$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: VvS/1Di5t6gvRNLkGDzZCtMV0pMJPoNkfmraCujFn98= Subject key identifier: 59:C1:4C:7D:15:E4:F2:1D:D9:E5:7C:FA:A1:20:8D:C9:C8:79:5B:EE Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 459EB7C015EDB16590F44F02544138522C1C4963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 026B Signing time: Fri 20 Mar 2026 16:42:39 +0000 Manifest this update: Fri 20 Mar 2026 16:37:39 +0000 Manifest next update: Mon 23 Mar 2026 17:33:39 +0000 Files and hashes: 1: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: fT0TYjuwZhNZUrzmFhIS7ca4omU1vyk75dlc091HQuY=) 2: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: iQWBLlqIhDVaQel1mjDud9rhiarI0+EVMzv8EoEyA1M=) 3: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 17:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9e:b7:c0:15:ed:b1:65:90:f4:4f:02:54:41:38:52:2c:1c:49:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Mar 20 16:37:39 2026 GMT Not After : Mar 23 17:33:39 2026 GMT Subject: CN=59C14C7D15E4F21DD9E57CFAA1208DC9C8795BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:bc:13:08:bc:e6:29:f4:3c:33:70:a8:ff: 0d:b5:89:99:60:44:06:e6:1c:d6:e8:e9:a0:1d:43: a5:cc:4c:cd:39:96:75:c9:b0:de:b0:a4:df:a5:64: 03:50:5f:c7:16:4d:7b:ab:43:1d:66:06:d7:90:68: a7:c0:94:ff:89:69:b0:01:f4:3a:8c:bb:f0:af:dd: c7:53:ea:04:a7:ea:1a:46:4c:bf:45:ba:7a:2f:7d: 99:f4:53:f5:d5:4c:41:5c:fe:88:48:f7:3c:d2:1e: 88:6d:f8:fb:58:2d:72:af:6e:17:c4:ca:cb:e5:2a: 54:6e:78:4f:51:21:b8:1d:6f:84:0f:3b:a7:d5:9e: 9d:07:39:95:1b:9e:aa:97:db:c4:62:1b:bd:c6:01: a5:cd:f7:67:03:ff:a1:95:e0:fc:76:24:5d:1e:e1: 82:5d:15:0f:2b:6d:8c:7b:1d:98:f3:45:57:ad:3e: b6:f7:dd:7b:0b:b7:96:6d:c6:98:90:26:50:b0:2d: e0:f9:f3:92:ec:e2:6f:7c:90:82:ea:d6:15:53:60: 24:87:63:c2:8a:32:96:b7:1d:9b:6e:75:1b:4b:9a: 79:dc:fc:49:ba:bd:50:14:be:4c:2e:69:08:ba:84: 5a:b1:cc:e2:5f:37:25:68:e3:fb:08:8d:8e:74:e6: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C1:4C:7D:15:E4:F2:1D:D9:E5:7C:FA:A1:20:8D:C9:C8:79:5B:EE X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:60:62:c5:93:fd:6d:f1:52:63:11:57:3b:b2:b5:92:a1:6c: d4:94:e5:2c:fd:56:ac:38:25:aa:20:a5:b5:93:df:0e:19:b9: ee:91:8c:29:4f:a2:41:d8:3c:ff:3b:24:35:02:04:2b:38:b3: ea:42:f2:1e:9c:65:77:d6:6b:89:07:de:10:4d:5f:d4:68:8b: 10:11:c9:a6:0b:af:f5:de:9b:df:3a:cf:ec:a5:76:8a:50:4a: ad:81:76:6c:1d:ad:09:30:16:ad:df:9b:2e:ec:a0:eb:23:15: e1:ac:7a:4c:8f:d4:f6:65:e5:79:64:07:de:cd:05:35:b7:32: 5d:79:2b:18:a0:aa:f6:e4:ef:a8:ba:fe:32:21:fc:a0:7d:74: c2:da:d9:15:cd:ae:36:9d:b8:99:92:7d:9c:72:2e:e6:31:61: 03:d7:60:54:5f:d5:2c:f6:f0:d6:39:05:ec:bf:7d:4a:85:3f: e0:e4:aa:40:79:42:99:cd:5a:46:dc:5a:5a:62:e0:e5:d3:4a: 6b:24:e5:69:71:8a:a2:0e:4e:b3:49:2b:f7:4e:a8:48:51:f6: 12:f2:62:bd:10:9a:85:47:15:53:bc:0c:d0:b1:0d:43:c9:f2: ea:da:e7:f2:9c:e4:c5:41:99:63:ef:b7:e8:bd:ba:ca:0b:d4: 93:5f:a2:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZ63wBXtsWWQ9E8CVEE4UiwcSWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNjAzMjAxNjM3MzlaFw0yNjAzMjMxNzMzMzlaMDMxMTAvBgNV BAMTKDU5QzE0QzdEMTVFNEYyMUREOUU1N0NGQUExMjA4REM5Qzg3OTVCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qLwTCLzmKfQ8M3Co/w21iZlg RAbmHNbo6aAdQ6XMTM05lnXJsN6wpN+lZANQX8cWTXurQx1mBteQaKfAlP+JabAB 9DqMu/Cv3cdT6gSn6hpGTL9FunovfZn0U/XVTEFc/ohI9zzSHoht+PtYLXKvbhfE ysvlKlRueE9RIbgdb4QPO6fVnp0HOZUbnqqX28RiG73GAaXN92cD/6GV4Px2JF0e 4YJdFQ8rbYx7HZjzRVetPrb33XsLt5ZtxpiQJlCwLeD585Ls4m98kILq1hVTYCSH Y8KKMpa3HZtudRtLmnnc/Em6vVAUvkwuaQi6hFqxzOJfNyVo4/sIjY505mg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWcFMfRXk8h3Z5Xz6oSCNych5W+4wHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJgYsWT/W3xUmMRVzuytZKhbNSU5Sz9Vqw4 JaogpbWT3w4Zue6RjClPokHYPP87JDUCBCs4s+pC8h6cZXfWa4kH3hBNX9RoixAR yaYLr/Xem986z+yldopQSq2BdmwdrQkwFq3fmy7soOsjFeGsekyP1PZl5XlkB97N BTW3Ml15Kxigqvbk76i6/jIh/KB9dMLa2RXNrjaduJmSfZxyLuYxYQPXYFRf1Sz2 8NY5Bey/fUqFP+DkqkB5QpnNWkbcWlpi4OXTSmsk5WlxiqIOTrNJK/dOqEhR9hLy Yr0QmoVHFVO8DNCxDUPJ8ura5/Kc5MVBmWPvt+i9usoL1JNfogY= -----END CERTIFICATE-----Generated at Sat Mar 21 00:20:46 2026 by rpki-client