$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: 1WXc28kM5iQzTuT7xKHGURzDZNlv83CPdroSSNretU4= Subject key identifier: E9:08:35:49:32:CF:7B:D5:2A:2F:9C:CE:B9:8B:6E:C0:08:57:2F:2F Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 2CDBC5DFE8A5461C496C741CD574264EEFFEA910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 0114 Signing time: Fri 06 Mar 2026 17:02:27 +0000 Manifest this update: Fri 06 Mar 2026 16:57:27 +0000 Manifest next update: Tue 10 Mar 2026 01:31:27 +0000 Files and hashes: 1: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: 4aWG8qz3omL8ivjdTIvnQGdlhbp8Pua3aj7KKIreFgM=) 2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 3: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:db:c5:df:e8:a5:46:1c:49:6c:74:1c:d5:74:26:4e:ef:fe:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Mar 6 16:57:27 2026 GMT Not After : Mar 10 01:31:27 2026 GMT Subject: CN=E908354932CF7BD52A2F9CCEB98B6EC008572F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:11:31:61:c6:89:c4:e4:fb:e6:30:ee:7b: 77:ea:03:69:d8:3a:fb:26:93:6b:c4:74:13:d6:3a: f1:ef:b3:11:2e:85:5d:a0:21:9e:ed:62:23:d5:89: fa:7b:bd:64:e0:92:ba:48:41:d1:5b:05:42:cc:9b: aa:ae:f7:70:e7:03:7c:38:08:79:7b:84:2f:ba:66: 53:59:69:a3:be:bc:c7:52:bd:fc:17:7e:56:02:3a: 67:23:1d:4b:eb:a0:d8:81:c3:1c:bf:63:fd:dc:38: 7a:77:0b:93:eb:57:ac:f0:35:ad:de:ad:0f:f0:86: 04:ce:1f:ef:9d:62:2e:80:63:90:17:d7:5c:91:03: d3:d5:7f:ed:af:40:dd:57:dc:f0:8d:97:5e:04:5c: 92:ce:28:e6:64:d9:68:c1:2a:57:6e:6c:d1:d7:08: 5a:30:63:6b:f3:c7:c9:49:b0:99:47:27:f0:0b:be: 08:78:b2:35:a7:69:6b:1e:40:11:42:41:77:6e:06: a5:74:d5:e2:8c:9d:ab:79:fd:15:d1:6a:a4:75:bd: c0:49:af:f3:52:ab:a4:f4:2d:f7:d9:15:7e:f5:e7: 95:c3:19:9c:de:48:56:23:59:27:cc:56:11:8a:a2: b4:5f:d1:c8:24:47:39:f7:60:a8:35:ba:6b:b9:65: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:08:35:49:32:CF:7B:D5:2A:2F:9C:CE:B9:8B:6E:C0:08:57:2F:2F X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fa:d8:43:29:e1:e6:27:f5:58:c2:47:1c:63:16:3b:f6:c9: ea:4e:5c:5d:0f:45:2b:ca:a4:0f:27:a6:07:94:61:71:76:ee: fb:ea:f9:aa:92:04:8c:21:a2:e2:8f:de:35:db:ec:ee:c8:4e: 5d:9f:d4:3f:c9:ec:5d:99:21:24:0d:3a:f3:c3:3a:76:61:66: 39:00:19:48:41:db:73:8e:10:e1:67:e9:72:aa:98:5f:a4:cf: a5:d4:2b:d6:7f:c7:cd:fc:76:e0:e3:3c:5f:35:c3:ee:1e:81: ae:42:6e:2f:13:de:6d:0c:31:5f:06:df:39:64:a5:24:f9:d2: 7e:bb:5b:87:db:65:b0:cf:e2:78:37:c5:1a:d4:05:91:4a:b6: 4e:20:d4:4d:89:be:00:16:bc:99:b7:9b:f6:0b:e1:95:45:b2: ec:39:e6:a5:6a:bd:31:ca:54:10:b9:08:9d:f0:68:dc:2e:ce: c6:28:f7:5d:fe:d0:c7:46:b1:94:57:5c:c3:73:f0:d3:1e:cd: 9f:0b:73:58:54:13:32:50:c5:07:d9:bf:a0:7f:c3:fd:12:fc: 9f:bf:24:02:f0:2c:1e:2e:73:42:7c:ca:33:44:5b:93:d7:98: b9:de:4a:cb:97:2a:b2:41:da:ad:17:d4:ef:4a:a4:a9:a9:57: 7b:90:2f:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNvF3+ilRhxJbHQc1XQmTu/+qRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNjAzMDYxNjU3MjdaFw0yNjAzMTAwMTMxMjdaMDMxMTAvBgNV BAMTKEU5MDgzNTQ5MzJDRjdCRDUyQTJGOUNDRUI5OEI2RUMwMDg1NzJGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhExExYcaJxOT75jDue3fqA2nY Ovsmk2vEdBPWOvHvsxEuhV2gIZ7tYiPVifp7vWTgkrpIQdFbBULMm6qu93DnA3w4 CHl7hC+6ZlNZaaO+vMdSvfwXflYCOmcjHUvroNiBwxy/Y/3cOHp3C5PrV6zwNa3e rQ/whgTOH++dYi6AY5AX11yRA9PVf+2vQN1X3PCNl14EXJLOKOZk2WjBKldubNHX CFowY2vzx8lJsJlHJ/ALvgh4sjWnaWseQBFCQXduBqV01eKMnat5/RXRaqR1vcBJ r/NSq6T0LffZFX7155XDGZzeSFYjWSfMVhGKorRf0cgkRzn3YKg1umu5ZfVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Qg1STLPe9UqL5zOuYtuwAhXLy8wHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGz62EMp4eYn9VjCRxxjFjv2yepOXF0PRSvK pA8npgeUYXF27vvq+aqSBIwhouKP3jXb7O7ITl2f1D/J7F2ZISQNOvPDOnZhZjkA GUhB23OOEOFn6XKqmF+kz6XUK9Z/x838duDjPF81w+4ega5Cbi8T3m0MMV8G3zlk pST50n67W4fbZbDP4ng3xRrUBZFKtk4g1E2JvgAWvJm3m/YL4ZVFsuw55qVqvTHK VBC5CJ3waNwuzsYo913+0MdGsZRXXMNz8NMezZ8Lc1hUEzJQxQfZv6B/w/0S/J+/ JALwLB4uc0J8yjNEW5PXmLneSsuXKrJB2q0X1O9KpKmpV3uQLzY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:44 2026 by rpki-client