$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: fZCB3uw2iQ52bIgbIkBVJjCp/nZESYd642TH6+ZY5/o= Subject key identifier: 58:A8:80:BD:24:AD:2A:96:3A:26:20:64:E3:19:00:54:CA:87:BB:52 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 121AAEB6C64CEC48B8DD968F42A498872EF4DC1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: EC Signing time: Thu 26 Mar 2026 01:50:06 +0000 Manifest this update: Thu 26 Mar 2026 01:45:06 +0000 Manifest next update: Sun 29 Mar 2026 05:56:06 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) 2: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 4: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: iWdlzBsd3Exm0RxLhBsntiTcXMV0vSOpK1tVFob9mfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1a:ae:b6:c6:4c:ec:48:b8:dd:96:8f:42:a4:98:87:2e:f4:dc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Mar 26 01:45:06 2026 GMT Not After : Mar 29 05:56:06 2026 GMT Subject: CN=58A880BD24AD2A963A262064E3190054CA87BB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:8b:57:30:68:40:d0:6c:42:3f:04:88:92: b3:96:b3:e9:77:56:4b:29:a9:90:8c:e8:81:f4:7b: 08:69:ac:1d:c3:e3:02:62:d0:5f:ac:d8:8b:57:a3: 2b:6c:d3:27:38:92:5a:c1:aa:8d:d0:4c:5f:bd:dd: 86:13:eb:48:02:8a:ed:b0:90:f8:98:b3:61:66:a0: bb:bf:03:c7:d5:3a:e1:b6:5a:d3:fc:d0:e0:fe:1d: 1c:3e:30:14:fc:23:41:f8:dc:0e:ab:6a:2d:87:c9: 47:c9:b4:f9:13:8b:20:77:0b:76:51:97:2a:ec:b9: 2b:72:2c:2a:98:ce:6f:79:30:a5:19:e8:13:53:70: 0b:bd:f8:64:09:4d:18:40:f8:1e:c7:76:8b:ae:02: b1:20:5f:e1:da:c4:bd:6b:87:f1:dc:1c:7f:cb:b9: 34:04:01:f5:e2:ae:3a:e5:02:e3:14:89:b2:29:fc: e6:9f:f9:4f:ab:18:5c:93:24:87:b3:51:74:3f:5c: c5:d8:fe:16:93:78:eb:c9:9d:e8:a0:03:62:4c:36: d3:d9:37:67:39:27:1c:87:38:66:c6:8d:c1:aa:6b: e5:a7:4d:59:ab:cd:e2:8c:8c:0c:24:24:bb:4e:7c: 66:b0:05:0a:83:52:3c:81:77:07:b9:28:61:89:d3: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A8:80:BD:24:AD:2A:96:3A:26:20:64:E3:19:00:54:CA:87:BB:52 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8a:16:a3:a1:2e:53:30:c3:70:fa:c9:13:17:bf:b1:ea:ee: a6:60:4a:42:dd:19:89:51:57:7a:78:d2:7e:93:de:a7:ab:0a: 90:00:98:92:b5:4e:bd:e1:79:ef:73:3c:c3:00:e4:ef:00:75: 89:33:ff:ee:51:32:4a:7d:93:a0:26:ef:1d:e5:3d:01:90:df: ec:38:74:32:cf:ef:12:27:4f:be:f5:2f:db:98:7e:5b:4b:e1: 3f:1b:fb:80:53:53:cb:bd:24:59:ec:88:85:92:b4:17:de:bf: 35:ea:8a:5f:19:07:4e:bd:ab:4a:68:ab:fb:e4:d0:a6:3e:9d: 0c:40:65:9a:01:f4:81:f5:90:7a:09:1c:01:02:ef:d1:fa:49: cd:1e:cb:74:d0:cb:3a:68:1a:84:c7:7c:78:d0:a8:ca:05:9e: ad:f8:5f:0e:1d:52:4d:a8:17:4c:00:a3:a2:56:7b:83:5f:0f: ba:16:f5:64:b6:c5:ba:5a:dc:00:e7:b0:5c:c8:98:84:70:f6: 45:a2:2e:56:fb:b3:fa:54:9d:f9:17:52:61:fe:a3:b8:25:d0: 93:53:b5:3d:65:f0:f1:67:63:b8:94:15:d2:19:71:22:3d:1b: 8d:48:66:0c:02:06:07:b1:0f:bd:e5:0e:87:f6:ac:17:56:b4: 3b:5b:6a:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhqutsZM7Ei43ZaPQqSYhy703B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNjAzMjYwMTQ1MDZaFw0yNjAzMjkwNTU2MDZaMDMxMTAvBgNV BAMTKDU4QTg4MEJEMjRBRDJBOTYzQTI2MjA2NEUzMTkwMDU0Q0E4N0JCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIotXMGhA0GxCPwSIkrOWs+l3 VkspqZCM6IH0ewhprB3D4wJi0F+s2ItXoyts0yc4klrBqo3QTF+93YYT60gCiu2w kPiYs2FmoLu/A8fVOuG2WtP80OD+HRw+MBT8I0H43A6rai2HyUfJtPkTiyB3C3ZR lyrsuStyLCqYzm95MKUZ6BNTcAu9+GQJTRhA+B7HdouuArEgX+HaxL1rh/HcHH/L uTQEAfXirjrlAuMUibIp/Oaf+U+rGFyTJIezUXQ/XMXY/haTeOvJneigA2JMNtPZ N2c5JxyHOGbGjcGqa+WnTVmrzeKMjAwkJLtOfGawBQqDUjyBdwe5KGGJ0+y3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKiAvSStKpY6JiBk4xkAVMqHu1IwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiKFqOhLlMww3D6yRMXv7Hq7qZgSkLdGYlR V3p40n6T3qerCpAAmJK1Tr3hee9zPMMA5O8AdYkz/+5RMkp9k6Am7x3lPQGQ3+w4 dDLP7xInT771L9uYfltL4T8b+4BTU8u9JFnsiIWStBfevzXqil8ZB069q0poq/vk 0KY+nQxAZZoB9IH1kHoJHAEC79H6Sc0ey3TQyzpoGoTHfHjQqMoFnq34Xw4dUk2o F0wAo6JWe4NfD7oW9WS2xbpa3ADnsFzImIRw9kWiLlb7s/pUnfkXUmH+o7gl0JNT tT1l8PFnY7iUFdIZcSI9G41IZgwCBgexD73lDof2rBdWtDtbasc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:32:08 2026 by rpki-client