$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: SKodtLcOxmOX3FJiL6R5agXdxA86u3JaBLADnTVEOzU= Subject key identifier: 76:DD:05:FE:6F:C2:43:DC:00:F2:0E:04:02:A6:93:72:C8:FC:02:56 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 58401F49CD77BA2F84BFA02DFA70C7495D157FAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 036C Signing time: Wed 25 Mar 2026 13:01:51 +0000 Manifest this update: Wed 25 Mar 2026 12:56:50 +0000 Manifest next update: Sun 29 Mar 2026 00:10:50 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: 2/J/Yal1m/lW84dSzK0BYkDYmeAYTSni1EEVznP77nU=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 4: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:40:1f:49:cd:77:ba:2f:84:bf:a0:2d:fa:70:c7:49:5d:15:7f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Mar 25 12:56:50 2026 GMT Not After : Mar 29 00:10:50 2026 GMT Subject: CN=76DD05FE6FC243DC00F20E0402A69372C8FC0256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:4a:56:e5:1e:48:04:3a:2c:52:60:c2:38: f3:f6:33:d2:49:6e:c4:9c:bf:20:7b:9f:ae:05:29: 2c:8f:39:48:43:bd:76:99:dd:09:b5:33:94:8d:ee: 8f:16:8f:00:d2:dd:8f:8f:02:eb:36:21:8a:97:37: 96:42:e4:5b:c2:db:ad:2e:7f:94:d3:ad:f3:73:a9: 00:9b:a5:11:1d:bb:47:37:7a:1c:fc:aa:55:e2:7c: 78:e4:6f:89:28:87:1c:56:64:e1:0b:f9:91:4f:d6: 82:0d:8a:cb:58:8a:4a:26:95:ef:d1:41:26:9c:ca: ff:3b:ee:c7:22:6b:d9:14:5a:9e:32:e5:a9:3e:24: 3a:dc:c5:af:91:ec:37:79:dd:f0:aa:1e:48:22:5f: e0:f5:da:c5:ff:a7:94:23:ca:a5:de:1c:a7:41:21: 24:b4:3b:3e:f3:0c:4f:ea:3b:ff:6c:74:2c:e7:4b: 9e:2b:4e:97:56:8a:eb:48:4f:65:95:d4:ac:df:c9: 68:1e:a3:00:ca:78:4f:a9:3b:fb:10:39:3a:8d:d6: 9a:93:3e:13:a5:5c:5c:a6:33:3a:2e:80:79:d2:e9: c1:44:bf:43:07:41:5d:ad:76:b9:5c:d2:a0:41:3c: db:b1:78:d0:fd:95:48:a8:af:68:e1:d9:bc:a4:57: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:05:FE:6F:C2:43:DC:00:F2:0E:04:02:A6:93:72:C8:FC:02:56 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d9:8a:5b:a3:96:a8:03:4b:04:85:04:f5:21:ce:a7:6b:56: fa:07:5c:2c:c9:39:6a:7c:93:d2:e9:08:63:e4:88:62:a0:d7: 08:f4:a6:4b:be:28:d2:93:16:93:ed:a8:46:53:53:76:ee:f7: cb:f3:ad:49:5c:fa:37:5d:ab:4e:7f:c9:62:f5:7f:46:31:ac: 21:c3:76:10:df:79:57:f6:d7:05:c0:1b:66:5f:c8:40:3f:ad: 77:76:0e:4b:eb:0b:6d:22:9e:61:5e:94:77:2b:15:56:71:42: bf:1b:ae:94:74:d4:e7:dd:a3:25:c8:a6:21:c9:69:ad:26:27: 89:18:76:c2:93:be:7f:c3:2b:e5:4e:57:08:2b:9a:ef:24:57: 4c:27:d7:5b:b9:d1:45:15:f3:5a:c0:92:e8:d8:de:1a:ee:70: 90:47:10:37:d4:62:ff:32:ce:84:46:6e:d9:81:9e:20:44:3e: ca:a8:da:21:eb:2f:31:bb:40:d8:f3:22:1d:0c:05:83:3f:60: 28:e8:90:a8:60:ff:cb:a3:e2:90:0d:f8:f2:92:f8:eb:fc:f7: 30:56:78:a6:53:83:f4:4a:a9:53:65:01:0b:01:d7:c1:3a:15: 0a:57:f6:ff:7b:ee:45:7a:80:32:4c:c1:1c:a9:91:36:6b:67: 3b:69:5c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEAfSc13ui+Ev6At+nDHSV0Vf64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNjAzMjUxMjU2NTBaFw0yNjAzMjkwMDEwNTBaMDMxMTAvBgNV BAMTKDc2REQwNUZFNkZDMjQzREMwMEYyMEUwNDAyQTY5MzcyQzhGQzAyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpP0pW5R5IBDosUmDCOPP2M9JJ bsScvyB7n64FKSyPOUhDvXaZ3Qm1M5SN7o8WjwDS3Y+PAus2IYqXN5ZC5FvC260u f5TTrfNzqQCbpREdu0c3ehz8qlXifHjkb4kohxxWZOEL+ZFP1oINistYikomle/R QSacyv877scia9kUWp4y5ak+JDrcxa+R7Dd53fCqHkgiX+D12sX/p5QjyqXeHKdB ISS0Oz7zDE/qO/9sdCznS54rTpdWiutIT2WV1KzfyWgeowDKeE+pO/sQOTqN1pqT PhOlXFymMzougHnS6cFEv0MHQV2tdrlc0qBBPNuxeND9lUior2jh2bykV1VpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdt0F/m/CQ9wA8g4EAqaTcsj8AlYwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzZilujlqgDSwSFBPUhzqdrVvoHXCzJOWp8 k9LpCGPkiGKg1wj0pku+KNKTFpPtqEZTU3bu98vzrUlc+jddq05/yWL1f0YxrCHD dhDfeVf21wXAG2ZfyEA/rXd2DkvrC20inmFelHcrFVZxQr8brpR01OfdoyXIpiHJ aa0mJ4kYdsKTvn/DK+VOVwgrmu8kV0wn11u50UUV81rAkujY3hrucJBHEDfUYv8y zoRGbtmBniBEPsqo2iHrLzG7QNjzIh0MBYM/YCjokKhg/8uj4pAN+PKS+Ov89zBW eKZTg/RKqVNlAQsB18E6FQpX9v977kV6gDJMwRypkTZrZztpXBg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:12 2026 by rpki-client