$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft File: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft (raw, json) Hash identifier: sYCWmivG+O19Zu2s8cZpM8lIvZveSFJMaGhJrMwCyP4= Subject key identifier: 47:5A:93:C6:E2:11:EB:49:47:40:B0:12:C6:20:D2:13:E3:00:E5:24 Authority key identifier: 9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 Certificate issuer: /CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Certificate serial: 1111406A44EB2B7A080F597AD3C98C9B207EF6E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft Manifest number: E1 Signing time: Sun 01 Mar 2026 18:00:07 +0000 Manifest this update: Sun 01 Mar 2026 17:55:07 +0000 Manifest next update: Wed 04 Mar 2026 23:51:07 +0000 Files and hashes: 1: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: L103RB4M/KbtAQXK5+bCxunN2Xrasu7SEaoouWKmmF4=) 2: 9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl (hash: BQDzjWV4Jfgucdc/5XDQAUG2NP2/o3YbOY2eu43TE8Q=) 3: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: ztmYbNJoFZ6N5sFqQdTZmBxa2LX8TH2rkXJjnkiW1fo=) 4: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: ykQNp9IItK5u/w96SwpnIQP3xqaGsX/ox7vrXOM5+w0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:11:40:6a:44:eb:2b:7a:08:0f:59:7a:d3:c9:8c:9b:20:7e:f6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D01A7EAAD74D818C4071C1F4AC3284F0A018182 Validity Not Before: Mar 1 17:55:07 2026 GMT Not After : Mar 4 23:51:07 2026 GMT Subject: CN=475A93C6E211EB494740B012C620D213E300E524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:17:23:19:bf:75:a1:a5:17:aa:27:56:a0: 50:84:9e:f5:97:d4:12:84:6e:74:c6:3c:39:75:8b: ac:22:f7:ce:73:10:b9:99:92:6f:e9:5f:4c:3d:cf: 0a:91:96:12:8c:13:b9:3b:81:ea:1f:96:14:d8:ed: 54:e8:86:85:da:0d:f3:e0:17:ef:bb:0e:eb:1c:5c: bc:1b:ed:d8:72:e3:f7:03:fe:c6:5c:d6:c3:d9:cf: 7f:0c:4a:08:8a:66:e5:0d:c2:e6:51:29:a0:c2:a3: f6:3c:13:c4:ec:e6:93:e1:b3:c0:4b:d9:1b:aa:67: 65:f1:af:20:fa:e2:6a:64:ff:9b:77:ac:9f:f4:d3: 5d:4a:13:fc:26:2c:16:23:93:b1:27:3d:99:77:db: 75:1a:54:8c:de:ad:7e:8e:c8:00:40:5a:ad:88:d6: e6:82:00:86:bf:96:a0:63:54:90:fd:8e:23:32:5c: f9:f4:a9:8c:99:a6:fc:0f:88:8c:d0:a0:9f:51:37: af:2d:46:55:4d:35:24:0f:b8:55:9a:7d:2f:2e:5d: e8:ef:61:7b:c0:65:04:12:77:e0:47:fd:e0:bf:3a: 0c:92:c8:52:ee:41:b0:7a:68:50:79:01:cf:89:e0: c3:27:2e:0d:16:63:1a:30:64:f3:66:02:8a:ed:bd: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:93:C6:E2:11:EB:49:47:40:B0:12:C6:20:D2:13:E3:00:E5:24 X509v3 Authority Key Identifier: keyid:9D:01:A7:EA:AD:74:D8:18:C4:07:1C:1F:4A:C3:28:4F:0A:01:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/9D01A7EAAD74D818C4071C1F4AC3284F0A018182.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cf:35:75:3b:9b:09:77:70:96:2a:73:53:44:55:e2:49:9f: 60:20:fd:3d:cf:0f:1d:69:9d:82:11:d1:72:f0:45:6c:39:bb: c1:e8:69:23:ec:00:dd:a6:b4:11:02:9e:ee:c7:79:ce:21:88: 07:14:32:d0:64:47:6a:1f:6b:d4:e4:28:ad:8b:99:35:09:fd: 0f:d4:97:7a:82:0f:98:bb:27:97:9b:75:03:e2:44:ab:b5:94: 2d:94:d9:de:41:88:90:a0:cf:99:ec:48:06:cd:3a:b3:a2:4d: 3a:9b:3d:01:ae:10:63:1e:0f:4f:67:dd:74:76:2b:a7:cc:3b: cd:0f:81:2a:aa:68:44:a0:29:9e:26:c5:10:65:51:d8:ff:85: b5:a6:ce:42:42:8a:29:26:d7:ba:ed:81:88:e3:5e:a2:cd:3c: 66:1b:38:2f:d8:19:6d:6d:6d:bd:f0:64:86:b2:14:20:d4:f1: 67:30:0e:94:79:0e:4e:17:80:9d:28:ad:a0:c8:74:2e:9c:c3: 70:f6:52:8f:6e:0d:cf:8f:1f:31:c8:22:bf:db:b2:f1:08:b8: 54:f4:bc:5e:f2:4d:ed:3b:83:e1:a2:ff:2d:51:5e:26:7f:c4: 7f:6d:fb:9f:b9:b4:60:e4:da:d3:7e:82:e2:ae:f7:9e:6b:4a: 09:cf:5c:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERFAakTrK3oID1l608mMmyB+9ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYw QTAxODE4MjAeFw0yNjAzMDExNzU1MDdaFw0yNjAzMDQyMzUxMDdaMDMxMTAvBgNV BAMTKDQ3NUE5M0M2RTIxMUVCNDk0NzQwQjAxMkM2MjBEMjEzRTMwMEU1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhxcjGb91oaUXqidWoFCEnvWX 1BKEbnTGPDl1i6wi985zELmZkm/pX0w9zwqRlhKME7k7geoflhTY7VTohoXaDfPg F++7DuscXLwb7dhy4/cD/sZc1sPZz38MSgiKZuUNwuZRKaDCo/Y8E8Ts5pPhs8BL 2RuqZ2XxryD64mpk/5t3rJ/0011KE/wmLBYjk7EnPZl323UaVIzerX6OyABAWq2I 1uaCAIa/lqBjVJD9jiMyXPn0qYyZpvwPiIzQoJ9RN68tRlVNNSQPuFWafS8uXejv YXvAZQQSd+BH/eC/OgySyFLuQbB6aFB5Ac+J4MMnLg0WYxowZPNmAortvW9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1qTxuIR60lHQLASxiDSE+MA5SQwHwYDVR0j BBgwFoAUnQGn6q102BjEBxwfSsMoTwoBgYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMC85RDAxQTdFQUFE NzREODE4QzQwNzFDMUY0QUMzMjg0RjBBMDE4MTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4NEYwQTAx ODE4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvOUQwMUE3RUFBRDc0RDgxOEM0MDcxQzFGNEFDMzI4 NEYwQTAxODE4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3PNXU7mwl3cJYqc1NEVeJJn2Ag/T3PDx1p nYIR0XLwRWw5u8HoaSPsAN2mtBECnu7Hec4hiAcUMtBkR2ofa9TkKK2LmTUJ/Q/U l3qCD5i7J5ebdQPiRKu1lC2U2d5BiJCgz5nsSAbNOrOiTTqbPQGuEGMeD09n3XR2 K6fMO80PgSqqaESgKZ4mxRBlUdj/hbWmzkJCiikm17rtgYjjXqLNPGYbOC/YGW1t bb3wZIayFCDU8WcwDpR5Dk4XgJ0oraDIdC6cw3D2Uo9uDc+PHzHIIr/bsvEIuFT0 vF7yTe07g+Gi/y1RXiZ/xH9t+5+5tGDk2tN+guKu955rSgnPXIQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:17 2026 by rpki-client