$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: EomwyqSUh1rbgZqi7SVOTqkkLmgNE3wGPUAfMV2J+DI= Subject key identifier: E6:49:70:0D:E4:CC:E0:89:5A:64:2A:C3:D2:6C:7F:C7:85:F8:C1:06 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 09C9224E771D5ECC8EF662B5D45D40925B56D209 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 015C Signing time: Tue 24 Mar 2026 02:20:42 +0000 Manifest this update: Tue 24 Mar 2026 02:15:42 +0000 Manifest next update: Fri 27 Mar 2026 08:51:42 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: plc76YOyG4xGKCUVpESROlXnho6iILBvtkBV2wWZn0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c9:22:4e:77:1d:5e:cc:8e:f6:62:b5:d4:5d:40:92:5b:56:d2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Mar 24 02:15:42 2026 GMT Not After : Mar 27 08:51:42 2026 GMT Subject: CN=E649700DE4CCE0895A642AC3D26C7FC785F8C106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:04:58:97:ea:f3:04:c0:12:b9:e0:58:3c: a9:0b:3c:d7:a2:e7:c9:21:4f:c5:e8:6e:c7:1f:c8: 2b:c4:67:53:33:68:16:60:0b:85:61:03:2c:4b:ae: e5:4a:89:31:d8:b6:59:9f:87:c6:40:e6:90:f1:65: e5:89:da:91:63:57:17:cb:4a:f4:4c:49:8c:d5:05: b9:23:45:74:5f:d6:fe:44:16:4f:28:ef:b1:b6:ab: 08:0a:c5:73:97:38:78:f1:25:eb:c3:58:7d:d3:c0: 19:d1:1a:96:e6:a7:da:14:fa:c2:44:a7:ea:e7:07: 65:a2:65:af:eb:fe:3b:c3:71:a1:8b:2e:ac:3c:04: 27:9f:31:7a:b9:94:91:d1:ad:e1:44:e3:f8:86:c9: 01:42:79:73:fa:2f:f9:b9:4f:a7:83:12:7b:51:5e: 2f:a6:a7:8f:21:e0:ab:c2:64:98:98:3e:0f:c8:af: 90:40:7c:60:4b:9d:45:57:8b:db:62:36:f6:22:f6: 94:99:9d:f7:28:73:2f:1c:0d:06:ec:96:ea:36:35: d4:35:16:8c:58:4f:88:47:70:1c:49:65:28:29:58: c3:cb:ad:a1:11:f5:db:f0:b4:55:bd:da:be:af:45: d1:10:a6:39:4c:4b:c2:a5:ec:fb:ad:b2:08:a7:93: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:49:70:0D:E4:CC:E0:89:5A:64:2A:C3:D2:6C:7F:C7:85:F8:C1:06 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:84:60:c9:35:48:3b:1f:b9:84:67:59:92:b5:8e:0d:86:97: c0:ec:8a:fe:28:6e:5a:42:ec:c1:23:d0:d4:81:f1:87:79:83: 3f:17:b1:00:1c:d8:ee:91:b4:17:18:24:70:75:6b:51:bc:1b: ec:54:2a:99:8b:64:8f:94:19:a1:f9:f5:82:96:ae:20:46:86: 4b:bd:50:47:47:11:dc:3b:b8:05:cf:0c:65:cc:71:ef:30:8f: ff:82:cb:9c:f2:1b:50:3f:29:54:27:14:22:ba:98:cf:b8:dc: 5c:fb:3c:e2:ee:61:08:b4:d4:d1:96:b1:26:af:85:ab:b0:68: 4c:ec:d3:43:6b:0b:34:6a:37:7e:5b:0b:bb:f3:22:05:cf:2c: 84:2e:68:89:7f:27:bc:20:6d:ac:e3:8e:de:af:91:f1:47:c7: d6:2f:73:c9:38:1a:9a:bd:6d:82:31:67:57:7b:10:6a:95:1f: 34:ad:c9:84:93:0f:15:31:75:47:2e:27:25:53:07:20:4e:d8: c8:02:db:af:d5:c7:7f:4b:d4:06:1d:59:80:b3:95:45:89:fc: 24:6d:db:25:de:b9:2d:8b:fe:cb:80:40:8a:b8:5c:c3:6e:5f: 30:e3:9a:8f:23:ed:b1:63:45:40:16:7c:40:c2:f9:c9:60:18: 05:ad:c1:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCckiTncdXsyO9mK11F1AkltW0gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNjAzMjQwMjE1NDJaFw0yNjAzMjcwODUxNDJaMDMxMTAvBgNV BAMTKEU2NDk3MDBERTRDQ0UwODk1QTY0MkFDM0QyNkM3RkM3ODVGOEMxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFARYl+rzBMASueBYPKkLPNei 58khT8XobscfyCvEZ1MzaBZgC4VhAyxLruVKiTHYtlmfh8ZA5pDxZeWJ2pFjVxfL SvRMSYzVBbkjRXRf1v5EFk8o77G2qwgKxXOXOHjxJevDWH3TwBnRGpbmp9oU+sJE p+rnB2WiZa/r/jvDcaGLLqw8BCefMXq5lJHRreFE4/iGyQFCeXP6L/m5T6eDEntR Xi+mp48h4KvCZJiYPg/Ir5BAfGBLnUVXi9tiNvYi9pSZnfcocy8cDQbsluo2NdQ1 FoxYT4hHcBxJZSgpWMPLraER9dvwtFW92r6vRdEQpjlMS8Kl7Putsgink1KPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5klwDeTM4IlaZCrD0mx/x4X4wQYwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6EYMk1SDsfuYRnWZK1jg2Gl8Dsiv4oblpC 7MEj0NSB8Yd5gz8XsQAc2O6RtBcYJHB1a1G8G+xUKpmLZI+UGaH59YKWriBGhku9 UEdHEdw7uAXPDGXMce8wj/+Cy5zyG1A/KVQnFCK6mM+43Fz7POLuYQi01NGWsSav hauwaEzs00NrCzRqN35bC7vzIgXPLIQuaIl/J7wgbazjjt6vkfFHx9Yvc8k4Gpq9 bYIxZ1d7EGqVHzStyYSTDxUxdUcuJyVTByBO2MgC26/Vx39L1AYdWYCzlUWJ/CRt 2yXeuS2L/suAQIq4XMNuXzDjmo8j7bFjRUAWfEDC+clgGAWtwWI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:38 2026 by rpki-client