$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json) Hash identifier: dB142+s2FuI1ruq+n0a3LH7NCYpeQ7ve03MvNJZdo7I= Subject key identifier: 97:89:ED:78:2B:FE:77:52:D8:D3:18:32:9A:43:7F:FA:70:84:9C:ED Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Certificate serial: 414E3F1DD6AC9D7A23CA6540AFFCB308E94D6A29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft Manifest number: 0245 Signing time: Thu 26 Mar 2026 06:43:59 +0000 Manifest this update: Thu 26 Mar 2026 06:38:59 +0000 Manifest next update: Sun 29 Mar 2026 17:42:59 +0000 Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=) 2: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: 9kSHLqEYIcfzNrwz+8sJpN8Tv/tx7EUcxwBwA8G7YCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4e:3f:1d:d6:ac:9d:7a:23:ca:65:40:af:fc:b3:08:e9:4d:6a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C Validity Not Before: Mar 26 06:38:59 2026 GMT Not After : Mar 29 17:42:59 2026 GMT Subject: CN=9789ED782BFE7752D8D318329A437FFA70849CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:06:15:02:89:98:36:32:41:f6:40:ee:d6: a3:7d:18:bf:b0:53:b5:ab:bc:0c:a3:45:16:bc:35: e6:58:25:10:c8:6d:49:0a:98:c6:08:2d:ea:1e:da: f8:8d:1f:f5:17:51:c7:71:aa:76:1b:b1:44:1a:bc: 7d:eb:da:a9:d2:cf:1d:d3:ad:6a:2c:8d:69:c4:58: ab:68:5d:1a:4e:70:62:7f:44:6a:53:90:dc:a5:61: eb:7b:9a:bc:e5:03:b8:18:46:80:63:57:15:8c:21: c5:08:0c:99:92:9b:41:01:0c:17:f4:cb:ed:7a:35: 92:23:cf:ca:b0:13:bf:fa:66:19:9b:66:c2:9d:a8: ad:e2:2a:0a:44:2d:76:7d:87:64:a1:0a:b5:82:58: 00:bc:cb:c6:e1:d5:10:13:36:90:1e:9b:a2:36:e9: 95:bf:f0:32:8c:ac:20:98:2a:6b:24:5a:f0:1d:67: d1:e4:a6:62:6c:93:2e:ef:fc:59:0e:87:28:99:74: 42:71:51:38:46:40:19:f2:f6:47:6c:5a:52:fb:df: 65:8a:06:f9:27:38:57:98:99:e2:5f:dc:70:f6:f5: be:59:f8:c2:3f:7d:06:b3:d7:4b:d0:a3:cf:73:04: be:d3:4a:eb:7e:97:4c:e6:33:ea:a1:3a:5f:32:21: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:89:ED:78:2B:FE:77:52:D8:D3:18:32:9A:43:7F:FA:70:84:9C:ED X509v3 Authority Key Identifier: keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fc:3b:39:cd:3d:da:1f:3c:02:f5:37:8f:3c:b4:61:c7:f4: 55:a2:bd:3c:d1:f5:a5:da:23:28:7f:55:18:8f:e2:bf:89:84: 21:81:04:6a:f3:9a:f6:0c:a7:97:3e:f5:de:4e:28:45:81:91: 82:b7:42:aa:69:53:05:bd:9d:f2:d6:91:e8:34:be:f8:b1:6a: fe:10:20:8b:0c:d3:55:62:06:8d:99:85:5d:56:5f:9e:9e:2f: c8:21:43:74:e4:4b:b1:f6:ed:ae:9c:ae:d1:07:a1:35:4f:d3: 73:8c:9a:ff:14:90:3f:18:3c:09:4b:29:94:19:91:3a:67:7c: 00:cc:ce:03:1d:05:75:53:bc:ce:55:b4:7d:5e:96:c3:a0:00: 7c:54:f2:17:01:de:b4:97:24:cb:ff:53:92:cd:c4:37:bf:7c: 2b:5a:4e:ec:24:5a:1f:ba:e4:28:aa:1a:c0:33:6b:ad:0c:b2: 0e:3b:91:f8:c6:da:9a:1f:c6:d6:0f:83:17:9b:90:86:26:e2: c9:d6:24:b0:4a:40:c2:06:e8:ae:5c:0a:7d:1d:9e:86:b2:e7: 2a:39:dc:de:c6:04:33:d2:0c:b4:87:df:99:2f:bc:c8:83:1d: 61:7a:2d:bd:68:3b:4f:64:d0:5d:1e:12:0c:58:5a:1b:3e:74: cd:40:4b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQU4/HdasnXojymVAr/yzCOlNaikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FD N0EzNTE1QzAeFw0yNjAzMjYwNjM4NTlaFw0yNjAzMjkxNzQyNTlaMDMxMTAvBgNV BAMTKDk3ODlFRDc4MkJGRTc3NTJEOEQzMTgzMjlBNDM3RkZBNzA4NDlDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wQYVAomYNjJB9kDu1qN9GL+w U7WrvAyjRRa8NeZYJRDIbUkKmMYILeoe2viNH/UXUcdxqnYbsUQavH3r2qnSzx3T rWosjWnEWKtoXRpOcGJ/RGpTkNylYet7mrzlA7gYRoBjVxWMIcUIDJmSm0EBDBf0 y+16NZIjz8qwE7/6ZhmbZsKdqK3iKgpELXZ9h2ShCrWCWAC8y8bh1RATNpAem6I2 6ZW/8DKMrCCYKmskWvAdZ9HkpmJsky7v/FkOhyiZdEJxUThGQBny9kdsWlL732WK BvknOFeYmeJf3HD29b5Z+MI/fQaz10vQo89zBL7TSut+l0zmM+qhOl8yIRUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl4nteCv+d1LY0xgymkN/+nCEnO0wHwYDVR0j BBgwFoAUEaycrM6ar9ZuQYPm4OWZOsejUVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWJiZTVjMC03OWVkLTQ2ZmEtODk4OS04OGQ4YWNjODdjZjgvMC8xMUFDOUNBQ0NF OUFBRkQ2NkU0MTgzRTZFMEU1OTkzQUM3QTM1MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5M0FDN0Ez NTE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjliYmU1YzAtNzllZC00NmZhLTg5 ODktODhkOGFjYzg3Y2Y4LzAvMTFBQzlDQUNDRTlBQUZENjZFNDE4M0U2RTBFNTk5 M0FDN0EzNTE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn8OznNPdofPAL1N488tGHH9FWivTzR9aXa Iyh/VRiP4r+JhCGBBGrzmvYMp5c+9d5OKEWBkYK3QqppUwW9nfLWkeg0vvixav4Q IIsM01ViBo2ZhV1WX56eL8ghQ3TkS7H27a6crtEHoTVP03OMmv8UkD8YPAlLKZQZ kTpnfADMzgMdBXVTvM5VtH1elsOgAHxU8hcB3rSXJMv/U5LNxDe/fCtaTuwkWh+6 5CiqGsAza60Msg47kfjG2pofxtYPgxebkIYm4snWJLBKQMIG6K5cCn0dnoay5yo5 3N7GBDPSDLSH35kvvMiDHWF6Lb1oO09k0F0eEgxYWhs+dM1AS68= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:11 2026 by rpki-client