$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: ZkWZE+h4V9FWfowBMglQfJ4DCqLwub88pOQ8/o+yzjE= Subject key identifier: 54:CE:FA:10:1B:D9:2B:22:37:94:68:15:5C:A9:0C:F3:6C:DA:71:0D Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 7C1355ECDFE08BB6AA32B4FC73428644DF2C1576 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 02CB Signing time: Sat 21 Mar 2026 14:00:04 +0000 Manifest this update: Sat 21 Mar 2026 13:55:04 +0000 Manifest next update: Tue 24 Mar 2026 16:27:04 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) 2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: w+H+bOsdgbCTLc1bYFLjsxKoPhzChbDtTDvmX8zSs3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 16:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:13:55:ec:df:e0:8b:b6:aa:32:b4:fc:73:42:86:44:df:2c:15:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Mar 21 13:55:04 2026 GMT Not After : Mar 24 16:27:04 2026 GMT Subject: CN=54CEFA101BD92B22379468155CA90CF36CDA710D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:62:1b:d2:eb:72:56:a1:22:1d:e2:7e:2c: 04:b1:75:4f:b2:1e:e4:c3:65:74:82:d4:37:a5:80: 51:79:ef:52:97:1b:9a:f0:0c:b5:24:ea:69:4c:7c: 61:88:a0:0a:fa:5f:b4:23:bc:7c:e3:90:fc:b1:d6: e2:58:49:17:33:36:b0:9d:20:b7:bf:a9:7c:0b:c3: 68:61:5c:36:14:d2:cd:56:ce:a9:41:2b:b0:d5:92: 9c:89:fe:0e:ef:57:c9:39:f5:03:79:0b:c9:66:64: b6:08:f0:2d:e5:41:e1:57:05:2b:95:26:15:c3:09: 94:3c:7c:1b:e7:26:83:3f:e0:a0:d8:16:23:cd:be: d4:85:06:95:9e:f6:4a:1a:51:bc:45:18:9f:a4:9a: 26:2d:6a:d0:08:f9:e0:f5:ca:31:53:6b:34:81:9e: 00:08:13:b3:d9:98:a8:3f:f2:a4:fa:b0:d1:94:cc: 96:64:e3:0c:c6:ec:e4:7e:90:a5:e0:57:b3:70:6b: 42:42:96:da:38:d8:4e:fd:5f:14:ea:aa:ab:7e:32: 72:b2:4f:67:1a:54:e4:ff:47:3b:4d:ac:ca:42:e6: 2e:92:08:5a:29:06:08:cf:2a:63:34:20:a6:08:e7: 21:98:4e:3a:c8:1a:1e:88:84:7b:50:d3:51:bd:62: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CE:FA:10:1B:D9:2B:22:37:94:68:15:5C:A9:0C:F3:6C:DA:71:0D X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:64:bb:8a:aa:94:1c:7f:95:b0:9f:72:4d:ed:6a:2f:38:01: 3f:b6:e2:d5:ba:42:b0:27:cb:9c:b3:fc:4f:7b:4f:98:5e:e2: 25:0b:a0:1c:36:e9:7f:96:47:29:7b:f4:c0:b1:02:55:8a:72: ca:74:df:8e:e4:3b:1a:44:9b:34:e1:b1:0f:bf:e6:d3:42:15: 81:d1:7e:94:c0:b7:04:7e:29:15:7d:0a:ba:b2:e9:c3:9c:62: 26:86:d9:7f:d3:88:09:e2:fd:4d:2e:a3:0c:47:8b:d0:2e:48: 30:d6:1a:b3:66:bf:de:98:23:8b:53:a7:a0:f4:86:22:37:09: 6e:ef:44:7f:b8:ba:29:ef:e9:d8:40:78:84:f5:48:77:bd:aa: ba:5d:bb:b2:b4:e0:2e:f7:c7:c2:49:49:5a:b0:af:f9:b3:5c: 10:31:0f:5d:44:5c:19:56:a8:78:28:e9:06:c1:7d:a7:b9:17: 69:c6:f6:7c:03:3e:98:66:07:2b:ca:41:71:f3:b8:21:bf:d8: 2c:14:74:dc:c2:af:7d:ba:38:1e:4f:65:25:9d:12:60:2d:de: e1:eb:e6:95:f5:38:2d:e2:8d:36:96:8a:30:ff:71:02:b6:67: 42:fc:23:f3:84:66:56:e8:a4:b3:fc:af:38:1e:ea:22:ed:ae: 19:3f:79:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBNV7N/gi7aqMrT8c0KGRN8sFXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNjAzMjExMzU1MDRaFw0yNjAzMjQxNjI3MDRaMDMxMTAvBgNV BAMTKDU0Q0VGQTEwMUJEOTJCMjIzNzk0NjgxNTVDQTkwQ0YzNkNEQTcxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKWIb0utyVqEiHeJ+LASxdU+y HuTDZXSC1DelgFF571KXG5rwDLUk6mlMfGGIoAr6X7QjvHzjkPyx1uJYSRczNrCd ILe/qXwLw2hhXDYU0s1WzqlBK7DVkpyJ/g7vV8k59QN5C8lmZLYI8C3lQeFXBSuV JhXDCZQ8fBvnJoM/4KDYFiPNvtSFBpWe9koaUbxFGJ+kmiYtatAI+eD1yjFTazSB ngAIE7PZmKg/8qT6sNGUzJZk4wzG7OR+kKXgV7Nwa0JClto42E79XxTqqqt+MnKy T2caVOT/RztNrMpC5i6SCFopBgjPKmM0IKYI5yGYTjrIGh6IhHtQ01G9YgaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVM76EBvZKyI3lGgVXKkM82zacQ0wHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhku4qqlBx/lbCfck3tai84AT+24tW6QrAn y5yz/E97T5he4iULoBw26X+WRyl79MCxAlWKcsp0347kOxpEmzThsQ+/5tNCFYHR fpTAtwR+KRV9Crqy6cOcYiaG2X/TiAni/U0uowxHi9AuSDDWGrNmv96YI4tTp6D0 hiI3CW7vRH+4uinv6dhAeIT1SHe9qrpdu7K04C73x8JJSVqwr/mzXBAxD11EXBlW qHgo6QbBfae5F2nG9nwDPphmByvKQXHzuCG/2CwUdNzCr326OB5PZSWdEmAt3uHr 5pX1OC3ijTaWijD/cQK2Z0L8I/OEZlbopLP8rzge6iLtrhk/eS0= -----END CERTIFICATE-----Generated at Sun Mar 22 09:02:06 2026 by rpki-client