$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: rsyDJvKMJ1JZIApyQMigT6SOmHxdFbsGUchKBCTnSCA= Subject key identifier: E9:CF:ED:EF:CB:5C:C1:BE:BA:2C:B7:DC:41:1A:29:76:A4:04:84:D3 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 5FDBBEF4C6EFE0EB25C649CA9C4473E811C64665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: D7 Signing time: Fri 06 Mar 2026 23:40:53 +0000 Manifest this update: Fri 06 Mar 2026 23:35:53 +0000 Manifest next update: Tue 10 Mar 2026 04:13:53 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: sOF4Tk7QL1daP63jG9Quoz697C1qY9GuoENjtikkfSo=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:db:be:f4:c6:ef:e0:eb:25:c6:49:ca:9c:44:73:e8:11:c6:46:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Mar 6 23:35:53 2026 GMT Not After : Mar 10 04:13:53 2026 GMT Subject: CN=E9CFEDEFCB5CC1BEBA2CB7DC411A2976A40484D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:8a:87:ac:a8:61:c8:e1:57:90:c5:84:8d: 22:cb:ae:31:4c:50:fb:fa:c6:a0:3c:34:ae:ac:4b: ac:72:b1:40:76:58:b3:2e:1b:b2:54:3e:fe:44:93: ec:da:6b:2b:ae:3e:12:78:49:7b:73:ce:8b:33:3d: ef:74:c4:62:8a:62:90:68:4d:16:90:a2:a7:dd:aa: 57:65:94:38:10:08:fb:19:25:c4:65:d1:94:56:25: 92:da:ba:3b:93:f3:61:f0:44:a4:31:c7:54:02:62: a5:01:7f:51:c4:04:4c:6c:50:72:29:b0:37:a2:e7: 40:b4:a7:3f:7b:b7:5c:01:c8:ad:e9:e6:d2:06:86: df:c4:34:d5:d1:2c:16:d7:e1:52:3a:85:53:af:6a: 4e:69:d5:02:ce:76:b5:4b:db:50:28:b8:23:75:93: 51:86:61:c6:86:34:a2:d5:a1:90:8e:ed:dd:f9:40: bc:a3:14:4e:bd:e2:e0:ff:4d:d4:9f:fb:25:89:e1: 18:34:3b:e7:cb:f4:53:1f:a8:b6:41:a6:63:43:82: 00:ee:e3:13:8f:bf:c0:ad:c1:7a:2a:a4:23:e9:e0: 9a:0f:71:26:17:d6:1b:68:ac:cf:fe:27:98:e5:39: 0d:3e:91:7f:32:c2:55:69:8b:9f:3c:0b:34:83:96: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CF:ED:EF:CB:5C:C1:BE:BA:2C:B7:DC:41:1A:29:76:A4:04:84:D3 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ea:86:b5:17:ac:e1:fc:b4:7b:d9:af:38:84:20:4e:68:6b: fa:a9:1c:cf:6b:71:7f:a0:f4:e2:62:f3:4d:e3:f1:f1:35:97: 55:01:1d:8a:c2:69:9d:09:e8:98:ae:0e:8c:e4:f7:ca:1a:e5: 35:97:59:2f:e4:8a:0e:80:84:af:f7:88:75:83:e7:e7:16:a3: d8:dc:0b:59:e9:a6:de:b1:8b:75:d7:fd:cd:1b:f0:20:52:ea: 9a:7a:df:e3:ea:97:cf:36:19:fa:18:af:13:27:0d:0e:93:78: e8:65:b3:fb:8e:4e:06:e1:b8:dc:e7:0f:58:4c:1d:58:ab:80: 7a:46:e1:93:bb:ba:81:53:9d:b0:d0:40:3d:ab:9e:5f:9f:07: 91:e2:15:b4:f1:84:9b:83:e5:83:78:a2:16:4c:90:e1:0a:37: 17:d5:10:39:59:76:12:0c:90:0c:67:c0:04:61:a4:6b:87:58: 5b:61:2d:06:d3:3c:56:7e:7b:07:c0:82:4a:6c:a7:68:ff:f9: 23:9e:f9:0b:9e:52:4c:e0:7b:42:01:b6:c7:4f:73:7a:2a:da: 09:85:fe:a5:cd:94:27:90:ef:31:aa:fa:79:59:fb:aa:21:cf: f8:17:b3:0a:cf:c9:31:d5:56:8e:a0:98:a1:a6:8f:ce:da:bd: 1b:d2:f8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9u+9Mbv4OslxknKnERz6BHGRmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNjAzMDYyMzM1NTNaFw0yNjAzMTAwNDEzNTNaMDMxMTAvBgNV BAMTKEU5Q0ZFREVGQ0I1Q0MxQkVCQTJDQjdEQzQxMUEyOTc2QTQwNDg0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEYqHrKhhyOFXkMWEjSLLrjFM UPv6xqA8NK6sS6xysUB2WLMuG7JUPv5Ek+zaayuuPhJ4SXtzzoszPe90xGKKYpBo TRaQoqfdqldllDgQCPsZJcRl0ZRWJZLaujuT82HwRKQxx1QCYqUBf1HEBExsUHIp sDei50C0pz97t1wByK3p5tIGht/ENNXRLBbX4VI6hVOvak5p1QLOdrVL21AouCN1 k1GGYcaGNKLVoZCO7d35QLyjFE694uD/TdSf+yWJ4Rg0O+fL9FMfqLZBpmNDggDu 4xOPv8CtwXoqpCPp4JoPcSYX1htorM/+J5jlOQ0+kX8ywlVpi588CzSDluVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6c/t78tcwb66LLfcQRopdqQEhNMwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzqhrUXrOH8tHvZrziEIE5oa/qpHM9rcX+g 9OJi803j8fE1l1UBHYrCaZ0J6JiuDozk98oa5TWXWS/kig6AhK/3iHWD5+cWo9jc C1nppt6xi3XX/c0b8CBS6pp63+Pql882GfoYrxMnDQ6TeOhls/uOTgbhuNznD1hM HVirgHpG4ZO7uoFTnbDQQD2rnl+fB5HiFbTxhJuD5YN4ohZMkOEKNxfVEDlZdhIM kAxnwARhpGuHWFthLQbTPFZ+ewfAgkpsp2j/+SOe+QueUkzge0IBtsdPc3oq2gmF /qXNlCeQ7zGq+nlZ+6ohz/gXswrPyTHVVo6gmKGmj87avRvS+FU= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:02 2026 by rpki-client