$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: VbaAW+M48E/IamusaQZ4IsduV5YMf9w90oy42h2Nn/w= Subject key identifier: 19:E8:77:B2:FA:A0:4A:DB:F6:09:F5:6F:42:2D:12:D6:58:7E:29:F2 Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 7C8C22CAC821CF2FB30C36B682D595B343638248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 051C Signing time: Tue 17 Mar 2026 14:02:10 +0000 Manifest this update: Tue 17 Mar 2026 13:57:10 +0000 Manifest next update: Fri 20 Mar 2026 21:57:10 +0000 Files and hashes: 1: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: a5EJGJa4Uv8oiFd5f/EHBnj5zWWJD7PDKrE7WtH5Z0A=) 2: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: BC8Z+MI6o4DP9LRb47mfu8ZSMDubv7b1oYZliJpzfxs=) 3: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: QBFDNr11m66ZUbv/34jr5T9r/Ue96REjOhI4lw+IMTM=) 4: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: e07PmHoYuSOEnNmpljeQQaCWbAh9p56585zgbUkdq90=) 5: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: NhvHDt/qMIC1Q3hZcigY93I105NWc1Q6AtyGiYgRuio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 21:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:22:ca:c8:21:cf:2f:b3:0c:36:b6:82:d5:95:b3:43:63:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: Mar 17 13:57:10 2026 GMT Not After : Mar 20 21:57:10 2026 GMT Subject: CN=19E877B2FAA04ADBF609F56F422D12D6587E29F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:1e:d2:55:8f:0b:99:ac:2a:9b:4e:a5:36: 67:82:26:fa:76:7c:7d:d4:97:43:b2:12:89:e2:78: 11:a9:6d:d3:a2:9a:ed:ed:8a:ee:70:b1:66:4e:d9: 46:0f:16:fd:7e:de:c7:34:f5:99:77:52:01:28:46: bc:5d:a7:09:af:14:a1:d6:7a:f6:b5:ae:29:01:05: d1:1c:fb:2d:99:b7:73:e0:ea:3c:97:b4:43:d7:32: f5:07:f9:b0:09:a9:f3:79:b9:93:b6:e4:01:55:8b: 2a:78:fe:cd:27:da:a0:01:05:4c:e6:ae:28:1d:85: 05:48:81:40:da:e9:fb:cc:f4:f4:a0:b7:bf:b2:31: 2e:c5:73:a1:78:13:db:de:5a:9e:a7:b0:34:5b:7e: a0:d0:13:f8:b7:77:4c:30:ee:c9:89:13:6b:29:b3: 86:b5:19:07:77:3a:96:00:b2:52:cf:88:69:3a:e5: ca:88:21:9e:f5:b5:af:03:9d:68:77:fa:3d:67:c7: 66:f3:c1:52:76:0c:97:56:ff:98:e9:07:9f:1c:3d: ab:e0:4d:81:e3:bd:f4:c5:8b:c9:48:e7:93:6a:3f: 7e:e0:cf:cc:40:8e:48:65:07:76:31:2c:eb:88:25: ea:0a:44:56:5e:d3:58:48:7b:52:c6:2c:f5:c9:14: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E8:77:B2:FA:A0:4A:DB:F6:09:F5:6F:42:2D:12:D6:58:7E:29:F2 X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:ff:a9:6b:c8:58:f4:fd:4a:e4:40:b3:76:46:27:c1:01:bd: d6:5d:a2:d9:73:17:a5:72:28:b3:23:71:0a:2d:06:ef:8e:35: 37:f0:ba:d7:ad:12:d1:ca:12:e4:6c:fd:a4:20:31:39:6a:de: 86:e2:29:f6:83:22:09:99:2f:84:c9:5a:30:25:32:66:2a:cb: 32:32:1d:ec:92:fd:b3:f3:d1:3b:9a:42:96:9a:34:21:ff:cb: 2f:56:53:25:df:40:00:00:ed:fd:0e:b9:02:8b:cb:26:6d:3c: 78:6d:cb:40:cf:29:93:a7:a3:3a:6c:d8:4f:fb:20:54:08:0d: 38:82:2e:c6:55:37:3f:c1:8c:3e:f0:8e:ed:23:e0:a2:27:9a: f2:7e:96:cf:54:2e:60:94:2d:e6:4a:0d:0f:5f:44:d1:cb:3f: 6f:06:2c:cc:c8:2c:7c:a4:f6:e9:d4:88:b1:61:50:69:47:84: cc:9c:2f:73:c6:79:0a:9d:a1:69:2d:95:fe:b7:a8:14:70:01: 57:97:83:f9:e4:f5:b6:75:2e:52:a1:7b:1a:5d:16:d6:e5:cc: 8b:cc:08:8f:80:10:c3:92:21:d2:49:c0:f0:9d:d2:b8:88:3b: 88:92:2d:3a:4b:1c:54:1c:82:31:bb:70:0e:fb:2e:8d:1f:d1: 41:48:f7:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIwiysghzy+zDDa2gtWVs0NjgkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNjAzMTcxMzU3MTBaFw0yNjAzMjAyMTU3MTBaMDMxMTAvBgNV BAMTKDE5RTg3N0IyRkFBMDRBREJGNjA5RjU2RjQyMkQxMkQ2NTg3RTI5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCB7SVY8Lmawqm06lNmeCJvp2 fH3Ul0OyEonieBGpbdOimu3tiu5wsWZO2UYPFv1+3sc09Zl3UgEoRrxdpwmvFKHW eva1rikBBdEc+y2Zt3Pg6jyXtEPXMvUH+bAJqfN5uZO25AFViyp4/s0n2qABBUzm rigdhQVIgUDa6fvM9PSgt7+yMS7Fc6F4E9veWp6nsDRbfqDQE/i3d0ww7smJE2sp s4a1GQd3OpYAslLPiGk65cqIIZ71ta8DnWh3+j1nx2bzwVJ2DJdW/5jpB58cPavg TYHjvfTFi8lI55NqP37gz8xAjkhlB3YxLOuIJeoKRFZe01hIe1LGLPXJFOY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGeh3svqgStv2CfVvQi0S1lh+KfIwHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7/qWvIWPT9SuRAs3ZGJ8EBvdZdotlzF6Vy KLMjcQotBu+ONTfwutetEtHKEuRs/aQgMTlq3obiKfaDIgmZL4TJWjAlMmYqyzIy HeyS/bPz0TuaQpaaNCH/yy9WUyXfQAAA7f0OuQKLyyZtPHhty0DPKZOnozps2E/7 IFQIDTiCLsZVNz/BjD7wju0j4KInmvJ+ls9ULmCULeZKDQ9fRNHLP28GLMzILHyk 9unUiLFhUGlHhMycL3PGeQqdoWktlf63qBRwAVeXg/nk9bZ1LlKhexpdFtblzIvM CI+AEMOSIdJJwPCd0riIO4iSLTpLHFQcgjG7cA77Lo0f0UFI92U= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:26 2026 by rpki-client