$ rpki-client -vvf repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft File: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft (raw, json) Hash identifier: 0+FnCErzj6oq/0YS5Q/QrcSY3oSmtyw1pSnERg+X7V0= Subject key identifier: 85:F1:16:E8:EE:D2:F7:4A:BB:46:D0:15:6D:25:47:9A:58:CF:5E:AD Authority key identifier: 9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 Certificate issuer: /CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Certificate serial: 48C166818C42CD3BCEA5292E9A9B5188E9F96885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft Manifest number: 02CD Signing time: Wed 25 Mar 2026 21:20:04 +0000 Manifest this update: Wed 25 Mar 2026 21:15:04 +0000 Manifest next update: Sun 29 Mar 2026 07:30:04 +0000 Files and hashes: 1: 323030313a6466373a663130303a3a2f34382d3438203d3e20313338383731.roa (hash: FuiFUJ35N5X1O8fWHCAi5sBlAcV4CzxxZxBuftwVNyc=) 2: 9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl (hash: SeY66CvuL/2CZCAqKIuhHZTOlev9yifBCjttcCmFAgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c1:66:81:8c:42:cd:3b:ce:a5:29:2e:9a:9b:51:88:e9:f9:68:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49 Validity Not Before: Mar 25 21:15:04 2026 GMT Not After : Mar 29 07:30:04 2026 GMT Subject: CN=85F116E8EED2F74ABB46D0156D25479A58CF5EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:56:40:66:85:ee:16:c8:ad:8d:2a:9f:72: e5:da:ea:2a:1f:20:0f:36:6b:79:35:55:df:fc:95: 49:92:8b:19:65:9b:cc:3e:37:30:31:80:76:44:2a: b9:a4:11:ee:3d:c7:b6:05:74:a3:d1:18:be:2f:ce: 1c:bf:28:04:55:15:f0:37:5f:9f:0a:9a:ce:47:58: d7:6a:4d:49:13:74:f4:2b:cd:74:fd:3b:58:12:04: f6:b1:bb:77:92:2c:96:7c:30:35:0c:09:b9:95:f9: 8f:3c:ea:6a:38:f1:bb:ce:a2:cc:ad:13:c4:e9:6f: 78:52:13:b2:7b:bd:3a:b2:86:7f:1d:71:9e:f3:70: 3a:49:0d:d0:24:70:06:1e:67:2d:33:9d:04:1e:2c: ca:72:65:72:55:02:90:57:3d:72:f6:c8:b3:aa:cd: e1:5f:96:36:e2:66:e0:76:65:8e:50:71:c2:f2:57: 11:f2:32:a4:ab:fa:ba:54:09:d8:6b:e4:ad:38:a0: 16:8f:4f:da:d4:08:07:73:af:30:bc:e4:fc:f9:09: c1:ec:d5:f1:41:6a:b9:a9:43:19:aa:3a:9e:a1:9d: d8:84:86:7c:70:bd:8b:18:66:99:99:ed:ef:d4:75: 6c:9f:2b:dd:ab:bd:e3:25:e8:92:01:47:58:98:b2: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F1:16:E8:EE:D2:F7:4A:BB:46:D0:15:6D:25:47:9A:58:CF:5E:AD X509v3 Authority Key Identifier: keyid:9A:D8:AE:F8:36:2D:D0:3E:AC:C7:B7:DE:E2:0F:5D:3F:6D:FF:5D:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2be4f18-ceed-4f23-a0a4-e24e04d320d3/0/9AD8AEF8362DD03EACC7B7DEE20F5D3F6DFF5D49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e4:95:c9:39:e0:2d:98:26:2e:90:84:91:bb:31:94:e4:5e: 84:cc:4a:a8:22:a3:f8:5a:1c:24:54:a5:75:e1:82:60:60:ba: 34:4b:ef:89:cb:01:53:83:56:91:ea:fe:dd:7b:74:91:3f:1d: 67:52:71:09:8e:74:f0:c9:89:35:77:e4:8f:ed:9e:8d:28:0e: 74:6a:82:b8:00:62:6e:e5:42:80:8d:83:9c:4a:f1:61:c3:43: 91:52:fa:0a:89:89:93:12:2b:fe:f3:1e:02:da:4e:12:62:db: bc:5c:20:61:a0:c4:24:14:4c:52:20:7a:d3:d4:c9:a4:60:f3: f7:40:94:d3:c3:1c:a4:fb:b7:fd:0a:a7:cf:14:bb:97:01:f0: 4d:db:8d:5e:e4:16:48:83:d1:69:8c:b7:b2:0b:f3:03:02:1f: b7:23:de:14:b5:e5:2b:d5:83:18:3f:f6:b2:78:3f:18:50:77: f2:eb:5d:bb:78:1c:5c:4b:0e:9d:6f:c0:3b:9e:da:45:ee:99: 5a:06:5c:8b:f9:f3:63:51:8f:37:7e:c7:c0:63:0a:0f:12:a1: 54:11:73:2f:d6:f8:2b:9e:75:a7:65:8a:7f:36:5e:25:88:b0: fe:aa:c8:07:3b:d0:9e:e9:03:bf:75:8f:8c:41:36:7e:f8:75: 84:7e:3d:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMFmgYxCzTvOpSkumptRiOn5aIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2 REZGNUQ0OTAeFw0yNjAzMjUyMTE1MDRaFw0yNjAzMjkwNzMwMDRaMDMxMTAvBgNV BAMTKDg1RjExNkU4RUVEMkY3NEFCQjQ2RDAxNTZEMjU0NzlBNThDRjVFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmaFZAZoXuFsitjSqfcuXa6iof IA82a3k1Vd/8lUmSixllm8w+NzAxgHZEKrmkEe49x7YFdKPRGL4vzhy/KARVFfA3 X58Kms5HWNdqTUkTdPQrzXT9O1gSBPaxu3eSLJZ8MDUMCbmV+Y886mo48bvOosyt E8Tpb3hSE7J7vTqyhn8dcZ7zcDpJDdAkcAYeZy0znQQeLMpyZXJVApBXPXL2yLOq zeFfljbiZuB2ZY5QccLyVxHyMqSr+rpUCdhr5K04oBaPT9rUCAdzrzC85Pz5CcHs 1fFBarmpQxmqOp6hndiEhnxwvYsYZpmZ7e/UdWyfK92rveMl6JIBR1iYsuCZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhfEW6O7S90q7RtAVbSVHmljPXq0wHwYDVR0j BBgwFoAUmtiu+DYt0D6sx7fe4g9dP23/XUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmJlNGYxOC1jZWVkLTRmMjMtYTBhNC1lMjRlMDRkMzIwZDMvMC85QUQ4QUVGODM2 MkREMDNFQUNDN0I3REVFMjBGNUQzRjZERkY1RDQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVEM0Y2REZG NUQ0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiZTRmMTgtY2VlZC00ZjIzLWEw YTQtZTI0ZTA0ZDMyMGQzLzAvOUFEOEFFRjgzNjJERDAzRUFDQzdCN0RFRTIwRjVE M0Y2REZGNUQ0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLklck54C2YJi6QhJG7MZTkXoTMSqgio/ha HCRUpXXhgmBgujRL74nLAVODVpHq/t17dJE/HWdScQmOdPDJiTV35I/tno0oDnRq grgAYm7lQoCNg5xK8WHDQ5FS+gqJiZMSK/7zHgLaThJi27xcIGGgxCQUTFIgetPU yaRg8/dAlNPDHKT7t/0Kp88Uu5cB8E3bjV7kFkiD0WmMt7IL8wMCH7cj3hS15SvV gxg/9rJ4PxhQd/LrXbt4HFxLDp1vwDue2kXumVoGXIv582NRjzd+x8BjCg8SoVQR cy/W+Cuedadlin82XiWIsP6qyAc70J7pA791j4xBNn74dYR+PUQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:44 2026 by rpki-client