$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: 77rwHFMLjI9pZldD6ZxrPA3m2KjbNeev8fP8/faENrA= Subject key identifier: 9E:8C:80:BA:4D:05:3F:41:B0:75:3D:14:AE:21:48:A4:21:4C:50:3A Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 4F4F9E40D240DAA662C421DAA35BC8366EA2F174 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 01C0 Signing time: Wed 25 Mar 2026 16:10:58 +0000 Manifest this update: Wed 25 Mar 2026 16:05:58 +0000 Manifest next update: Sun 29 Mar 2026 03:54:58 +0000 Files and hashes: 1: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: DlmZqT9cRSAGh3ZKnjImJtnnzdBwP1WDpr4Ot8v2wkw=) 2: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: ilMD0aviEA5kSo/dnNu6/R96mI+Z9NJcdnN/AEMlT/M=) 3: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: qBrcbMMaUPDoizuNAU1KWwXnEqXPWGKnlLdZXE+PUUw=) 4: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: OxoGy2qZ6TwUEmyvrpgvUrDNXEHrKgFrgTG7eAnuj6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4f:9e:40:d2:40:da:a6:62:c4:21:da:a3:5b:c8:36:6e:a2:f1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Mar 25 16:05:58 2026 GMT Not After : Mar 29 03:54:58 2026 GMT Subject: CN=9E8C80BA4D053F41B0753D14AE2148A4214C503A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:d3:7c:3f:09:9f:bd:41:79:fb:cc:a0:85: 79:79:6b:32:28:95:09:70:7a:e8:90:06:50:53:80: f8:bd:6d:f0:86:b4:94:95:7e:48:b0:60:e6:cc:c1: d9:4f:e4:98:3f:b2:97:e6:3c:6d:49:4f:bd:a7:b9: f5:52:43:4a:c9:63:7d:f4:42:4b:19:a1:6d:d3:26: 5c:bc:c3:03:8d:c0:f5:6c:08:8f:f6:95:49:af:26: 6d:c4:69:06:f1:b4:0e:96:b8:6d:29:43:2d:07:52: f4:53:f5:41:19:ef:76:c9:ab:11:84:76:ff:5c:23: f6:74:b9:0d:fc:d6:f6:5c:d9:5c:a2:e6:de:1f:72: 1f:fb:d5:d5:58:59:a1:40:0c:73:e1:e1:35:08:e7: 3c:bc:55:6c:a6:46:a0:0a:f8:c3:c2:89:e0:67:bc: 3a:9f:f9:2b:32:8d:2b:14:77:9d:bd:a2:24:60:a5: 52:a9:35:cf:47:f1:e2:78:04:56:74:4c:29:d8:55: 01:47:be:03:d5:05:63:07:5b:46:52:fc:56:e1:37: bc:ea:7d:00:97:bc:97:f1:20:2b:9d:e1:fa:20:d4: 01:bc:9b:1f:d6:3c:46:94:22:9b:e0:f8:d4:09:7f: 0c:a3:43:53:1c:1c:90:81:66:6b:5d:1c:c3:ab:03: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8C:80:BA:4D:05:3F:41:B0:75:3D:14:AE:21:48:A4:21:4C:50:3A X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:72:4d:e4:c0:df:1a:c4:93:25:02:0d:57:46:7f:76:c0:97: 00:2b:3c:1b:e2:22:53:c7:e4:7f:0b:9b:f6:21:de:45:fd:e9: 71:d0:c0:64:09:15:9a:62:ca:a2:ca:95:86:5a:a3:ea:d0:c0: 3c:07:a2:ca:87:6c:18:45:64:f7:07:fc:a7:20:ae:cd:37:fc: 06:39:0c:dd:f2:94:ef:91:36:92:b8:9d:37:5b:5b:63:a3:45: be:66:88:32:4d:47:4f:fe:97:af:52:03:50:71:66:01:87:39: 90:b6:25:15:7f:0e:17:1a:7c:5f:f0:c3:8f:ab:ba:f7:61:52: 81:cf:23:b3:77:de:ed:61:ef:f3:76:97:5b:d5:bb:f7:49:37: e2:7f:3f:56:54:78:9e:0d:bf:42:e5:40:10:09:94:23:d9:84: 67:e1:89:7e:eb:47:d8:bf:64:2b:2b:25:00:51:1c:93:46:4a: 5c:b9:f6:fe:08:6e:3a:45:05:b4:fc:8a:2e:b7:e6:b5:11:2b: 73:df:9e:1f:29:16:d0:b1:a7:57:25:7c:4c:53:c7:41:f3:32: 8f:ab:b5:17:94:d6:1a:b9:b2:37:e6:dd:32:e5:67:56:eb:cc: 2d:e0:ce:20:11:9e:3d:64:cb:9f:a5:f0:01:66:71:17:5f:0c: c6:5b:d0:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0+eQNJA2qZixCHao1vINm6i8XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNjAzMjUxNjA1NThaFw0yNjAzMjkwMzU0NThaMDMxMTAvBgNV BAMTKDlFOEM4MEJBNEQwNTNGNDFCMDc1M0QxNEFFMjE0OEE0MjE0QzUwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl9N8PwmfvUF5+8yghXl5azIo lQlweuiQBlBTgPi9bfCGtJSVfkiwYObMwdlP5Jg/spfmPG1JT72nufVSQ0rJY330 QksZoW3TJly8wwONwPVsCI/2lUmvJm3EaQbxtA6WuG0pQy0HUvRT9UEZ73bJqxGE dv9cI/Z0uQ381vZc2Vyi5t4fch/71dVYWaFADHPh4TUI5zy8VWymRqAK+MPCieBn vDqf+SsyjSsUd529oiRgpVKpNc9H8eJ4BFZ0TCnYVQFHvgPVBWMHW0ZS/FbhN7zq fQCXvJfxICud4fog1AG8mx/WPEaUIpvg+NQJfwyjQ1McHJCBZmtdHMOrA+opAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnoyAuk0FP0GwdT0UriFIpCFMUDowHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRyTeTA3xrEkyUCDVdGf3bAlwArPBviIlPH 5H8Lm/Yh3kX96XHQwGQJFZpiyqLKlYZao+rQwDwHosqHbBhFZPcH/Kcgrs03/AY5 DN3ylO+RNpK4nTdbW2OjRb5miDJNR0/+l69SA1BxZgGHOZC2JRV/DhcafF/ww4+r uvdhUoHPI7N33u1h7/N2l1vVu/dJN+J/P1ZUeJ4Nv0LlQBAJlCPZhGfhiX7rR9i/ ZCsrJQBRHJNGSly59v4IbjpFBbT8ii635rURK3Pfnh8pFtCxp1clfExTx0HzMo+r tReU1hq5sjfm3TLlZ1brzC3gziARnj1ky5+l8AFmcRdfDMZb0P8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:39:14 2026 by rpki-client