$ rpki-client -vvf repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft File: 9705995FB5C87DC40E50B1256B8809A101D17047.mft (raw, json) Hash identifier: cNAL3uUhrnYp469gv2cAY8H5Jaqir/NsjV8EpBUudWw= Subject key identifier: EC:47:AD:D4:A5:D7:4A:1E:C5:C9:36:50:42:1E:13:3E:4C:97:89:4B Authority key identifier: 97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 Certificate issuer: /CN=9705995FB5C87DC40E50B1256B8809A101D17047 Certificate serial: 04E6980B580892C588FCEC8D4B0C61F5B5FF8D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft Manifest number: 01EF Signing time: Wed 25 Mar 2026 22:21:54 +0000 Manifest this update: Wed 25 Mar 2026 22:16:54 +0000 Manifest next update: Sun 29 Mar 2026 02:37:54 +0000 Files and hashes: 1: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: dQEw2/q0jb+KQe+GF06aed8m+MpEA25/2ivEEFSNjyQ=) 2: 9705995FB5C87DC40E50B1256B8809A101D17047.crl (hash: 6FD02jK+EZJ3pMQ4Koi2w/jCIaccrrPTYxOUca7xI2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:98:0b:58:08:92:c5:88:fc:ec:8d:4b:0c:61:f5:b5:ff:8d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9705995FB5C87DC40E50B1256B8809A101D17047 Validity Not Before: Mar 25 22:16:54 2026 GMT Not After : Mar 29 02:37:54 2026 GMT Subject: CN=EC47ADD4A5D74A1EC5C93650421E133E4C97894B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:8d:23:18:31:02:00:48:28:80:16:29:e3: ff:3a:ca:1b:43:15:b4:11:eb:ed:46:d0:c1:02:e7: 9f:89:7e:cc:92:91:94:2c:b6:e1:c6:a4:da:b5:23: d3:b9:1c:cb:d1:60:31:94:ea:90:65:cd:48:6d:ba: f1:0d:b9:75:24:41:5b:81:b9:2a:68:46:50:5d:1e: e6:38:84:fe:5d:37:63:ce:8f:3c:4c:8e:f3:4b:b7: 20:60:71:4b:ce:ff:e9:8d:ad:38:00:46:a1:87:e1: 4b:27:f6:51:a5:6b:37:f0:c1:cd:8e:b7:ae:69:f4: d8:60:b3:d1:93:79:38:66:73:52:ad:df:6e:15:ef: 59:61:99:27:0a:1f:cf:19:e8:47:50:14:1f:ac:d7: a4:1f:ee:4d:ad:a2:ca:6d:3b:87:95:fa:bc:af:f0: 05:f0:33:83:06:af:14:f2:5b:89:57:7c:ca:11:4f: 4f:bb:23:29:20:78:be:a1:34:17:80:02:3c:13:a3: 4d:65:a9:7e:50:ae:21:8c:f0:58:4e:d7:cf:1d:01: 23:ba:2a:d5:32:88:8e:98:b2:b3:14:a4:0a:16:1c: 0b:ec:b8:24:a6:59:1e:e1:b1:c5:1c:59:45:31:59: 63:a2:f6:3f:2c:de:d9:51:16:3f:f6:31:bb:5b:bb: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:47:AD:D4:A5:D7:4A:1E:C5:C9:36:50:42:1E:13:3E:4C:97:89:4B X509v3 Authority Key Identifier: keyid:97:05:99:5F:B5:C8:7D:C4:0E:50:B1:25:6B:88:09:A1:01:D1:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9705995FB5C87DC40E50B1256B8809A101D17047.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/9705995FB5C87DC40E50B1256B8809A101D17047.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:70:d7:16:f8:fb:6e:14:4b:f7:8b:df:93:c9:b9:25:5d:05: f6:22:9f:ab:6f:8c:c1:b4:de:1b:ce:25:1f:36:3c:9a:cf:4f: 6a:d5:da:4c:ab:87:13:94:ee:ec:73:32:d5:79:6a:95:e7:67: 23:97:a2:36:38:9d:2f:e5:1e:a6:5c:7e:1d:2d:b5:d8:2d:79: ab:2c:62:81:75:d4:c7:b3:02:5c:09:4e:31:29:10:bc:ae:43: 06:9b:0a:a8:30:b3:d1:cb:fd:8e:41:9f:cc:85:f9:b7:06:64: 8e:d5:7d:04:63:70:5a:a8:74:5f:97:cf:c3:a6:d6:75:5d:5f: 48:e5:45:cb:c0:1a:9b:99:ad:f2:12:22:d9:07:6f:e3:b8:fd: 4e:92:b4:36:22:6d:8c:93:5b:e9:55:77:af:7b:89:01:d0:85: fe:e6:57:7b:92:d1:cf:4b:a0:a1:1e:3d:5d:9e:a8:f4:e9:47: d6:e5:e0:2f:fd:4a:6c:57:d1:ff:06:64:85:f0:1e:66:11:e6: ce:0c:ab:77:07:8f:94:f4:aa:c6:53:c3:14:e9:ce:f4:2a:8d: a4:b9:44:bb:cc:08:58:27:d9:af:1b:95:ea:db:67:aa:f1:4d: 20:3a:8c:66:84:1b:6c:3b:b5:da:9b:eb:c5:e4:54:ce:c7:43: ed:83:9b:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOaYC1gIksWI/OyNSwxh9bX/jXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEw MUQxNzA0NzAeFw0yNjAzMjUyMjE2NTRaFw0yNjAzMjkwMjM3NTRaMDMxMTAvBgNV BAMTKEVDNDdBREQ0QTVENzRBMUVDNUM5MzY1MDQyMUUxMzNFNEM5Nzg5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1x40jGDECAEgogBYp4/86yhtD FbQR6+1G0MEC55+JfsySkZQstuHGpNq1I9O5HMvRYDGU6pBlzUhtuvENuXUkQVuB uSpoRlBdHuY4hP5dN2POjzxMjvNLtyBgcUvO/+mNrTgARqGH4Usn9lGlazfwwc2O t65p9Nhgs9GTeThmc1Kt324V71lhmScKH88Z6EdQFB+s16Qf7k2tosptO4eV+ryv 8AXwM4MGrxTyW4lXfMoRT0+7IykgeL6hNBeAAjwTo01lqX5QriGM8FhO188dASO6 KtUyiI6YsrMUpAoWHAvsuCSmWR7hscUcWUUxWWOi9j8s3tlRFj/2Mbtbuy0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Eet1KXXSh7FyTZQQh4TPkyXiUswHwYDVR0j BBgwFoAUlwWZX7XIfcQOULEla4gJoQHRcEcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Nzk1YTM3OC1kNjllLTQ1MmUtYWM2Ny0zYjc0OTAzOWE4YzgvMC85NzA1OTk1RkI1 Qzg3REM0MEU1MEIxMjU2Qjg4MDlBMTAxRDE3MDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5QTEwMUQx NzA0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvOTcwNTk5NUZCNUM4N0RDNDBFNTBCMTI1NkI4ODA5 QTEwMUQxNzA0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNw1xb4+24US/eL35PJuSVdBfYin6tvjMG0 3hvOJR82PJrPT2rV2kyrhxOU7uxzMtV5apXnZyOXojY4nS/lHqZcfh0ttdgteass YoF11MezAlwJTjEpELyuQwabCqgws9HL/Y5Bn8yF+bcGZI7VfQRjcFqodF+Xz8Om 1nVdX0jlRcvAGpuZrfISItkHb+O4/U6StDYibYyTW+lVd697iQHQhf7mV3uS0c9L oKEePV2eqPTpR9bl4C/9SmxX0f8GZIXwHmYR5s4Mq3cHj5T0qsZTwxTpzvQqjaS5 RLvMCFgn2a8blerbZ6rxTSA6jGaEG2w7tdqb68XkVM7HQ+2Dmwk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:57:03 2026 by rpki-client