$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: MgI/YxoSsednMkH+F3Cmd95eIYT1BejH6JYh0dm9tGo= Subject key identifier: 1E:D5:DF:32:06:36:0C:6C:1E:B9:64:FF:3E:3F:6E:35:D6:A3:0A:B9 Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 5A8DB91E7A964A75BAA06B7F9848BF3D5C2426CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 0112 Signing time: Mon 02 Mar 2026 02:27:08 +0000 Manifest this update: Mon 02 Mar 2026 02:22:08 +0000 Manifest next update: Thu 05 Mar 2026 09:45:08 +0000 Files and hashes: 1: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: QjvwSopIT3GN+Zb601C7fUiOp+ckHzD23A2d08PwI1U=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: 6ip4+xbbDeofUG+ImQAjGF3LZjxSXQSHBlQ4teR8Qj4=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: mwbcH7nFmiAf30ZnBCoT9KoAQ3Lr5VdBs5VWMrjgsMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8d:b9:1e:7a:96:4a:75:ba:a0:6b:7f:98:48:bf:3d:5c:24:26:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Mar 2 02:22:08 2026 GMT Not After : Mar 5 09:45:08 2026 GMT Subject: CN=1ED5DF3206360C6C1EB964FF3E3F6E35D6A30AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:f1:cb:a9:bc:26:d1:1d:c2:b4:ee:cc:4c: 4f:49:bb:cd:8a:4e:0c:48:f0:ac:f6:28:cd:6c:bf: 49:9b:7c:f9:12:c8:c6:d8:85:81:46:56:3e:ee:7a: 22:21:15:29:49:0a:62:68:01:d6:2d:70:ba:03:57: b7:23:c1:7c:35:47:bf:da:8e:82:c4:95:c8:97:b9: 46:2b:c3:ed:8a:3b:29:49:1d:1d:67:33:1f:ea:c7: 55:f0:e5:c5:24:e5:57:e2:13:a3:c9:6e:3d:45:bf: 55:4a:ea:05:d5:50:75:ef:c7:51:46:1c:8c:97:de: 8b:ed:2a:22:5f:16:de:e2:49:e0:a9:1b:41:f8:ea: b3:84:35:a8:88:02:31:3f:e7:a4:f9:2c:b4:45:39: d2:9f:c8:d1:be:75:80:58:4b:40:e5:6c:b6:5e:28: 0a:78:d8:04:a0:22:7d:84:4f:7a:3e:b2:8e:53:f2: a8:9b:74:3c:e3:16:1a:72:8e:16:86:e3:40:14:fc: 54:42:5d:1c:6e:7e:be:e3:44:72:10:4f:2c:9e:a7: ff:f9:19:21:84:27:e3:10:8a:01:e1:d7:dd:fd:09: 43:a2:ba:ac:39:b7:75:8a:d1:9f:8e:95:f1:ae:18: ad:92:93:c1:f3:1a:4f:1a:75:9d:0f:ac:15:fd:6b: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D5:DF:32:06:36:0C:6C:1E:B9:64:FF:3E:3F:6E:35:D6:A3:0A:B9 X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c8:52:38:bd:9b:8f:1c:aa:68:93:6a:00:4c:5d:af:da:56: 1f:7e:67:8e:7c:38:d9:c0:38:00:97:d4:90:64:58:aa:0c:0c: 1b:fa:7b:91:93:0f:38:44:3c:31:83:61:df:5c:b6:c9:ba:af: 6b:53:d0:2f:f9:ae:a7:7c:9a:9d:08:91:d1:bc:ab:f5:91:31: ea:6a:cd:31:30:f9:d3:72:64:3a:5b:6f:96:5d:c3:db:31:db: c0:50:27:86:5e:8c:f5:c1:2c:1e:07:21:25:bf:23:97:0b:5d: e3:87:cf:fb:22:97:c5:84:ac:fc:ff:04:2d:c4:9c:73:4c:54: 65:83:23:94:d1:34:1c:be:d2:39:2b:81:56:4c:42:ee:1b:20: 8f:cf:7d:81:8a:c1:e2:ee:e7:72:71:62:57:26:7b:69:3f:12: a5:10:8b:f6:f9:e1:7d:e6:e4:aa:61:19:c0:50:71:f8:27:e1: de:2a:b9:8c:a7:6f:8a:17:7e:7e:cf:43:b3:49:a8:df:13:fd: 1f:a6:2c:3a:7b:44:09:41:0b:52:d2:dd:59:3e:12:4b:b0:5a: 8e:3e:81:83:94:42:0f:71:9e:ea:b7:4f:ab:06:c2:a0:77:c6: c4:54:e7:9b:a1:11:cc:8f:87:08:bf:18:45:fd:fb:32:18:23: d1:82:b1:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWo25HnqWSnW6oGt/mEi/PVwkJsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNjAzMDIwMjIyMDhaFw0yNjAzMDUwOTQ1MDhaMDMxMTAvBgNV BAMTKDFFRDVERjMyMDYzNjBDNkMxRUI5NjRGRjNFM0Y2RTM1RDZBMzBBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3PHLqbwm0R3CtO7MTE9Ju82K TgxI8Kz2KM1sv0mbfPkSyMbYhYFGVj7ueiIhFSlJCmJoAdYtcLoDV7cjwXw1R7/a joLElciXuUYrw+2KOylJHR1nMx/qx1Xw5cUk5VfiE6PJbj1Fv1VK6gXVUHXvx1FG HIyX3ovtKiJfFt7iSeCpG0H46rOENaiIAjE/56T5LLRFOdKfyNG+dYBYS0DlbLZe KAp42ASgIn2ET3o+so5T8qibdDzjFhpyjhaG40AU/FRCXRxufr7jRHIQTyyep//5 GSGEJ+MQigHh1939CUOiuqw5t3WK0Z+OlfGuGK2Sk8HzGk8adZ0PrBX9aw1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHtXfMgY2DGweuWT/Pj9uNdajCrkwHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7IUji9m48cqmiTagBMXa/aVh9+Z458ONnA OACX1JBkWKoMDBv6e5GTDzhEPDGDYd9ctsm6r2tT0C/5rqd8mp0IkdG8q/WRMepq zTEw+dNyZDpbb5Zdw9sx28BQJ4ZejPXBLB4HISW/I5cLXeOHz/sil8WErPz/BC3E nHNMVGWDI5TRNBy+0jkrgVZMQu4bII/PfYGKweLu53JxYlcme2k/EqUQi/b54X3m 5KphGcBQcfgn4d4quYynb4oXfn7PQ7NJqN8T/R+mLDp7RAlBC1LS3Vk+EkuwWo4+ gYOUQg9xnuq3T6sGwqB3xsRU55uhEcyPhwi/GEX9+zIYI9GCsfQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:18:31 2026 by rpki-client