$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: 0G872mP4G6fM1+F5wvFNrlw1+e4Pvwg9SMgq1+5f/aI= Subject key identifier: D5:AD:D9:BA:B4:58:1D:09:39:58:50:EE:4F:34:39:9B:5D:FA:16:FD Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 4801DF032192526B996053073BABDCC23C1683E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: 0100 Signing time: Fri 06 Mar 2026 14:40:34 +0000 Manifest this update: Fri 06 Mar 2026 14:35:34 +0000 Manifest next update: Tue 10 Mar 2026 01:01:34 +0000 Files and hashes: 1: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: ua9axfV2zOHgNTyBKAJ/IwHIFIF2q1/sGcw0llzt7aY=) 2: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) 3: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) 4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:01:df:03:21:92:52:6b:99:60:53:07:3b:ab:dc:c2:3c:16:83:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Mar 6 14:35:34 2026 GMT Not After : Mar 10 01:01:34 2026 GMT Subject: CN=D5ADD9BAB4581D09395850EE4F34399B5DFA16FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:e2:55:3d:35:7b:6a:a8:f9:b5:67:8a:bc: bd:d8:da:a8:2f:18:4c:7a:93:6a:02:ab:23:a8:65: d3:d9:8b:cb:cd:59:ae:7b:cb:54:7d:a4:3c:85:e8: 3e:06:2d:e8:7d:ed:b8:ac:ae:9e:4b:3a:e9:47:5b: b1:1d:00:08:4f:76:af:43:64:ca:5c:94:90:0b:e1: 4d:92:35:96:28:15:3c:d4:62:a0:f9:35:52:ff:c4: 02:d2:ee:ff:72:45:04:26:50:52:cb:fd:1b:0a:2e: f1:e3:47:5f:9e:ac:aa:48:6e:c9:fe:58:e0:f3:3e: 7c:34:68:3b:30:f5:82:99:61:ec:a5:b1:df:03:51: 23:47:80:66:e3:e6:4e:ec:55:af:2d:81:65:96:85: 73:de:3b:05:35:59:7b:70:07:10:89:a2:7c:b8:76: c3:fb:ac:c8:96:a2:c4:17:96:0a:4f:7a:da:db:17: 2b:c4:1e:95:69:11:24:72:b3:b8:4f:ca:a9:6f:11: 06:c5:98:dc:f1:d2:b6:47:ca:30:a0:48:28:60:bc: 3a:42:99:0d:e3:aa:a4:ae:3d:fe:fd:9c:07:ce:64: 57:0f:a4:f9:ed:4a:d8:b8:15:e7:85:46:ba:d6:00: ea:8a:ea:4d:b2:b2:c9:c0:34:6c:ad:bb:61:6c:f6: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AD:D9:BA:B4:58:1D:09:39:58:50:EE:4F:34:39:9B:5D:FA:16:FD X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:cb:39:d3:0b:63:c6:9e:13:30:db:c9:90:5d:e3:3b:0a:c9: 03:00:a0:92:ab:3b:bb:b6:b8:2c:b5:8c:64:11:d4:fd:59:b5: 8b:53:24:46:b2:10:6c:41:97:05:bc:2b:78:67:8e:02:23:e7: 8f:cf:e4:23:56:a5:50:86:bb:62:13:38:5d:84:6f:84:c7:1d: 14:f4:69:9f:0d:50:28:13:ac:26:a3:05:6d:c9:42:06:6c:eb: 87:0a:66:f1:c2:67:79:3d:ae:74:d5:a9:41:5c:d5:26:47:5c: 61:af:96:33:18:36:d5:ca:07:ce:d6:1b:5c:29:de:c2:80:7c: c4:11:7a:56:6c:0d:78:38:83:d3:42:85:3b:32:c7:17:b4:14: b4:a3:a3:18:7d:fa:dc:18:2a:cb:63:cc:61:72:1b:95:a9:a9: 3f:2d:f2:a8:3f:00:70:e3:ec:8c:2b:8f:e1:67:81:aa:8b:e2: 34:fd:9f:f1:38:4a:86:da:84:4c:b3:d2:75:8b:d8:72:63:f8: 5c:c4:ef:7a:cf:ff:d0:43:88:f2:d5:f8:80:3a:6e:64:28:92: e7:b4:d7:11:f1:99:fd:22:f8:d2:6d:0a:e4:c0:17:f3:fb:f1: b0:e3:48:9c:d1:76:84:40:57:f3:e2:35:bd:20:6c:11:ab:16: 06:13:e7:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSAHfAyGSUmuZYFMHO6vcwjwWg+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNjAzMDYxNDM1MzRaFw0yNjAzMTAwMTAxMzRaMDMxMTAvBgNV BAMTKEQ1QUREOUJBQjQ1ODFEMDkzOTU4NTBFRTRGMzQzOTlCNURGQTE2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KeJVPTV7aqj5tWeKvL3Y2qgv GEx6k2oCqyOoZdPZi8vNWa57y1R9pDyF6D4GLeh97bisrp5LOulHW7EdAAhPdq9D ZMpclJAL4U2SNZYoFTzUYqD5NVL/xALS7v9yRQQmUFLL/RsKLvHjR1+erKpIbsn+ WODzPnw0aDsw9YKZYeylsd8DUSNHgGbj5k7sVa8tgWWWhXPeOwU1WXtwBxCJony4 dsP7rMiWosQXlgpPetrbFyvEHpVpESRys7hPyqlvEQbFmNzx0rZHyjCgSChgvDpC mQ3jqqSuPf79nAfOZFcPpPntSti4FeeFRrrWAOqK6k2yssnANGytu2Fs9sdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1a3ZurRYHQk5WFDuTzQ5m136Fv0wHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTLOdMLY8aeEzDbyZBd4zsKyQMAoJKrO7u2 uCy1jGQR1P1ZtYtTJEayEGxBlwW8K3hnjgIj54/P5CNWpVCGu2ITOF2Eb4THHRT0 aZ8NUCgTrCajBW3JQgZs64cKZvHCZ3k9rnTVqUFc1SZHXGGvljMYNtXKB87WG1wp 3sKAfMQRelZsDXg4g9NChTsyxxe0FLSjoxh9+twYKstjzGFyG5WpqT8t8qg/AHDj 7Iwrj+FngaqL4jT9n/E4SobahEyz0nWL2HJj+FzE73rP/9BDiPLV+IA6bmQokue0 1xHxmf0i+NJtCuTAF/P78bDjSJzRdoRAV/PiNb0gbBGrFgYT53o= -----END CERTIFICATE-----Generated at Sat Mar 7 19:36:15 2026 by rpki-client