$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: V5SxldZgKIrVXKBZ0gc6Yae5IuSmjF37IleSdusQkb8= Subject key identifier: CB:63:F3:6C:7E:2C:47:1E:F2:CE:2B:3C:79:E8:3B:2B:27:99:5C:3F Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 5575CBEF26F93ABB93E4F0A32E87F6E70A605440 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 0450 Signing time: Wed 25 Mar 2026 20:11:40 +0000 Manifest this update: Wed 25 Mar 2026 20:06:40 +0000 Manifest next update: Sun 29 Mar 2026 00:54:40 +0000 Files and hashes: 1: 3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (hash: vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=) 2: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: zqpJXJIOBhnwLUMtiPQXOx2KMC9Zw7fPIh3iuLnJlNg=) 3: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: 54hzf/Yz+Mt9tkkMPM02Tc2yMDzkcvse8YRG1/MZcGA=) 4: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: wYE1H9Wr7TBPEnivLA+AmwtO90AzuAp/OA0G1iMo88I=) 5: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: ruJsXhvsoiH6hvRPCSw20cFJp9hay/OJaB8KL7ct0jg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:75:cb:ef:26:f9:3a:bb:93:e4:f0:a3:2e:87:f6:e7:0a:60:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: Mar 25 20:06:40 2026 GMT Not After : Mar 29 00:54:40 2026 GMT Subject: CN=CB63F36C7E2C471EF2CE2B3C79E83B2B27995C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:be:58:a3:c2:b8:d7:c0:30:05:b6:5d:81: 10:8d:7c:28:2c:80:52:86:64:78:24:1d:02:dc:3f: d7:d8:50:b4:91:57:da:5c:67:d0:dd:db:dc:4a:b9: eb:e3:74:c0:d1:35:f9:56:5b:38:32:dd:99:f3:96: 83:3e:c0:03:0d:91:3e:5e:9a:2c:23:27:80:36:7d: 48:db:2a:fc:ee:8f:72:1c:83:6a:47:ba:f6:92:c8: e6:cf:d4:25:77:4e:03:30:10:07:e8:1d:c6:4d:69: 37:a2:34:d2:b5:0f:95:59:1b:74:44:e6:67:57:dd: dd:88:ae:67:87:49:bf:dd:13:e4:ae:12:a5:b6:6a: 57:99:15:25:6c:b2:21:e3:1c:0b:5e:f5:d6:db:1f: f0:79:ac:f8:10:26:69:d3:55:c7:57:4f:b4:b3:ee: 36:52:1d:ec:71:f4:f9:cb:be:5d:48:e8:6a:70:1a: e9:3a:63:ba:2e:70:25:50:1e:81:28:08:22:2e:93: 90:86:7c:83:a3:89:e3:44:1f:ee:04:a1:d7:ae:4d: 5a:a0:3d:7b:2f:24:fa:32:a7:97:c4:ff:5a:6d:59: 2f:45:71:28:89:b1:d6:d0:93:54:a8:21:5b:77:6e: b2:ac:53:be:a5:4e:6c:06:9f:4f:67:c3:dd:c1:a4: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:63:F3:6C:7E:2C:47:1E:F2:CE:2B:3C:79:E8:3B:2B:27:99:5C:3F X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:92:1b:1b:49:2f:0e:5e:7e:c6:04:05:ed:0f:39:ea:9b:23: e0:d2:cd:e3:38:73:ac:ff:a3:9c:3c:9f:68:95:16:f4:1c:ba: 9d:ff:ab:37:be:2b:25:d1:b5:03:4b:9a:b6:cd:b2:00:bc:8e: 05:56:08:8e:81:31:74:85:33:ed:40:31:62:15:3b:95:53:8a: ac:40:cf:69:87:8b:10:4e:03:cc:de:39:fd:57:ed:42:b4:67: da:bf:f3:2a:fd:37:13:73:b7:0c:8e:25:c4:e6:0f:17:66:b3: 78:ce:3f:d9:50:59:f9:c7:17:94:bf:32:40:17:1e:c0:05:9e: 21:5b:c1:04:b4:33:7d:e3:75:df:c6:77:67:7e:ac:73:1f:a0: 4b:b8:52:b5:a2:90:ab:9c:58:f6:d8:89:c6:6f:cb:6f:fc:70: 86:37:40:a7:c4:58:88:e7:f0:15:26:84:40:63:8f:df:71:45: 11:4c:cb:b0:38:b0:34:79:f8:d3:a5:00:39:49:95:6f:b4:8f: 85:c4:3e:3d:4e:dc:79:97:8b:69:a6:ca:ce:f9:f1:ae:47:da: b2:b0:2f:76:8a:f6:47:3e:29:d1:f0:ea:98:86:0a:fd:d5:da: d6:fc:69:f0:80:6f:d0:ef:0b:3a:bf:3b:bc:d4:79:72:db:82: cc:8d:bf:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXXL7yb5OruT5PCjLof25wpgVEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNjAzMjUyMDA2NDBaFw0yNjAzMjkwMDU0NDBaMDMxMTAvBgNV BAMTKENCNjNGMzZDN0UyQzQ3MUVGMkNFMkIzQzc5RTgzQjJCMjc5OTVDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbb5Yo8K418AwBbZdgRCNfCgs gFKGZHgkHQLcP9fYULSRV9pcZ9Dd29xKuevjdMDRNflWWzgy3ZnzloM+wAMNkT5e miwjJ4A2fUjbKvzuj3Icg2pHuvaSyObP1CV3TgMwEAfoHcZNaTeiNNK1D5VZG3RE 5mdX3d2IrmeHSb/dE+SuEqW2aleZFSVssiHjHAte9dbbH/B5rPgQJmnTVcdXT7Sz 7jZSHexx9PnLvl1I6GpwGuk6Y7oucCVQHoEoCCIuk5CGfIOjieNEH+4EodeuTVqg PXsvJPoyp5fE/1ptWS9FcSiJsdbQk1SoIVt3brKsU76lTmwGn09nw93BpKqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2PzbH4sRx7yzis8eeg7KyeZXD8wHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCSGxtJLw5efsYEBe0POeqbI+DSzeM4c6z/ o5w8n2iVFvQcup3/qze+KyXRtQNLmrbNsgC8jgVWCI6BMXSFM+1AMWIVO5VTiqxA z2mHixBOA8zeOf1X7UK0Z9q/8yr9NxNztwyOJcTmDxdms3jOP9lQWfnHF5S/MkAX HsAFniFbwQS0M33jdd/Gd2d+rHMfoEu4UrWikKucWPbYicZvy2/8cIY3QKfEWIjn 8BUmhEBjj99xRRFMy7A4sDR5+NOlADlJlW+0j4XEPj1O3HmXi2mmys758a5H2rKw L3aK9kc+KdHw6piGCv3V2tb8afCAb9DvCzq/O7zUeXLbgsyNv+o= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:43 2026 by rpki-client