$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft File: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft (raw, json) Hash identifier: 4Ia9U5svLKHVQkDhFB9ayiSjkDIHa67hvx+Iy9aIeEY= Subject key identifier: 92:AE:4F:27:92:7E:C8:87:5D:0A:F7:84:92:2C:B6:1D:1F:C7:6D:05 Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Certificate serial: 62938571A0DBD6597FF4CC496D2E13E74A8F9592 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft Manifest number: C8 Signing time: Mon 02 Mar 2026 05:21:28 +0000 Manifest this update: Mon 02 Mar 2026 05:16:28 +0000 Manifest next update: Thu 05 Mar 2026 13:11:28 +0000 Files and hashes: 1: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (hash: mzDpPRia6xZTDPtGY2S0cq+7bpQlmycpMpiDj9ys06Y=) 2: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (hash: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=) 3: A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl (hash: 7Fi0QHqe7ouqH30GXKJ0PDA1yZwLhPetBmWtkyS0TdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:93:85:71:a0:db:d6:59:7f:f4:cc:49:6d:2e:13:e7:4a:8f:95:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC Validity Not Before: Mar 2 05:16:28 2026 GMT Not After : Mar 5 13:11:28 2026 GMT Subject: CN=92AE4F27927EC8875D0AF784922CB61D1FC76D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a6:9b:55:c7:64:40:80:a7:e4:20:ac:55:8a: 69:7c:12:f7:56:8d:29:75:e1:62:66:ac:5b:25:95: 47:f9:20:ad:07:1e:39:1a:7e:c8:86:2c:7b:11:61: 38:9d:cb:56:24:af:04:62:8d:4c:dc:e2:12:f1:c5: af:88:1b:95:2e:92:73:37:e9:bd:16:56:fc:09:79: f4:f6:11:ab:c2:67:0c:db:25:36:fb:9e:55:d4:52: 9b:5a:00:5c:7c:a1:0e:00:a0:cf:59:80:0c:ad:97: 9d:55:3b:75:81:04:f3:57:62:12:8e:dd:e8:83:f6: 3b:2d:17:ec:3f:69:de:5c:5f:7b:42:c8:e9:62:03: f6:15:f7:f5:e2:8b:b2:dc:f6:b4:c2:25:f6:bd:fa: fa:0b:7e:74:37:a4:e8:a7:d1:29:62:f3:30:80:f0: bb:f3:78:93:bf:ec:98:e0:a7:34:6a:fa:28:4c:96: 77:b0:31:ef:45:05:42:4b:ea:2c:d7:c7:25:dc:44: fe:7a:3f:d0:00:85:b4:2e:46:f4:32:7d:a4:f8:3b: 5c:35:f2:6e:7a:d8:36:1d:50:d5:71:0f:7c:65:1d: 66:9b:63:3d:9e:66:e6:5c:5c:40:ca:19:af:83:f1: 90:ee:98:7b:72:2c:81:4c:ab:27:ed:5a:51:22:86: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:4F:27:92:7E:C8:87:5D:0A:F7:84:92:2C:B6:1D:1F:C7:6D:05 X509v3 Authority Key Identifier: keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e2:4d:18:f0:b8:37:8a:8f:f1:55:96:cf:ff:3e:61:06:1e: 55:ab:8d:1f:11:a2:63:ad:3c:70:52:2e:6c:fc:2d:f8:c4:1a: 3c:d2:d0:9e:47:64:9a:be:e5:d0:73:a0:6b:75:7c:a6:13:9a: 81:21:2d:cb:39:c7:87:49:24:ae:0c:6b:87:c6:ea:46:3b:31: 6c:3e:84:ae:3c:e0:c9:b9:2b:f8:b5:b3:be:e0:f2:0a:62:ca: 47:c0:73:8b:f5:f5:4b:14:65:15:82:89:48:e2:99:ec:15:f8: d0:00:b8:85:f8:d5:8e:17:be:be:d0:d7:d0:c7:47:7a:ad:ac: 66:4e:8a:e5:b1:b1:18:60:5a:d7:e8:8f:a3:c8:66:6f:3e:f3: 82:ce:3c:f8:c9:aa:6e:12:44:0c:43:1f:30:e5:cd:21:88:6a: c3:ae:ca:81:8b:03:20:b5:a7:b4:39:ad:3d:5e:e2:0f:55:62: 4d:e2:fc:03:3e:85:87:c9:c0:35:09:15:9d:59:ef:58:71:3c: b5:46:a4:c5:dd:36:51:22:a8:0a:22:1d:47:b0:9c:bb:48:06: e3:f9:b8:1c:d5:ab:5e:84:25:be:18:06:6c:62:60:4d:af:e4: 3f:c6:ec:6c:cf:4e:1a:ba:0b:cd:27:53:cc:3f:f1:52:a5:b4: d2:50:28:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpOFcaDb1ll/9MxJbS4T50qPlZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQx NURFRTdGQzAeFw0yNjAzMDIwNTE2MjhaFw0yNjAzMDUxMzExMjhaMDMxMTAvBgNV BAMTKDkyQUU0RjI3OTI3RUM4ODc1RDBBRjc4NDkyMkNCNjFEMUZDNzZEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0pptVx2RAgKfkIKxViml8EvdW jSl14WJmrFsllUf5IK0HHjkafsiGLHsRYTidy1YkrwRijUzc4hLxxa+IG5UuknM3 6b0WVvwJefT2EavCZwzbJTb7nlXUUptaAFx8oQ4AoM9ZgAytl51VO3WBBPNXYhKO 3eiD9jstF+w/ad5cX3tCyOliA/YV9/Xii7Lc9rTCJfa9+voLfnQ3pOin0Sli8zCA 8LvzeJO/7JjgpzRq+ihMlnewMe9FBUJL6izXxyXcRP56P9AAhbQuRvQyfaT4O1w1 8m562DYdUNVxD3xlHWabYz2eZuZcXEDKGa+D8ZDumHtyLIFMqyftWlEihhIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkq5PJ5J+yIddCveEkiy2HR/HbQUwHwYDVR0j BBgwFoAUqdZjxuvNJQqokn6glGJ8lBXe5/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODJhOWJkOS0xNjZmLTQ1M2UtYjNjMC1lNmIzZWY5MmE1NDAvMC9BOUQ2NjNDNkVC Q0QyNTBBQTg5MjdFQTA5NDYyN0M5NDE1REVFN0ZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdDOTQxNURF RTdGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgyYTliZDktMTY2Zi00NTNlLWIz YzAtZTZiM2VmOTJhNTQwLzAvQTlENjYzQzZFQkNEMjUwQUE4OTI3RUEwOTQ2MjdD OTQxNURFRTdGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXiTRjwuDeKj/FVls//PmEGHlWrjR8RomOt PHBSLmz8LfjEGjzS0J5HZJq+5dBzoGt1fKYTmoEhLcs5x4dJJK4Ma4fG6kY7MWw+ hK484Mm5K/i1s77g8gpiykfAc4v19UsUZRWCiUjimewV+NAAuIX41Y4Xvr7Q19DH R3qtrGZOiuWxsRhgWtfoj6PIZm8+84LOPPjJqm4SRAxDHzDlzSGIasOuyoGLAyC1 p7Q5rT1e4g9VYk3i/AM+hYfJwDUJFZ1Z71hxPLVGpMXdNlEiqAoiHUewnLtIBuP5 uBzVq16EJb4YBmxiYE2v5D/G7GzPThq6C80nU8w/8VKltNJQKKU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:23 2026 by rpki-client