$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: shAHAaG4dGf4agLfp25wnWGf5hvo4p68afQp5ry7jQg= Subject key identifier: 88:BE:89:EF:E3:9A:2E:37:86:C2:21:D0:CF:7B:07:FF:55:14:EA:77 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 56E06C6EB541D95A7CF54E8B2C1C82B8A4558754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 026D Signing time: Tue 24 Mar 2026 20:33:18 +0000 Manifest this update: Tue 24 Mar 2026 20:28:18 +0000 Manifest next update: Fri 27 Mar 2026 21:19:18 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: t01mz6qertWxOWNJJcYylWyG/QMflRF/nkeOF0poglI=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313338383836.roa (hash: iQWBLlqIhDVaQel1mjDud9rhiarI0+EVMzv8EoEyA1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e0:6c:6e:b5:41:d9:5a:7c:f5:4e:8b:2c:1c:82:b8:a4:55:87:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Mar 24 20:28:18 2026 GMT Not After : Mar 27 21:19:18 2026 GMT Subject: CN=88BE89EFE39A2E3786C221D0CF7B07FF5514EA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:9b:1e:9b:7f:35:8a:ad:35:c8:f0:2d:79: e9:cd:31:5c:03:4e:77:51:d9:4e:6a:37:6b:b7:0b: 68:16:1b:16:20:36:47:e6:24:38:c9:5b:c4:89:60: 3e:ce:62:51:40:cc:fc:21:46:d9:e6:93:c8:58:e9: 6e:81:2d:b0:0e:19:43:62:90:8d:72:74:48:7a:9a: 6c:27:08:0a:a7:4b:72:9f:81:28:53:e6:6e:4a:ba: f6:52:55:44:d6:6b:74:57:2b:eb:c7:64:ed:0f:b8: 50:3a:39:c1:b0:0a:47:cf:80:b0:60:45:a5:b2:3f: 1b:25:fe:e9:9a:e5:46:cb:15:4c:35:89:a6:a6:79: 9d:aa:40:99:56:0c:51:f8:4e:ee:b6:d8:13:30:8e: 52:2d:d4:aa:83:b2:04:03:b0:e1:73:71:87:32:02: c8:27:1c:5e:2b:d6:18:cf:0a:6b:aa:d6:10:2f:cb: 4f:f4:e7:33:c6:8b:ef:5a:b3:98:40:03:fe:3e:a0: 06:6c:09:54:eb:4e:b9:55:25:97:16:dd:39:32:f3: 03:86:f4:21:27:d5:05:89:bf:9a:c5:6a:27:c4:ce: 4b:6c:8f:a0:a0:5b:d9:7c:31:cd:c0:c2:c3:2f:ba: c8:5e:1c:78:f4:8f:bc:cb:73:20:07:8e:ee:56:e6: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BE:89:EF:E3:9A:2E:37:86:C2:21:D0:CF:7B:07:FF:55:14:EA:77 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a1:94:5c:28:93:6c:53:94:dc:06:a6:ac:86:86:a9:8e:74: 07:1f:3e:1d:ba:7e:4a:ed:8a:d9:49:a5:26:0b:ea:03:73:95: 87:5c:bf:38:46:7b:04:1e:f1:d1:f3:46:e6:94:9f:aa:40:80: 2b:c8:e1:f5:b5:5b:1f:86:19:32:5e:8d:4f:36:9c:47:d3:cd: 16:27:01:8d:ef:d8:b2:ac:cc:17:f7:6e:95:69:29:3f:62:aa: b6:2b:05:21:79:f8:da:4d:85:e1:6d:c8:e8:ff:85:a9:57:09: 66:71:5c:81:5d:6b:3d:c8:ac:14:f1:74:60:04:91:e9:ee:48: f0:09:d0:bf:96:cd:18:6c:bf:e7:4c:36:17:f4:03:c8:1c:03: fc:22:bd:1f:80:93:2a:ab:e5:92:01:b9:01:7d:87:a8:c3:91: f9:d2:02:55:cf:ce:90:79:f6:cf:b7:d4:5a:72:11:55:bb:dd: fa:37:72:67:0c:70:3d:14:84:59:1f:e9:ed:ac:0f:4e:9f:76: cc:c2:cb:84:fa:36:8d:cf:51:f9:a7:95:6b:a3:e7:54:fb:7f: e7:41:57:1c:a5:47:30:e6:a1:58:14:aa:f9:3c:51:f4:0f:78: 50:75:02:41:8f:e6:89:0e:2f:9b:73:20:15:ce:74:ac:d6:2f: 58:57:fa:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuBsbrVB2Vp89U6LLByCuKRVh1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNjAzMjQyMDI4MThaFw0yNjAzMjcyMTE5MThaMDMxMTAvBgNV BAMTKDg4QkU4OUVGRTM5QTJFMzc4NkMyMjFEMENGN0IwN0ZGNTUxNEVBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/Zsem381iq01yPAteenNMVwD TndR2U5qN2u3C2gWGxYgNkfmJDjJW8SJYD7OYlFAzPwhRtnmk8hY6W6BLbAOGUNi kI1ydEh6mmwnCAqnS3KfgShT5m5KuvZSVUTWa3RXK+vHZO0PuFA6OcGwCkfPgLBg RaWyPxsl/uma5UbLFUw1iaameZ2qQJlWDFH4Tu622BMwjlIt1KqDsgQDsOFzcYcy AsgnHF4r1hjPCmuq1hAvy0/05zPGi+9as5hAA/4+oAZsCVTrTrlVJZcW3Tky8wOG 9CEn1QWJv5rFaifEzktsj6CgW9l8Mc3AwsMvusheHHj0j7zLcyAHju5W5q6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiL6J7+OaLjeGwiHQz3sH/1UU6ncwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOhlFwok2xTlNwGpqyGhqmOdAcfPh26fkrt itlJpSYL6gNzlYdcvzhGewQe8dHzRuaUn6pAgCvI4fW1Wx+GGTJejU82nEfTzRYn AY3v2LKszBf3bpVpKT9iqrYrBSF5+NpNheFtyOj/halXCWZxXIFdaz3IrBTxdGAE kenuSPAJ0L+WzRhsv+dMNhf0A8gcA/wivR+Akyqr5ZIBuQF9h6jDkfnSAlXPzpB5 9s+31FpyEVW73fo3cmcMcD0UhFkf6e2sD06fdszCy4T6No3PUfmnlWuj51T7f+dB VxylRzDmoVgUqvk8UfQPeFB1AkGP5okOL5tzIBXOdKzWL1hX+oE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:21:18 2026 by rpki-client