$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: yTD01vEPnGW4NL9MbkewGV3ivLPKhjy/HUWvqtoTqs8= Subject key identifier: 33:00:84:68:79:D6:9A:56:F7:76:2F:00:F8:6B:F5:EA:AE:89:5E:C2 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 21C98D36091EE7AA855CC91ECCD07362C0786336 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 026A Signing time: Wed 25 Mar 2026 17:50:00 +0000 Manifest this update: Wed 25 Mar 2026 17:45:00 +0000 Manifest next update: Sun 29 Mar 2026 00:26:00 +0000 Files and hashes: 1: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: iuiNc9uA+OaQ6hijSlBg1IaoFRZCoqWa/Rzd/mJrbQk=) 2: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: TPlCTJVN2QTeHOB4M6IswSb2r9ncPe2iiueXE2eapqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c9:8d:36:09:1e:e7:aa:85:5c:c9:1e:cc:d0:73:62:c0:78:63:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Mar 25 17:45:00 2026 GMT Not After : Mar 29 00:26:00 2026 GMT Subject: CN=3300846879D69A56F7762F00F86BF5EAAE895EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ab:66:a9:28:d7:1b:cc:f5:05:d4:7f:e9:24: 4c:8a:f4:5e:ea:fa:4c:6b:f0:c9:70:d4:d2:5b:00: 99:05:7c:9e:c0:38:59:a2:44:2e:18:0f:4e:29:a0: b5:90:55:6b:aa:09:05:fc:af:58:11:51:cb:cb:76: 44:75:09:68:70:f9:94:35:a2:cc:48:ab:f6:c8:6a: 10:51:04:92:4b:98:64:9f:03:54:1a:bb:55:25:9b: 90:bf:65:43:56:2c:71:ad:dd:77:b3:3f:21:fc:54: 51:f6:ae:5d:3f:41:cc:55:7f:81:d8:61:2d:9d:49: 98:c8:b5:09:8b:c4:ec:06:ab:90:04:56:4a:c5:bb: 19:ba:48:a8:cd:50:2a:8e:77:2b:d8:dc:80:b0:27: cb:2d:67:0f:e4:68:27:f2:6d:8f:ba:f3:68:55:b3: bf:13:92:75:b5:eb:05:e9:8d:39:a2:b4:f3:03:98: ad:c5:ae:77:7f:ae:1d:c4:44:c7:94:f1:34:d1:0e: 17:91:0d:0a:59:88:6f:26:f7:36:71:33:b7:64:bb: 7d:79:10:c3:65:9a:c1:15:91:dd:19:8b:d4:58:14: 76:88:db:96:28:cd:e1:2c:d8:78:b2:45:f6:e6:4c: 72:22:19:ab:cc:92:19:bf:d2:ad:a2:c4:64:3d:9a: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:84:68:79:D6:9A:56:F7:76:2F:00:F8:6B:F5:EA:AE:89:5E:C2 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:65:f0:c8:3f:35:e4:4e:41:3a:6d:8e:eb:30:28:d7:e2:63: 7e:0f:ee:e1:d5:7d:d6:fd:0d:b6:13:6b:48:bd:25:ea:53:5d: c6:ae:8f:18:ea:91:97:94:88:02:03:61:32:7f:5b:30:a4:0a: 47:a8:94:43:6b:8a:c8:57:46:2c:64:bb:e4:b7:61:bf:63:99: 90:2c:51:18:82:02:9b:9a:98:64:37:d6:a1:b7:2a:2e:84:48: 75:c2:c4:11:15:ea:43:47:73:c0:e4:f1:f0:05:71:1c:ee:df: dd:3f:ab:88:d7:1a:2f:fe:c5:e0:d5:c8:ed:4b:b9:38:e4:d1: c9:42:7c:5f:75:d4:d3:1b:21:7b:59:c1:80:ee:5e:a2:4d:fe: 82:22:1e:37:c1:ce:b3:85:f3:84:d9:2a:e0:cd:40:9d:51:cf: 97:1d:38:0b:15:7b:b1:5e:8c:55:01:fc:7f:c1:4b:2a:d9:42: 5a:a6:29:c6:30:f0:1e:24:6a:d9:0a:d1:be:8d:13:26:6e:5c: 15:e9:57:3c:9a:03:e7:3c:f4:86:0c:26:8b:3c:fa:93:c1:c4: cc:15:67:38:66:aa:64:41:01:fd:49:c0:b5:72:0b:07:87:e2: 23:3f:aa:e7:00:00:de:f1:93:d4:e9:dd:e2:01:8b:39:61:67: 13:ca:a8:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcmNNgke56qFXMkezNBzYsB4YzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNjAzMjUxNzQ1MDBaFw0yNjAzMjkwMDI2MDBaMDMxMTAvBgNV BAMTKDMzMDA4NDY4NzlENjlBNTZGNzc2MkYwMEY4NkJGNUVBQUU4OTVFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbq2apKNcbzPUF1H/pJEyK9F7q +kxr8Mlw1NJbAJkFfJ7AOFmiRC4YD04poLWQVWuqCQX8r1gRUcvLdkR1CWhw+ZQ1 osxIq/bIahBRBJJLmGSfA1Qau1Ulm5C/ZUNWLHGt3XezPyH8VFH2rl0/QcxVf4HY YS2dSZjItQmLxOwGq5AEVkrFuxm6SKjNUCqOdyvY3ICwJ8stZw/kaCfybY+682hV s78TknW16wXpjTmitPMDmK3Frnd/rh3ERMeU8TTRDheRDQpZiG8m9zZxM7dku315 EMNlmsEVkd0Zi9RYFHaI25YozeEs2HiyRfbmTHIiGavMkhm/0q2ixGQ9mmopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMwCEaHnWmlb3di8A+Gv16q6JXsIwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABll8Mg/NeROQTptjuswKNfiY34P7uHVfdb9 DbYTa0i9JepTXcaujxjqkZeUiAIDYTJ/WzCkCkeolENrishXRixku+S3Yb9jmZAs URiCApuamGQ31qG3Ki6ESHXCxBEV6kNHc8Dk8fAFcRzu390/q4jXGi/+xeDVyO1L uTjk0clCfF911NMbIXtZwYDuXqJN/oIiHjfBzrOF84TZKuDNQJ1Rz5cdOAsVe7Fe jFUB/H/BSyrZQlqmKcYw8B4katkK0b6NEyZuXBXpVzyaA+c89IYMJos8+pPBxMwV ZzhmqmRBAf1JwLVyCweH4iM/qucAAN7xk9Tp3eIBizlhZxPKqNU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:37 2026 by rpki-client