$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft File: A9DD956A549689BA0A3E2FC62291352AAABD591B.mft (raw, json) Hash identifier: YjdTPzsYkraYlNCETqeamAb/C+kKmOQpX1TpCuMyxpU= Subject key identifier: A4:F6:AF:99:AF:71:3D:AC:D1:50:57:C3:D6:AC:11:05:70:E5:20:F1 Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Certificate serial: 377BC93962FFB7BAAB861277A6999225AC6285BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft Manifest number: 0194 Signing time: Mon 23 Mar 2026 20:51:28 +0000 Manifest this update: Mon 23 Mar 2026 20:46:28 +0000 Manifest next update: Fri 27 Mar 2026 06:55:28 +0000 Files and hashes: 1: A9DD956A549689BA0A3E2FC62291352AAABD591B.crl (hash: jPaHqfLak0Ji371QiFKGKmTjxJm3CrjF/ZVHaZKWoUM=) 2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: cPalj//L2DQWwry9XW3mJXHIMP/VWhMLdNmkuNDvOfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 06:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7b:c9:39:62:ff:b7:ba:ab:86:12:77:a6:99:92:25:ac:62:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Validity Not Before: Mar 23 20:46:28 2026 GMT Not After : Mar 27 06:55:28 2026 GMT Subject: CN=A4F6AF99AF713DACD15057C3D6AC110570E520F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:e1:34:1c:2d:21:d4:45:8e:9e:8b:6d:4b: a3:09:ce:b7:40:5c:12:5b:db:6d:cd:42:ec:75:8f: 54:3c:92:6c:6e:f1:22:64:79:65:ad:cf:82:0b:9c: 37:5f:4f:d9:9e:62:26:13:80:34:9e:c4:4a:d8:9d: 0d:44:d4:5b:92:2a:47:b5:3e:ed:9d:da:ec:ac:68: 35:4e:34:fb:33:8c:59:fd:f6:81:43:f7:69:84:1d: ff:d6:d1:e7:2b:c7:ae:56:0d:ca:0d:22:63:0a:af: ad:a9:bf:ce:d3:c3:3e:95:a7:2a:d3:e7:7a:f9:93: 00:be:bc:88:d3:7a:00:1f:5c:4c:2a:9f:b3:a9:5d: e0:95:f0:0c:2d:fa:bf:0c:f7:34:89:a3:ea:67:aa: a0:23:aa:3e:de:f0:9e:d3:7f:36:0b:2d:47:60:5f: b0:74:90:b4:f4:fc:dd:71:7a:7f:73:2c:6f:09:6c: cd:68:1d:a1:85:04:bb:ca:ea:78:a0:77:a8:6d:03: e2:a3:53:91:d9:47:42:4d:d7:a0:4e:76:97:5e:8a: 67:52:20:7d:9f:66:36:09:da:b4:13:4f:de:d0:71: a5:3b:62:42:ef:aa:f0:0b:e1:1f:0f:91:04:5d:15: 4e:ee:cf:a6:14:4d:e0:d1:18:89:99:5b:31:75:3a: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F6:AF:99:AF:71:3D:AC:D1:50:57:C3:D6:AC:11:05:70:E5:20:F1 X509v3 Authority Key Identifier: keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8f:4f:b9:5e:39:ed:c3:47:01:87:e9:96:72:b8:07:e3:ff: 4a:f0:fb:ed:cd:ba:6d:45:da:a6:e8:cb:6f:80:71:55:4f:1f: 0f:4e:bd:3c:d3:f1:fe:b9:a6:7f:5e:99:6c:94:0d:bf:0d:54: 04:f5:a3:c1:6e:b8:08:76:61:b0:91:6b:a4:aa:bc:a8:42:33: f6:1f:b8:e2:3e:27:f0:cc:70:07:b7:6d:e6:a7:14:ed:af:f3: 46:86:d7:af:16:3b:80:b9:11:a0:68:2e:d6:66:89:ec:c0:40: a4:78:b2:2c:0b:57:55:75:28:67:55:c7:58:08:62:ab:0d:90: d8:a9:4d:52:81:8f:dd:d7:da:b1:28:0a:13:96:3d:a5:fe:44: f3:2b:08:3c:1e:5c:06:37:dd:f7:1a:9a:6d:0c:7d:06:97:32: 92:c0:9d:5b:17:1a:12:56:b1:76:c2:8f:39:55:a6:76:ef:77: 60:a5:71:68:fc:a4:7b:a8:0c:20:42:ed:99:ca:d4:8d:18:d2: 60:39:eb:25:83:76:9d:78:16:f7:fa:fe:48:50:8d:83:70:d6: 3b:c0:92:b9:15:24:de:cc:93:e4:8d:47:0a:97:af:c4:db:c4: 20:49:12:1e:3d:25:b9:4f:f9:42:b0:90:36:bc:c6:92:90:83: 3d:77:de:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3vJOWL/t7qrhhJ3ppmSJaxihb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB QUJENTkxQjAeFw0yNjAzMjMyMDQ2MjhaFw0yNjAzMjcwNjU1MjhaMDMxMTAvBgNV BAMTKEE0RjZBRjk5QUY3MTNEQUNEMTUwNTdDM0Q2QUMxMTA1NzBFNTIwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCceE0HC0h1EWOnottS6MJzrdA XBJb223NQux1j1Q8kmxu8SJkeWWtz4ILnDdfT9meYiYTgDSexErYnQ1E1FuSKke1 Pu2d2uysaDVONPszjFn99oFD92mEHf/W0ecrx65WDcoNImMKr62pv87Twz6VpyrT 53r5kwC+vIjTegAfXEwqn7OpXeCV8Awt+r8M9zSJo+pnqqAjqj7e8J7TfzYLLUdg X7B0kLT0/N1xen9zLG8JbM1oHaGFBLvK6nigd6htA+KjU5HZR0JN16BOdpdeimdS IH2fZjYJ2rQTT97QcaU7YkLvqvAL4R8PkQRdFU7uz6YUTeDRGImZWzF1Om9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpPavma9xPazRUFfD1qwRBXDlIPEwHwYDVR0j BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0 OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE NTkxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRjMWM0OWMtZDQwNC00NWExLTll N2QtODZmNWY4NTJlMjc2LzAvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1 MkFBQUJENTkxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmPT7leOe3DRwGH6ZZyuAfj/0rw++3Num1F 2qboy2+AcVVPHw9OvTzT8f65pn9emWyUDb8NVAT1o8FuuAh2YbCRa6SqvKhCM/Yf uOI+J/DMcAe3beanFO2v80aG168WO4C5EaBoLtZmiezAQKR4siwLV1V1KGdVx1gI YqsNkNipTVKBj93X2rEoChOWPaX+RPMrCDweXAY33fcamm0MfQaXMpLAnVsXGhJW sXbCjzlVpnbvd2ClcWj8pHuoDCBC7ZnK1I0Y0mA56yWDdp14Fvf6/khQjYNw1jvA krkVJN7Mk+SNRwqXr8TbxCBJEh49JblP+UKwkDa8xpKQgz133k0= -----END CERTIFICATE-----Generated at Thu Mar 26 05:56:30 2026 by rpki-client