$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: Bc2oQDLoHvyDbEdKJdwjeAo/Breb0ak1JGR8J/d6RkQ= Subject key identifier: 92:DE:8F:01:3C:2C:9D:16:96:75:37:3C:F7:0B:78:BC:E4:10:A1:07 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 4883BF3327B6FFD18FB3E0E60FB7D208F29E90A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 020A Signing time: Wed 25 Mar 2026 04:01:41 +0000 Manifest this update: Wed 25 Mar 2026 03:56:41 +0000 Manifest next update: Sat 28 Mar 2026 13:20:41 +0000 Files and hashes: 1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Nka7D2jqXbj79FFV3Yc8UZRbj0fZb/aLLQS8vVOKGSE=) 2: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: 4ag75EP9kU3sCdcvBkDRWP0mzrjiowjSXCGd0Z1PhiA=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: abrBJodRCx5xNvn2142HhlgOkzWj2GA0de3Mgx2vU6c=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: Hg8oWG164Y0Dz0OH2cwj6JjK/OmfQmVg/cUvcWXZfYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:83:bf:33:27:b6:ff:d1:8f:b3:e0:e6:0f:b7:d2:08:f2:9e:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Mar 25 03:56:41 2026 GMT Not After : Mar 28 13:20:41 2026 GMT Subject: CN=92DE8F013C2C9D169675373CF70B78BCE410A107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:f7:b7:54:f4:b3:6f:32:5e:19:54:29:a0: ac:a5:15:39:81:07:1f:e5:fb:07:91:f7:47:63:0f: 75:bf:6f:47:fb:e7:74:30:1b:38:eb:e4:5d:e1:26: e7:f1:2f:87:c7:09:29:e9:2a:86:9d:15:4a:d2:58: af:e5:3f:d6:c8:42:27:d2:b6:a1:ee:cd:b1:6e:6d: 73:d3:46:5e:15:e9:ec:3b:1b:a9:1c:79:da:72:e9: 5a:7b:d1:e1:3c:d7:e1:a6:72:93:68:92:47:1f:6c: 58:b1:ed:4f:c8:8e:4d:dc:68:4d:76:21:2f:da:2f: e3:0f:e4:3a:78:b3:0a:b4:f6:e8:b6:7d:6f:03:8a: 21:9d:cb:32:f5:14:e0:9a:54:be:ad:0c:dc:a4:ac: 37:26:bd:67:26:56:e1:f5:e0:47:91:1c:fe:d2:62: 83:9e:e3:94:99:a9:83:aa:21:d5:61:b5:55:bf:f1: e3:b6:15:58:5a:fd:79:47:ff:0d:6a:1d:0b:11:20: 58:7b:69:b4:96:be:ad:1c:f5:4b:05:0b:ec:ef:1d: 42:b0:5d:50:81:fc:11:ce:dd:ab:a3:2c:e1:c2:ea: 61:17:95:bd:e4:75:72:9e:37:22:1f:3e:6c:9b:ef: 8a:35:9b:fb:c7:0a:70:5e:a5:51:c3:87:58:aa:e7: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:8F:01:3C:2C:9D:16:96:75:37:3C:F7:0B:78:BC:E4:10:A1:07 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:70:73:7a:3b:e7:9a:b5:58:00:b4:1e:11:5d:4c:1e:67:e9: 2b:8d:06:08:09:99:48:14:c6:95:f3:b8:71:69:50:e3:59:e5: 98:92:db:ba:7a:e4:30:60:3e:99:f4:e1:ec:99:8f:15:60:1e: 54:e3:b5:f6:88:a1:98:dd:31:7a:8d:d8:bd:ca:9a:21:db:99: a8:81:8f:8f:a8:99:2f:54:af:04:77:0c:e9:22:b6:4d:19:b2: 17:1c:27:99:d9:df:4d:be:de:cd:fe:23:e5:5e:0b:92:7c:1d: ce:7f:a9:6f:f6:14:85:a1:05:b1:05:06:90:88:94:9f:0f:3f: e9:40:94:db:5c:50:ea:7d:90:a9:98:11:bb:3e:25:bc:7d:09: bc:b5:91:62:ab:95:4c:36:7e:98:93:02:7e:b5:74:0f:9a:23: 19:43:36:b4:91:2b:48:1f:ec:eb:b7:bc:92:41:b3:93:07:c0: 36:24:ca:54:0e:1e:52:11:11:cd:0b:2b:aa:87:f3:e0:75:97: 10:fe:69:b5:ee:8c:34:e1:68:70:4b:8b:dc:b7:f8:1e:b8:f5: 40:0a:f4:70:41:59:35:13:93:89:94:33:f9:dd:05:98:1d:54: 20:b8:f6:7a:2d:33:1c:80:48:74:83:ad:6e:00:2d:85:62:dc: 23:5c:cd:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIO/Mye2/9GPs+DmD7fSCPKekKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNjAzMjUwMzU2NDFaFw0yNjAzMjgxMzIwNDFaMDMxMTAvBgNV BAMTKDkyREU4RjAxM0MyQzlEMTY5Njc1MzczQ0Y3MEI3OEJDRTQxMEExMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNPe3VPSzbzJeGVQpoKylFTmB Bx/l+weR90djD3W/b0f753QwGzjr5F3hJufxL4fHCSnpKoadFUrSWK/lP9bIQifS tqHuzbFubXPTRl4V6ew7G6kcedpy6Vp70eE81+GmcpNokkcfbFix7U/Ijk3caE12 IS/aL+MP5Dp4swq09ui2fW8DiiGdyzL1FOCaVL6tDNykrDcmvWcmVuH14EeRHP7S YoOe45SZqYOqIdVhtVW/8eO2FVha/XlH/w1qHQsRIFh7abSWvq0c9UsFC+zvHUKw XVCB/BHO3aujLOHC6mEXlb3kdXKeNyIfPmyb74o1m/vHCnBepVHDh1iq51L/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkt6PATwsnRaWdTc89wt4vOQQoQcwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhwc3o755q1WAC0HhFdTB5n6SuNBggJmUgU xpXzuHFpUONZ5ZiS27p65DBgPpn04eyZjxVgHlTjtfaIoZjdMXqN2L3KmiHbmaiB j4+omS9UrwR3DOkitk0ZshccJ5nZ302+3s3+I+VeC5J8Hc5/qW/2FIWhBbEFBpCI lJ8PP+lAlNtcUOp9kKmYEbs+Jbx9Cby1kWKrlUw2fpiTAn61dA+aIxlDNrSRK0gf 7Ou3vJJBs5MHwDYkylQOHlIREc0LK6qH8+B1lxD+abXujDThaHBLi9y3+B649UAK 9HBBWTUTk4mUM/ndBZgdVCC49notMxyASHSDrW4ALYVi3CNczQ8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:19 2026 by rpki-client