$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: KdKp+JykBRW3pgS9ycr7GOvNt0SJsv4BdANzp+dVJrA= Subject key identifier: 41:77:F1:72:18:98:9F:F3:25:BF:A0:CD:7F:B2:62:FD:A3:49:04:F2 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 74DD65A9C1623A535BE0F213AA69D021BAAAFEC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 03FC Signing time: Sun 22 Mar 2026 23:52:12 +0000 Manifest this update: Sun 22 Mar 2026 23:47:12 +0000 Manifest next update: Thu 26 Mar 2026 07:36:12 +0000 Files and hashes: 1: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: 4JnfTGjY9X7X8+n4/R+zY+BatEjhdtcbcnnxtg34W0k=) 2: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: BQ5HEocYYrV460TPsLUgxaGVKk5mtyeUHfdAVXZwxAs=) 3: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=) 4: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw=) 5: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: x7A5/ydvWW7sOuPV1cJAWpXthBYyUBZokt+o03RLsFU=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: gpChKqdsCYOp/lH5E0Zrms5qo7Kcyfa0mYD/MLgV2Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 07:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:65:a9:c1:62:3a:53:5b:e0:f2:13:aa:69:d0:21:ba:aa:fe:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Mar 22 23:47:12 2026 GMT Not After : Mar 26 07:36:12 2026 GMT Subject: CN=4177F17218989FF325BFA0CD7FB262FDA34904F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:92:43:e5:e5:21:fa:51:03:c0:da:6a:79: f4:37:f9:cc:72:bf:ae:ab:ba:1a:8e:d8:63:4b:d3: 81:85:0a:73:98:a9:6e:5a:fa:5b:cc:f4:22:75:14: 84:17:c8:e8:ca:91:0f:45:a0:f1:4d:75:8b:52:40: c5:2f:d3:7e:bf:b2:18:3f:ad:15:e9:e0:38:90:bb: e8:78:97:8f:4e:91:df:ea:bb:72:42:08:84:af:6b: 8b:c9:aa:25:b4:12:94:67:3e:c7:bf:d6:80:e8:c2: 6f:20:a1:09:dd:eb:02:10:ae:a6:69:35:1f:3a:10: bc:7f:57:d0:5c:9c:1a:1f:9e:1e:05:5d:9b:6b:4a: e7:50:c1:69:f5:18:89:ee:e3:d1:f8:ed:af:be:81: 63:51:3a:32:f0:9d:f2:fe:94:23:89:f3:ee:61:a1: 34:c2:9f:d2:7c:a6:19:10:27:f0:18:df:e5:12:97: 04:69:24:fe:5c:8f:2c:f8:06:6c:80:25:c6:a6:64: 20:b8:46:7b:10:4a:80:23:14:a1:50:d2:8b:f1:78: e3:38:98:7a:18:97:08:9a:df:6e:dd:94:17:37:0d: 7e:da:28:e8:46:7e:84:71:63:18:19:16:c7:47:6e: de:f5:85:fd:c6:0d:57:4e:39:b8:67:65:94:27:92: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:F1:72:18:98:9F:F3:25:BF:A0:CD:7F:B2:62:FD:A3:49:04:F2 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f2:ee:c4:f7:96:dd:d9:09:db:51:0b:35:3d:1f:12:06:32: 8a:22:f9:d6:62:39:73:94:2f:89:81:1d:ee:91:fd:30:be:71: a0:a8:20:fa:f2:63:2c:a2:4d:38:c3:21:58:cf:3d:61:f6:00: e8:53:bc:9c:ca:3f:d6:39:5d:21:7e:d2:e1:5e:1e:5e:85:5b: 80:3e:cd:68:59:f1:b7:2e:e2:ba:c9:a2:59:9c:b7:f1:9a:b1: 0a:b1:e4:1c:1d:5e:5c:81:b2:8c:02:a5:58:91:9b:92:86:75: 54:79:3a:d2:6f:46:27:86:d7:57:27:03:b7:e1:6a:3e:58:f8: 9f:b0:44:d3:ee:c3:45:69:76:47:77:d1:1c:10:72:5f:d3:18: 21:64:e5:f0:a6:7b:ef:3f:ac:39:57:6d:dc:80:52:58:cf:bd: 53:f8:5f:55:c0:a6:b7:f6:f3:60:5a:99:a7:f8:a5:f1:90:9b: d0:65:7e:91:90:1f:d7:af:09:a5:54:46:f2:45:7d:9c:72:3e: 8e:55:4b:e9:08:25:d7:1b:f9:0d:33:e5:b5:69:9b:31:c5:f4: a6:ac:70:b5:94:99:9d:a9:f7:7c:49:c4:51:1e:87:24:cc:27: 72:cf:90:46:b8:01:90:82:a6:c8:cf:cf:84:32:30:1c:c1:0a: 88:ec:c0:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdN1lqcFiOlNb4PITqmnQIbqq/sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNjAzMjIyMzQ3MTJaFw0yNjAzMjYwNzM2MTJaMDMxMTAvBgNV BAMTKDQxNzdGMTcyMTg5ODlGRjMyNUJGQTBDRDdGQjI2MkZEQTM0OTA0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf9ZJD5eUh+lEDwNpqefQ3+cxy v66ruhqO2GNL04GFCnOYqW5a+lvM9CJ1FIQXyOjKkQ9FoPFNdYtSQMUv036/shg/ rRXp4DiQu+h4l49Okd/qu3JCCISva4vJqiW0EpRnPse/1oDowm8goQnd6wIQrqZp NR86ELx/V9BcnBofnh4FXZtrSudQwWn1GInu49H47a++gWNROjLwnfL+lCOJ8+5h oTTCn9J8phkQJ/AY3+USlwRpJP5cjyz4BmyAJcamZCC4RnsQSoAjFKFQ0ovxeOM4 mHoYlwia327dlBc3DX7aKOhGfoRxYxgZFsdHbt71hf3GDVdOObhnZZQnklrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQXfxchiYn/Mlv6DNf7Ji/aNJBPIwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTy7sT3lt3ZCdtRCzU9HxIGMooi+dZiOXOU L4mBHe6R/TC+caCoIPryYyyiTTjDIVjPPWH2AOhTvJzKP9Y5XSF+0uFeHl6FW4A+ zWhZ8bcu4rrJolmct/GasQqx5BwdXlyBsowCpViRm5KGdVR5OtJvRieG11cnA7fh aj5Y+J+wRNPuw0Vpdkd30RwQcl/TGCFk5fCme+8/rDlXbdyAUljPvVP4X1XAprf2 82Bamaf4pfGQm9BlfpGQH9evCaVURvJFfZxyPo5VS+kIJdcb+Q0z5bVpmzHF9Kas cLWUmZ2p93xJxFEehyTMJ3LPkEa4AZCCpsjPz4QyMBzBCojswEM= -----END CERTIFICATE-----Generated at Wed Mar 25 04:24:28 2026 by rpki-client