$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json) Hash identifier: X2+CgmjvJcsF9k1ZoPKn2tiT1iTRTdRy8FZ46ehwYWM= Subject key identifier: 64:67:5D:8E:67:B0:4E:D3:C5:96:15:65:E8:5D:7B:93:26:37:ED:8D Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 7CD7D429AF64BA0D2C098482E17AFC815218741D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft Manifest number: 010C Signing time: Thu 26 Mar 2026 03:11:21 +0000 Manifest this update: Thu 26 Mar 2026 03:06:21 +0000 Manifest next update: Sun 29 Mar 2026 06:38:21 +0000 Files and hashes: 1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: 4HGTGRHmUx6kwYKHEwKU2U1KQGFx1hg4h+rp+XVqKPI=) 2: 3230322e39302e3139392e302f32342d3234203d3e203338373739.roa (hash: v6LmFd/T+Q18hViAVgo7YGWsfgbS5BdFapubty8W4rc=) 3: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (hash: G/6w1w2C5B7le/ekwUqqgtghBE+GFG1DFKcs7zEE3d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:d4:29:af:64:ba:0d:2c:09:84:82:e1:7a:fc:81:52:18:74:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Mar 26 03:06:21 2026 GMT Not After : Mar 29 06:38:21 2026 GMT Subject: CN=64675D8E67B04ED3C5961565E85D7B932637ED8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:08:23:89:b8:8f:a1:91:b7:55:17:d9:78: 02:ed:ea:2c:b7:3e:77:ba:96:19:2c:ff:5f:42:96: 77:eb:45:c6:8c:8c:3c:e4:42:59:3b:0b:29:b7:bd: ce:ad:ac:6c:a3:bb:7b:b5:e2:b5:ed:9f:a8:c6:59: f1:67:20:7e:e7:d4:ab:1a:17:95:cc:f0:f4:19:64: 13:d6:44:0b:81:f3:de:98:c7:bf:b6:7a:a5:3e:3a: 2b:70:9b:df:ca:de:eb:09:c0:fa:e1:ad:9d:c3:ac: a7:ea:66:a8:09:fa:3d:f0:ce:78:02:a9:49:71:cc: 9c:8f:91:d1:10:bd:67:6d:a9:27:8f:8b:fc:9a:3b: d5:2d:dc:4c:59:cc:03:48:76:63:84:e5:27:b0:47: 2a:70:7c:72:5c:09:35:d2:f7:9d:7c:21:c1:94:ac: 93:1f:bb:38:12:73:e8:6c:f0:92:49:02:3a:07:6e: a0:22:ae:43:9a:b1:89:40:3c:ee:a2:ea:d2:68:3a: 97:16:49:c8:31:b8:4a:2d:55:a9:79:c9:c0:38:0a: 2c:30:64:27:8c:15:64:13:5a:f5:da:63:57:29:53: 6c:76:e2:38:7e:d9:c3:06:09:6a:fc:f8:89:fc:70: af:68:8d:13:bb:0f:df:55:27:8a:28:50:b4:3c:01: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:5D:8E:67:B0:4E:D3:C5:96:15:65:E8:5D:7B:93:26:37:ED:8D X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:33:38:9b:a4:79:70:e1:82:51:d4:ee:c9:f2:53:19:64:e6: fa:b4:1f:00:88:5d:13:c3:e8:b7:88:65:97:09:b1:21:b7:aa: b8:2a:20:29:88:0f:a0:25:9b:4c:a3:d5:d4:15:28:4e:05:30: 6f:ea:1e:ff:6b:3c:69:cd:07:42:71:42:ed:de:9a:5d:e8:90: 75:fc:3f:33:ac:99:1a:35:ae:55:e7:5d:87:1a:16:f5:88:50: dd:dd:83:99:2b:7e:6a:b0:f5:5e:63:06:2c:4b:9d:7b:34:9f: ce:01:20:82:5d:c4:6a:4f:a7:df:97:61:c7:af:14:62:aa:80: 4f:d0:c6:bd:0c:2b:54:48:c2:18:65:ed:0c:5e:cc:19:27:6d: 70:24:a2:8b:be:a4:16:c8:cf:d8:59:2f:18:be:45:f6:ed:9a: f1:85:1b:3d:9c:a0:43:fa:2a:f5:de:d9:66:a7:db:11:41:6e: 19:b8:57:0c:e2:3f:35:c5:40:20:25:1d:af:39:63:25:ad:93: 3c:49:2f:bb:a6:53:09:1c:f3:bd:bc:41:58:b6:c1:8c:70:2b: fe:db:54:ae:5d:07:5a:7a:f5:66:d5:45:64:2d:3c:44:c4:81: b7:3b:f1:41:95:5e:7f:92:da:6c:d0:66:ef:3e:68:4b:db:de: 54:d1:a5:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNfUKa9kug0sCYSC4Xr8gVIYdB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNjAzMjYwMzA2MjFaFw0yNjAzMjkwNjM4MjFaMDMxMTAvBgNV BAMTKDY0Njc1RDhFNjdCMDRFRDNDNTk2MTU2NUU4NUQ3QjkzMjYzN0VEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NwgjibiPoZG3VRfZeALt6iy3 Pne6lhks/19ClnfrRcaMjDzkQlk7Cym3vc6trGyju3u14rXtn6jGWfFnIH7n1Ksa F5XM8PQZZBPWRAuB896Yx7+2eqU+Oitwm9/K3usJwPrhrZ3DrKfqZqgJ+j3wzngC qUlxzJyPkdEQvWdtqSePi/yaO9Ut3ExZzANIdmOE5SewRypwfHJcCTXS9518IcGU rJMfuzgSc+hs8JJJAjoHbqAirkOasYlAPO6i6tJoOpcWScgxuEotVal5ycA4Ciww ZCeMFWQTWvXaY1cpU2x24jh+2cMGCWr8+In8cK9ojRO7D99VJ4ooULQ8AVUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGddjmewTtPFlhVl6F17kyY37Y0wHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRlMWYzNzAtZjMxZi00N2VkLThh NDEtYjI4YmM4ZGFmNDM1LzAvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkND Qjk3NEMwNEM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYzOJukeXDhglHU7snyUxlk5vq0HwCIXRPD 6LeIZZcJsSG3qrgqICmID6Alm0yj1dQVKE4FMG/qHv9rPGnNB0JxQu3eml3okHX8 PzOsmRo1rlXnXYcaFvWIUN3dg5krfmqw9V5jBixLnXs0n84BIIJdxGpPp9+XYcev FGKqgE/Qxr0MK1RIwhhl7QxezBknbXAkoou+pBbIz9hZLxi+RfbtmvGFGz2coEP6 KvXe2Wan2xFBbhm4VwziPzXFQCAlHa85YyWtkzxJL7umUwkc8728QVi2wYxwK/7b VK5dB1p69WbVRWQtPETEgbc78UGVXn+S2mzQZu8+aEvb3lTRpXI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:44 2026 by rpki-client