$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft (raw, json) Hash identifier: zPuOcvAn9UHp3Z52wA4+cU+X4oZchMIrykuxefCppsA= Subject key identifier: 28:47:78:42:64:BE:A1:A9:E8:E7:E5:5F:B1:9D:14:F7:B5:7D:DE:77 Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 2704416E1CCE2CFDC3DCC6B88ED14073D8CFF81D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft Manifest number: 0117 Signing time: Sun 22 Mar 2026 01:50:06 +0000 Manifest this update: Sun 22 Mar 2026 01:45:06 +0000 Manifest next update: Wed 25 Mar 2026 12:57:06 +0000 Files and hashes: 1: 323030313a6466353a336530303a3a2f34382d3438203d3e203338373535.roa (hash: 9LXLYm+D6soIVqMRtdkPI6t9IFIKIsecaLtAbcGiLNw=) 2: 3230332e3132332e36312e302f32342d3234203d3e203338373535.roa (hash: AsaM561sK2w8TIOGds+hvFYJ2KlyXawEtR2LIP202Y8=) 3: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (hash: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0=) 4: 3230332e3132332e36332e302f32342d3234203d3e203338373535.roa (hash: OtkNCS/ebdIRNEN257DJgOCvl/8q7JpfzmHOzvZwUus=) 5: 3230332e3132332e36302e302f32342d3234203d3e203338373535.roa (hash: 3kqcTj3+vV70wJ1/6llsiu6o2nkFqbHvAlISphTHITc=) 6: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl (hash: dxKnxM7xYPyj1tu5ccpmK8tRMxLDzulG+5UudCLjTHs=) 7: 3230332e3132332e36302e302f32322d3232203d3e203338373535.roa (hash: gNI/uSTjYQTRRB3e/EB+iGR51Yon6zBV3LmFMzRSGVc=) 8: 3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (hash: HU7RwIKw1sU0I8YKRpn3wdAuyI5s2A4fkpVIFZbCBaU=) 9: 3230332e3132332e36322e302f32332d3234203d3e203338373535.roa (hash: HqirHRUkLLBs+xi+FDAaNL/xx9FpR0Z6sikO90+fQOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 12:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:04:41:6e:1c:ce:2c:fd:c3:dc:c6:b8:8e:d1:40:73:d8:cf:f8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Mar 22 01:45:06 2026 GMT Not After : Mar 25 12:57:06 2026 GMT Subject: CN=2847784264BEA1A9E8E7E55FB19D14F7B57DDE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:31:0a:51:61:37:dd:8f:18:ff:0f:d0:99: 05:c0:27:0e:e7:8b:47:25:35:d0:20:13:62:64:c4: 52:44:4a:4c:4d:6d:9b:4b:46:87:90:3e:5c:2a:57: 8f:d2:30:22:1f:ae:09:02:82:e3:11:cd:57:a9:c2: 31:ad:40:fa:5c:68:f4:ed:a1:40:01:b9:44:37:b1: 5e:a4:68:93:b8:68:ea:d2:41:38:08:82:f0:92:88: d9:57:a6:7f:90:82:3c:01:3b:aa:de:0a:9f:e8:d9: 4f:e8:b5:c8:17:6c:13:15:65:84:1a:b7:3e:d4:5b: 3f:45:19:cc:bd:c8:e7:f6:58:e7:88:e5:3f:b2:4b: 89:4e:a6:92:55:31:25:c2:be:0f:34:32:3e:c3:08: 6e:67:d8:94:66:ad:21:90:e9:24:30:65:cf:e3:5d: ea:2e:6c:bd:bd:1f:ca:62:14:13:8e:f5:e6:c7:91: 0c:18:fd:28:33:40:92:f4:49:9e:bd:bb:3f:71:98: 4a:5e:3b:c3:51:8d:f2:f6:61:23:5a:d0:ae:3d:ce: e6:73:4a:03:bd:d2:ec:28:3e:5a:30:fc:13:bf:5c: 86:28:43:3c:14:45:0f:72:f3:84:85:2b:0c:8c:69: 56:cd:7b:96:63:9d:0a:6f:6f:c2:77:9b:df:21:c0: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:78:42:64:BE:A1:A9:E8:E7:E5:5F:B1:9D:14:F7:B5:7D:DE:77 X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:e7:8f:3e:81:60:7b:07:64:3b:f7:ed:78:60:f0:dc:1a: 3b:a2:e1:2f:42:79:99:26:74:ff:11:0f:57:96:c7:d5:27:d6: 41:08:3b:fb:33:99:c1:d2:c0:5f:2e:82:c1:34:5b:8c:e4:8b: 38:ce:1e:6e:63:f1:97:06:89:f1:fd:31:01:9b:84:55:9b:8f: d6:d2:84:ca:d9:08:af:4e:50:84:11:f3:da:ea:e6:cc:08:86: f9:63:33:5a:88:21:5d:89:60:b2:fe:3e:64:18:27:c1:96:a6: 7f:1b:27:86:cb:53:48:92:d1:f2:0a:9a:a4:a6:2f:58:37:43: f9:94:fd:c8:22:db:63:6b:b3:97:ed:59:ac:72:e9:20:67:91: b0:7b:ba:a2:a9:8a:a8:e3:77:cd:e4:4d:0b:c0:bf:30:6a:35: c9:42:d7:4c:b5:73:cb:45:69:fa:31:1e:d3:51:bf:0c:ab:6c: b4:f5:8a:48:d0:d2:16:c3:40:6b:e4:0c:dc:c0:d0:f5:2c:29: 4b:66:22:44:21:fb:df:0b:0a:03:cb:36:03:7a:6c:c2:07:9a: e7:3f:f2:c9:7f:18:37:df:51:24:3c:3d:1c:4f:47:f7:cd:bf: ec:3e:2f:80:bc:34:ca:ce:f0:86:89:54:8d:06:ef:5d:97:48: e2:eb:6b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwRBbhzOLP3D3Ma4jtFAc9jP+B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNjAzMjIwMTQ1MDZaFw0yNjAzMjUxMjU3MDZaMDMxMTAvBgNV BAMTKDI4NDc3ODQyNjRCRUExQTlFOEU3RTU1RkIxOUQxNEY3QjU3RERFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlzEKUWE33Y8Y/w/QmQXAJw7n i0clNdAgE2JkxFJESkxNbZtLRoeQPlwqV4/SMCIfrgkCguMRzVepwjGtQPpcaPTt oUABuUQ3sV6kaJO4aOrSQTgIgvCSiNlXpn+QgjwBO6reCp/o2U/otcgXbBMVZYQa tz7UWz9FGcy9yOf2WOeI5T+yS4lOppJVMSXCvg80Mj7DCG5n2JRmrSGQ6SQwZc/j XeoubL29H8piFBOO9ebHkQwY/SgzQJL0SZ69uz9xmEpeO8NRjfL2YSNa0K49zuZz SgO90uwoPlow/BO/XIYoQzwURQ9y84SFKwyMaVbNe5ZjnQpvb8J3m98hwD23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEd4QmS+oano5+VfsZ0U97V93ncwHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFiMzkwMmItNzQ1OS00ODU0LWE1 ZjUtMDlmMTVkOGM4N2QzLzAvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMz QTlEMDFCMTVDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/Z548+gWB7B2Q79+14YPDcGjui4S9CeZkm dP8RD1eWx9Un1kEIO/szmcHSwF8ugsE0W4zkizjOHm5j8ZcGifH9MQGbhFWbj9bS hMrZCK9OUIQR89rq5swIhvljM1qIIV2JYLL+PmQYJ8GWpn8bJ4bLU0iS0fIKmqSm L1g3Q/mU/cgi22Nrs5ftWaxy6SBnkbB7uqKpiqjjd83kTQvAvzBqNclC10y1c8tF afoxHtNRvwyrbLT1ikjQ0hbDQGvkDNzA0PUsKUtmIkQh+98LCgPLNgN6bMIHmuc/ 8sl/GDffUSQ8PRxPR/fNv+w+L4C8NMrO8IaJVI0G712XSOLra6I= -----END CERTIFICATE-----Generated at Tue Mar 24 12:29:04 2026 by rpki-client