$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: eEQt4LgHv6AyylaDXgIGWQ5A9TK0yvul8y8tfRJWDnE= Subject key identifier: C7:A3:10:07:2B:DB:FD:91:33:EC:C5:85:C7:A3:19:77:4E:9F:7F:60 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 4A2AF003B91437AFE926BB9F05E189827C86D5B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 05D1 Signing time: Tue 24 Mar 2026 06:21:49 +0000 Manifest this update: Tue 24 Mar 2026 06:16:49 +0000 Manifest next update: Fri 27 Mar 2026 12:35:49 +0000 Files and hashes: 1: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: mbPH8nJacXhus5HtkRTRxRk8pyOTdHX1FBLVCpTop7s=) 2: AS137379.roa (hash: VEPT61sWKkYXZpxcUOKTis11BUw6bVrE/1woUBzpr9Q=) 3: AS56242.roa (hash: JpQlm6EguumgusAuixpO/E9VZWPqiHiCL/UKJY9kd4I=) 4: AS38511.roa (hash: CIv/i7xPYbJ0vBSE+S0q40zqNWuAE/NaWTjEBBuHqEE=) 5: AS137342.roa (hash: cUJKfyEC4SY5UjQ4c8T9JxJQEzk84sf9QrLszzRcKnE=) 6: AS59281.roa (hash: oAErYV3FTpou1ipawmWDN+VJRkdUkW0+slDAEnDHpRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2a:f0:03:b9:14:37:af:e9:26:bb:9f:05:e1:89:82:7c:86:d5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Mar 24 06:16:49 2026 GMT Not After : Mar 27 12:35:49 2026 GMT Subject: CN=C7A310072BDBFD9133ECC585C7A319774E9F7F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:a4:ca:c8:ad:54:d9:24:d5:98:8f:34:35: b1:2f:f6:4a:4a:4a:98:1e:94:b1:09:6c:0d:75:e6: 0a:2f:6b:f4:00:d4:3b:b1:37:e5:23:c0:af:ed:f6: a3:c3:74:15:18:ea:5d:36:c7:41:b7:47:49:d2:cf: 81:7a:bb:5b:08:20:94:65:a7:6d:97:b2:72:ab:e2: e8:9e:09:06:eb:58:39:fd:92:13:c3:cd:f5:38:83: 15:76:a8:8e:8e:6f:4b:a9:13:11:15:4f:4c:4d:5e: 2d:40:0c:18:f0:3e:00:c9:c0:a0:be:99:6d:53:07: 43:18:4c:74:36:8a:ae:57:13:1c:b3:47:25:0e:32: 9f:02:65:53:d7:34:0c:04:19:4f:3f:1c:69:35:b6: 18:24:57:7d:dd:fa:fd:30:b6:a7:d2:18:42:00:07: 8d:34:93:41:dc:54:2b:7e:5e:52:d9:14:26:99:f5: 0a:9a:5f:e6:c3:fe:27:e3:60:c9:38:91:5a:ec:f5: 15:36:b4:3a:31:7e:a6:06:50:4b:b7:3a:ac:5b:99: 7b:23:c9:c2:2c:24:a2:60:64:47:4c:18:48:af:a8: 27:a8:55:fe:79:65:ec:5c:4c:4d:d8:0a:fb:de:ce: 0b:bc:a3:34:85:97:39:48:cf:1b:54:3a:0c:b2:e8: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A3:10:07:2B:DB:FD:91:33:EC:C5:85:C7:A3:19:77:4E:9F:7F:60 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:58:31:59:04:d5:d5:e2:59:10:7e:5f:33:3e:8c:d3:0d:12: b1:4f:da:50:09:f3:27:d6:d0:ca:6a:3a:d6:7d:80:62:4d:f8: 13:e7:c5:5e:0f:79:88:3b:09:b7:1f:6a:16:9f:be:22:98:24: 04:5e:ae:fb:66:45:9f:ee:4f:ea:fc:ec:ff:6e:1c:e6:f5:6e: dc:f5:f3:f0:14:12:91:c3:94:50:ef:bc:3d:64:98:41:59:05: b6:3f:e8:cc:5d:1a:7c:f7:e8:bc:29:ce:1b:08:4b:59:36:fb: 8b:80:d6:f0:10:13:3d:05:83:aa:44:6b:9f:35:b9:15:56:38: c0:e5:fb:d5:b2:3c:75:e5:e8:f9:f4:60:d2:9a:81:69:81:28: ff:d5:42:5e:65:23:d9:1c:d9:8e:b3:40:7e:12:14:0c:41:81: 37:4e:d7:6e:a4:59:1a:20:07:74:14:e2:c1:35:48:4d:25:f7: df:00:63:24:92:97:f0:11:54:8c:40:6c:5d:9d:90:c8:7f:32: 0f:a5:a7:2d:9c:41:61:3d:4e:57:12:12:f4:ad:4a:e2:0a:df: 2d:ea:ea:5d:77:d6:55:35:d8:12:8c:f5:24:92:11:5c:dc:0b: ec:8d:83:c6:39:ea:c8:6f:22:0d:c8:ac:19:a5:7b:13:3f:6d: d7:bf:f3:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSirwA7kUN6/pJrufBeGJgnyG1bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNjAzMjQwNjE2NDlaFw0yNjAzMjcxMjM1NDlaMDMxMTAvBgNV BAMTKEM3QTMxMDA3MkJEQkZEOTEzM0VDQzU4NUM3QTMxOTc3NEU5RjdGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/C6TKyK1U2STVmI80NbEv9kpK SpgelLEJbA115gova/QA1DuxN+UjwK/t9qPDdBUY6l02x0G3R0nSz4F6u1sIIJRl p22XsnKr4uieCQbrWDn9khPDzfU4gxV2qI6Ob0upExEVT0xNXi1ADBjwPgDJwKC+ mW1TB0MYTHQ2iq5XExyzRyUOMp8CZVPXNAwEGU8/HGk1thgkV33d+v0wtqfSGEIA B400k0HcVCt+XlLZFCaZ9QqaX+bD/ifjYMk4kVrs9RU2tDoxfqYGUEu3OqxbmXsj ycIsJKJgZEdMGEivqCeoVf55ZexcTE3YCvvezgu8ozSFlzlIzxtUOgyy6AAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6MQByvb/ZEz7MWFx6MZd06ff2AwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE OEZFN0FCQzE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdYMVkE1dXiWRB+XzM+jNMNErFP2lAJ8yfW 0MpqOtZ9gGJN+BPnxV4PeYg7CbcfahafviKYJARervtmRZ/uT+r87P9uHOb1btz1 8/AUEpHDlFDvvD1kmEFZBbY/6MxdGnz36LwpzhsIS1k2+4uA1vAQEz0Fg6pEa581 uRVWOMDl+9WyPHXl6Pn0YNKagWmBKP/VQl5lI9kc2Y6zQH4SFAxBgTdO126kWRog B3QU4sE1SE0l998AYySSl/ARVIxAbF2dkMh/Mg+lpy2cQWE9TlcSEvStSuIK3y3q 6l131lU12BKM9SSSEVzcC+yNg8Y56shvIg3IrBmlexM/bde/8wU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:34 2026 by rpki-client