$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: oFrkMy9S78ET1m2P+ZIHxR2yMnLxVjMnd/fULnHAyo0= Subject key identifier: 92:A3:8F:33:6A:D9:33:E6:9C:8F:6E:33:68:FD:0B:84:F7:C0:85:C5 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 2D56058FF85ED4D5903F796B227D16807A5EFC3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: CA Signing time: Fri 06 Mar 2026 15:21:28 +0000 Manifest this update: Fri 06 Mar 2026 15:16:28 +0000 Manifest next update: Tue 10 Mar 2026 02:27:28 +0000 Files and hashes: 1: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=) 2: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: 5tgudwvxr+U8w8x//4eA225lnm75SGsblWpnlPB7i2c=) 3: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: mzDpPRia6xZTDPtGY2S0cq+7bpQlmycpMpiDj9ys06Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:56:05:8f:f8:5e:d4:d5:90:3f:79:6b:22:7d:16:80:7a:5e:fc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Mar 6 15:16:28 2026 GMT Not After : Mar 10 02:27:28 2026 GMT Subject: CN=92A38F336AD933E69C8F6E3368FD0B84F7C085C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:ce:6c:50:04:4c:f8:9f:d1:07:f4:ec:94: 6e:8d:3b:ec:b9:4e:44:bb:a5:5d:18:7e:8a:3f:1e: b8:b6:f5:5d:ac:96:27:83:e7:70:64:34:54:6e:7d: bf:27:60:f8:7a:b6:63:78:3a:39:34:a5:7d:46:04: df:99:0c:41:9c:15:89:49:de:b3:71:5f:81:f6:2c: 18:0d:49:d1:10:fc:f5:20:0f:84:59:9f:5d:fa:28: 2e:a0:28:ca:ff:52:e6:fb:ee:fe:0f:76:aa:9c:62: 8c:71:15:3a:f4:1a:a4:cd:3a:12:47:1f:10:1b:41: 8b:b4:43:46:54:1d:1b:de:7c:b5:36:b9:34:6a:2b: 53:0f:48:ae:dc:6e:4f:0a:97:1d:70:dd:d8:ee:7a: 02:af:4a:34:cd:ea:bb:bd:af:ca:1c:57:20:54:a0: fd:1a:cd:2a:83:06:e5:86:0a:38:61:6f:49:89:44: 55:f6:70:f8:8d:4c:20:73:87:a5:46:cc:a9:80:06: 0b:79:a1:9f:97:a0:b2:27:ff:bb:ab:b2:ef:fb:32: 1c:db:04:c6:2a:1a:a1:36:96:fd:44:7d:da:24:4e: a8:33:79:d3:eb:52:fc:67:bf:83:a0:0f:98:4c:43: 7a:c6:71:7a:fe:ea:14:77:96:a1:31:84:d0:29:db: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A3:8F:33:6A:D9:33:E6:9C:8F:6E:33:68:FD:0B:84:F7:C0:85:C5 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6e:af:69:15:eb:4e:86:99:8e:d6:aa:f1:18:a0:bb:22:38: 3f:7f:e9:43:50:a1:9f:35:77:3b:49:86:37:e7:34:4e:eb:40: 4b:20:88:9d:1a:28:a6:f4:9e:74:3d:f2:8f:61:03:c8:cc:ca: d5:86:10:67:27:1f:3d:9b:be:38:45:2f:47:78:ef:26:1d:dd: 12:57:a6:dc:73:bf:12:e3:2c:1a:7a:8f:11:a6:b8:66:ac:39: 26:ba:95:7a:a1:f6:de:9b:0b:2f:0f:51:86:96:1f:9b:9d:07: 91:8e:f1:9d:26:9d:c4:9a:27:af:b1:1f:28:ae:6a:9d:cf:f0: d0:e2:df:08:a2:80:31:f4:99:8d:b9:68:24:b9:7a:20:4d:7b: e1:f8:84:82:c0:1f:05:dc:52:b3:5b:aa:89:e1:90:c9:52:4a: 8a:27:cb:14:88:9a:97:c8:44:3b:ef:11:ef:02:8e:1e:d4:8d: dd:c5:68:f8:9a:ef:bf:41:27:ce:92:94:62:08:b6:f0:84:b0: 4c:29:cc:0c:53:db:82:87:5c:17:2f:a1:f5:0f:81:0d:90:49: 6d:ef:af:79:69:42:12:69:e3:4b:ce:95:b5:b7:d1:e2:a9:d2: 26:ca:f8:98:9d:96:ec:d6:b5:66:6e:14:65:9e:96:de:b5:29: 17:12:96:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVYFj/he1NWQP3lrIn0WgHpe/DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNjAzMDYxNTE2MjhaFw0yNjAzMTAwMjI3MjhaMDMxMTAvBgNV BAMTKDkyQTM4RjMzNkFEOTMzRTY5QzhGNkUzMzY4RkQwQjg0RjdDMDg1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2s5sUARM+J/RB/TslG6NO+y5 TkS7pV0Yfoo/Hri29V2slieD53BkNFRufb8nYPh6tmN4Ojk0pX1GBN+ZDEGcFYlJ 3rNxX4H2LBgNSdEQ/PUgD4RZn136KC6gKMr/Uub77v4PdqqcYoxxFTr0GqTNOhJH HxAbQYu0Q0ZUHRvefLU2uTRqK1MPSK7cbk8Klx1w3djuegKvSjTN6ru9r8ocVyBU oP0azSqDBuWGCjhhb0mJRFX2cPiNTCBzh6VGzKmABgt5oZ+XoLIn/7ursu/7Mhzb BMYqGqE2lv1EfdokTqgzedPrUvxnv4OgD5hMQ3rGcXr+6hR3lqExhNAp2y6nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkqOPM2rZM+acj24zaP0LhPfAhcUwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRur2kV606GmY7WqvEYoLsiOD9/6UNQoZ81 dztJhjfnNE7rQEsgiJ0aKKb0nnQ98o9hA8jMytWGEGcnHz2bvjhFL0d47yYd3RJX ptxzvxLjLBp6jxGmuGasOSa6lXqh9t6bCy8PUYaWH5udB5GO8Z0mncSaJ6+xHyiu ap3P8NDi3wiigDH0mY25aCS5eiBNe+H4hILAHwXcUrNbqonhkMlSSoonyxSImpfI RDvvEe8Cjh7Ujd3FaPia779BJ86SlGIItvCEsEwpzAxT24KHXBcvofUPgQ2QSW3v r3lpQhJp40vOlbW30eKp0ibK+JidluzWtWZuFGWelt61KRcSls0= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:35 2026 by rpki-client