$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: HVUr0gCL7ifgnNo/Spp2lDsYcJg5KxLHryUTpPWMm8w= Subject key identifier: 98:9C:33:D3:62:DC:FC:25:FB:1A:57:1C:68:46:4D:ED:31:AB:B4:8C Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 5A1247772445843A8FF93AC471E6EF8DCEEFB627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 018D Signing time: Sat 07 Mar 2026 21:21:25 +0000 Manifest this update: Sat 07 Mar 2026 21:16:25 +0000 Manifest next update: Wed 11 Mar 2026 04:05:25 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: Tqct+tM5qYUC+zXBrdvv2Q8b+IsPwTLi7vUmX9TyA9A=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:12:47:77:24:45:84:3a:8f:f9:3a:c4:71:e6:ef:8d:ce:ef:b6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Mar 7 21:16:25 2026 GMT Not After : Mar 11 04:05:25 2026 GMT Subject: CN=989C33D362DCFC25FB1A571C68464DED31ABB48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:c3:d9:94:29:6b:91:45:13:23:34:e9:db: 7f:8b:15:4c:d8:81:14:c2:60:b8:ef:19:9d:08:af: 9d:9a:3a:1d:23:44:f2:83:bb:45:5a:c3:f9:c0:a8: d5:79:99:d0:cb:3e:56:a0:ae:df:5d:34:64:af:77: 71:ad:f7:92:dc:48:b7:d7:ca:9d:40:0c:bc:5e:85: f7:3c:50:cb:4d:22:3d:fa:e4:95:f9:ec:0b:74:5b: 14:8e:79:74:9d:f7:14:34:b7:9c:e6:21:65:ff:aa: e9:32:8a:d3:e6:90:f8:15:98:de:0d:9f:02:4e:27: 22:90:7f:56:c4:ad:a2:89:bb:3d:c1:5c:a0:1e:de: 54:47:24:d6:64:c5:31:bc:8e:49:b5:ba:4d:03:ee: 41:3e:d9:3a:33:3a:97:b4:f9:37:bc:3e:33:c9:8e: 8c:a4:31:7d:84:d7:53:9c:f6:33:6c:89:fe:10:4b: 83:bc:ef:ad:ee:7e:71:5c:5c:d9:4d:80:ea:71:f3: e6:80:7c:47:a1:6c:29:9d:f7:af:b5:34:e9:6f:12: dd:39:0f:50:3d:cd:a7:f9:c4:e7:ef:dd:e4:fe:e7: 36:49:eb:9f:71:a3:7e:1d:63:03:9b:4d:98:af:2e: 64:89:2d:35:0b:a6:da:c5:c2:52:bd:a8:47:1c:9b: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9C:33:D3:62:DC:FC:25:FB:1A:57:1C:68:46:4D:ED:31:AB:B4:8C X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cc:58:bb:a1:d4:54:d8:6c:26:ac:f6:b5:fc:f5:c6:ef:ef: 15:14:5c:05:c3:a9:16:1d:ef:d9:d4:6e:ff:f2:18:1d:3f:2a: 08:ae:3f:55:63:2f:4d:87:fe:f8:ce:b6:97:47:c0:94:46:20: 0f:1e:43:b6:05:c9:60:84:73:be:74:e6:63:6a:66:86:85:29: 0c:13:1e:95:4a:30:dc:76:17:fc:ea:ae:60:b6:72:9f:83:a1: 9c:d7:07:87:bd:0d:3d:51:c3:9b:94:97:74:4c:98:fd:5a:53: 86:52:86:d2:0a:e9:00:16:63:b5:fc:85:cb:ef:36:19:d4:78: 0e:cd:17:7b:b5:b8:29:b1:c2:88:70:e1:87:a8:16:75:c3:15: f9:6e:ad:89:ed:46:02:54:ba:f0:88:59:7f:98:cf:b3:fe:de: 5b:bb:b8:11:d0:34:6c:a3:da:3b:f1:96:50:f7:68:f6:1f:40: 5a:79:dc:2a:02:42:03:f2:35:8d:53:eb:f9:88:f8:3c:a3:89: 04:2e:8b:37:5a:cd:57:40:4b:14:28:8b:91:b2:43:05:3c:d0: b8:5b:d6:87:8d:89:9a:bd:90:8d:e3:cf:80:53:03:39:6d:9b: f3:3b:7e:37:ad:c3:f6:f9:04:3a:e8:37:86:c6:46:f4:ee:6e: 55:08:d2:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhJHdyRFhDqP+TrEcebvjc7vticwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNjAzMDcyMTE2MjVaFw0yNjAzMTEwNDA1MjVaMDMxMTAvBgNV BAMTKDk4OUMzM0QzNjJEQ0ZDMjVGQjFBNTcxQzY4NDY0REVEMzFBQkI0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEMPZlClrkUUTIzTp23+LFUzY gRTCYLjvGZ0Ir52aOh0jRPKDu0Vaw/nAqNV5mdDLPlagrt9dNGSvd3Gt95LcSLfX yp1ADLxehfc8UMtNIj365JX57At0WxSOeXSd9xQ0t5zmIWX/qukyitPmkPgVmN4N nwJOJyKQf1bEraKJuz3BXKAe3lRHJNZkxTG8jkm1uk0D7kE+2TozOpe0+Te8PjPJ joykMX2E11Oc9jNsif4QS4O8763ufnFcXNlNgOpx8+aAfEehbCmd96+1NOlvEt05 D1A9zaf5xOfv3eT+5zZJ659xo34dYwObTZivLmSJLTULptrFwlK9qEccm6bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJwz02Lc/CX7GlccaEZN7TGrtIwwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTMWLuh1FTYbCas9rX89cbv7xUUXAXDqRYd 79nUbv/yGB0/KgiuP1VjL02H/vjOtpdHwJRGIA8eQ7YFyWCEc7505mNqZoaFKQwT HpVKMNx2F/zqrmC2cp+DoZzXB4e9DT1Rw5uUl3RMmP1aU4ZShtIK6QAWY7X8hcvv NhnUeA7NF3u1uCmxwohw4YeoFnXDFflurYntRgJUuvCIWX+Yz7P+3lu7uBHQNGyj 2jvxllD3aPYfQFp53CoCQgPyNY1T6/mI+DyjiQQuizdazVdASxQoi5GyQwU80Lhb 1oeNiZq9kI3jz4BTAzltm/M7fjetw/b5BDroN4bGRvTublUI0kE= -----END CERTIFICATE-----Generated at Sun Mar 8 00:16:11 2026 by rpki-client