$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft File: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft (raw, json) Hash identifier: pIgpoSSz6OGBWOJ39RLrowP2LYFIgb3qWWCgTh7mTtA= Subject key identifier: A6:DC:A0:62:BD:18:4D:6D:D1:AD:08:B9:3D:9E:49:DE:5A:3B:86:D6 Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Certificate serial: 2F5E3D5277F4599D39606C72FDF367A5AD01D9AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft Manifest number: 05D2 Signing time: Thu 26 Mar 2026 12:41:49 +0000 Manifest this update: Thu 26 Mar 2026 12:36:49 +0000 Manifest next update: Mon 30 Mar 2026 00:18:49 +0000 Files and hashes: 1: AS137342.roa (hash: cUJKfyEC4SY5UjQ4c8T9JxJQEzk84sf9QrLszzRcKnE=) 2: 9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl (hash: PIUCJI88b2Uo+1sno+I1HDdliKsdL+9ojEhjHpNyATg=) 3: AS137379.roa (hash: VEPT61sWKkYXZpxcUOKTis11BUw6bVrE/1woUBzpr9Q=) 4: AS56242.roa (hash: JpQlm6EguumgusAuixpO/E9VZWPqiHiCL/UKJY9kd4I=) 5: AS59281.roa (hash: oAErYV3FTpou1ipawmWDN+VJRkdUkW0+slDAEnDHpRA=) 6: AS38511.roa (hash: CIv/i7xPYbJ0vBSE+S0q40zqNWuAE/NaWTjEBBuHqEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5e:3d:52:77:f4:59:9d:39:60:6c:72:fd:f3:67:a5:ad:01:d9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F Validity Not Before: Mar 26 12:36:49 2026 GMT Not After : Mar 30 00:18:49 2026 GMT Subject: CN=A6DCA062BD184D6DD1AD08B93D9E49DE5A3B86D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:3d:58:ca:78:d9:96:69:a1:bd:0f:a5:79: a5:6e:11:dd:37:a9:61:ca:a8:c6:de:e8:a8:ef:14: 85:ac:10:a5:76:bf:24:47:d3:95:64:2b:bb:f0:8d: 8b:b1:5a:12:87:45:94:f3:fa:cc:d8:81:d7:ba:2c: 1e:3f:75:d7:65:58:38:0e:de:02:07:af:47:c6:87: c5:8e:14:99:52:70:b0:26:24:50:75:a4:05:78:d7: bf:25:62:40:6b:67:4e:90:a9:a6:a7:c1:8c:34:ac: 61:74:8c:7a:39:c0:2e:17:17:10:5d:eb:85:b4:f0: 29:38:31:a0:63:c2:1b:b2:74:53:42:0a:0a:ce:86: 6a:cf:99:31:1e:1e:67:92:b5:52:2b:9f:e9:a0:3f: 11:93:1e:ee:e2:94:17:1e:a0:1e:39:8e:6c:a9:1f: bf:7a:e3:56:26:e5:4a:ac:ea:fd:4e:19:72:d4:f6: 95:de:fa:a5:9d:ad:98:fe:e8:1e:5e:78:0b:23:19: 23:5a:79:a8:15:42:8d:e5:d0:bb:f6:58:b8:46:98: 81:97:1c:6f:9a:4e:9e:29:84:d6:20:98:7d:85:ed: ad:bb:f8:4e:8e:92:68:06:b3:eb:32:0b:53:65:0d: 62:79:22:01:d3:ca:93:5c:63:9a:8d:06:cd:0a:1f: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DC:A0:62:BD:18:4D:6D:D1:AD:08:B9:3D:9E:49:DE:5A:3B:86:D6 X509v3 Authority Key Identifier: keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:02:ab:d1:54:12:0b:7e:fa:9f:60:3e:f4:b8:98:ca:89:77: 65:b6:a6:b5:a4:81:67:d7:c7:af:06:60:24:73:2a:50:b6:d8: 77:bd:a4:fb:0d:f7:cc:b2:3f:09:e4:a4:9c:c1:0a:a5:8e:83: e0:f3:e2:e4:1d:82:af:aa:b3:07:55:91:bc:98:0c:49:97:d9: 0d:7c:3c:8a:80:77:9a:0c:56:c9:72:dd:b0:b3:da:66:2a:66: 53:e8:2a:27:03:a4:66:9c:4b:c3:ee:1d:b5:96:1b:b3:ea:6b: eb:f9:09:af:78:cc:53:2e:a6:0e:13:a9:f3:3a:96:a7:b6:65: 56:16:eb:2d:a9:da:7b:09:01:e6:18:ec:57:2d:de:8f:78:c5: 30:82:7d:16:0a:2d:77:e4:ce:67:16:c3:c1:6d:b5:1f:6d:4d: 93:4c:a0:3f:8f:de:64:2f:a5:d4:76:6a:48:42:a4:b0:12:e2: 64:91:98:ee:50:ff:63:da:0b:cf:5e:40:c3:a8:98:f6:43:4d: 7e:b8:fe:fb:ed:1a:05:8b:8c:a2:0d:c7:74:cf:f0:0b:78:b8: fa:c7:19:a8:75:74:82:cd:30:7c:bf:7a:82:80:5e:b6:8b:ff: 93:46:4b:3e:ff:15:65:07:c8:58:dc:e7:04:2b:86:1a:89:62: 29:ff:f3:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL149Unf0WZ05YGxy/fNnpa0B2a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF N0FCQzE3RjAeFw0yNjAzMjYxMjM2NDlaFw0yNjAzMzAwMDE4NDlaMDMxMTAvBgNV BAMTKEE2RENBMDYyQkQxODRENkREMUFEMDhCOTNEOUU0OURFNUEzQjg2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3j1YynjZlmmhvQ+leaVuEd03 qWHKqMbe6KjvFIWsEKV2vyRH05VkK7vwjYuxWhKHRZTz+szYgde6LB4/dddlWDgO 3gIHr0fGh8WOFJlScLAmJFB1pAV4178lYkBrZ06QqaanwYw0rGF0jHo5wC4XFxBd 64W08Ck4MaBjwhuydFNCCgrOhmrPmTEeHmeStVIrn+mgPxGTHu7ilBceoB45jmyp H79641Ym5Uqs6v1OGXLU9pXe+qWdrZj+6B5eeAsjGSNaeagVQo3l0Lv2WLhGmIGX HG+aTp4phNYgmH2F7a27+E6OkmgGs+syC1NlDWJ5IgHTypNcY5qNBs0KH7XBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptygYr0YTW3RrQi5PZ5J3lo7htYwHwYDVR0j BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC QzE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE OEZFN0FCQzE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUCq9FUEgt++p9gPvS4mMqJd2W2prWkgWfX x68GYCRzKlC22He9pPsN98yyPwnkpJzBCqWOg+Dz4uQdgq+qswdVkbyYDEmX2Q18 PIqAd5oMVsly3bCz2mYqZlPoKicDpGacS8PuHbWWG7Pqa+v5Ca94zFMupg4TqfM6 lqe2ZVYW6y2p2nsJAeYY7Fct3o94xTCCfRYKLXfkzmcWw8FttR9tTZNMoD+P3mQv pdR2akhCpLAS4mSRmO5Q/2PaC89eQMOomPZDTX64/vvtGgWLjKINx3TP8At4uPrH Gah1dILNMHy/eoKAXraL/5NGSz7/FWUHyFjc5wQrhhqJYin/8xo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:31 2026 by rpki-client