$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: taKi5wJhIgY8TTzgzNfZXgCoA4pLsWVJAy/lFZOr96w= Subject key identifier: EC:C1:B7:0A:AE:44:2D:03:A9:34:28:02:46:C5:55:BD:80:B8:09:53 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 5A94F9FE19E8B75D646419BBEC862EB606BE2C46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01FF Signing time: Sun 01 Mar 2026 21:51:39 +0000 Manifest this update: Sun 01 Mar 2026 21:46:39 +0000 Manifest next update: Thu 05 Mar 2026 01:31:39 +0000 Files and hashes: 1: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: 2dBu39ixApCaNxWSGaPf8XFjdgWmr4R+d5G/fcvmuWY=) 2: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 3: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:f9:fe:19:e8:b7:5d:64:64:19:bb:ec:86:2e:b6:06:be:2c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Mar 1 21:46:39 2026 GMT Not After : Mar 5 01:31:39 2026 GMT Subject: CN=ECC1B70AAE442D03A934280246C555BD80B80953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:7a:76:59:f1:01:ef:01:8f:2d:40:87:16: d3:42:01:b1:6b:38:b2:65:75:59:f2:ed:d7:af:e5: d4:5b:a2:5d:34:65:66:74:88:65:22:5c:1a:11:2e: 60:69:ca:ab:5e:41:cb:74:15:e4:88:bb:c4:2e:04: 67:ab:36:95:3c:ec:82:18:97:49:08:ae:4c:6a:e5: 2d:24:8f:b5:45:a8:7c:aa:cf:7d:51:66:34:ce:db: a9:07:32:65:45:5b:6b:68:ad:20:9d:06:e2:e3:c4: be:40:84:98:54:bf:57:97:26:6c:a8:bb:cf:8c:2b: 08:f6:cf:1d:6f:2c:f3:c3:42:e4:2b:8b:ef:9f:cb: 61:f5:b9:80:a3:c3:42:ba:2f:08:e3:e0:7f:34:dc: 2b:9c:b4:f0:0a:c0:3f:96:6d:d6:c8:28:f1:d6:6a: cb:27:e3:ec:be:99:04:58:12:6f:89:f6:ea:e2:0f: 12:ac:fd:b0:32:f6:25:68:40:bc:1c:b7:df:f1:15: f4:86:92:bc:c5:c8:fd:eb:cf:6d:9c:45:3c:fb:69: 02:3e:3e:3b:79:34:66:81:a0:80:a6:45:30:51:f1: 0a:ff:4a:a2:e8:be:00:33:ff:82:3c:e2:03:2e:58: b2:aa:02:1d:70:29:32:d5:b3:08:9f:f8:54:27:3d: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:B7:0A:AE:44:2D:03:A9:34:28:02:46:C5:55:BD:80:B8:09:53 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4a:27:99:d8:eb:1e:24:3b:cb:27:e6:41:7f:59:a9:d8:fc: 28:28:bf:fd:79:32:0c:f0:41:18:a9:a1:b6:90:ae:68:95:57: ce:70:07:ed:ed:a9:37:0e:7f:16:27:e5:1b:a5:6b:8e:e1:1b: f0:89:47:88:bd:30:c2:f6:2f:31:aa:f6:6e:04:a3:31:95:d8: d4:b4:4a:ec:87:62:24:f3:59:2d:ed:74:43:eb:25:5b:e7:53: 3d:db:4f:45:35:c4:bc:4b:37:dd:cb:90:03:07:6b:c1:69:06: d5:a2:f0:92:d5:9a:aa:db:ca:58:9c:d4:5c:de:2f:39:0a:83: 5e:32:f6:ce:54:cd:0c:6c:f9:10:39:97:33:0f:a8:e2:b8:14: 57:a6:8d:ff:bc:13:3c:e1:d5:cd:36:99:c2:49:f6:92:f9:49: d9:0c:5f:60:cd:cc:96:6b:9b:5a:b5:f8:6b:61:b9:c4:a8:92: cf:6a:8b:a8:63:c2:6c:b0:e7:5f:2d:d0:2e:b1:83:64:53:5f: e4:05:85:6e:74:cd:4a:14:be:ed:30:b7:d2:87:c5:71:4b:e1: 59:d9:92:21:ed:a4:7c:1c:ee:21:6f:fb:1e:32:23:f0:5e:01: 09:6d:94:ee:e2:ec:58:08:95:6d:45:c6:58:08:75:f4:93:22: a9:da:aa:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpT5/hnot11kZBm77IYutga+LEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNjAzMDEyMTQ2MzlaFw0yNjAzMDUwMTMxMzlaMDMxMTAvBgNV BAMTKEVDQzFCNzBBQUU0NDJEMDNBOTM0MjgwMjQ2QzU1NUJEODBCODA5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlHp2WfEB7wGPLUCHFtNCAbFr OLJldVny7dev5dRbol00ZWZ0iGUiXBoRLmBpyqteQct0FeSIu8QuBGerNpU87IIY l0kIrkxq5S0kj7VFqHyqz31RZjTO26kHMmVFW2torSCdBuLjxL5AhJhUv1eXJmyo u8+MKwj2zx1vLPPDQuQri++fy2H1uYCjw0K6Lwjj4H803CuctPAKwD+WbdbIKPHW assn4+y+mQRYEm+J9uriDxKs/bAy9iVoQLwct9/xFfSGkrzFyP3rz22cRTz7aQI+ Pjt5NGaBoICmRTBR8Qr/SqLovgAz/4I84gMuWLKqAh1wKTLVswif+FQnPYStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MG3Cq5ELQOpNCgCRsVVvYC4CVMwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRKJ5nY6x4kO8sn5kF/WanY/Cgov/15Mgzw QRipobaQrmiVV85wB+3tqTcOfxYn5Rula47hG/CJR4i9MML2LzGq9m4EozGV2NS0 SuyHYiTzWS3tdEPrJVvnUz3bT0U1xLxLN93LkAMHa8FpBtWi8JLVmqrbylic1Fze LzkKg14y9s5UzQxs+RA5lzMPqOK4FFemjf+8Ezzh1c02mcJJ9pL5SdkMX2DNzJZr m1q1+GthucSoks9qi6hjwmyw518t0C6xg2RTX+QFhW50zUoUvu0wt9KHxXFL4VnZ kiHtpHwc7iFv+x4yI/BeAQltlO7i7FgIlW1FxlgIdfSTIqnaqts= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:39 2026 by rpki-client