$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: uQ3aCLhgqbqRXuHlyDYL+rmfkRi1r/VovN+ahC3aJR8= Subject key identifier: 21:49:10:1D:7C:D9:29:48:8D:80:2E:B9:68:A6:7D:B0:49:E4:22:F2 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 20B5C77F37482592C49333C3970C53ED429CA821 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 011D Signing time: Thu 26 Mar 2026 12:22:29 +0000 Manifest this update: Thu 26 Mar 2026 12:17:29 +0000 Manifest next update: Sun 29 Mar 2026 17:22:29 +0000 Files and hashes: 1: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: rKPLeAN+95FnpdZTNPPzw28GaK+T3DBq0RTDAe+V5hk=) 2: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) 3: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b5:c7:7f:37:48:25:92:c4:93:33:c3:97:0c:53:ed:42:9c:a8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Mar 26 12:17:29 2026 GMT Not After : Mar 29 17:22:29 2026 GMT Subject: CN=2149101D7CD929488D802EB968A67DB049E422F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:08:a3:0c:2e:30:3d:b5:eb:03:dd:ce:a7:85: 22:6d:b7:a6:6a:38:09:39:c8:b4:d2:f8:c1:09:5f: c3:0d:88:6c:dc:ad:7e:01:76:fd:fb:54:bd:a9:bd: 35:9a:67:0b:92:8e:7a:03:6a:4a:80:e7:59:c0:8a: 1b:56:8c:8c:7e:4b:5e:8e:07:97:75:8f:52:8c:f6: 58:b9:9c:ff:db:9e:85:2b:d1:d0:51:0b:ad:c0:d7: 3c:7e:a1:b5:89:33:01:a7:3d:4e:e9:9e:7e:ad:d6: 7d:e1:bd:68:36:80:bc:2c:0f:85:6d:8e:2c:dc:dc: 8c:11:3c:9e:34:f8:b2:3f:50:10:b0:2d:ab:a6:82: 06:e5:8e:2e:4e:f6:8b:74:ad:ed:ad:4d:81:f8:7c: dd:c7:2a:89:ef:94:ca:ca:d7:d2:8f:44:3e:9c:0e: 7d:a2:3b:08:f2:88:de:18:51:c4:3c:89:23:86:39: 2d:65:a3:94:43:fc:9a:c7:db:84:c8:e3:5a:cd:b2: 3d:1f:cb:86:de:e7:30:31:23:6e:a2:5a:e8:c7:89: 6c:70:32:82:7f:a7:65:1b:a4:0c:e2:84:93:90:29: a8:03:32:8a:b1:5b:c7:b4:6d:b6:b4:a5:e2:69:fc: 27:9f:90:25:cc:f8:74:7c:8e:a9:89:60:9d:17:0e: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:49:10:1D:7C:D9:29:48:8D:80:2E:B9:68:A6:7D:B0:49:E4:22:F2 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a4:07:43:45:19:3a:a1:24:37:23:77:df:08:00:11:b8:99: 94:bd:7c:fe:7b:7d:40:f7:af:5d:9f:63:76:74:35:34:8c:c6: 44:2a:cc:90:12:7e:fa:c7:3c:a6:db:9d:57:af:0b:d3:9a:06: 62:51:f0:9e:8b:59:a7:57:8a:a7:7a:fc:c2:34:60:fd:5f:01: 95:8a:a8:a3:05:34:02:27:73:45:6f:0b:76:91:2a:3f:07:be: 2d:aa:06:7d:5f:7c:d4:4f:cf:d8:1c:5b:8e:d0:bf:3c:2b:92: 03:cd:3a:2d:8d:42:ad:21:05:89:3a:de:b1:70:e8:14:78:47: e2:37:a3:f9:18:36:90:20:52:25:34:01:fe:3f:45:7c:2a:d6: ac:b0:d0:1e:cc:1e:61:20:f6:4e:73:f7:a1:77:de:0e:db:e9: 3c:4a:4d:29:94:3d:86:fe:b7:58:df:ae:1d:8b:bd:98:da:3b: 10:97:6d:b2:af:b8:f6:17:a0:ba:2d:55:d8:23:6d:a9:a1:ad: c4:5f:9b:e9:b4:a4:10:bf:42:b4:20:b5:ad:85:a7:b4:d1:9f: ab:6e:11:65:3d:53:c7:c1:47:72:ce:4e:b4:bd:c6:00:b6:0b: fc:46:13:25:73:8d:c7:cb:c4:7d:cf:9b:89:2c:91:91:e9:b2: 42:13:4f:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILXHfzdIJZLEkzPDlwxT7UKcqCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNjAzMjYxMjE3MjlaFw0yNjAzMjkxNzIyMjlaMDMxMTAvBgNV BAMTKDIxNDkxMDFEN0NEOTI5NDg4RDgwMkVCOTY4QTY3REIwNDlFNDIyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CKMMLjA9tesD3c6nhSJtt6Zq OAk5yLTS+MEJX8MNiGzcrX4Bdv37VL2pvTWaZwuSjnoDakqA51nAihtWjIx+S16O B5d1j1KM9li5nP/bnoUr0dBRC63A1zx+obWJMwGnPU7pnn6t1n3hvWg2gLwsD4Vt jizc3IwRPJ40+LI/UBCwLaumggblji5O9ot0re2tTYH4fN3HKonvlMrK19KPRD6c Dn2iOwjyiN4YUcQ8iSOGOS1lo5RD/JrH24TI41rNsj0fy4be5zAxI26iWujHiWxw MoJ/p2UbpAzihJOQKagDMoqxW8e0bba0peJp/CefkCXM+HR8jqmJYJ0XDp5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUkQHXzZKUiNgC65aKZ9sEnkIvIwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJykB0NFGTqhJDcjd98IABG4mZS9fP57fUD3 r12fY3Z0NTSMxkQqzJASfvrHPKbbnVevC9OaBmJR8J6LWadXiqd6/MI0YP1fAZWK qKMFNAInc0VvC3aRKj8Hvi2qBn1ffNRPz9gcW47QvzwrkgPNOi2NQq0hBYk63rFw 6BR4R+I3o/kYNpAgUiU0Af4/RXwq1qyw0B7MHmEg9k5z96F33g7b6TxKTSmUPYb+ t1jfrh2LvZjaOxCXbbKvuPYXoLotVdgjbamhrcRfm+m0pBC/QrQgta2Fp7TRn6tu EWU9U8fBR3LOTrS9xgC2C/xGEyVzjcfLxH3Pm4kskZHpskITT1I= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:07 2026 by rpki-client