$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: TAYNXril5AGKjXgk9WytPPhxrNtYoOXIWzgI6Zc5k6M= Subject key identifier: 0E:E0:E6:3A:83:D7:E1:CE:D2:B2:BA:C2:F1:D4:8A:19:5D:A6:62:09 Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 47D9F1681F53EF36CC95CEAC34D8AE76925EB9AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: 021A Signing time: Tue 24 Mar 2026 21:44:23 +0000 Manifest this update: Tue 24 Mar 2026 21:39:23 +0000 Manifest next update: Sat 28 Mar 2026 06:28:23 +0000 Files and hashes: 1: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: WwofrZFmyxxNmFQldqggXgk6rTZwUF5EZ7pyfgFI9jU=) 3: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: EatVj16JfZN1a07xrK0h6xf7Rv2ZAzoXpej8eOLlKjQ=) 4: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: dbP4OEg6YdK955T8OItEB/FUUSN9HbYAIlsdXbllenI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d9:f1:68:1f:53:ef:36:cc:95:ce:ac:34:d8:ae:76:92:5e:b9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Mar 24 21:39:23 2026 GMT Not After : Mar 28 06:28:23 2026 GMT Subject: CN=0EE0E63A83D7E1CED2B2BAC2F1D48A195DA66209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:f9:54:05:06:84:c5:b6:8a:91:0c:5c:9b: f5:c3:91:9c:65:79:05:82:e5:39:b5:c1:78:ad:6c: 42:50:76:57:66:e4:b7:c4:9a:e9:96:04:10:88:10: 6b:22:df:c4:71:00:69:e8:ce:63:bd:fd:6b:be:b1: c6:ec:bb:8a:81:d0:77:7a:26:f0:ca:39:30:2d:cf: 36:6f:a2:e4:e4:26:3a:67:15:d2:fb:f6:10:68:5f: 76:f2:e5:f3:75:0e:ad:11:63:bd:ba:00:cf:e7:db: d2:06:3f:ac:15:72:38:c6:f3:69:7b:e6:6c:a7:a7: 96:1e:42:a7:4c:ca:02:bf:16:d3:b0:4e:49:24:20: b9:58:ab:64:55:64:74:ea:12:aa:41:51:9b:52:d0: 4b:d0:26:8a:88:15:32:09:1f:dc:78:15:77:d1:a6: d7:43:1c:cf:c8:79:23:3a:93:38:8c:6d:3b:d9:28: c0:f2:e6:b8:f1:74:63:de:b0:5b:f0:20:89:34:e9: 6a:88:ba:15:0a:0a:25:b7:d8:2e:85:0e:79:eb:c3: 9c:21:40:03:26:48:50:68:cc:0a:29:40:82:1c:e5: 91:57:84:ea:64:0e:5d:b8:50:10:69:28:3f:be:95: 4c:bb:ec:90:7b:40:aa:52:d8:38:e6:05:69:58:52: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:E6:3A:83:D7:E1:CE:D2:B2:BA:C2:F1:D4:8A:19:5D:A6:62:09 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:75:95:9a:67:66:8d:77:ba:41:58:ae:42:8a:04:cd:cd:50: b9:74:07:a5:4d:d5:ed:f9:a8:d3:e5:ed:42:2d:e2:59:1b:cf: 06:77:5c:86:81:c8:f1:fa:e1:22:75:ad:4e:28:36:fe:16:f8: a9:02:df:3a:32:e8:01:30:ea:92:68:82:8c:cf:05:9c:38:24: 5d:a9:af:92:53:73:2f:17:ff:6e:8c:90:44:28:a1:28:7d:32: 79:f6:bd:54:84:2b:4d:31:3a:3b:f7:40:06:97:2e:39:b7:f8: 79:56:c5:59:a1:f7:79:6e:87:43:6c:55:1c:99:87:e1:82:8a: 8c:c7:fe:49:f7:93:22:09:a7:f8:e3:a9:8a:92:cb:1b:6a:6f: c2:7d:88:e7:ac:e2:1a:41:ee:03:ec:82:49:69:dc:37:1d:9f: ea:14:7c:b3:1f:9e:3b:7d:34:9b:5b:17:36:6d:6d:ee:ca:2a: 4e:2a:43:28:a8:af:51:14:59:e2:6c:a6:d8:64:ef:1f:06:ef: 42:8e:4e:7a:4e:3e:06:c1:18:32:56:6c:87:2d:e0:14:c0:fd: 8a:2c:48:e9:44:5a:c1:2f:30:c7:97:f3:96:14:2a:f7:5f:81: df:41:e5:b3:67:1d:3b:e0:78:94:e6:a9:22:6c:12:19:80:34: 2a:fd:bb:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9nxaB9T7zbMlc6sNNiudpJeua0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNjAzMjQyMTM5MjNaFw0yNjAzMjgwNjI4MjNaMDMxMTAvBgNV BAMTKDBFRTBFNjNBODNEN0UxQ0VEMkIyQkFDMkYxRDQ4QTE5NURBNjYyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSPlUBQaExbaKkQxcm/XDkZxl eQWC5Tm1wXitbEJQdldm5LfEmumWBBCIEGsi38RxAGnozmO9/Wu+scbsu4qB0Hd6 JvDKOTAtzzZvouTkJjpnFdL79hBoX3by5fN1Dq0RY726AM/n29IGP6wVcjjG82l7 5mynp5YeQqdMygK/FtOwTkkkILlYq2RVZHTqEqpBUZtS0EvQJoqIFTIJH9x4FXfR ptdDHM/IeSM6kziMbTvZKMDy5rjxdGPesFvwIIk06WqIuhUKCiW32C6FDnnrw5wh QAMmSFBozAopQIIc5ZFXhOpkDl24UBBpKD++lUy77JB7QKpS2DjmBWlYUqfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuDmOoPX4c7SsrrC8dSKGV2mYgkwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALB1lZpnZo13ukFYrkKKBM3NULl0B6VN1e35 qNPl7UIt4lkbzwZ3XIaByPH64SJ1rU4oNv4W+KkC3zoy6AEw6pJogozPBZw4JF2p r5JTcy8X/26MkEQooSh9Mnn2vVSEK00xOjv3QAaXLjm3+HlWxVmh93luh0NsVRyZ h+GCiozH/kn3kyIJp/jjqYqSyxtqb8J9iOes4hpB7gPsgklp3Dcdn+oUfLMfnjt9 NJtbFzZtbe7KKk4qQyior1EUWeJspthk7x8G70KOTnpOPgbBGDJWbIct4BTA/Yos SOlEWsEvMMeX85YUKvdfgd9B5bNnHTvgeJTmqSJsEhmANCr9ux8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:22:59 2026 by rpki-client