$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: wxbzIr/hEiGgazEx9UeeH6M2HCaeFSpQsIUrqD0/RUQ= Subject key identifier: 48:EA:6A:97:8B:91:B5:8E:05:3B:1A:8C:1F:47:49:25:4E:C1:71:AB Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 481D0C3786D9C9523DCBF7062DDEAFC44FE2606D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: 018C Signing time: Tue 24 Mar 2026 10:20:48 +0000 Manifest this update: Tue 24 Mar 2026 10:15:48 +0000 Manifest next update: Fri 27 Mar 2026 16:29:48 +0000 Files and hashes: 1: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: IlM5viJ/kwlD09UoPL6q/T0DgofJtyAwTqUcF330EeY=) 2: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: WiBadKmpF2NY0fykP1RU8Hz3IVYSRCwz8e5Vo87eXhU=) 3: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZVb3WlbYtAPVgA3DWuKwaDFEplKAh/dflThhxwfEt9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1d:0c:37:86:d9:c9:52:3d:cb:f7:06:2d:de:af:c4:4f:e2:60:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Mar 24 10:15:48 2026 GMT Not After : Mar 27 16:29:48 2026 GMT Subject: CN=48EA6A978B91B58E053B1A8C1F4749254EC171AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:a4:00:52:b8:19:02:8b:93:55:26:72:84: ae:52:1b:48:c3:04:11:48:bb:98:e7:e7:6c:39:87: 4d:e9:eb:86:13:9f:b7:c6:a2:82:5a:aa:d6:6e:91: 5a:74:66:84:b9:c8:c0:16:21:3a:ea:0f:02:77:fa: 25:27:e8:08:e7:7f:f1:a3:e5:a2:51:df:14:db:e2: 68:a1:9d:37:a3:dd:8b:fc:a5:70:ec:2a:a9:a7:e1: c6:3e:a2:63:06:bf:cb:31:e6:be:02:3d:11:a0:4c: 65:92:58:a3:fc:14:c4:63:bf:0b:44:a4:4c:39:a3: 69:bf:10:c6:2f:13:72:f0:06:d6:74:67:fa:8e:fa: 49:1a:c8:c2:5a:b0:43:68:c0:2a:4a:94:25:c5:f3: 8c:cc:a7:9a:7f:0c:e7:12:28:76:b0:b3:81:54:11: dc:f9:8f:ca:63:46:89:e1:52:05:69:74:78:5a:0e: 6a:f5:32:ee:f1:12:97:22:3b:e0:25:29:47:0a:7b: 60:16:84:3a:f9:d8:a6:d7:0b:6c:d4:99:b8:aa:9a: 36:ea:e8:4c:f0:a3:5d:d9:b0:cd:ee:c2:67:9c:e0: 3f:49:ce:f4:9e:f1:80:e1:91:db:a8:2a:5e:1a:35: 7a:eb:8d:0d:70:0d:ae:4c:98:e8:ed:cb:11:c6:48: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:6A:97:8B:91:B5:8E:05:3B:1A:8C:1F:47:49:25:4E:C1:71:AB X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:56:42:c8:da:f6:42:41:69:29:26:a8:05:2d:8b:4e:9c:d7: 54:57:32:63:3a:74:8d:0e:25:f3:07:31:78:d5:6e:55:7f:35: 7d:a6:23:0b:0a:e3:72:0a:96:2f:21:29:78:6d:69:cb:0b:5d: 85:c4:b5:69:e3:af:90:20:a4:f0:67:68:39:7e:bd:db:28:fb: a3:af:d2:99:1c:05:0a:fb:38:ab:46:c6:29:df:6f:19:95:73: 42:e0:2f:bc:5b:78:43:21:55:0f:69:88:b5:93:7d:a7:78:0e: 06:ea:3b:bd:b1:c5:d7:16:da:72:38:24:78:f8:1b:f3:92:d8: 85:55:a1:40:f1:48:c4:74:bb:64:20:01:24:c3:e8:b8:40:56: e5:50:8b:41:90:8a:d2:db:31:49:75:d9:8c:79:86:05:bb:a1: de:4d:00:2a:d8:e9:5f:41:a8:51:10:75:34:5c:6d:2d:ca:48: b8:18:ed:de:32:48:bc:4e:57:92:d1:3b:63:53:9e:d6:4a:c8: 78:92:9d:fa:1b:f0:bf:ca:d5:1c:b5:30:06:cd:d3:fe:ca:fa: 55:d3:c9:08:83:b3:88:01:03:07:a0:cc:00:e2:0c:64:c0:4c: db:03:ea:af:88:00:41:7a:af:a1:2f:fc:96:d4:a4:d3:58:5b: 87:96:12:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSB0MN4bZyVI9y/cGLd6vxE/iYG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNjAzMjQxMDE1NDhaFw0yNjAzMjcxNjI5NDhaMDMxMTAvBgNV BAMTKDQ4RUE2QTk3OEI5MUI1OEUwNTNCMUE4QzFGNDc0OTI1NEVDMTcxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXaQAUrgZAouTVSZyhK5SG0jD BBFIu5jn52w5h03p64YTn7fGooJaqtZukVp0ZoS5yMAWITrqDwJ3+iUn6Ajnf/Gj 5aJR3xTb4mihnTej3Yv8pXDsKqmn4cY+omMGv8sx5r4CPRGgTGWSWKP8FMRjvwtE pEw5o2m/EMYvE3LwBtZ0Z/qO+kkayMJasENowCpKlCXF84zMp5p/DOcSKHaws4FU Edz5j8pjRonhUgVpdHhaDmr1Mu7xEpciO+AlKUcKe2AWhDr52KbXC2zUmbiqmjbq 6Ezwo13ZsM3uwmec4D9JzvSe8YDhkduoKl4aNXrrjQ1wDa5MmOjtyxHGSCU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOpql4uRtY4FOxqMH0dJJU7BcaswHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlWQsja9kJBaSkmqAUti06c11RXMmM6dI0O JfMHMXjVblV/NX2mIwsK43IKli8hKXhtacsLXYXEtWnjr5AgpPBnaDl+vdso+6Ov 0pkcBQr7OKtGxinfbxmVc0LgL7xbeEMhVQ9piLWTfad4DgbqO72xxdcW2nI4JHj4 G/OS2IVVoUDxSMR0u2QgASTD6LhAVuVQi0GQitLbMUl12Yx5hgW7od5NACrY6V9B qFEQdTRcbS3KSLgY7d4ySLxOV5LRO2NTntZKyHiSnfob8L/K1Ry1MAbN0/7K+lXT yQiDs4gBAwegzADiDGTATNsD6q+IAEF6r6Ev/JbUpNNYW4eWEus= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:47 2026 by rpki-client