$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: DguwUpCWjOpdRMtNDooPoNGx1rDiHgICqCV9ngWVAJg= Subject key identifier: 13:D4:EA:26:BD:7F:11:79:08:DB:38:9F:F9:31:C8:80:27:55:EC:94 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 7F48BAF3284DB50BCF9E6E8FD180E92946E182EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 10:22:11 +0000 Manifest this update: Wed 25 Mar 2026 10:17:11 +0000 Manifest next update: Sat 28 Mar 2026 13:24:11 +0000 Files and hashes: 1: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) 2: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: 6Y7JGB5+MGVEWBo902WLC18NIA0tQFJPaxQ534JL/nM=) 3: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:48:ba:f3:28:4d:b5:0b:cf:9e:6e:8f:d1:80:e9:29:46:e1:82:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Mar 25 10:17:11 2026 GMT Not After : Mar 28 13:24:11 2026 GMT Subject: CN=13D4EA26BD7F117908DB389FF931C8802755EC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:dc:3f:da:bf:d8:9e:b4:69:77:0b:37:27: 18:ec:ae:0b:c8:ba:92:d9:59:59:05:3c:32:9e:32: 31:9e:08:49:66:70:55:ec:dd:6e:63:ba:d7:27:e0: 3c:cc:c4:2e:80:1e:eb:5a:43:02:cb:4a:b6:e0:cb: 4b:7b:a6:98:99:16:3e:0c:1b:7c:6b:9a:90:49:10: ce:9f:07:d7:af:45:27:4f:fe:2c:53:fa:85:29:6d: bc:50:68:38:9f:f8:7b:06:03:5e:28:26:e2:bd:01: cf:df:a2:52:ce:7f:56:b4:4b:91:81:f3:88:3a:5d: 0c:e6:23:b9:1c:a2:74:cd:6b:a0:aa:fb:ff:2a:01: 9b:b9:20:f7:4f:f3:62:91:eb:2d:e9:c1:f0:ed:3f: 82:d7:d3:73:c3:0f:28:60:c9:e6:1c:2c:2d:0d:b5: f2:ae:31:79:fa:29:8e:1a:80:28:5d:9b:60:36:94: ca:72:db:ea:bd:28:06:b0:2d:e6:3c:f1:11:63:fb: 95:f8:42:61:96:2d:2a:b3:1b:5c:8f:bf:26:72:d3: ef:ea:fc:a8:d3:f8:fa:f8:47:3c:10:cf:6d:7a:c1: af:a3:1e:f1:16:8b:02:ab:be:67:bb:a9:51:fb:a2: a0:b6:59:44:76:32:90:88:3e:d2:bc:92:43:a4:46: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:EA:26:BD:7F:11:79:08:DB:38:9F:F9:31:C8:80:27:55:EC:94 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e7:d7:44:52:82:6b:b4:22:59:1a:c3:2b:d8:9a:59:81:75: f1:9e:65:d2:5f:40:31:2a:25:b3:46:dc:ed:1b:e5:2f:67:e1: 8f:58:14:7e:97:76:ed:ab:51:23:ba:b7:64:cd:09:e4:e7:40: a0:ff:c0:3e:83:e2:b2:37:cd:00:59:c4:6e:a6:11:97:52:69: 9d:6b:af:7c:15:05:3b:72:fe:c0:82:88:d0:a1:bd:d9:82:fe: 81:d4:c1:3d:00:64:78:84:41:20:ec:d5:2c:16:76:2c:b9:67: 0f:58:bd:d5:9d:1d:3b:5f:cb:0d:e3:35:0e:24:d6:18:9a:49: d3:e7:44:63:25:a1:32:22:13:2f:3c:5c:ea:4b:6d:07:6d:77: c4:62:b9:29:71:ba:dd:d5:07:cf:53:6b:6c:f8:d1:61:aa:59: 00:66:08:f0:1b:20:dd:7c:90:9b:a9:de:d0:19:a0:03:e0:56: c7:73:37:ef:13:04:a0:9b:cd:66:f2:b0:e2:60:98:d6:c5:d0: eb:dc:78:84:c7:5e:7b:07:9c:51:21:77:8e:94:c5:90:69:92: 1e:1f:a6:fb:a0:7a:d4:59:e4:24:e5:0a:99:90:84:2f:8c:d3: 4b:ae:8e:a8:95:64:c9:77:e6:44:90:3e:55:63:a9:f8:77:cc: 2c:4e:8a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0i68yhNtQvPnm6P0YDpKUbhguswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNjAzMjUxMDE3MTFaFw0yNjAzMjgxMzI0MTFaMDMxMTAvBgNV BAMTKDEzRDRFQTI2QkQ3RjExNzkwOERCMzg5RkY5MzFDODgwMjc1NUVDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/s9w/2r/YnrRpdws3JxjsrgvI upLZWVkFPDKeMjGeCElmcFXs3W5jutcn4DzMxC6AHutaQwLLSrbgy0t7ppiZFj4M G3xrmpBJEM6fB9evRSdP/ixT+oUpbbxQaDif+HsGA14oJuK9Ac/folLOf1a0S5GB 84g6XQzmI7kconTNa6Cq+/8qAZu5IPdP82KR6y3pwfDtP4LX03PDDyhgyeYcLC0N tfKuMXn6KY4agChdm2A2lMpy2+q9KAawLeY88RFj+5X4QmGWLSqzG1yPvyZy0+/q /KjT+Pr4RzwQz216wa+jHvEWiwKrvme7qVH7oqC2WUR2MpCIPtK8kkOkRhBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9TqJr1/EXkI2zif+THIgCdV7JQwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3n10RSgmu0IlkawyvYmlmBdfGeZdJfQDEq JbNG3O0b5S9n4Y9YFH6Xdu2rUSO6t2TNCeTnQKD/wD6D4rI3zQBZxG6mEZdSaZ1r r3wVBTty/sCCiNChvdmC/oHUwT0AZHiEQSDs1SwWdiy5Zw9YvdWdHTtfyw3jNQ4k 1hiaSdPnRGMloTIiEy88XOpLbQdtd8RiuSlxut3VB89Ta2z40WGqWQBmCPAbIN18 kJup3tAZoAPgVsdzN+8TBKCbzWbysOJgmNbF0OvceITHXnsHnFEhd46UxZBpkh4f pvugetRZ5CTlCpmQhC+M00uujqiVZMl35kSQPlVjqfh3zCxOinU= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:39 2026 by rpki-client