$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft File: 9C0CD04CE56225A0085EF8AB28640C3808768B42.mft (raw, json) Hash identifier: ezeE3+aksfRz72PneD0+JUwoamlyiHH/HG74e4lx//8= Subject key identifier: 82:6A:6E:DC:6C:B9:54:D7:AB:70:E6:1B:AC:AB:2F:18:69:00:E3:61 Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 4EE6B406A40EB3805C46B5583CF45989190412DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft Manifest number: 0127 Signing time: Thu 05 Mar 2026 20:51:23 +0000 Manifest this update: Thu 05 Mar 2026 20:46:23 +0000 Manifest next update: Mon 09 Mar 2026 08:30:23 +0000 Files and hashes: 1: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (hash: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo=) 2: 3135372e36362e3134322e302f32342d3234203d3e20313532373434.roa (hash: zfFIkrI79y1jMzLo8UOIhnSZ5RPxNVXsh++JmRaaiiI=) 3: 9C0CD04CE56225A0085EF8AB28640C3808768B42.crl (hash: GnIB9BinAS8ya0QfhAliOS8d3LrTnqLpWFd+Cf6Z1NE=) 4: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (hash: kO2lkytAhip8J2wV/lcl3MQL2fe/CMcFAIbGTAh6CZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:b4:06:a4:0e:b3:80:5c:46:b5:58:3c:f4:59:89:19:04:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: Mar 5 20:46:23 2026 GMT Not After : Mar 9 08:30:23 2026 GMT Subject: CN=826A6EDC6CB954D7AB70E61BACAB2F186900E361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:eb:b7:4c:cc:64:47:49:4f:04:32:f0:67: db:63:09:e2:d2:1a:1a:23:1d:e8:8c:00:39:c8:16: 77:48:f3:b1:93:8b:28:1e:fe:d3:e3:d0:d4:18:1c: b1:13:6f:50:1f:1e:0d:47:d1:ab:b2:c2:a8:2e:5f: ba:7a:38:92:e4:e0:b3:fb:eb:51:e7:a7:76:da:f6: cf:c7:9b:58:4a:b7:04:78:39:e6:73:43:bc:69:98: 18:42:6c:ea:7d:9a:77:20:2c:bd:d3:bb:e8:4c:bb: 34:a5:39:07:fe:d3:eb:98:8c:ce:a7:d2:2c:79:ab: f7:11:f2:ef:ce:33:0d:b2:a8:1b:f8:87:99:49:22: f1:80:bb:8e:cd:d3:b8:0f:c8:ae:3c:85:3b:5e:59: 1d:57:f8:9a:62:4d:be:76:40:23:7d:4b:f3:9a:7c: 88:a9:95:e8:2b:57:06:33:0f:c2:47:62:62:36:fd: c6:8f:96:31:09:6b:2e:a7:75:a6:70:b1:60:ff:28: ef:37:e9:8b:4c:ce:18:92:f8:79:0b:47:8a:80:fa: f5:50:55:c1:43:ab:b5:a5:c2:ee:72:fd:c4:98:a6: 31:a5:03:32:94:53:ae:a9:89:d0:fe:cb:48:5f:05: b6:d6:a8:d1:68:72:7c:5c:3d:b9:00:95:36:3a:0e: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6A:6E:DC:6C:B9:54:D7:AB:70:E6:1B:AC:AB:2F:18:69:00:E3:61 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2b:a3:e9:d5:fd:6f:7e:43:f9:76:9d:86:81:d0:eb:51:a5: e8:1d:4c:b5:b9:61:b0:3c:93:4a:3a:99:5e:b1:57:72:a5:88: 82:d9:91:2d:28:60:93:a3:54:20:c1:b3:07:59:65:0f:c6:37: 30:57:3d:02:bb:36:3e:e6:b6:c3:d0:70:51:31:a0:60:18:6f: 2a:75:31:f1:56:11:2c:d9:db:05:41:20:ca:d2:e5:cd:99:62: 3b:0b:0f:2f:51:60:7f:9d:00:0e:85:93:9d:96:5d:8c:d4:36: 5f:1e:c9:d7:bd:be:74:f1:8d:35:86:04:98:bd:96:be:4a:38: 79:a9:0c:eb:de:15:88:2e:e9:e6:30:74:7c:fd:77:bd:f4:43: f5:7a:06:56:7b:5d:94:ca:52:33:c7:3b:14:84:b2:d2:80:06: 28:38:3f:0a:ad:fa:7f:55:d2:f6:b8:30:ad:31:55:81:7f:46: 74:88:ab:e4:34:3f:a3:82:13:8a:9e:a8:33:d4:aa:6e:9b:bd: c1:e3:21:ac:79:ee:9d:58:52:e2:0a:a7:b1:a5:04:04:25:c3: 2b:83:19:35:40:91:eb:ff:69:df:f0:76:7f:d2:df:56:e4:6f: 6f:61:56:63:c1:14:ca:cb:e5:6e:0e:47:a4:ac:54:42:e8:bf: 8c:db:42:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTua0BqQOs4BcRrVYPPRZiRkEEtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNjAzMDUyMDQ2MjNaFw0yNjAzMDkwODMwMjNaMDMxMTAvBgNV BAMTKDgyNkE2RURDNkNCOTU0RDdBQjcwRTYxQkFDQUIyRjE4NjkwMEUzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqOu3TMxkR0lPBDLwZ9tjCeLS GhojHeiMADnIFndI87GTiyge/tPj0NQYHLETb1AfHg1H0auywqguX7p6OJLk4LP7 61Hnp3ba9s/Hm1hKtwR4OeZzQ7xpmBhCbOp9mncgLL3Tu+hMuzSlOQf+0+uYjM6n 0ix5q/cR8u/OMw2yqBv4h5lJIvGAu47N07gPyK48hTteWR1X+JpiTb52QCN9S/Oa fIiplegrVwYzD8JHYmI2/caPljEJay6ndaZwsWD/KO836YtMzhiS+HkLR4qA+vVQ VcFDq7Wlwu5y/cSYpjGlAzKUU66pidD+y0hfBbbWqNFocnxcPbkAlTY6Diz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmpu3Gy5VNercOYbrKsvGGkA42EwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYzMTFmODktMzhmZC00NDI0LThh OTYtZmEyMTcyZDg3ZDZmLzAvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBD MzgwODc2OEI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAro+nV/W9+Q/l2nYaB0OtRpegdTLW5YbA8 k0o6mV6xV3KliILZkS0oYJOjVCDBswdZZQ/GNzBXPQK7Nj7mtsPQcFExoGAYbyp1 MfFWESzZ2wVBIMrS5c2ZYjsLDy9RYH+dAA6Fk52WXYzUNl8eyde9vnTxjTWGBJi9 lr5KOHmpDOveFYgu6eYwdHz9d730Q/V6BlZ7XZTKUjPHOxSEstKABig4Pwqt+n9V 0va4MK0xVYF/RnSIq+Q0P6OCE4qeqDPUqm6bvcHjIax57p1YUuIKp7GlBAQlwyuD GTVAkev/ad/wdn/S31bkb29hVmPBFMrL5W4OR6SsVELov4zbQoM= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:03 2026 by rpki-client