$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json) Hash identifier: VJUBjeAjA+gh+m/K3JpS37Z0z/418C9SI0LZwfJYxhc= Subject key identifier: 48:6D:4F:9E:89:72:04:4B:D7:2E:85:3F:8A:15:E0:2D:DF:B7:4D:12 Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Certificate serial: 2E3503E3E8F0079285252033D44E996840E1C364 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft Manifest number: 03C3 Signing time: Wed 25 Mar 2026 22:41:52 +0000 Manifest this update: Wed 25 Mar 2026 22:36:52 +0000 Manifest next update: Sun 29 Mar 2026 02:02:52 +0000 Files and hashes: 1: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: swzQZVgF2eCLEaYTP1Fh/lCno6gPVWEB0ZTkmFSoNZs=) 2: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: kxgspDzYS/DkH6ZTyH3CIKOfMPet4y8hTk8yqtZ6GPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:35:03:e3:e8:f0:07:92:85:25:20:33:d4:4e:99:68:40:e1:c3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A Validity Not Before: Mar 25 22:36:52 2026 GMT Not After : Mar 29 02:02:52 2026 GMT Subject: CN=486D4F9E8972044BD72E853F8A15E02DDFB74D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:3a:bd:4c:e3:0a:c2:28:b3:4d:6d:1f:23: c6:68:b9:51:37:60:08:e0:c1:43:a3:c2:c5:36:d8: 33:89:b1:22:c9:84:6b:f3:03:26:80:29:57:e7:b1: a2:7c:40:27:ad:d2:a7:8f:7d:fb:8a:1b:96:75:bf: 58:df:c5:67:d5:a7:60:ba:f0:5b:01:7d:c9:52:25: 81:0d:56:53:a7:16:08:55:f1:12:e0:c7:18:c8:20: 4f:55:a3:f7:11:46:67:5f:64:4a:3d:9f:4b:f2:04: c7:f0:1c:b2:dc:8b:e3:54:c0:79:59:8f:b1:e9:43: 33:f5:b3:73:98:e9:8c:f8:b1:6c:1a:78:0a:39:51: 55:0c:9f:ed:60:a5:6a:f2:37:ee:57:40:b0:ad:21: bc:03:18:4a:69:aa:d7:53:d3:11:ef:2e:72:c6:6c: 5b:49:ce:6b:55:a0:e9:6f:2f:ec:58:6f:b2:fd:6f: fa:a8:09:9e:06:f8:cd:09:4c:0b:11:70:89:69:21: a8:bd:0c:89:a0:38:46:cc:97:6d:71:98:e0:e3:1e: df:26:29:44:a6:cf:12:d0:ae:e8:5b:87:9c:2d:e2: 9b:77:39:67:84:88:6e:35:62:25:c2:12:81:51:77: 4e:55:80:57:72:c5:67:a1:57:73:19:2a:59:70:aa: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:4F:9E:89:72:04:4B:D7:2E:85:3F:8A:15:E0:2D:DF:B7:4D:12 X509v3 Authority Key Identifier: keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ba:f8:5b:5e:b0:d4:0e:34:29:18:37:5a:f9:38:0c:b5:d3: 69:7c:07:db:cc:26:30:f1:74:95:f7:cd:c2:36:61:68:36:44: bd:bf:73:37:0b:3d:7a:60:a4:8e:8a:04:f2:c1:7e:9f:d8:a6: 02:3d:2e:04:cf:e4:da:00:46:2a:cb:85:e4:17:ea:cb:cb:e5: cc:1b:c3:36:97:3f:82:20:05:b0:e7:a3:46:87:0c:ea:f4:ee: 26:a5:cc:41:26:c9:ab:7d:08:40:83:d1:a1:cc:e2:80:01:75: ee:80:97:c1:49:9e:95:cf:f9:d9:19:1d:a9:c2:20:2e:a6:86: 0d:4f:79:bb:56:92:1a:c2:38:98:b2:43:83:d2:a7:e5:10:37: 9e:de:b7:c0:7e:e7:a5:82:fe:e9:50:13:25:f5:43:1b:0d:e7: ec:83:e5:10:77:10:3e:20:a2:5b:b9:4a:cc:8e:b6:2c:3e:7d: 34:80:b7:b3:b4:91:3f:90:86:04:ff:78:64:8f:b0:62:7d:83: ee:9c:73:bc:f5:ed:e4:6d:03:a9:0a:c8:97:90:6a:e0:01:c2: 06:fb:ee:3a:51:79:9b:fd:36:ef:1c:78:c9:0b:03:6d:c0:1b: 99:e4:64:42:ba:6e:4a:4a:2b:b7:9f:e7:6a:3c:0c:da:3d:3a: 04:f1:4b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjUD4+jwB5KFJSAz1E6ZaEDhw2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4 ODRFNkI0QTAeFw0yNjAzMjUyMjM2NTJaFw0yNjAzMjkwMjAyNTJaMDMxMTAvBgNV BAMTKDQ4NkQ0RjlFODk3MjA0NEJENzJFODUzRjhBMTVFMDJEREZCNzREMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDojq9TOMKwiizTW0fI8ZouVE3 YAjgwUOjwsU22DOJsSLJhGvzAyaAKVfnsaJ8QCet0qePffuKG5Z1v1jfxWfVp2C6 8FsBfclSJYENVlOnFghV8RLgxxjIIE9Vo/cRRmdfZEo9n0vyBMfwHLLci+NUwHlZ j7HpQzP1s3OY6Yz4sWwaeAo5UVUMn+1gpWryN+5XQLCtIbwDGEppqtdT0xHvLnLG bFtJzmtVoOlvL+xYb7L9b/qoCZ4G+M0JTAsRcIlpIai9DImgOEbMl21xmODjHt8m KUSmzxLQruhbh5wt4pt3OWeEiG41YiXCEoFRd05VgFdyxWehV3MZKllwqrAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSG1PnolyBEvXLoU/ihXgLd+3TRIwHwYDVR0j BBgwFoAUmiUChVCkjv98mL+BaoSIvohOa0owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTYxZjg2ZS0wN2YwLTRjNjAtYWRjMC1mYzY4ODE2YWM4NjYvMC85QTI1MDI4NTUw QTQ4RUZGN0M5OEJGODE2QTg0ODhCRTg4NEU2QjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4QkU4ODRF NkI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2MWY4NmUtMDdmMC00YzYwLWFk YzAtZmM2ODgxNmFjODY2LzAvOUEyNTAyODU1MEE0OEVGRjdDOThCRjgxNkE4NDg4 QkU4ODRFNkI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm6+FtesNQONCkYN1r5OAy102l8B9vMJjDx dJX3zcI2YWg2RL2/czcLPXpgpI6KBPLBfp/YpgI9LgTP5NoARirLheQX6svL5cwb wzaXP4IgBbDno0aHDOr07ialzEEmyat9CECD0aHM4oABde6Al8FJnpXP+dkZHanC IC6mhg1PebtWkhrCOJiyQ4PSp+UQN57et8B+56WC/ulQEyX1QxsN5+yD5RB3ED4g olu5SsyOtiw+fTSAt7O0kT+QhgT/eGSPsGJ9g+6cc7z17eRtA6kKyJeQauABwgb7 7jpReZv9Nu8ceMkLA23AG5nkZEK6bkpKK7ef52o8DNo9OgTxS40= -----END CERTIFICATE-----Generated at Fri Mar 27 01:03:19 2026 by rpki-client