$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft File: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft (raw, json) Hash identifier: +jIGAA2AzfURpwvfv8uLGSFQgco6ACwKHAhWlFm4PS8= Subject key identifier: DC:E5:E0:AE:BF:A3:D8:39:91:75:97:5E:01:52:18:15:88:0F:E9:8F Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 7A63E1821889FC9EA77D16EAC6DC17E9B4534CD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft Manifest number: FC Signing time: Wed 25 Mar 2026 05:51:41 +0000 Manifest this update: Wed 25 Mar 2026 05:46:41 +0000 Manifest next update: Sat 28 Mar 2026 12:53:41 +0000 Files and hashes: 1: 3130332e3138382e3137322e302f32342d3234203d3e20313439373336.roa (hash: +ocSAGB3dBIAVC5M40zigsYrVPiW6jAUz0b74ynxGfc=) 2: 3130332e3138382e3137332e302f32342d3234203d3e20313439373336.roa (hash: sDgjE8ymqlBE9cw/ir42Gp3BLLczy7m3TqUyfVT9fkU=) 3: 323430313a343865303a343030313a3a2f34382d3438203d3e20313439373336.roa (hash: RFcogeaEPWKhAE9n7Pl04rx41EdOlubzKnwCzsq//8U=) 4: 9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl (hash: 5GydK8Uw77UpkhPbcKy9HgM+HqfDaNn0tT19x8NU9C8=) 5: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (hash: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:63:e1:82:18:89:fc:9e:a7:7d:16:ea:c6:dc:17:e9:b4:53:4c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Mar 25 05:46:41 2026 GMT Not After : Mar 28 12:53:41 2026 GMT Subject: CN=DCE5E0AEBFA3D8399175975E01521815880FE98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:e9:f2:6b:cf:15:71:f4:4d:6f:07:33:7b: fb:bb:12:9c:e2:72:0b:83:14:a6:81:ea:9a:3b:9f: 1f:6c:14:03:b9:65:a2:7d:9f:97:b7:33:86:37:79: 7c:56:e4:5c:ca:f6:b9:7d:21:43:4a:d0:7d:0e:1b: ff:cc:3f:f3:2b:95:29:0f:11:76:b0:76:8b:5c:83: 0a:3d:83:c6:90:cd:d3:1c:60:0b:7b:da:bd:e3:c6: ad:a5:b3:72:5a:7c:12:ff:d3:35:7b:38:a5:8b:89: 58:49:66:56:e5:d1:0e:e5:a9:1c:a7:16:28:e3:48: cc:09:d2:60:b5:49:e9:ac:2e:00:13:e3:e3:ab:65: 94:4d:71:57:74:e6:7b:f2:08:f0:68:78:46:f0:df: 0f:20:c1:b6:99:16:1a:a4:28:61:95:16:72:00:d1: 2e:6b:cf:8b:8a:ae:30:59:40:a1:82:71:32:f2:21: c5:63:53:a8:0d:7e:2c:81:94:39:90:2d:d6:22:5d: f9:be:e9:09:3b:dc:58:44:44:80:78:c2:e0:e6:68: 07:83:8a:25:03:20:e5:77:55:bb:82:9a:47:b8:27: 15:ac:eb:b0:31:9e:d9:ae:57:ab:2b:34:d8:28:e3: 51:f8:99:04:8c:ee:03:c9:56:fa:77:bb:d0:29:6c: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E5:E0:AE:BF:A3:D8:39:91:75:97:5E:01:52:18:15:88:0F:E9:8F X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:83:e5:c6:fc:f4:7b:f5:64:9a:f8:96:36:df:f3:c1:21:fe: 74:66:11:cb:f0:6f:41:c3:c3:14:1a:2b:28:e2:29:30:6c:bb: 12:72:80:ea:b2:a9:0e:6f:95:6a:10:82:f2:e0:5f:6c:99:84: 33:3b:cc:48:cb:35:21:18:b5:35:02:77:d4:f2:d3:d1:46:1b: 74:03:05:0b:c3:f9:0f:33:29:85:51:ac:74:4f:e0:55:31:cc: 07:72:5a:1e:cc:a5:dd:51:bb:f6:f2:8d:e9:a2:30:74:c4:2b: 21:f8:a7:b0:7c:82:f5:83:2c:12:19:71:66:18:69:e6:7f:ef: 97:48:70:6a:47:67:1f:c6:e1:fd:8a:23:3b:39:2e:b6:05:cd: 67:31:fc:ab:6c:79:12:64:4d:25:c7:3a:2f:f2:a9:a7:9e:c4: b4:6b:97:71:c3:61:1c:5c:2a:fa:48:b1:37:be:de:3d:dc:be: e4:8e:24:3b:c5:78:00:20:a7:90:b1:c8:93:a1:57:3e:48:82: 2e:11:ad:09:e7:54:e8:1c:d1:f1:10:6b:3a:9f:ae:9c:13:e6: 3c:c2:f7:03:82:6f:77:51:09:11:c6:08:a1:4f:68:d5:52:77: bf:d4:f2:fb:a1:32:ad:a8:bb:65:87:47:2d:c2:28:f1:ca:36: 38:16:29:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemPhghiJ/J6nfRbqxtwX6bRTTNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNjAzMjUwNTQ2NDFaFw0yNjAzMjgxMjUzNDFaMDMxMTAvBgNV BAMTKERDRTVFMEFFQkZBM0Q4Mzk5MTc1OTc1RTAxNTIxODE1ODgwRkU5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1enya88VcfRNbwcze/u7Epzi cguDFKaB6po7nx9sFAO5ZaJ9n5e3M4Y3eXxW5FzK9rl9IUNK0H0OG//MP/MrlSkP EXawdotcgwo9g8aQzdMcYAt72r3jxq2ls3JafBL/0zV7OKWLiVhJZlbl0Q7lqRyn FijjSMwJ0mC1SemsLgAT4+OrZZRNcVd05nvyCPBoeEbw3w8gwbaZFhqkKGGVFnIA 0S5rz4uKrjBZQKGCcTLyIcVjU6gNfiyBlDmQLdYiXfm+6Qk73FhERIB4wuDmaAeD iiUDIOV3VbuCmke4JxWs67AxntmuV6srNNgo41H4mQSM7gPJVvp3u9ApbJGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3OXgrr+j2DmRdZdeAVIYFYgP6Y8wHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E4YjU0ZTYtMTAxNS00OGViLTli YmQtNTFjMTZjZDQ1NDQ1LzAvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5 MjVDOUEyN0Q0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGD5cb89Hv1ZJr4ljbf88Eh/nRmEcvwb0HD wxQaKyjiKTBsuxJygOqyqQ5vlWoQgvLgX2yZhDM7zEjLNSEYtTUCd9Ty09FGG3QD BQvD+Q8zKYVRrHRP4FUxzAdyWh7Mpd1Ru/byjemiMHTEKyH4p7B8gvWDLBIZcWYY aeZ/75dIcGpHZx/G4f2KIzs5LrYFzWcx/KtseRJkTSXHOi/yqaeexLRrl3HDYRxc KvpIsTe+3j3cvuSOJDvFeAAgp5CxyJOhVz5Igi4RrQnnVOgc0fEQazqfrpwT5jzC 9wOCb3dRCRHGCKFPaNVSd7/U8vuhMq2ou2WHRy3CKPHKNjgWKYQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:53 2026 by rpki-client