$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: /UmfHgqjAnqY5tpLEJFOP0NZnwFr7bEjdBTWNzOa9p4= Subject key identifier: 6B:5C:11:B4:A1:F2:84:70:31:1F:3C:8B:B7:65:97:FE:5F:1F:37:5E Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 415F670E9764B23351C2198AD68CF3A9B9DAF9E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 02E7 Signing time: Tue 24 Mar 2026 17:41:17 +0000 Manifest this update: Tue 24 Mar 2026 17:36:17 +0000 Manifest next update: Fri 27 Mar 2026 21:51:17 +0000 Files and hashes: 1: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: uCJ2s0GXlB/AbHURvFXPCdkNiyfToqF9gU59iHiBQrA=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 3: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) 4: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=) 5: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 6: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 7: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5f:67:0e:97:64:b2:33:51:c2:19:8a:d6:8c:f3:a9:b9:da:f9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Mar 24 17:36:17 2026 GMT Not After : Mar 27 21:51:17 2026 GMT Subject: CN=6B5C11B4A1F28470311F3C8BB76597FE5F1F375E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:8d:cb:26:b1:53:66:2f:c5:91:e3:90:94: de:fa:99:f1:6d:97:a6:b7:08:b8:21:06:81:4b:79: d6:59:f5:45:31:8a:e4:15:d9:49:5b:84:e6:ed:ff: 41:c6:03:58:d4:00:50:07:d6:27:c3:4f:dd:1b:6d: a2:6a:cc:a6:d2:63:6e:52:89:bc:1e:1c:96:e4:68: cb:b3:3e:9d:dc:08:72:f0:da:3a:14:5f:09:36:65: 59:c5:1c:de:ec:c5:f6:87:ec:27:af:b3:45:d2:a5: 50:24:30:30:7f:d7:4a:bd:3e:1b:29:8a:b3:79:f7: db:82:ac:e5:cb:5c:c0:62:11:e1:16:da:bd:c8:ef: 42:7f:ce:43:33:85:64:7c:64:97:6d:3a:aa:87:38: 8c:46:ff:49:03:af:2c:79:29:14:46:40:37:b6:be: 37:db:b2:9e:bd:ef:d0:49:74:ee:9b:e8:40:bb:75: c0:6d:d6:1f:36:eb:a8:82:54:cf:74:a0:50:4a:91: 38:8a:66:77:bb:cf:f3:76:ef:ba:43:c3:1c:ae:4b: 30:c1:49:5c:3f:0e:25:c8:ab:f8:f2:2e:0f:94:20: d7:fd:89:d2:e3:48:6e:0c:8c:75:da:83:de:bc:d8: 31:8b:c3:0b:e7:8e:85:23:37:8b:44:36:8d:14:4e: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:11:B4:A1:F2:84:70:31:1F:3C:8B:B7:65:97:FE:5F:1F:37:5E X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:cd:96:6a:09:f2:5c:bd:bf:4b:1e:08:ee:05:81:d4:94:ee: 51:50:b7:22:02:7c:5a:eb:a8:f0:10:84:28:47:b5:0d:c8:cd: a1:57:c8:03:63:ac:a3:b6:49:8e:e8:a2:69:86:b6:3a:4f:d7: 2a:47:6e:16:56:13:ae:e8:f6:ad:a5:53:a3:27:48:2e:51:69: 57:ca:89:f9:1b:14:83:f1:d9:da:82:e7:09:ee:99:da:e9:a0: 5d:e2:6d:37:66:51:b1:eb:43:e4:59:3b:fd:8d:d3:fb:30:0b: b1:08:5e:de:38:fe:7b:d0:2f:73:5d:73:c0:63:8c:df:bb:7e: ac:5f:e6:8d:6f:2d:aa:7b:13:92:27:0a:14:a7:a4:43:61:33: ca:6f:5b:3d:b1:08:61:a7:fd:9b:d3:b2:cb:21:92:ba:a2:f5: 44:89:82:f4:8b:cb:30:8d:51:be:24:77:67:d2:53:0f:a6:2f: 0c:32:a6:11:e2:c6:bf:4b:3c:96:51:1f:8d:08:7b:14:e4:89: 7e:3a:e6:d5:af:42:7c:b0:13:da:48:68:e6:9d:02:43:0b:f5: ce:53:c5:fe:d3:e2:0d:0d:a1:e4:bc:ca:3b:c4:57:5c:0f:90: 73:01:cb:bf:28:c4:bc:c4:fe:4d:5d:7e:eb:34:37:aa:9d:94: 71:ba:6b:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQV9nDpdksjNRwhmK1ozzqbna+eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNjAzMjQxNzM2MTdaFw0yNjAzMjcyMTUxMTdaMDMxMTAvBgNV BAMTKDZCNUMxMUI0QTFGMjg0NzAzMTFGM0M4QkI3NjU5N0ZFNUYxRjM3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqI3LJrFTZi/FkeOQlN76mfFt l6a3CLghBoFLedZZ9UUxiuQV2UlbhObt/0HGA1jUAFAH1ifDT90bbaJqzKbSY25S ibweHJbkaMuzPp3cCHLw2joUXwk2ZVnFHN7sxfaH7Cevs0XSpVAkMDB/10q9Phsp irN599uCrOXLXMBiEeEW2r3I70J/zkMzhWR8ZJdtOqqHOIxG/0kDryx5KRRGQDe2 vjfbsp6979BJdO6b6EC7dcBt1h8266iCVM90oFBKkTiKZne7z/N277pDwxyuSzDB SVw/DiXIq/jyLg+UINf9idLjSG4MjHXag9682DGLwwvnjoUjN4tENo0UTk07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa1wRtKHyhHAxHzyLt2WX/l8fN14wHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHNlmoJ8ly9v0seCO4FgdSU7lFQtyICfFrr qPAQhChHtQ3IzaFXyANjrKO2SY7oommGtjpP1ypHbhZWE67o9q2lU6MnSC5RaVfK ifkbFIPx2dqC5wnumdrpoF3ibTdmUbHrQ+RZO/2N0/swC7EIXt44/nvQL3Ndc8Bj jN+7fqxf5o1vLap7E5InChSnpENhM8pvWz2xCGGn/ZvTssshkrqi9USJgvSLyzCN Ub4kd2fSUw+mLwwyphHixr9LPJZRH40IexTkiX465tWvQnywE9pIaOadAkML9c5T xf7T4g0NoeS8yjvEV1wPkHMBy78oxLzE/k1dfus0N6qdlHG6awI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:22 2026 by rpki-client