$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: z3kA1SP+EKob4HJGcjPvkgoVLrv+YCa4U57iGFGR2Go= Subject key identifier: D3:23:CA:A7:79:11:17:A8:8C:B8:9D:2A:32:1D:FD:55:F0:CF:41:05 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 6193C2ED4E4B6ED6C542164F68CD7908C74F0E7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 0206 Signing time: Tue 17 Mar 2026 10:31:40 +0000 Manifest this update: Tue 17 Mar 2026 10:26:40 +0000 Manifest next update: Fri 20 Mar 2026 21:32:40 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 2: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 4: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: hJAspOOYfM2I1fF8rII0Ym/sIgdZxKdukY/Qg2tq/Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 21:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:93:c2:ed:4e:4b:6e:d6:c5:42:16:4f:68:cd:79:08:c7:4f:0e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Mar 17 10:26:40 2026 GMT Not After : Mar 20 21:32:40 2026 GMT Subject: CN=D323CAA7791117A88CB89D2A321DFD55F0CF4105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:38:b9:02:95:65:b2:cc:ab:44:c5:cb:37: d2:fc:d0:29:b3:2b:6f:b3:8e:4e:36:04:71:c8:d6: 30:c9:5a:2a:5d:cc:d4:bb:81:b4:bb:73:fe:5d:16: 56:f8:bf:da:ab:b5:6f:9d:91:c5:ce:04:4d:6c:65: 40:b5:0c:2f:6c:6e:9f:84:43:b4:c0:d3:13:eb:78: 0e:59:08:62:cb:f4:e5:d2:bb:42:c7:30:0f:09:24: a6:d7:77:e5:fe:90:14:5c:a9:ea:90:cf:0a:6c:f9: 69:4f:0c:9f:94:3a:fe:65:12:ff:6d:03:ef:c3:7f: d1:20:96:a4:a7:a0:d4:d6:19:3d:8e:df:3b:53:83: af:24:48:9e:e3:48:f9:f7:f7:c7:16:3a:02:4e:24: 1d:90:86:c5:f4:14:b8:3d:2d:e1:64:3e:39:ad:aa: 41:85:78:74:83:28:8e:33:d0:ed:25:29:b6:7e:c2: 71:86:bf:21:09:5f:97:67:2d:b0:de:bc:16:43:4d: 51:f6:76:07:5f:af:bc:d9:1c:ea:f4:75:40:0b:48: 97:05:02:28:c8:9a:54:e0:39:35:3b:7a:a1:26:10: 01:b3:57:97:dd:38:b9:94:40:b1:5f:a8:db:4b:fa: ca:28:00:f1:ff:80:26:63:d9:d5:38:b9:14:57:32: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:23:CA:A7:79:11:17:A8:8C:B8:9D:2A:32:1D:FD:55:F0:CF:41:05 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:47:b3:67:42:22:82:38:b3:2d:39:9b:a4:0b:31:82:d5:92: 7e:b5:3c:48:cf:6f:3c:2f:5e:71:4b:65:9c:04:2f:06:aa:b5: 47:31:ce:aa:52:4c:33:a3:f8:99:b6:0c:83:4a:2d:ba:80:b7: 40:95:3e:58:33:eb:83:62:e2:17:e0:2e:64:26:b1:27:2a:f7: ed:72:5e:1a:a4:c5:0e:8d:e7:c3:5f:b0:62:57:8f:18:a9:4b: a1:84:36:cf:c3:36:e7:6b:a6:e0:42:60:98:ac:56:61:9b:65: 0a:76:90:b4:f7:02:42:e7:ca:83:1c:0a:dd:a2:ca:1b:52:ff: 0e:ff:82:98:f2:16:4d:48:9a:1c:6f:71:7e:d1:ea:f9:3f:7e: de:25:80:dd:88:4e:d0:3d:13:58:15:e0:97:34:30:8f:f2:72: 38:13:de:0a:d0:80:bd:56:9d:eb:e0:d2:7e:a7:d9:70:8f:c3: 83:1c:20:93:0c:7b:f6:f4:65:2c:46:bf:54:6d:49:a3:2e:0c: 40:ce:7f:d9:3d:9c:4e:fd:35:52:2f:71:c1:61:69:07:be:54: dd:65:1e:a5:0a:86:e5:20:27:00:3c:1a:fb:7b:cd:59:ad:ea: a1:49:10:be:67:b3:0b:59:fc:ba:3f:8f:cf:26:49:8f:61:80: 05:c2:01:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZPC7U5LbtbFQhZPaM15CMdPDn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNjAzMTcxMDI2NDBaFw0yNjAzMjAyMTMyNDBaMDMxMTAvBgNV BAMTKEQzMjNDQUE3NzkxMTE3QTg4Q0I4OUQyQTMyMURGRDU1RjBDRjQxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIDi5ApVlssyrRMXLN9L80Cmz K2+zjk42BHHI1jDJWipdzNS7gbS7c/5dFlb4v9qrtW+dkcXOBE1sZUC1DC9sbp+E Q7TA0xPreA5ZCGLL9OXSu0LHMA8JJKbXd+X+kBRcqeqQzwps+WlPDJ+UOv5lEv9t A+/Df9EglqSnoNTWGT2O3ztTg68kSJ7jSPn398cWOgJOJB2QhsX0FLg9LeFkPjmt qkGFeHSDKI4z0O0lKbZ+wnGGvyEJX5dnLbDevBZDTVH2dgdfr7zZHOr0dUALSJcF AijImlTgOTU7eqEmEAGzV5fdOLmUQLFfqNtL+sooAPH/gCZj2dU4uRRXMlM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0yPKp3kRF6iMuJ0qMh39VfDPQQUwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtHs2dCIoI4sy05m6QLMYLVkn61PEjPbzwv XnFLZZwELwaqtUcxzqpSTDOj+Jm2DINKLbqAt0CVPlgz64Ni4hfgLmQmsScq9+1y XhqkxQ6N58NfsGJXjxipS6GENs/DNudrpuBCYJisVmGbZQp2kLT3AkLnyoMcCt2i yhtS/w7/gpjyFk1ImhxvcX7R6vk/ft4lgN2ITtA9E1gV4Jc0MI/ycjgT3grQgL1W nevg0n6n2XCPw4McIJMMe/b0ZSxGv1RtSaMuDEDOf9k9nE79NVIvccFhaQe+VN1l HqUKhuUgJwA8Gvt7zVmt6qFJEL5nswtZ/Lo/j88mSY9hgAXCAVc= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:44 2026 by rpki-client