$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: A/0T7BPiPLr5ha7QMigiio2bi+fMx1EHyCNTghFOzVM= Subject key identifier: 22:77:D1:A0:4D:A1:CB:DF:0F:92:BF:C7:7A:9F:23:CA:74:A7:59:F8 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 6452614DAC2ED0E136794924C92734FA1A380DE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 0337 Signing time: Tue 24 Mar 2026 10:11:21 +0000 Manifest this update: Tue 24 Mar 2026 10:06:21 +0000 Manifest next update: Fri 27 Mar 2026 21:45:21 +0000 Files and hashes: 1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) 2: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: DUm54+GfPNLw1I2A6WjIq6Ap+UeboqwwNGD9XvAXbiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:52:61:4d:ac:2e:d0:e1:36:79:49:24:c9:27:34:fa:1a:38:0d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Mar 24 10:06:21 2026 GMT Not After : Mar 27 21:45:21 2026 GMT Subject: CN=2277D1A04DA1CBDF0F92BFC77A9F23CA74A759F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:3c:c6:b3:77:b9:ad:f6:b8:86:8f:13:61: 43:27:d5:e3:4f:fa:77:a3:f0:42:db:39:e3:d4:20: 47:b7:9c:d3:00:43:dc:b5:da:11:8c:9d:d2:14:98: 2f:25:4c:e6:0e:d1:b8:58:84:0a:ce:4e:8e:bd:e1: 91:b4:4e:0e:57:c1:08:f4:d9:c3:24:8c:f3:57:b0: 91:2d:01:3e:2e:01:cb:75:e8:a2:44:28:6e:8c:36: 82:68:8f:62:2b:54:c7:99:f5:46:c2:c2:d4:fb:9f: fd:b7:7f:49:62:07:11:8f:60:30:eb:de:c1:b4:41: ae:ae:cb:be:7c:c4:d4:10:b2:c1:fc:a7:9f:cc:1f: 0a:08:23:f3:96:c6:30:d8:0e:d6:76:38:77:43:33: 0a:50:61:9b:73:ff:aa:8b:eb:e3:58:3d:1b:1b:9d: 3c:7f:ff:c3:e9:0f:85:4b:4d:f2:c7:aa:20:9a:d1: f9:e0:60:07:40:0f:e2:5a:14:d7:2c:d9:df:7c:b8: 44:65:65:25:fe:39:ab:60:05:4f:ca:d0:21:64:72: 58:47:33:e5:52:16:e5:68:0e:00:29:cc:f9:c2:0a: dd:53:ee:06:aa:f6:45:de:00:b7:ca:ac:a3:ce:ba: 80:4b:31:63:17:d8:48:97:6a:67:1c:2e:88:34:d4: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:77:D1:A0:4D:A1:CB:DF:0F:92:BF:C7:7A:9F:23:CA:74:A7:59:F8 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:76:b7:d9:98:bf:e0:28:23:20:5c:0a:3c:fe:d1:4e:07:1c: c9:8e:a7:9b:10:34:a6:77:87:8e:16:c1:0a:aa:34:43:58:59: 72:f6:a9:62:35:0f:9e:bd:62:5d:df:df:9b:62:30:37:3c:a5: a9:de:cb:ff:e0:57:45:34:dd:2a:c0:97:be:7a:a1:72:e9:5c: 0e:2c:67:56:72:cd:ce:b3:ab:f5:10:fc:0c:ad:9e:65:1a:88: 57:6b:78:05:1e:95:b5:01:b1:08:72:f8:9b:01:ed:10:a5:7f: ba:d2:90:fd:fb:be:81:89:de:82:5e:cc:cb:db:81:fe:e5:e0: c5:37:b8:60:6c:a9:80:1d:07:4c:ff:b9:6e:ba:60:9e:ab:6a: 19:16:e8:84:89:de:f5:2b:90:2d:18:95:34:a1:98:27:0b:92: b5:f9:ee:ef:a6:88:87:be:d9:82:4a:c8:58:fa:e7:c3:8d:42: e7:99:cf:40:54:9a:04:be:83:66:66:63:03:8d:eb:e7:ed:ae: 68:23:dc:22:e4:67:78:e4:eb:87:3b:9b:5b:5a:2f:5c:04:ee: ba:99:3b:c7:f3:91:10:e2:29:1e:f9:06:5c:63:3d:c6:e5:6f: a5:3e:88:92:b6:7a:85:f3:8f:23:76:52:a0:84:b9:57:4e:9e: 8f:11:fe:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFJhTawu0OE2eUkkySc0+ho4DegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNjAzMjQxMDA2MjFaFw0yNjAzMjcyMTQ1MjFaMDMxMTAvBgNV BAMTKDIyNzdEMUEwNERBMUNCREYwRjkyQkZDNzdBOUYyM0NBNzRBNzU5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhFTzGs3e5rfa4ho8TYUMn1eNP +nej8ELbOePUIEe3nNMAQ9y12hGMndIUmC8lTOYO0bhYhArOTo694ZG0Tg5XwQj0 2cMkjPNXsJEtAT4uAct16KJEKG6MNoJoj2IrVMeZ9UbCwtT7n/23f0liBxGPYDDr 3sG0Qa6uy758xNQQssH8p5/MHwoII/OWxjDYDtZ2OHdDMwpQYZtz/6qL6+NYPRsb nTx//8PpD4VLTfLHqiCa0fngYAdAD+JaFNcs2d98uERlZSX+OatgBU/K0CFkclhH M+VSFuVoDgApzPnCCt1T7gaq9kXeALfKrKPOuoBLMWMX2EiXamccLog01H2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUInfRoE2hy98Pkr/Hep8jynSnWfgwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl2t9mYv+AoIyBcCjz+0U4HHMmOp5sQNKZ3 h44WwQqqNENYWXL2qWI1D569Yl3f35tiMDc8paney//gV0U03SrAl756oXLpXA4s Z1Zyzc6zq/UQ/AytnmUaiFdreAUelbUBsQhy+JsB7RClf7rSkP37voGJ3oJezMvb gf7l4MU3uGBsqYAdB0z/uW66YJ6rahkW6ISJ3vUrkC0YlTShmCcLkrX57u+miIe+ 2YJKyFj658ONQueZz0BUmgS+g2ZmYwON6+ftrmgj3CLkZ3jk64c7m1taL1wE7rqZ O8fzkRDiKR75BlxjPcblb6U+iJK2eoXzjyN2UqCEuVdOno8R/rI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:43 2026 by rpki-client