$ rpki-client -vvf repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft File: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft (raw, json) Hash identifier: oEzB3k2SuWDHDBKea84tQ2QLxXLzq5ZJwos5/RHFRBk= Subject key identifier: 38:F0:0C:AE:71:D1:B6:04:09:C1:03:8A:FD:96:38:F8:6D:30:F1:5A Authority key identifier: A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B Certificate issuer: /CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Certificate serial: 04B2EE90ED54C7AD931F9EAA000983A7ECC57D56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft Manifest number: 0250 Signing time: Mon 16 Mar 2026 21:32:41 +0000 Manifest this update: Mon 16 Mar 2026 21:27:41 +0000 Manifest next update: Fri 20 Mar 2026 09:08:41 +0000 Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 4paN7/ofK+HzSKd2thfpJlmI48KGINYbbxkJCXAEsZE=) 2: A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl (hash: zqip6Aw7yIN9+5CfJk3sEL20ox6BfwjMGh9CrEnc2Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 09:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b2:ee:90:ed:54:c7:ad:93:1f:9e:aa:00:09:83:a7:ec:c5:7d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B Validity Not Before: Mar 16 21:27:41 2026 GMT Not After : Mar 20 09:08:41 2026 GMT Subject: CN=38F00CAE71D1B60409C1038AFD9638F86D30F15A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:f0:35:4d:23:6f:fd:e0:77:16:da:27:f5: a9:12:c2:af:cb:9e:d2:0a:68:d9:cf:61:df:3f:be: 7c:75:4c:fb:b8:c2:41:50:06:99:1d:75:e6:93:00: ad:1a:92:ac:64:b3:03:d2:1d:49:88:e5:92:ac:1b: 2c:e3:95:ad:71:b3:f5:6a:e4:5c:36:ea:15:49:25: 35:cf:62:03:9f:16:75:96:24:19:07:90:b0:dd:d9: 25:6f:88:c1:55:40:aa:1c:7f:47:bc:7b:79:83:5a: ab:06:f7:86:36:72:0f:6d:8b:ac:18:50:3d:e5:04: 32:46:4b:c8:9e:e1:67:42:69:c7:67:11:65:b5:bb: 43:72:b1:33:42:2f:fe:1d:93:d6:d3:c5:e7:d8:2b: 84:a9:8f:30:80:04:37:90:b1:b4:0b:90:eb:8e:55: 77:0a:6f:fc:15:5c:3d:08:67:77:fc:07:19:97:51: 4d:e5:be:b6:fa:74:11:aa:0c:44:d3:ba:df:7a:92: 74:97:cb:dc:a7:4e:e9:c0:ce:f2:0b:98:14:1a:2c: c2:04:65:c8:5b:09:30:49:50:cb:a6:e8:0f:44:0e: 26:97:e4:ea:85:e7:52:d8:de:5b:89:14:a9:a7:a0: ef:69:46:fc:0b:ae:d3:20:9e:0e:9c:c5:d2:46:1c: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:0C:AE:71:D1:B6:04:09:C1:03:8A:FD:96:38:F8:6D:30:F1:5A X509v3 Authority Key Identifier: keyid:A9:CC:5B:A1:E0:7F:95:80:AA:B2:19:DE:7D:68:1B:3E:0F:18:A8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/A9CC5BA1E07F9580AAB219DE7D681B3E0F18A84B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:25:e5:1f:fc:98:5a:5c:05:a7:32:e8:be:76:9e:e9:67:d4: 1f:f6:ac:b6:a5:03:9c:57:2c:57:b2:25:b5:44:d1:79:6a:0b: b6:ae:c9:da:8c:6d:51:62:48:53:d8:17:7a:b8:af:0f:bb:f2: 4b:6f:45:ae:44:b1:0a:3e:fe:c6:44:87:f0:cf:5d:c4:35:c0: f2:58:81:bd:7d:31:bb:19:b6:60:ef:f5:14:b8:99:a0:73:56: ee:f6:17:de:26:0f:a9:1b:99:fe:66:5d:0b:26:eb:9b:01:d4: 4d:e4:8d:69:5b:74:6e:56:e3:ca:05:85:e6:0d:64:c0:4a:3f: 1b:f4:0b:2a:e0:93:0d:fe:ca:9c:3e:a2:e6:84:63:dd:47:46: 62:f5:d1:57:b5:be:f6:a7:b2:cf:e3:db:73:e2:a6:24:5e:d9: 18:b3:f6:2e:fc:2d:0d:af:a8:35:63:de:a8:f4:d8:64:13:96: 83:33:68:77:5d:30:83:7a:05:52:43:8c:ae:80:f7:c4:88:78: 31:4e:c8:05:36:ad:21:02:ea:c6:40:55:92:33:55:56:49:f6: 4f:33:87:2e:21:1d:74:91:4d:2d:4d:c5:a9:bc:77:ec:ba:2e: 6c:8a:e6:ab:51:95:d1:07:77:e5:21:14:ab:35:e8:85:ab:09: 51:c3:61:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLLukO1Ux62TH56qAAmDp+zFfVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0Uw RjE4QTg0QjAeFw0yNjAzMTYyMTI3NDFaFw0yNjAzMjAwOTA4NDFaMDMxMTAvBgNV BAMTKDM4RjAwQ0FFNzFEMUI2MDQwOUMxMDM4QUZEOTYzOEY4NkQzMEYxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+fA1TSNv/eB3Fton9akSwq/L ntIKaNnPYd8/vnx1TPu4wkFQBpkddeaTAK0akqxkswPSHUmI5ZKsGyzjla1xs/Vq 5Fw26hVJJTXPYgOfFnWWJBkHkLDd2SVviMFVQKocf0e8e3mDWqsG94Y2cg9ti6wY UD3lBDJGS8ie4WdCacdnEWW1u0NysTNCL/4dk9bTxefYK4SpjzCABDeQsbQLkOuO VXcKb/wVXD0IZ3f8BxmXUU3lvrb6dBGqDETTut96knSXy9ynTunAzvILmBQaLMIE ZchbCTBJUMum6A9EDiaX5OqF51LY3luJFKmnoO9pRvwLrtMgng6cxdJGHEOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPAMrnHRtgQJwQOK/ZY4+G0w8VowHwYDVR0j BBgwFoAUqcxboeB/lYCqshnefWgbPg8YqEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTNmNjZhOC1hMGZmLTQ0ZmEtYmRhNi04ZTVmMjdkNjFiM2YvMC9BOUNDNUJBMUUw N0Y5NTgwQUFCMjE5REU3RDY4MUIzRTBGMThBODRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFCM0UwRjE4 QTg0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUzZjY2YTgtYTBmZi00NGZhLWJk YTYtOGU1ZjI3ZDYxYjNmLzAvQTlDQzVCQTFFMDdGOTU4MEFBQjIxOURFN0Q2ODFC M0UwRjE4QTg0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0l5R/8mFpcBacy6L52nuln1B/2rLalA5xX LFeyJbVE0XlqC7auydqMbVFiSFPYF3q4rw+78ktvRa5EsQo+/sZEh/DPXcQ1wPJY gb19MbsZtmDv9RS4maBzVu72F94mD6kbmf5mXQsm65sB1E3kjWlbdG5W48oFheYN ZMBKPxv0Cyrgkw3+ypw+ouaEY91HRmL10Ve1vvanss/j23PipiRe2Riz9i78LQ2v qDVj3qj02GQTloMzaHddMIN6BVJDjK6A98SIeDFOyAU2rSEC6sZAVZIzVVZJ9k8z hy4hHXSRTS1Nxam8d+y6LmyK5qtRldEHd+UhFKs16IWrCVHDYRA= -----END CERTIFICATE-----Generated at Thu Mar 19 09:28:45 2026 by rpki-client