$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: WY4p9+Nrskj+Hr3WMosbAFAWdTYFgZey18/OesFIYAk= Subject key identifier: BF:4A:B9:C2:95:4E:33:6E:E9:FC:51:3C:E4:CE:D9:EC:15:AC:93:6B Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 7F443BB998036CED984B2A645235523768D1F86A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0260 Signing time: Fri 20 Mar 2026 11:51:13 +0000 Manifest this update: Fri 20 Mar 2026 11:46:13 +0000 Manifest next update: Mon 23 Mar 2026 16:21:13 +0000 Files and hashes: 1: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: r1rLiwuf4STG9EEYds6DDkTTvbSG7VcTi4lhhWkMAq4=) 2: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 3: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 4: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 5: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 6: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 7: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=) 8: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 9: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 10: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 16:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:44:3b:b9:98:03:6c:ed:98:4b:2a:64:52:35:52:37:68:d1:f8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Mar 20 11:46:13 2026 GMT Not After : Mar 23 16:21:13 2026 GMT Subject: CN=BF4AB9C2954E336EE9FC513CE4CED9EC15AC936B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:15:4e:7f:ee:ca:31:ee:ed:41:3f:04:a2:51: 1b:6b:da:01:fc:72:14:9a:3f:e0:a6:7a:d7:1f:cf: 24:b5:a8:d2:d2:91:cf:e4:dd:85:2f:47:6b:42:f7: 49:8c:51:e7:e1:30:04:57:a4:0b:b8:09:51:9f:ea: c6:5b:a9:8a:59:39:59:c5:93:a9:a3:cc:97:9f:85: f3:2c:05:77:df:41:12:c2:83:15:92:89:36:96:45: 1c:e1:20:9e:51:68:60:90:ed:ad:4c:a2:3a:97:79: e1:64:02:2f:60:90:c1:06:ab:11:e7:c3:08:4a:9d: b7:aa:01:d5:bd:f8:06:83:5d:78:b0:3b:82:7c:86: 74:61:07:d0:a3:11:4c:49:2c:cc:86:8c:ce:05:75: 94:8d:b1:f8:cb:5b:38:62:f8:7f:f4:9d:c6:57:0d: e0:ec:b8:2f:c5:3a:e0:d4:e8:f9:8c:e3:32:cb:af: f0:0f:28:69:43:7c:9e:9c:4d:95:ad:98:cb:c8:1d: f5:57:61:14:86:09:fa:a1:32:0a:b2:fe:99:cc:f8: 8a:58:06:2d:76:6c:84:92:5f:d3:c7:25:aa:35:6a: 40:fa:a8:49:3d:e4:ef:3a:5a:69:3c:af:98:38:a8: 86:e0:d1:11:88:bd:f2:ab:62:3e:67:62:c1:6b:9a: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4A:B9:C2:95:4E:33:6E:E9:FC:51:3C:E4:CE:D9:EC:15:AC:93:6B X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:45:f9:61:ed:c9:e4:d1:df:2a:f0:6e:f6:03:8f:82:52:79: 5a:fa:8d:47:b4:2f:7d:3a:d3:23:2e:a9:4d:98:e8:01:0a:25: 54:8f:05:e9:75:5d:cf:3e:e3:43:85:06:13:2c:5f:6c:4c:a6: 49:38:49:5c:7c:54:2d:11:1e:ea:32:5f:95:8f:3a:5c:06:10: 56:de:ac:7b:f9:75:e1:96:50:4a:3c:f7:5f:44:39:07:34:e7: d9:e6:f1:c6:bd:27:7a:aa:5a:eb:2a:16:b4:58:48:aa:96:70: cb:5a:8b:c9:00:c9:42:a3:14:99:42:0d:91:33:6d:03:f1:40: 61:77:47:d4:ea:56:61:67:81:37:f4:b2:2a:9d:82:4b:08:3e: ea:5f:ea:77:45:3b:4f:28:71:77:93:02:66:fb:10:a2:b3:a9: b1:1a:2b:e5:ef:0f:8d:b3:df:cd:5a:88:88:75:ca:6d:01:e7: 9a:39:e5:c0:8c:bc:2e:ba:f0:aa:f0:2c:2d:a0:d9:60:6c:b9: 99:ea:af:17:3e:3e:b6:37:1e:7c:63:d0:26:5f:8b:44:6d:fb: fa:16:b9:be:71:ea:c8:8b:10:ee:b2:a7:1d:d4:f3:fc:ca:50: 4d:40:4e:52:1d:6c:11:d9:de:f8:79:c3:9b:12:f6:8d:50:f7: 2a:f2:75:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0Q7uZgDbO2YSypkUjVSN2jR+GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNjAzMjAxMTQ2MTNaFw0yNjAzMjMxNjIxMTNaMDMxMTAvBgNV BAMTKEJGNEFCOUMyOTU0RTMzNkVFOUZDNTEzQ0U0Q0VEOUVDMTVBQzkzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3FU5/7sox7u1BPwSiURtr2gH8 chSaP+CmetcfzyS1qNLSkc/k3YUvR2tC90mMUefhMARXpAu4CVGf6sZbqYpZOVnF k6mjzJefhfMsBXffQRLCgxWSiTaWRRzhIJ5RaGCQ7a1MojqXeeFkAi9gkMEGqxHn wwhKnbeqAdW9+AaDXXiwO4J8hnRhB9CjEUxJLMyGjM4FdZSNsfjLWzhi+H/0ncZX DeDsuC/FOuDU6PmM4zLLr/APKGlDfJ6cTZWtmMvIHfVXYRSGCfqhMgqy/pnM+IpY Bi12bISSX9PHJao1akD6qEk95O86Wmk8r5g4qIbg0RGIvfKrYj5nYsFrmjqNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv0q5wpVOM27p/FE85M7Z7BWsk2swHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlF+WHtyeTR3yrwbvYDj4JSeVr6jUe0L306 0yMuqU2Y6AEKJVSPBel1Xc8+40OFBhMsX2xMpkk4SVx8VC0RHuoyX5WPOlwGEFbe rHv5deGWUEo8919EOQc059nm8ca9J3qqWusqFrRYSKqWcMtai8kAyUKjFJlCDZEz bQPxQGF3R9TqVmFngTf0siqdgksIPupf6ndFO08ocXeTAmb7EKKzqbEaK+XvD42z 381aiIh1ym0B55o55cCMvC668KrwLC2g2WBsuZnqrxc+PrY3Hnxj0CZfi0Rt+/oW ub5x6siLEO6ypx3U8/zKUE1ATlIdbBHZ3vh5w5sS9o1Q9yrydQM= -----END CERTIFICATE-----Generated at Sat Mar 21 22:09:14 2026 by rpki-client