$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: Mgz9gRoO6lUUbLcHh/yf5Qcz5WRIQSzNtI11VVrgUfE= Subject key identifier: E9:5C:E2:A2:AF:8F:CB:91:97:98:6D:BF:25:1B:A5:E4:A0:23:51:C7 Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 0CF9161E239AE1864563A5FDF9595A532BC7AECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 16:42:26 +0000 Manifest this update: Wed 25 Mar 2026 16:37:26 +0000 Manifest next update: Sat 28 Mar 2026 21:49:26 +0000 Files and hashes: 1: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: 0dDHVDrD/3JvetvQuRwxp+GPHL+pTNRD37iwn5i2HL8=) 2: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: X/0Jg8AnYp15IMuFpFjlohJw4a6ZU+8NNk4F0efl1Zo=) 3: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: DF3AVMFkkHthZsKMcu2e1oc5wU3JAvdlvToRf4vXYY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:16:1e:23:9a:e1:86:45:63:a5:fd:f9:59:5a:53:2b:c7:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Mar 25 16:37:26 2026 GMT Not After : Mar 28 21:49:26 2026 GMT Subject: CN=E95CE2A2AF8FCB9197986DBF251BA5E4A02351C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:90:d8:c6:82:6a:d7:6f:ca:b2:8e:b4:6d: 2f:23:bf:aa:77:9b:84:f3:c6:ce:c2:6d:c8:30:f4: ac:a2:50:25:0e:e3:ec:2e:e1:eb:43:27:6f:f5:e0: ff:19:c3:4c:e0:5f:4d:5b:74:2d:37:2e:79:ca:8f: 30:89:1c:51:43:1c:3c:85:8b:d3:81:fa:70:9f:e9: bc:35:e6:ef:5a:2c:d6:fa:31:a5:05:3b:b0:0c:1e: 55:46:ee:3b:76:64:ef:d9:5f:d1:47:26:22:40:83: 79:cf:23:e1:8f:08:70:53:a3:7a:b1:3c:bf:de:ed: d9:9a:97:08:0c:1c:94:fe:4a:09:9f:be:06:d6:b3: 93:07:63:3c:c8:af:90:5d:d7:99:aa:df:e7:4d:1f: 86:bb:a3:14:72:03:a0:52:a1:7f:54:1a:65:43:73: e8:e1:dd:8a:69:2b:94:9e:53:40:34:f3:71:12:30: 82:45:b6:99:46:ad:70:da:2a:99:64:b8:3c:73:a0: 63:97:b1:2c:8a:35:09:e1:4d:0a:d7:22:af:a9:73: a0:4f:0b:18:d6:55:58:12:1f:0b:7a:64:ce:b9:79: 30:f8:e0:1e:a8:57:54:fe:db:1e:17:58:cf:f8:3e: 3f:47:68:b1:5f:71:37:0c:51:1a:b8:21:55:62:da: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5C:E2:A2:AF:8F:CB:91:97:98:6D:BF:25:1B:A5:E4:A0:23:51:C7 X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:45:c8:5a:31:63:8f:34:bd:43:f6:e9:9a:74:f0:08:ce:19: 64:95:cc:09:87:eb:3b:2c:1c:e6:c5:93:9f:9c:5a:00:10:bf: a1:86:f9:db:c0:8b:b6:bd:bb:f3:35:34:58:03:fa:e0:e8:06: fa:39:cf:1e:8f:f9:d8:9d:f2:df:ef:f3:a5:f8:01:43:6a:3e: 44:05:17:0a:58:3a:05:80:64:e0:24:24:bd:ba:11:0a:a8:a0: 37:ad:7f:38:37:cb:09:c7:41:c1:2c:dc:c4:c1:c3:50:07:f0: b3:2a:4a:98:33:05:23:78:37:8b:a3:d7:31:a0:af:5a:3d:e5: be:e8:ad:f7:3a:71:35:06:90:b9:e5:f1:52:4c:71:17:d1:9f: 20:33:12:37:b3:1f:e2:10:dd:03:45:b6:87:2f:9d:bd:e8:02: ad:e5:d6:27:16:98:0d:24:b2:c7:d8:ab:57:ab:49:93:5c:fe: 47:43:32:da:91:42:88:c7:4e:ef:86:ca:8d:b8:81:08:3b:76: c0:1f:95:95:be:ae:5a:bf:b9:2f:48:56:b2:f3:c3:02:80:84: c6:f8:b7:60:0b:59:9b:4d:ec:08:b7:d3:01:ce:d6:c8:83:38: ab:27:51:16:af:2a:77:87:42:34:ec:9d:df:f1:8f:b0:4a:c2: a0:37:d9:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPkWHiOa4YZFY6X9+VlaUyvHrswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNjAzMjUxNjM3MjZaFw0yNjAzMjgyMTQ5MjZaMDMxMTAvBgNV BAMTKEU5NUNFMkEyQUY4RkNCOTE5Nzk4NkRCRjI1MUJBNUU0QTAyMzUxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bpDYxoJq12/Kso60bS8jv6p3 m4Tzxs7Cbcgw9KyiUCUO4+wu4etDJ2/14P8Zw0zgX01bdC03LnnKjzCJHFFDHDyF i9OB+nCf6bw15u9aLNb6MaUFO7AMHlVG7jt2ZO/ZX9FHJiJAg3nPI+GPCHBTo3qx PL/e7dmalwgMHJT+SgmfvgbWs5MHYzzIr5Bd15mq3+dNH4a7oxRyA6BSoX9UGmVD c+jh3YppK5SeU0A083ESMIJFtplGrXDaKplkuDxzoGOXsSyKNQnhTQrXIq+pc6BP CxjWVVgSHwt6ZM65eTD44B6oV1T+2x4XWM/4Pj9HaLFfcTcMURq4IVVi2rXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Vzioq+Py5GXmG2/JRul5KAjUccwHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJFyFoxY480vUP26Zp08AjOGWSVzAmH6zss HObFk5+cWgAQv6GG+dvAi7a9u/M1NFgD+uDoBvo5zx6P+did8t/v86X4AUNqPkQF FwpYOgWAZOAkJL26EQqooDetfzg3ywnHQcEs3MTBw1AH8LMqSpgzBSN4N4uj1zGg r1o95b7orfc6cTUGkLnl8VJMcRfRnyAzEjezH+IQ3QNFtocvnb3oAq3l1icWmA0k ssfYq1erSZNc/kdDMtqRQojHTu+Gyo24gQg7dsAflZW+rlq/uS9IVrLzwwKAhMb4 t2ALWZtN7Ai30wHO1siDOKsnURavKneHQjTsnd/xj7BKwqA32cM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:56:42 2026 by rpki-client