$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: Kywij41AVCtujyGfRNlWvVKBOLAtnA85p+NnddENtSA= Subject key identifier: D8:98:DD:DB:CC:30:B2:AB:28:00:DB:93:03:B5:CD:67:97:C4:11:48 Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 413CE8C529D24E155EC5F8F47C298D026D4CCFFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 055F Signing time: Thu 26 Mar 2026 01:01:22 +0000 Manifest this update: Thu 26 Mar 2026 00:56:22 +0000 Manifest next update: Sun 29 Mar 2026 07:43:22 +0000 Files and hashes: 1: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: 6PlxgJw3wczfPI3pJqCBYAaWPhz8cJ8ggi4impe+Zc0=) 2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: BAHkWg5wgdiP9DS/EDI18ZNMV2WT4QoTyiafWi6I7HI=) 3: 3130332e3134332e3234342e302f32332d3233203d3e20313332363337.roa (hash: BNnKvvCVYuhYuPiWLtu0g7CENyoqMhejtTMBFTTfKsk=) 4: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: xuvbNqWcSKzzf3s86Gjyn9sxS7Aw7RD0pRJw9jqDoWk=) 5: 323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (hash: T7pT3m50bD1TtJQnSE7uRmUGoMQoMkMp3Yiyl2FWmEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3c:e8:c5:29:d2:4e:15:5e:c5:f8:f4:7c:29:8d:02:6d:4c:cf:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: Mar 26 00:56:22 2026 GMT Not After : Mar 29 07:43:22 2026 GMT Subject: CN=D898DDDBCC30B2AB2800DB9303B5CD6797C41148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:d0:50:7c:34:67:4a:c5:72:29:13:3a:5e: 73:5a:f2:0d:5a:46:4b:33:3d:a3:43:d7:42:bc:55: 42:e7:6d:26:82:1a:ed:bf:8e:23:5b:46:93:a3:a6: 77:04:bf:74:bb:23:4e:6f:f7:ca:d3:4a:cb:3a:30: 07:a2:e7:52:eb:31:3d:4a:60:c9:95:1d:03:7c:46: 57:88:67:8e:93:1a:61:1c:d7:66:33:4e:fb:bc:73: 1f:8f:c0:ef:bb:64:f6:3c:25:3e:a2:06:24:5a:2b: 77:af:c0:6d:1e:98:82:6c:2d:3f:17:7d:0f:4f:dd: 4a:7c:50:96:9a:93:d7:13:84:81:19:92:5f:53:3c: 18:d1:05:7f:2d:3a:cd:d8:b3:32:cd:4a:bf:58:63: a6:47:f2:17:70:2f:f7:db:62:b6:68:fc:af:9c:8f: 60:f5:1f:8b:46:9f:ca:4d:03:92:b4:a5:f4:f5:28: 40:9a:b2:86:c1:4b:bc:c2:ac:9c:9b:20:c6:48:ad: 3a:b2:0d:14:a9:01:25:08:6e:71:26:25:74:9a:5c: 7e:a5:f4:2f:fa:3d:8c:2d:27:1f:c8:0c:74:58:19: 04:47:9a:3f:96:81:05:f6:33:5b:61:00:91:f4:3a: 40:07:05:c2:a5:b8:12:1a:2d:72:b5:b4:ef:fc:60: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:DD:DB:CC:30:B2:AB:28:00:DB:93:03:B5:CD:67:97:C4:11:48 X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4c:22:8a:b4:9b:dc:cc:7a:58:34:4e:36:eb:4f:de:5c:d0: 56:60:02:21:d6:b0:e8:1d:ab:7b:7c:97:a4:08:10:9a:e0:81: 66:ac:b5:b7:44:96:6a:18:4e:c3:7a:7c:05:d1:c1:40:a0:d9: 3e:5a:1e:7b:dd:ea:6e:42:3d:9d:b6:33:76:50:fb:a1:8c:05: f9:de:23:c8:14:8b:79:79:c7:5a:9d:15:5d:52:41:9d:66:f9: 79:08:88:cf:67:92:58:3f:82:5d:95:dc:f6:af:6d:51:d5:79: 93:fc:15:62:22:68:dc:18:b9:1f:b1:d7:cc:04:05:34:cf:3f: bc:ab:5f:f2:f5:1a:81:00:ce:a0:20:8a:8d:b7:e4:07:21:55: 46:d0:9f:4b:15:83:6c:30:22:9d:e3:77:c0:86:c9:93:52:36: 95:3e:3a:94:b5:d3:3c:af:ac:be:72:33:22:b8:62:09:8f:63: 85:77:00:bc:af:ed:2e:5c:36:a5:6f:10:41:a3:c0:4e:76:1b: 64:dd:2d:6a:de:c5:3d:dd:53:44:55:c3:12:70:0f:20:59:20: 6e:2d:c9:62:7f:ba:c2:52:e3:bc:99:63:8a:d6:b7:87:f2:d9: 49:6d:fc:bc:6c:66:92:b5:7c:da:68:fd:98:94:d3:71:b2:b5: 65:70:84:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTzoxSnSThVexfj0fCmNAm1Mz/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNjAzMjYwMDU2MjJaFw0yNjAzMjkwNzQzMjJaMDMxMTAvBgNV BAMTKEQ4OThERERCQ0MzMEIyQUIyODAwREI5MzAzQjVDRDY3OTdDNDExNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUotBQfDRnSsVyKRM6XnNa8g1a RkszPaND10K8VULnbSaCGu2/jiNbRpOjpncEv3S7I05v98rTSss6MAei51LrMT1K YMmVHQN8RleIZ46TGmEc12YzTvu8cx+PwO+7ZPY8JT6iBiRaK3evwG0emIJsLT8X fQ9P3Up8UJaak9cThIEZkl9TPBjRBX8tOs3YszLNSr9YY6ZH8hdwL/fbYrZo/K+c j2D1H4tGn8pNA5K0pfT1KECasobBS7zCrJybIMZIrTqyDRSpASUIbnEmJXSaXH6l 9C/6PYwtJx/IDHRYGQRHmj+WgQX2M1thAJH0OkAHBcKluBIaLXK1tO/8YICxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Jjd28wwsqsoANuTA7XNZ5fEEUgwHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZMIoq0m9zMelg0TjbrT95c0FZgAiHWsOgd q3t8l6QIEJrggWastbdElmoYTsN6fAXRwUCg2T5aHnvd6m5CPZ22M3ZQ+6GMBfne I8gUi3l5x1qdFV1SQZ1m+XkIiM9nklg/gl2V3PavbVHVeZP8FWIiaNwYuR+x18wE BTTPP7yrX/L1GoEAzqAgio235AchVUbQn0sVg2wwIp3jd8CGyZNSNpU+OpS10zyv rL5yMyK4YgmPY4V3ALyv7S5cNqVvEEGjwE52G2TdLWrexT3dU0RVwxJwDyBZIG4t yWJ/usJS47yZY4rWt4fy2Ult/LxsZpK1fNpo/ZiU03GytWVwhPM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:18 2026 by rpki-client