bb:67:37:c7:b4:0b: 21:96:90:f3:42:43:4e:b6:d2:cb:fc:d1:16:a1:ba:16:5e:ba: 75:50:f3:d2:c0:8d:60:80:43:66:59:d3:02:74:eb:d3:94:6f: 57:0a:aa:a6:51:5c:91:e3:d7:78:bc:9f:ee:0e:23:dc:09:39: cc:00:a2:95:0e:18:df:1f:74:90:d5:cd:a4:e6:2d:40:7d:59: 66:70:c7:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyqNnGjNvJSV7/RX+6g7cSKxbDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEz M0YxMTA0RTAeFw0yNjAzMDQxMTA3MTBaFw0yNjAzMDcxODQ1MTBaMDMxMTAvBgNV BAMTKDNENjcwOTJCMjI4ODVFMjQwNjQxM0M5MzBFMzUzQUFENDIyRjJBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2P6TWmPWLSs29nOXWejj1pThC GMVTZ/BZ3I6JmNLGGatYf0hMUvhTPMXdkR6/CkUnxB7K1Sn0WUBy/DohbdYFTK3p ducBWlryd3RaaNavvpMAdH2H4fMLcCZQfLUZIIPPi+jz4Hex5wvFHk3PkQW7dZS/ xj2tmn0O7x4Q0LMmYLsS4Q2320fKtrAbRDiGpdeWsli2RHriFzugnMVdv3vFmpIn habF6EqOwMo9BKRFgm9KLUWhyuu5DH8i+JuR3Z3y44ebNk8spKwJm8kFKnvNDkco VCEhKuCiz0fN2eeIMngkKAKieKYtB6DLLNC7BcFcDIvZdYPkz6rsl8XbVTiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWcJKyKIXiQGQTyTDjU6rUIvKsEwHwYDVR0j BBgwFoAUlDLTeCF6i+7jTZU6i//VqjPxEE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMC85NDMyRDM3ODIx N0E4QkVFRTM0RDk1M0E4QkZGRDVBQTMzRjExMDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEzM0Yx MTA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc2NjA3ZWEtYWRkNy00Y2E1LThm MmQtZGE4Yjc5MWEzYjQyLzAvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1 QUEzM0YxMTA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK105yMekDr4gFxKMqybSnjokaNYzSUBnM+h 0kXgNUGnkduZnnBy1XbyLxOjgI17c1XUnS2j7A7w37UEXAZ83mKGirOLUzJSaIyC +Y+nS+vjzIdu6BbA+I3L8nFnjRLfdKtGjrR2CeoX4WhftZQZSIbkL+POd/ZxV3fr TcQLsof9cDWDJsoiE6xt/a+jdiN0pqxGDFKcBOXeZlL744Q8XaLr6P9JZWWvOnmt ipeWI7tnN8e0CyGWkPNCQ0620sv80RahuhZeunVQ89LAjWCAQ2ZZ0wJ069OUb1cK qqZRXJHj13i8n+4OI9wJOcwAopUOGN8fdJDVzaTmLUB9WWZwx9o= -----END CERTIFICATE-----Generated at Wed Mar 4 15:38:06 2026 by rpki-client