$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: Ep3+mWIQhrHrmdYHPvoVvlFBjpNzS/0DamkR/hXeMIo= Subject key identifier: 3F:94:4D:DE:2E:67:FA:28:75:C0:3B:6A:20:6E:81:CC:14:D6:77:5C Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 262B355D38043DC5C6773F5D154064FDBDA2F84A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 0202 Signing time: Tue 24 Mar 2026 04:20:59 +0000 Manifest this update: Tue 24 Mar 2026 04:15:59 +0000 Manifest next update: Fri 27 Mar 2026 09:51:59 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: 5x31DrxqS7ru2vPdni/zzVkn73o4gNV/VlxBTsP68Bw=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: qMJCzEp1kB255KL4Lpk1hf3Sg7O/3XdgYccTkdZ5jPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2b:35:5d:38:04:3d:c5:c6:77:3f:5d:15:40:64:fd:bd:a2:f8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Mar 24 04:15:59 2026 GMT Not After : Mar 27 09:51:59 2026 GMT Subject: CN=3F944DDE2E67FA2875C03B6A206E81CC14D6775C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:fc:80:3c:e0:0e:36:a6:62:92:8a:60:90: 3b:c2:c1:29:13:57:74:65:89:a0:c8:54:70:be:9e: 26:e6:b3:14:37:cd:67:2b:f7:a4:52:28:8b:7d:c4: 89:29:94:43:d1:00:84:a4:c8:fb:89:30:d1:06:34: 12:51:b8:d6:e6:d8:d2:8a:bc:4c:8b:d7:bf:46:13: 0f:e3:70:a0:b8:d4:60:a1:72:2f:68:e7:ea:26:cd: de:7e:39:ba:0d:7e:5b:cf:d5:32:da:4c:c9:af:01: 37:3e:e2:7e:49:11:80:16:ca:47:38:5a:30:bb:93: 27:a9:a1:5f:23:bf:16:d0:07:c7:79:80:a5:f3:be: 9a:3b:03:0d:31:99:e5:34:3b:47:6c:77:5c:87:97: 53:6a:f4:d2:89:9a:dd:bd:c3:86:89:76:f7:ae:5b: d2:f9:0d:21:85:60:27:0a:97:ea:cc:33:68:ee:13: c7:43:3f:5f:57:b2:27:db:7d:cc:50:63:f4:ac:c7: dc:82:7e:fe:3e:29:5e:5f:9f:ab:bc:db:4f:a1:cc: b1:60:76:a5:85:e4:0c:1c:61:1e:08:38:5d:4a:16: 8d:f7:1f:36:1e:3c:50:48:5f:f5:90:83:6f:b6:1e: e1:b5:da:8b:4a:25:91:be:9b:67:0f:d9:d4:4c:9d: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:94:4D:DE:2E:67:FA:28:75:C0:3B:6A:20:6E:81:CC:14:D6:77:5C X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:75:34:c5:24:0e:54:f2:7d:d0:4a:3c:8a:e0:df:cf:3b:c4: 87:a4:f5:27:0b:3d:f6:cd:f2:c3:92:ba:10:67:b5:4e:e2:c0: 2c:f9:9d:71:8d:cd:5f:e6:0a:89:3e:5c:7a:c8:a4:3a:9a:ca: 2d:c3:45:94:3d:cf:ac:91:e6:82:bc:3c:f9:b2:b9:b9:40:13: 7b:f6:ff:10:d3:e3:b6:dd:30:1b:47:fd:24:f5:26:91:c2:0e: d3:1c:d5:43:76:1f:22:b5:2b:47:2e:b6:23:cf:9b:95:84:95: 10:2a:85:29:e7:77:00:dc:79:1f:f0:61:90:d4:2e:2e:ba:93: 29:58:5d:43:5e:93:30:a3:27:5a:b4:48:de:99:eb:14:fa:11: 4e:39:9c:92:e5:f7:2d:17:28:38:16:f1:9c:b9:b0:11:64:9e: 14:45:2c:03:f1:44:0e:ac:e8:d6:6a:5b:7d:ca:63:54:d1:52: 13:8b:5d:c4:2b:3e:02:38:77:3b:3c:f6:02:cf:6a:11:37:fd: 77:ad:72:4a:38:65:df:a1:8b:24:1e:44:39:1f:1f:6c:88:a2: 6b:81:cc:e7:36:5d:5f:59:64:6c:f7:de:96:97:3d:70:65:36: ac:91:78:14:5d:40:b0:da:7c:dd:86:45:16:cb:51:c9:d4:47: f2:c2:18:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJis1XTgEPcXGdz9dFUBk/b2i+EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNjAzMjQwNDE1NTlaFw0yNjAzMjcwOTUxNTlaMDMxMTAvBgNV BAMTKDNGOTQ0RERFMkU2N0ZBMjg3NUMwM0I2QTIwNkU4MUNDMTRENjc3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeq/yAPOAONqZikopgkDvCwSkT V3RliaDIVHC+nibmsxQ3zWcr96RSKIt9xIkplEPRAISkyPuJMNEGNBJRuNbm2NKK vEyL179GEw/jcKC41GChci9o5+omzd5+OboNflvP1TLaTMmvATc+4n5JEYAWykc4 WjC7kyepoV8jvxbQB8d5gKXzvpo7Aw0xmeU0O0dsd1yHl1Nq9NKJmt29w4aJdveu W9L5DSGFYCcKl+rMM2juE8dDP19XsifbfcxQY/Ssx9yCfv4+KV5fn6u820+hzLFg dqWF5AwcYR4IOF1KFo33HzYePFBIX/WQg2+2HuG12otKJZG+m2cP2dRMnRUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5RN3i5n+ih1wDtqIG6BzBTWd1wwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd1NMUkDlTyfdBKPIrg3887xIek9ScLPfbN 8sOSuhBntU7iwCz5nXGNzV/mCok+XHrIpDqayi3DRZQ9z6yR5oK8PPmyublAE3v2 /xDT47bdMBtH/ST1JpHCDtMc1UN2HyK1K0cutiPPm5WElRAqhSnndwDceR/wYZDU Li66kylYXUNekzCjJ1q0SN6Z6xT6EU45nJLl9y0XKDgW8Zy5sBFknhRFLAPxRA6s 6NZqW33KY1TRUhOLXcQrPgI4dzs89gLPahE3/Xetcko4Zd+hiyQeRDkfH2yIomuB zOc2XV9ZZGz33paXPXBlNqyReBRdQLDafN2GRRbLUcnUR/LCGFM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:28:30 2026 by rpki-client