$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: RP8m3uDXNkfei+1vlTHhCv83ZaqulnU4TrbSxwfcO8I= Subject key identifier: 11:CD:A3:A7:18:29:77:15:E9:98:FA:B2:5B:10:E5:64:F0:77:32:02 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 15D59677D6A30892C866A1B29A278756BD0AAE70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 032C Signing time: Sun 01 Mar 2026 01:01:19 +0000 Manifest this update: Sun 01 Mar 2026 00:56:19 +0000 Manifest next update: Wed 04 Mar 2026 01:37:19 +0000 Files and hashes: 1: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: UCQ+6t66v8utMHeVS3kaXKI1L1pu3itaqPBPEwMHjF8=) 2: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: sTYvzYVsASGokDrk89blsQISLPT/fVG7CpqDTnlSdiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:96:77:d6:a3:08:92:c8:66:a1:b2:9a:27:87:56:bd:0a:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: Mar 1 00:56:19 2026 GMT Not After : Mar 4 01:37:19 2026 GMT Subject: CN=11CDA3A718297715E998FAB25B10E564F0773202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:9e:8c:a6:cb:6a:c9:be:f3:74:c5:db:b2: 9d:09:30:85:25:99:3f:2e:41:e5:34:7a:c7:77:cd: b9:34:38:f2:68:29:6c:26:61:a2:5c:bc:cf:f3:a5: 31:e0:81:b5:a8:4a:f1:37:52:98:f6:fb:de:51:99: 66:d5:ed:b1:03:d8:d8:9a:13:18:d7:a0:b9:62:ac: 66:3d:56:b2:79:5f:24:13:24:74:dd:b1:12:5f:62: 7b:55:d0:40:f3:61:e1:c9:aa:21:da:f5:14:03:a5: a5:dd:35:a5:b6:da:86:1d:01:28:bf:43:d4:a6:39: ca:39:50:9f:5b:ca:af:ee:17:35:e0:21:74:6c:37: 45:6a:d1:d2:00:0a:51:2b:99:13:da:3c:43:39:69: b3:0a:40:41:38:be:80:f9:56:aa:16:ea:66:d0:2d: dd:a8:f3:78:8c:b7:d9:bb:0a:76:37:8b:d8:bb:c4: 24:26:7d:4c:fc:ec:62:0e:ab:7d:6d:c3:3d:b2:a2: 3f:16:bc:7a:56:ba:d2:25:69:e9:6a:fc:96:a5:19: f1:f5:53:ea:4d:64:a6:6b:ee:dd:8e:2e:68:25:87: 38:ac:e6:56:a4:3f:02:94:49:6e:44:07:81:c1:3e: 60:a8:c8:5d:08:e9:0e:41:87:26:83:32:f3:79:ca: 62:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:A3:A7:18:29:77:15:E9:98:FA:B2:5B:10:E5:64:F0:77:32:02 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6c:cb:e3:a4:23:2a:5c:33:81:16:eb:de:6b:dd:8d:86:2b: 6d:f8:c3:77:36:4a:41:72:be:08:02:b3:9a:bc:4f:ed:5a:6d: 9f:5f:b7:cb:e8:fa:61:a6:71:e0:cf:4f:97:33:d9:65:69:30: 53:ef:d8:33:0b:af:11:57:69:f0:92:ea:55:b1:65:12:5c:02: 4f:2d:98:aa:2e:68:9c:eb:90:bb:22:8b:03:7d:cb:fc:e6:4d: 12:dc:bf:77:64:b0:43:1e:a1:5d:dc:b0:56:2a:ac:41:97:57: 6f:d3:53:f2:f3:4f:8d:83:fc:da:86:de:06:0d:0c:40:7d:da: b6:e3:0c:16:14:ac:3c:fe:31:a7:49:04:65:b3:e1:df:b5:a8: f6:ba:db:a1:ca:c9:96:74:c5:63:a5:26:f2:9d:fb:14:6b:9a: a4:c4:d7:5e:e4:74:c8:a0:c8:56:e0:c1:ff:de:2a:cb:77:a2: a4:77:30:01:74:30:99:c9:cf:c1:85:f8:41:db:40:be:32:39: 61:f5:a8:9b:fb:83:63:e9:9a:9c:de:ce:40:86:f0:8d:33:a8: 95:d1:e0:14:e0:e7:0c:be:64:ae:b5:46:18:51:25:13:4e:36: 03:18:09:b2:79:12:db:41:11:50:d8:cf:41:4f:14:7c:7f:1c: fc:0d:94:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdWWd9ajCJLIZqGymieHVr0KrnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNjAzMDEwMDU2MTlaFw0yNjAzMDQwMTM3MTlaMDMxMTAvBgNV BAMTKDExQ0RBM0E3MTgyOTc3MTVFOTk4RkFCMjVCMTBFNTY0RjA3NzMyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJup6Mpstqyb7zdMXbsp0JMIUl mT8uQeU0esd3zbk0OPJoKWwmYaJcvM/zpTHggbWoSvE3Upj2+95RmWbV7bED2Nia ExjXoLlirGY9VrJ5XyQTJHTdsRJfYntV0EDzYeHJqiHa9RQDpaXdNaW22oYdASi/ Q9SmOco5UJ9byq/uFzXgIXRsN0Vq0dIAClErmRPaPEM5abMKQEE4voD5VqoW6mbQ Ld2o83iMt9m7CnY3i9i7xCQmfUz87GIOq31twz2yoj8WvHpWutIlaelq/JalGfH1 U+pNZKZr7t2OLmglhzis5lakPwKUSW5EB4HBPmCoyF0I6Q5BhyaDMvN5ymIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEc2jpxgpdxXpmPqyWxDlZPB3MgIwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdsy+OkIypcM4EW695r3Y2GK234w3c2SkFy vggCs5q8T+1abZ9ft8vo+mGmceDPT5cz2WVpMFPv2DMLrxFXafCS6lWxZRJcAk8t mKouaJzrkLsiiwN9y/zmTRLcv3dksEMeoV3csFYqrEGXV2/TU/LzT42D/NqG3gYN DEB92rbjDBYUrDz+MadJBGWz4d+1qPa626HKyZZ0xWOlJvKd+xRrmqTE117kdMig yFbgwf/eKst3oqR3MAF0MJnJz8GF+EHbQL4yOWH1qJv7g2PpmpzezkCG8I0zqJXR 4BTg5wy+ZK61RhhRJRNONgMYCbJ5EttBEVDYz0FPFHx/HPwNlNM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:25 2026 by rpki-client